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", 0x1000}, {&(0x7f0000001ac0)="7cf50ab42869b4a0a6a30e3328b7709aee90cf1ced697a0661a2da877b271b692004f1845995d9f150ee43b237ee30c4105df74eb1640a4aab297c7290807e0ab026ed07807bef160540d5f30a5b1aab0b9982f8f990cfb0e2003c733e922ef021d08d2c327cc0557d3ee25699afeca4f6d9cfe442344fb327dd623f51b2f1f65e58ee99f9c3b5caa0c2bdcc3a37eeb8ebf3f2f6498802699b6f105ad4f6fce2", 0xa0}, {&(0x7f0000001b80)="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", 0x1000}], 0x7, &(0x7f0000002c00)=[{0x48, 0x0, 0x8, "546d6b22a6a0e238eef8a6a92fb4c981677e603564705ac28f49031c267492e59037ec93ea3eede605721a78daf64f9b10"}, {0x50, 0x119, 0x6, "791ebc22f1fa529dcfb47d9c6f8ca6df0798252e953f9f45f1e56e5ed87efd586cb98139b4a2466a50ab14c4bcfe90f8466931051a9b960d25"}, {0x90, 0x0, 0x1, "6c861205951c02298b48201d4d47096876aaa2fe0cb81e4ecb4c3455d930d57c2a6fa825606dda0f8235d59a49d2289085fe09fed6f4ddb07b70cc10f5d84dd19ad0ab7f663f0dd57b51a13d1f7827da7c3d22e28661d18786ddaf4d24b9949df0e803403c09d25867d03bf37ed8b46b838175ef7e8092ffbcdb2083b30e"}, {0x1010, 0x29, 0x200, "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"}, {0xd0, 0x11f, 0x1ff, "245e89c43493df0349ed297c3c719673d850b6ea22e39af715802534918c2cf4827a847af144e54f32c52d25d6d30634abb50a207faaeee2e36c8e1bf641f7fbab0e64621675cd16f2b765b5d51014e7ab4b3616696992b2eef08c23d05ffbe0e3d19a4a7369394688550288af9345f215068d7189bf2243befd238a4a8b043f2759b69a7baea99dd90a4efbc9403b80543744ce0b206f2c7e5d9407fe1e9f97626cb6cfad4edff04560efaebf6bae3ca1e41b92473024d3b871"}, {0x80, 0x108, 0x76, "c93899ad6d8a0c4a7cc09a1ca697dbde5eca57a5d5157578d80a7a3b0c2f8cb13fad764e9c15448d012152b621fc3ae0366a986816413e0855c85945c2b2e1b017d44641f1bfe7bdfc17839cfb66c2c28783b3eb7f16179760f20ccb64585f42ea9cfec83216a50e49d70031e4feb84f"}, {0xa8, 0x113, 0x7, "6c7d80cedf80d2a294b38844699cc78d95ed951aee3a4d27ac91e6acc7ce497b892d7faf992aa227c84a49ed8e4fcd5544f30e93b1e5fc6e14feef0739f4f2e6c5dd0cfa00a43c8b73a50d6777675c44b8179aa207128297c3f69553d226ca921121c1092b673af8f89ede44d94c5904a905f06b9f2693f979be8d03200e8f1dcd5c727703d12c91549f2538d67e480318cc5dab12"}], 0x1330, 0x4}, 0x8000) ioctl$TIOCSLCKTRMIOS(r4, 0x5457, &(0x7f00000002c0)) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r8, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") getsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f0000000440), &(0x7f0000000400)=0xfffffffffffffe9a) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000480)) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[]) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x17, 0x0, "6e9557c8cf11831ed0172703f7c6733634fd5bff34a76d369713ce81c693c836def0881a8bb557b818be607e36e9bdb6b3cfb87285c9e9b06508863702b1ebc4", "0defd18660a9460dc663d42e769e12e8c1d90541ab0068acb5406d9683bdb96ad380aaa5f9919d923561909d3e7763af360f1ea7aa287ee99a11d1ae35e83bc1", "6508ae87f7303bc41319b5ef648d67e5761712c29d98d0acf9d00db93694c0ab", [0x67, 0x3]}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={"627269000200"}) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)='\x00', 0x1, 0x3fffffa, &(0x7f0000254000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000640)=0x7, 0x4) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 15:17:12 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r7 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000180)={0x3, r8}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 339.311332] IPVS: ftp: loaded support on port[0] = 21 15:17:12 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x500, 0x0) [ 339.421232] FAULT_INJECTION: forcing a failure. [ 339.421232] name failslab, interval 1, probability 0, space 0, times 0 [ 339.432836] CPU: 1 PID: 23707 Comm: syz-executor1 Not tainted 4.18.0+ #190 [ 339.439869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.449226] Call Trace: [ 339.451851] dump_stack+0x1c9/0x2b4 [ 339.455501] ? dump_stack_print_info.cold.2+0x52/0x52 [ 339.460713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.466265] ? rt6_score_route+0x118/0x400 [ 339.470535] should_fail.cold.4+0xa/0x11 [ 339.474616] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 339.479753] ? graph_lock+0x170/0x170 [ 339.483563] ? graph_lock+0x170/0x170 [ 339.487396] ? __lock_is_held+0xb5/0x140 [ 339.491488] ? __lock_is_held+0xb5/0x140 [ 339.495573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.501118] ? fib6_table_lookup+0xcac/0x14f0 [ 339.505632] ? graph_lock+0x170/0x170 [ 339.509447] ? perf_trace_lock+0xde/0x920 [ 339.513634] __should_failslab+0x124/0x180 [ 339.517878] should_failslab+0x9/0x14 [ 339.521700] kmem_cache_alloc_node+0x56/0x780 [ 339.526211] ? __lock_is_held+0xb5/0x140 [ 339.530299] __alloc_skb+0x119/0x770 [ 339.534041] ? skb_scrub_packet+0x520/0x520 [ 339.538364] ? print_usage_bug+0xc0/0xc0 [ 339.542432] ? find_held_lock+0x36/0x1c0 [ 339.546510] ? trace_hardirqs_on+0x10/0x10 [ 339.550749] ? lock_downgrade+0x8f0/0x8f0 [ 339.554962] alloc_skb_with_frags+0x13f/0x7d0 [ 339.559469] ? trace_hardirqs_on_caller+0x19e/0x5c0 [ 339.564498] ? skb_complete_wifi_ack+0x1b0/0x1b0 [ 339.569274] ? trace_hardirqs_on+0x10/0x10 [ 339.573519] ? zap_class+0x740/0x740 [ 339.577245] sock_alloc_send_pskb+0x8aa/0xb20 [ 339.581767] ? sock_wmalloc+0x1f0/0x1f0 [ 339.585751] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 339.590591] ? print_usage_bug+0xc0/0xc0 [ 339.594655] ? zap_class+0x740/0x740 [ 339.598383] ? perf_trace_lock+0x920/0x920 [ 339.602643] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.608211] ? dst_release+0x5d/0xb0 [ 339.611934] ? graph_lock+0x170/0x170 [ 339.615754] ? __lock_acquire+0x7fc/0x5020 [ 339.620019] sock_alloc_send_skb+0x32/0x40 [ 339.624291] __ip6_append_data.isra.47+0x210c/0x3980 [ 339.629431] ? rawv6_exit+0x20/0x20 [ 339.633111] ? ip6_setup_cork+0x1940/0x1940 [ 339.637442] ? ip6_mtu+0x160/0x520 [ 339.640990] ? ip6_dst_ifdown+0x4e0/0x4e0 [ 339.645137] ? perf_trace_lock+0x920/0x920 [ 339.649402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 339.654945] ? ip6_setup_cork+0x10d7/0x1940 [ 339.659286] ? ip6_autoflowlabel.part.48+0x80/0x80 [ 339.664227] ? lock_downgrade+0x8f0/0x8f0 [ 339.668387] ? graph_lock+0x170/0x170 [ 339.672191] ? lock_acquire+0x1e4/0x540 [ 339.676190] ? icmp6_send+0x1c8c/0x2da0 [ 339.680176] ip6_append_data+0x1bd/0x2e0 [ 339.684238] ? rawv6_exit+0x20/0x20 [ 339.687876] ? rawv6_exit+0x20/0x20 [ 339.691509] icmp6_send+0x1e3a/0x2da0 [ 339.695341] ? icmpv6_push_pending_frames+0x540/0x540 [ 339.700542] ? rcu_is_watching+0x8c/0x150 [ 339.704715] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 339.709573] ? perf_trace_lock+0x920/0x920 [ 339.713844] ? __xfrm_route_forward+0x840/0x840 [ 339.718520] ? ipv6_hop_jumbo+0xb40/0xb40 [ 339.722670] ? __local_bh_enable_ip+0x161/0x230 [ 339.727373] ? graph_lock+0x170/0x170 [ 339.731178] ? lock_acquire+0x1e4/0x540 [ 339.735163] ? inet6_unregister_icmp_sender+0x50/0x50 [ 339.740408] ? icmpv6_push_pending_frames+0x540/0x540 [ 339.745603] icmpv6_send+0x182/0x310 [ 339.749348] ? icmpv6_push_pending_frames+0x540/0x540 [ 339.754537] ? icmpv6_send+0x182/0x310 [ 339.758430] ? inet6_unregister_icmp_sender+0x50/0x50 [ 339.763628] ? icmpv6_push_pending_frames+0x540/0x540 [ 339.768834] ip6_input_finish+0x14c8/0x1a10 [ 339.773177] ? rcu_is_watching+0x30/0x150 [ 339.777334] ? ip6_rcv_finish+0xa30/0xa30 [ 339.781499] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 339.786519] ? nf_hook_slow+0x11e/0x1c0 [ 339.790523] ip6_input+0xe9/0x600 [ 339.793986] ? ip6_input_finish+0x1a10/0x1a10 [ 339.798492] ? ip6_rcv_finish+0xa30/0xa30 [ 339.802655] ip6_rcv_finish+0x2ab/0xa30 [ 339.806632] ? ip6_make_skb+0x600/0x600 [ 339.810604] ? rcu_is_watching+0x8c/0x150 [ 339.814749] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 339.819432] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 339.824476] ? nf_hook_slow+0x11e/0x1c0 [ 339.828474] ipv6_rcv+0xec0/0x2060 [ 339.832037] ? ip6_input+0x600/0x600 [ 339.835759] ? ip6_make_skb+0x600/0x600 [ 339.839778] ? __lock_acquire+0x7fc/0x5020 [ 339.844032] ? unwind_get_return_address+0x61/0xa0 [ 339.848983] ? __lock_is_held+0xb5/0x140 [ 339.853062] ? ip6_input+0x600/0x600 [ 339.856785] __netif_receive_skb_core+0x23d0/0x35b0 [ 339.861821] ? nf_ingress+0xa30/0xa30 [ 339.865625] ? __lock_acquire+0x7fc/0x5020 [ 339.869862] ? find_held_lock+0x36/0x1c0 [ 339.873938] ? perf_trace_lock+0xde/0x920 [ 339.878120] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 339.882988] ? trace_hardirqs_on+0x10/0x10 [ 339.887228] ? perf_trace_lock+0x920/0x920 [ 339.891485] ? graph_lock+0x170/0x170 [ 339.895291] ? skb_flow_dissect_tunnel_info+0xaa0/0xaa0 [ 339.900662] ? graph_lock+0x170/0x170 [ 339.904505] ? perf_trace_lock+0xde/0x920 [ 339.908685] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 339.913549] ? zap_class+0x740/0x740 [ 339.917295] ? perf_trace_lock+0x920/0x920 [ 339.921563] ? lock_downgrade+0x8f0/0x8f0 [ 339.925733] ? pvclock_read_flags+0x160/0x160 [ 339.930248] ? ktime_get_with_offset+0x3a9/0x4b0 [ 339.935011] ? lock_acquire+0x1e4/0x540 [ 339.938988] ? netif_receive_skb_internal+0xaa/0x7d0 [ 339.944138] ? kasan_check_read+0x11/0x20 [ 339.948286] ? rcu_is_watching+0x8c/0x150 [ 339.952437] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 339.957157] __netif_receive_skb+0x2c/0x1e0 [ 339.961492] netif_receive_skb_internal+0x12e/0x7d0 [ 339.966759] ? dev_cpu_dead+0xae0/0xae0 [ 339.970790] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 339.976333] ? eth_type_trans+0x2ea/0x6c0 [ 339.980512] ? eth_gro_receive+0x8d0/0x8d0 [ 339.984760] napi_gro_frags+0x645/0xc60 [ 339.988740] ? napi_gro_receive+0x5c0/0x5c0 [ 339.993064] ? eth_get_headlen+0x12f/0x1f0 [ 339.997297] ? eth_get_headlen+0x173/0x1f0 [ 340.001533] ? eth_type_trans+0x6c0/0x6c0 [ 340.005679] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 340.010709] ? tun_get_user+0x315c/0x42c0 [ 340.014862] tun_get_user+0x3185/0x42c0 [ 340.018857] ? tun_build_skb.isra.54+0x2280/0x2280 [ 340.023786] ? perf_trace_lock+0xde/0x920 [ 340.027935] ? graph_lock+0x170/0x170 [ 340.031735] ? zap_class+0x740/0x740 [ 340.035469] ? graph_lock+0x170/0x170 [ 340.039292] ? find_held_lock+0x36/0x1c0 [ 340.043385] ? lock_downgrade+0x8f0/0x8f0 [ 340.047579] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 340.052256] ? tun_get+0x231/0x370 [ 340.055802] ? tun_chr_close+0x180/0x180 [ 340.059887] tun_chr_write_iter+0xb9/0x154 [ 340.064155] do_iter_readv_writev+0x8b0/0xa80 [ 340.068655] ? vfs_dedupe_file_range+0xa00/0xa00 [ 340.073920] ? rw_verify_area+0x118/0x360 [ 340.078074] do_iter_write+0x185/0x5f0 [ 340.081966] ? dup_iter+0x270/0x270 [ 340.085598] ? kasan_check_read+0x11/0x20 [ 340.089758] vfs_writev+0x1f1/0x360 [ 340.093385] ? __fget_light+0x2f7/0x440 [ 340.097376] ? vfs_iter_write+0xb0/0xb0 [ 340.101369] ? wait_for_completion+0x8d0/0x8d0 [ 340.106007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.111544] ? __fdget_pos+0xde/0x200 [ 340.115344] ? __fdget_raw+0x20/0x20 [ 340.119058] ? __sb_end_write+0xac/0xe0 [ 340.123038] do_writev+0x11a/0x310 [ 340.126583] ? vfs_writev+0x360/0x360 [ 340.130384] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 340.135926] ? ksys_ioctl+0x81/0xd0 [ 340.139559] __x64_sys_writev+0x75/0xb0 [ 340.143549] do_syscall_64+0x1b9/0x820 [ 340.147432] ? finish_task_switch+0x1d3/0x870 [ 340.151942] ? syscall_return_slowpath+0x5e0/0x5e0 [ 340.156872] ? syscall_return_slowpath+0x31d/0x5e0 [ 340.161807] ? __switch_to_asm+0x34/0x70 [ 340.165877] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 340.171254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.176136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.181328] RIP: 0033:0x456f41 [ 340.184530] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b6 fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 340.203459] RSP: 002b:00007f02802f3ba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 340.211172] RAX: ffffffffffffffda RBX: 000000000000003e RCX: 0000000000456f41 [ 340.218440] RDX: 0000000000000001 RSI: 00007f02802f3bf0 RDI: 00000000000000f0 [ 340.225720] RBP: 00000000200001c0 R08: 00000000000000f0 R09: 0000000000000000 [ 340.233000] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000004 [ 340.240275] R13: 00000000004d6410 R14: 00000000004c9a96 R15: 0000000000000001 15:17:13 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x202000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xfffffffffffffff7}, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x77, &(0x7f0000000100), 0x0) r2 = dup3(r1, r1, 0x80000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r2, r0, 0x6, 0x3}, 0x10) 15:17:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:13 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105801, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0xfffffffffffffe55) 15:17:13 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xb803000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:14 executing program 4: pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl(r0, 0x8912, &(0x7f00000005c0)="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") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec705f2288a933d66593ae164c990a0028e6640c522b60bdfedb810dcfa16bf33733b7a8961f9ec26a783f8", 0x30) r2 = accept$alg(r1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000240)=')#ppp1em0em1}wlan1{}\x00', 0x2) creat(&(0x7f0000000540)='./file0\x00', 0xc0) r4 = syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x3, 0x200) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000400)) read(r2, &(0x7f0000000bc0)=""/93, 0x5d) recvmsg(r2, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x1, 0x1, 0x4f, 0x8}]}, 0x10) [ 340.504143] QAT: Invalid ioctl 15:17:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000d80)={@mcast1}, &(0x7f0000000dc0)=0x14) socket$inet6(0xa, 0x1000000000002, 0x0) 15:17:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x10101, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7ff}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={r2, 0x8}, 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xa0, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x400}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4847}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5cad6f619634cce4c75e6486f2454cec477576", @ANYRES16=r3, @ANYBLOB="010000000000000000000900000030000300080008004e220000080003000000000008000100000000001400020076657468305f746f5f7465616d000000"], 0x3}}, 0x20000000) 15:17:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:14 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x20) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) [ 340.832046] IPVS: ftp: loaded support on port[0] = 21 15:17:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:14 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x40010000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:14 executing program 0: r0 = socket(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='statm\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x100000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r2, &(0x7f0000000200), 0x100000001) 15:17:14 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) r9 = add_key(&(0x7f0000000500)='dns_resolver\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000580)="9049dfb31399f4de4123d288fbcbb17ffabc050de8f86d6e430c0029d06e0a9014aee9db68b69c8ffe0c472b3e8609242d0687aa6789f223408d4c8319bba780fa7ace7f0547d4939c3575554dd14ff3ef57849a80a65f5ec0c0bc59784a99b40cf443ef08f83a93756c7502e880e675ce1ac0dd4a", 0x75, 0xfffffffffffffff8) r10 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r9, 0x9, r10) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r11}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:14 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000000)=0x4) 15:17:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x500000105001, 0x0) 15:17:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000d80)={@mcast1}, &(0x7f0000000dc0)=0x14) 15:17:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000d80)={@mcast1}, &(0x7f0000000dc0)=0x14) socket$inet6(0xa, 0x1000000000002, 0x0) 15:17:14 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4001, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x200001fe, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 341.523848] IPVS: ftp: loaded support on port[0] = 21 15:17:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 341.555639] attempt to access beyond end of device [ 341.560727] loop3: rw=4096, want=136, limit=32 [ 341.565380] gfs2: error 10 reading superblock [ 341.581500] IPVS: ftp: loaded support on port[0] = 21 15:17:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") ioctl$RTC_UIE_ON(r1, 0x7003) dup2(r0, r1) 15:17:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x400000000e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) 15:17:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7ffff000, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 341.680443] attempt to access beyond end of device [ 341.685708] loop3: rw=4096, want=136, limit=32 [ 341.690420] gfs2: error 10 reading superblock [ 341.771148] QAT: Invalid ioctl 15:17:15 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff00000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 341.954244] QAT: Invalid ioctl 15:17:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:15 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2200) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000480)) r2 = socket(0x10, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000140)='client1\x00', 0x2) write(r2, &(0x7f0000000340)="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", 0x442) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4040, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x6f5000, 0x2bce0e83, 0x7fffffff, 0xaa, 0x0, 0x7, 0x1, 0x6, 0x7b9, 0x7, 0x5, 0x9, 0x100000001, 0x7fffffff, 0x1, 0x401, 0x100000001, 0x3, 0x331, 0x5, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x100000, 0x3, 0x400, 0x4, 0xfffffffffffffff7, 0x0, 0x8, 0x6e80000000000000, 0x2, 0x1000, 0x1, 0xffffffff, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x20, 0x4, 0x5d, 0x7, 0x4, 0xfb7b, 0x3}, r5, 0x4, r4, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000080)={0x2, 0x0, 'client1\x00', 0x3, "2f4e6154364dc6be", "adba645c0212c0535af17510d46bd58fd8c53fe9e4f91308e41882652d2e11d1", 0x9, 0x8}) 15:17:15 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda7271b22ef57ccfc74e69191e1e0929b7f0c2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5b8a866afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:15 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f00000003c0)={0xa0, 0x19, 0x2, {0x200, {0x4, 0x0, 0x3}, 0x8, r1, r2, 0x7ff, 0x3, 0x0, 0x7, 0x5, 0xb2dccf180, 0x5, 0x4, 0x3, 0x2, 0x7b, 0x2f, 0x80, 0x6, 0x98d4}}, 0xa0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x300c0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000480)=0x4000000000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) 15:17:15 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xf5ffffff, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) [ 342.236722] netlink: 188 bytes leftover after parsing attributes in process `syz-executor4'. 15:17:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000d80)={@mcast1}, &(0x7f0000000dc0)=0x14) socket$inet6(0xa, 0x1000000000002, 0x0) 15:17:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000002000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x140, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x78, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40086310, 0x3}, @exit_looper, @register_looper, @reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=[0x58]}, 0x4}}, @register_looper, @increfs, @decrefs={0x40046307, 0x2}, @enter_looper], 0xaf, 0x0, &(0x7f0000000200)="9b755a38b0fc85afebd04c474e44e2458f286729717a3998b5a30e975e54d915d2419b2785af417ced659a4e1f4d73ef9594df038af4b356eb17906b0c08e62488027663051426196a44f4aaaf949ae246f0bb27e908b2165a621a874dc5789bde0044a49b7ed1f05b34b91fc40ccabe95999ff35eee6a07bdb8086a1864c4dbd7154c7404fdfe16d14eedfa039a7ee4bbc413fbb0b3d26a8f062857ba5202b75a59fdc73641f064a3137a96f7d1fc"}) [ 342.348528] netlink: 188 bytes leftover after parsing attributes in process `syz-executor4'. 15:17:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8bde, 0x8}) socket$inet_smc(0x2b, 0x1, 0x0) close(r0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x8, 0x5005}) [ 342.453747] QAT: Invalid ioctl [ 342.578012] QAT: Invalid ioctl [ 342.634262] IPVS: ftp: loaded support on port[0] = 21 15:17:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) recvfrom$llc(r0, &(0x7f0000000080)=""/230, 0xe6, 0x40000020, &(0x7f0000000200)={0x1a, 0xf, 0xffffffff, 0x1d, 0x5, 0x3}, 0x10) 15:17:16 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6c00, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xd, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 342.695509] IPVS: ftp: loaded support on port[0] = 21 15:17:16 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000500)=[{0x4, 0x40}, {0x3, 0xd3a}, {0x3, 0x1}, {0xf, 0x3ff}, {0xa, 0x3800000000000000}], 0x5) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0xd, 0xb1c6) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000540)={0x101, 0x1, 0x5, 0x3528, 0x28e}, 0x14) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:16 executing program 4: syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x20) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) sendfile(r1, r1, &(0x7f0000000400), 0x8080fffffffe) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000004c0), 0x0) pread64(0xffffffffffffffff, &(0x7f00000012c0)=""/4096, 0x1000, 0x0) sendfile(r1, r1, &(0x7f0000000380), 0x1000000020000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x0, 0x6}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) shmget(0x2, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) write$FUSE_POLL(r1, &(0x7f0000000180)={0xffffffffffffff32, 0x0, 0x0, {0x12}}, 0x18) [ 342.914560] attempt to access beyond end of device [ 342.919611] loop3: rw=4096, want=136, limit=54 [ 342.924308] gfs2: error 10 reading superblock 15:17:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000200)="ecd31428d821efbf5645c5413bd19fa991d38543a04f0cbf6e7e0c29a01240fb5058fbc95ca26511c602af45a1b2264ac10c1fab19fe2db21a6b99094f4a140151233161921f805be2d1e5c02fe21c1e95434b362aec204cf65b9482473a16a4941caee49131c8b8a70888716a56956cf6943272e60123db5ef34ec6865ac324408b49f8f4580830b6f3c585296efb1389499a6101a13ea5899e65a9d5d6d2fd7f74da9df3d33dc527f07e6bbc51d6b0dce41ed5993ff6232ec8cc979bacaf7723e8b965f50c07373bceb72f56da023ac6504bdf30465f95202fde34deeefe5c7f6b") 15:17:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:16 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 343.072580] QAT: Invalid ioctl [ 343.097143] attempt to access beyond end of device [ 343.102261] loop3: rw=4096, want=136, limit=54 [ 343.107029] gfs2: error 10 reading superblock [ 343.184681] QAT: Invalid ioctl 15:17:16 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x7a000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) 15:17:16 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000d80)={@mcast1}, &(0x7f0000000dc0)=0x14) socket$inet6(0xa, 0x1000000000002, 0x0) 15:17:16 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:16 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r5) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r7 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000180)={0x3, r8}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000026f294270000000600000030080000a8030000a8030000a803000000000000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e09ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4711f35a2e1cc3f51b7b6a68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:16 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x7, 0x14, [0xffffffffffffffff, 0x1, 0x8001, 0x5, 0xb6f1]}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) finit_module(r0, &(0x7f0000000200)='\x00', 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) 15:17:17 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 343.632724] IPVS: ftp: loaded support on port[0] = 21 [ 343.659916] IPVS: ftp: loaded support on port[0] = 21 15:17:17 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff6, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x6488}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 343.721391] QAT: Invalid ioctl 15:17:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x201, &(0x7f00000000c0)={&(0x7f0000000200)=""/233, 0xe9}) [ 343.836387] QAT: Invalid ioctl 15:17:17 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d617e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:17 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) readahead(r0, 0x5, 0xc90) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {}, {0x2, 0x0, @multicast2}, {}, 0x2a4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='ip6_vti0\x00'}) 15:17:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x100000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0xff, 0x3, 0x5, 0x401, 0x1, 0x1, 0x3, 0x1f, r1}, 0x20) write(r0, &(0x7f0000000280)="8299334efa43b71dc2b8a75e", 0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) 15:17:17 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x1000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 344.311518] QAT: Invalid ioctl 15:17:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) 15:17:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000d80)={@mcast1}, &(0x7f0000000dc0)=0x14) 15:17:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3a00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:17 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x2300000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) sendto$unix(r1, &(0x7f0000000080)="d7f580809ca7899b2bdd4e8dd8615a4248161746a7d0fccabf3fa6e71bf432b218863a5448dd4717ad831a3378b2c2aa", 0x30, 0x0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = getpgid(0x0) ioctl$TCXONC(r1, 0x540a, 0x407) write$P9_RSETATTR(r1, &(0x7f0000000200)={0x7, 0x1b, 0x2}, 0x7) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x0, r2}) [ 344.427946] QAT: Invalid ioctl 15:17:18 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') sendfile(r0, r1, &(0x7f0000000340), 0x800009) 15:17:18 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @remote, 0x26d0}, {0xa, 0x4e20, 0x2, @loopback}, r7, 0x7}}, 0x48) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r9 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000180)={0x3, r10}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436162b2f546e6236fcb076b87e4e8c56fb8683f2000000000000000000000000000000001690b82265e4972dbeae2d26b45fc549f91d5f91890ae0156989244d8ee52914c5b501d53063ad4975ef1a2bdda979d3"]) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88a8ffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 344.697949] IPVS: ftp: loaded support on port[0] = 21 15:17:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x2000000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:18 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1f) [ 344.755062] IPVS: ftp: loaded support on port[0] = 21 15:17:18 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x9) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x7, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='cmdline\x00') 15:17:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x4305}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 345.012509] QAT: Invalid ioctl 15:17:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xbe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x200000000, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, @perf_bp, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) [ 345.153127] QAT: Invalid ioctl 15:17:18 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x8, 0x40) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000600), 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r4, 0x4040ae77, &(0x7f0000000640)) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r7) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r9 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000580)=0x78) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000180)={0x3, r10}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xf903000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000180)) write$cgroup_int(r0, &(0x7f0000000080), 0x2001007f) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x18, 0x2, 0x6, 0x7, 0x8}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x101, 0x66, 0x8, 0x3, 0x4000000, 0x1f, 0x82e, 0x3db, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @multicast1}}, 0xb7, 0x8, 0x80000000, 0x7fff, 0x45}, &(0x7f0000000300)=0x98) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="110000004010000043628ec972b90a01b68e94568e26b47b0000330e1e04c31f6de5160000080000f400009c86c608639e7f5b4b1fe1bd8c30070161e6ff08edeb41d12abd972fca0000822dc1f88db370027d867c6bc2a772a1631fd5cd7d221a00a394fab3b1e0"]) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 15:17:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2c00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 15:17:18 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x339, 0xfffffffffffffffa, 0xa595, 0x3, 0x3f, 0x4ae, 0x235, 0x38, 0xf8, 0x1, 0x1ff, 0x20, 0x1, 0x5, 0x3, 0x3}, [{0x3, 0x10000, 0x3, 0x8, 0x7, 0x3, 0x7}, {0x0, 0x8, 0xf866, 0x3, 0xff, 0x80, 0x27b848f0, 0x7}], "0ff3009fe0a615f58766fb5a1fba0d8d1f525fe40d2f18e55b341ddf537299004086051b22fe98686f6d8fa91afc83891310466b27c350cd458509a6c98d54daa632c74f8a247d83c6e99dbc8544f8eda1b3d4975f81edcf2ab1cf2270f59e85d49ae207c06d4778d1962e6919f698da76d7fc629630f1b912d1f05539e773ebfc2f", [[], [], [], [], [], [], [], []]}, 0x8fa) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 15:17:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:17:19 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x97ffffff00000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3f00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 345.644593] QAT: Invalid ioctl [ 345.655801] IPVS: ftp: loaded support on port[0] = 21 [ 345.665070] IPVS: ftp: loaded support on port[0] = 21 15:17:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="be"], 0x1) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001540)=""/229, 0xe5}], 0x1}}], 0x1, 0xfffffffffffffffc, &(0x7f0000000400)={0x0, 0x989680}) 15:17:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4200, 0x8) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'team_slave_0\x00', 0x3}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) keyctl$session_to_parent(0x12) [ 345.766127] QAT: Invalid ioctl 15:17:19 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x50030000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x9}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:19 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x1, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) bind$netlink(r1, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbff, 0x4001004}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000580)) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000540)=""/5) ioprio_get$pid(0x3, r6) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000005c0)={{0xffffffffffffffff, 0x3, 0x3, 0x1, 0x100}, 0x6, 0x55eb, 0x7}) r7 = socket$inet6(0xa, 0x5, 0x4) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000180)={0x2, r8}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fb34ae93f12a48271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc5f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1ccbe51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') clone(0x0, &(0x7f0000000300), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000012c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pread64(r0, &(0x7f0000000040)=""/12, 0x34f, 0x3) 15:17:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @loopback, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 15:17:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x3000000000, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) accept$nfc_llcp(r1, &(0x7f0000000240), &(0x7f00000002c0)=0x60) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x8000006) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1d, &(0x7f0000000080)=""/236, &(0x7f0000000200)=0xec) 15:17:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) 15:17:19 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x68, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 346.228175] device lo entered promiscuous mode [ 346.262694] device lo left promiscuous mode [ 346.301357] QAT: Invalid ioctl 15:17:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8dffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) [ 346.325327] QAT: Invalid ioctl [ 346.406152] IPVS: ftp: loaded support on port[0] = 21 [ 346.448066] QAT: Invalid ioctl 15:17:19 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x40000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffeffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x7, 0x20, 0xffff, 0x4}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000200)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) [ 346.524073] QAT: Invalid ioctl 15:17:20 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffff5, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 346.573320] IPVS: ftp: loaded support on port[0] = 21 15:17:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3300000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:20 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:20 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x800000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget(0x3, 0x4, 0x480) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x204000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0xe5) semget(0x2, 0x7, 0x2) semget(0x1, 0x2, 0x100) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000140)={r3, 0x3}, 0x8) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000300)=""/222) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4, 0x200002) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x1, @ipv4={[], [], @multicast1}, 0x6}}, 0x3, 0x101, 0x80, "64815a317c43deff0be8e7c72ef1ec8164c37d5a61a73ce9fb7553b3f8ed5fb4c5b0b5f6b88b3cf267f0b437b16962c12e7fdc64d93903b8a55216f9848d936f07a2400564df528a02a7592c289ce2ea"}, 0xd8) fdatasync(r0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000400)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x105001, 0x0) 15:17:20 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x97ffffff, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8847000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 346.926173] QAT: Invalid ioctl 15:17:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}}, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000001d80)=@hci, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1}}], 0xbf, 0x2, 0x0) [ 346.957479] QAT: Invalid ioctl 15:17:20 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000500)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) [ 347.446484] QAT: Invalid ioctl 15:17:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 347.558797] device lo entered promiscuous mode [ 347.574159] device lo left promiscuous mode [ 347.699384] QAT: Invalid ioctl 15:17:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) lseek(r2, 0x0, 0x3) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(r3, 0x1004000000016) close(r1) 15:17:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) 15:17:23 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xfdffffff, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2f000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = memfd_create(&(0x7f00000000c0)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x6) fallocate(r1, 0x0, 0x0, 0xeb96) 15:17:23 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e635a61742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000005c0)={{&(0x7f0000000500)=""/128, 0x80}, &(0x7f0000000580), 0x50}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:23 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x28040, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r1, 0x3, 0x0) 15:17:23 executing program 4: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4005eed) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fallocate(r0, 0x20, 0x100000, 0x8000) 15:17:23 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) [ 350.474509] IPVS: ftp: loaded support on port[0] = 21 15:17:24 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x40000000011, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x0) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 15:17:24 executing program 4: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4005eed) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fallocate(r0, 0x20, 0x100000, 0x8000) 15:17:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x87ffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:24 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000840000000000000000010000000000008903abb8bc7b5722e644ab5decbb20e8a9fc8c0ddf22666048185180d06ad263828099479c8b0d020263658b2e7c37e2caadfd9e94a4207dd78dc8c52129999e27367e3545554350c804cdecbd530fb371b168ef9cdf01354d6b828fd9f7beb321d09b2fade94a8ab912fb5de7043a605cccef28a25d15008d24dcd34a96feaf764991a3daa432a3b46690ce96fe422662cc246fe45469e025712857d942fd1ad345bf3327d4696baddbad1953ca727618c9fb1ac57cf3fc2b3a5b7477"], 0xd5}, 0x0) [ 350.546344] QAT: Invalid ioctl [ 350.569405] IPVS: ftp: loaded support on port[0] = 21 [ 350.629922] QAT: Invalid ioctl [ 350.773870] attempt to access beyond end of device [ 350.778913] loop3: rw=4096, want=136, limit=32 [ 350.783586] gfs2: error 10 reading superblock 15:17:24 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() tgkill(r6, r6, 0x27) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) fremovexattr(r7, &(0x7f0000000500)=@random={'btrfs.', '/dev/loop#\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3580}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000140)) sendmmsg(r1, &(0x7f0000005fc0)=[{{&(0x7f0000005680)=@sco, 0x80, &(0x7f0000005b00)}}, {{&(0x7f0000005b80)=@l2, 0x80, &(0x7f0000005c40), 0x1f4, &(0x7f0000005c80), 0x3a00}}], 0x3e8, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x28841) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f000000cf68)=[@enter_looper], 0x0, 0x0, &(0x7f0000000680)}) [ 350.888800] attempt to access beyond end of device [ 350.893845] loop3: rw=4096, want=136, limit=32 [ 350.898520] gfs2: error 10 reading superblock 15:17:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) 15:17:24 executing program 5: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[]}, 0x20000080) 15:17:24 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6800000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:24 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:17:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2c00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) 15:17:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newneigh={0x1c}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x24, 0x5e, 0x7, 0x0, 0x0, {0x0, r1, {0xf}}}, 0x24}}, 0x0) 15:17:24 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x10000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) select(0x40, &(0x7f00000006c0)={0x1, 0x64b4aa5f, 0x1, 0x3ff, 0x3ff, 0x0, 0x7fffffff, 0x8}, &(0x7f0000000540)={0x5, 0x1ff, 0x6, 0x2, 0x100000000, 0x3f, 0x1, 0x1}, &(0x7f0000000580)={0x8, 0x7, 0x3, 0xfffffffffffffffa, 0x9, 0x3, 0x800, 0x4}, &(0x7f0000000600)={r8, r9/1000+30000}) r10 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r11}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99c04000000000000001232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:24 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xee030000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 351.350181] IPVS: ftp: loaded support on port[0] = 21 15:17:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x38000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 351.401636] 9pnet: p9_fd_create_unix (24449): problem connecting socket: éq‰Y’3aK: -111 [ 351.451842] IPVS: ftp: loaded support on port[0] = 21 15:17:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xe000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:25 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x3c030000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 351.673457] QAT: Invalid ioctl 15:17:25 executing program 2: r0 = socket(0x10, 0x2, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="1f0000000104ff00fd010000000000000005010008000100040451c7ffdf00", 0x1f) [ 351.748002] QAT: Invalid ioctl [ 351.870916] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 15:17:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:25 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000000500)=""/194, &(0x7f0000000600)=0xc2) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000080000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef589cfc74e69191e1e0929b7edf90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438e4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee86177930000000000000000000000000000000000"], 0x1) [ 351.953029] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. 15:17:25 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000980)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='bcsf0\x00') 15:17:25 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x1f000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:25 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:17:25 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) 15:17:25 executing program 2: r0 = socket(0x10, 0x2, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="1f0000000104ff00fd010000000000000005010008000100040451c7ffdf00", 0x1f) 15:17:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xf0}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:25 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) [ 352.237079] QAT: Invalid ioctl [ 352.306102] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 352.344117] QAT: Invalid ioctl 15:17:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) unshare(0x400) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x6) [ 352.423950] IPVS: ftp: loaded support on port[0] = 21 15:17:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xdc05}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:25 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xb402, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) [ 352.523386] IPVS: ftp: loaded support on port[0] = 21 15:17:26 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x800001c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) getpeername$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in=@local, 0x4e22, 0x8cbb, 0x4e24, 0x1, 0x2, 0x20, 0x20, 0x32, r7, r8}, {0x3ff, 0xffffffff, 0x1, 0xfffffffffffffff9, 0x9, 0x3ff, 0x6, 0xb3d}, {0x2, 0x7fff, 0x6, 0x5}, 0x10000, 0x0, 0x3, 0x1, 0x1, 0x3}, {{@in6=@mcast2, 0x8}, 0xa, @in, 0x0, 0x0, 0x0, 0x40e6, 0x6, 0xa15, 0xfffffffffffffffb}}, 0xe8) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000700)=0x3000) ioprio_get$pid(0x3, r6) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r10 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r11 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r11, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000180)={0x3, r11}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd3736a3da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1) 15:17:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x5dc}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 352.714090] attempt to access beyond end of device [ 352.719150] loop3: rw=4096, want=136, limit=90 [ 352.723821] gfs2: error 10 reading superblock [ 352.765074] attempt to access beyond end of device [ 352.770134] loop3: rw=4096, want=136, limit=90 [ 352.774243] IPVS: ftp: loaded support on port[0] = 21 [ 352.774780] gfs2: error 10 reading superblock 15:17:26 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xfdfdffff00000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8bde, 0x8}) socket$inet_smc(0x2b, 0x1, 0x0) close(r0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x8, 0x5005}) 15:17:26 executing program 4 (fault-call:5 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 352.851522] QAT: Invalid ioctl 15:17:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8864000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 352.958924] QAT: Invalid ioctl [ 353.064788] FAULT_INJECTION: forcing a failure. [ 353.064788] name failslab, interval 1, probability 0, space 0, times 0 [ 353.076720] CPU: 1 PID: 24586 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 353.083763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 353.093132] Call Trace: [ 353.095761] dump_stack+0x1c9/0x2b4 [ 353.099416] ? dump_stack_print_info.cold.2+0x52/0x52 [ 353.104634] ? perf_trace_lock+0xde/0x920 [ 353.108826] should_fail.cold.4+0xa/0x11 [ 353.112943] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 353.118077] ? find_held_lock+0x36/0x1c0 [ 353.122166] ? graph_lock+0x170/0x170 [ 353.126004] ? find_held_lock+0x36/0x1c0 [ 353.130112] ? check_same_owner+0x340/0x340 [ 353.134479] ? rcu_note_context_switch+0x730/0x730 [ 353.139438] __should_failslab+0x124/0x180 [ 353.143699] should_failslab+0x9/0x14 [ 353.147535] kmem_cache_alloc+0x2af/0x760 [ 353.151733] ? wait_for_completion+0x8d0/0x8d0 [ 353.156370] getname_flags+0xd0/0x5a0 [ 353.160201] user_path_at_empty+0x2d/0x50 [ 353.164393] do_linkat+0x188/0xaa0 [ 353.167960] ? __ia32_sys_symlink+0x80/0x80 [ 353.172310] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 353.177866] ? fput+0x130/0x1a0 [ 353.181166] ? ksys_write+0x1ae/0x260 [ 353.184998] ? __ia32_sys_read+0xb0/0xb0 [ 353.189093] ? syscall_slow_exit_work+0x500/0x500 [ 353.193971] __x64_sys_link+0x5e/0x80 [ 353.197814] do_syscall_64+0x1b9/0x820 [ 353.201752] ? finish_task_switch+0x1d3/0x870 [ 353.206284] ? syscall_return_slowpath+0x5e0/0x5e0 [ 353.211240] ? syscall_return_slowpath+0x31d/0x5e0 [ 353.216195] ? __switch_to_asm+0x34/0x70 [ 353.220278] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 353.225678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 353.230564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 353.235770] RIP: 0033:0x457089 [ 353.238988] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 353.257923] RSP: 002b:00007f87a41c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 15:17:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) socket$unix(0x1, 0x1, 0x0) 15:17:26 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) 15:17:26 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) getsockname(r0, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000580)=0x80) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000005c0)={0x5, 0x7, 0x1000}, 0x4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) [ 353.265658] RAX: ffffffffffffffda RBX: 00007f87a41c76d4 RCX: 0000000000457089 [ 353.272942] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 353.280227] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.287529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 353.294815] R13: 00000000004d2420 R14: 00000000004f34b3 R15: 0000000000000000 15:17:26 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xf5ffffff00000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8bde, 0x8}) socket$inet_smc(0x2b, 0x1, 0x0) close(r0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x8, 0x5005}) 15:17:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x29000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 353.471469] IPVS: ftp: loaded support on port[0] = 21 [ 353.493406] IPVS: ftp: loaded support on port[0] = 21 [ 353.554016] QAT: Invalid ioctl [ 353.625635] QAT: Invalid ioctl 15:17:27 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 15:17:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2800}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8bde, 0x8}) socket$inet_smc(0x2b, 0x1, 0x0) close(r0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000080)={0x8, 0x5005}) 15:17:27 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x4) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x6, 0x40002) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:27 executing program 4 (fault-call:5 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) 15:17:27 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x500, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 354.037424] IPVS: ftp: loaded support on port[0] = 21 15:17:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x5}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 354.062868] QAT: Invalid ioctl 15:17:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8bde, 0x8}) socket$inet_smc(0x2b, 0x1, 0x0) close(r0) [ 354.163189] QAT: Invalid ioctl 15:17:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:27 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000003c0)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff93) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000540)={0x7ffe}) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)={[{}, {0x0, 0x0, 0x0, 0x0, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2}]}) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x2, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r6 = getpid() ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000500)={'veth0\x00', 0x200}) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000340)) ioprio_get$pid(0x3, r6) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x3, @dev={[], 0x13}, 'veth0_to_team\x00'}}) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x9, 0x10000, 0x20000000004, 0x1, 0x0, 0x1}, 0xfffffdbb) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r7, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000180)={0x3, r7}) [ 354.377156] attempt to access beyond end of device [ 354.382218] loop3: rw=4096, want=136, limit=2 [ 354.386791] gfs2: error 10 reading superblock [ 354.435507] attempt to access beyond end of device [ 354.440608] loop3: rw=4096, want=136, limit=2 [ 354.445169] gfs2: error 10 reading superblock [ 354.473111] FAULT_INJECTION: forcing a failure. [ 354.473111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.484965] CPU: 1 PID: 24684 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 354.487979] IPVS: ftp: loaded support on port[0] = 21 [ 354.491985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.491993] Call Trace: [ 354.492041] dump_stack+0x1c9/0x2b4 [ 354.492067] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.492098] ? perf_trace_lock+0xde/0x920 [ 354.522228] should_fail.cold.4+0xa/0x11 [ 354.526310] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.529139] IPVS: ftp: loaded support on port[0] = 21 [ 354.531450] ? zap_class+0x740/0x740 [ 354.531492] ? trace_hardirqs_on+0x10/0x10 [ 354.531510] ? perf_trace_lock+0xde/0x920 [ 354.531531] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 354.553700] ? zap_class+0x740/0x740 [ 354.557442] ? perf_trace_lock+0x920/0x920 [ 354.561716] ? find_held_lock+0x36/0x1c0 [ 354.565796] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.571350] ? _parse_integer+0x13b/0x190 [ 354.575521] ? perf_trace_lock+0xde/0x920 [ 354.579686] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 354.584551] ? _kstrtoull+0x188/0x250 [ 354.588382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.593934] ? should_fail+0x246/0xd86 [ 354.597872] ? zap_class+0x740/0x740 [ 354.601608] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.606750] __alloc_pages_nodemask+0x36e/0xdb0 [ 354.611434] ? graph_lock+0x170/0x170 [ 354.615262] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 354.620310] ? find_held_lock+0x36/0x1c0 [ 354.624430] ? check_same_owner+0x340/0x340 [ 354.628784] cache_grow_begin+0x91/0x710 [ 354.632874] kmem_cache_alloc+0x689/0x760 [ 354.635635] 9pnet: p9_fd_create_unix (24690): problem connecting socket: éq‰Y’3aK: -111 [ 354.637044] ? wait_for_completion+0x8d0/0x8d0 [ 354.637070] getname_flags+0xd0/0x5a0 [ 354.637095] user_path_at_empty+0x2d/0x50 [ 354.637115] do_linkat+0x188/0xaa0 [ 354.661522] ? __ia32_sys_symlink+0x80/0x80 [ 354.665920] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.671495] ? fput+0x130/0x1a0 [ 354.674789] ? ksys_write+0x1ae/0x260 [ 354.678611] ? __ia32_sys_read+0xb0/0xb0 [ 354.682701] ? syscall_slow_exit_work+0x500/0x500 [ 354.687576] __x64_sys_link+0x5e/0x80 [ 354.691392] do_syscall_64+0x1b9/0x820 [ 354.695291] ? finish_task_switch+0x1d3/0x870 [ 354.699817] ? syscall_return_slowpath+0x5e0/0x5e0 [ 354.704758] ? syscall_return_slowpath+0x31d/0x5e0 [ 354.709723] ? __switch_to_asm+0x34/0x70 [ 354.713813] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.719208] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.724088] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.729294] RIP: 0033:0x457089 15:17:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x10000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88ffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 354.732513] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 354.751431] RSP: 002b:00007f87a41c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 354.759176] RAX: ffffffffffffffda RBX: 00007f87a41c76d4 RCX: 0000000000457089 [ 354.766455] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 354.773751] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 15:17:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8bde, 0x8}) socket$inet_smc(0x2b, 0x1, 0x0) 15:17:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) [ 354.781040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 354.788327] R13: 00000000004d2420 R14: 00000000004f34b3 R15: 0000000000000001 15:17:28 executing program 4 (fault-call:5 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 354.898608] QAT: Invalid ioctl 15:17:28 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) 15:17:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2100000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x8bde, 0x8}) [ 355.091606] IPVS: ftp: loaded support on port[0] = 21 [ 355.116263] FAULT_INJECTION: forcing a failure. [ 355.116263] name failslab, interval 1, probability 0, space 0, times 0 [ 355.127611] CPU: 1 PID: 24717 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 355.134636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.144028] Call Trace: [ 355.146633] dump_stack+0x1c9/0x2b4 [ 355.150282] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.155517] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 355.160558] ? trace_hardirqs_on+0xd/0x10 [ 355.164748] should_fail.cold.4+0xa/0x11 [ 355.169011] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.174132] ? __switch_to_asm+0x40/0x70 [ 355.178236] ? __switch_to_asm+0x34/0x70 [ 355.182320] ? __switch_to_asm+0x40/0x70 [ 355.186409] ? __switch_to_asm+0x34/0x70 [ 355.190490] ? __switch_to_asm+0x40/0x70 [ 355.194558] ? __switch_to_asm+0x34/0x70 [ 355.198631] ? __switch_to_asm+0x34/0x70 [ 355.202720] ? __switch_to_asm+0x40/0x70 [ 355.206806] ? __switch_to_asm+0x40/0x70 [ 355.210875] ? __switch_to_asm+0x34/0x70 [ 355.214948] ? __switch_to_asm+0x40/0x70 [ 355.219124] ? __schedule+0x884/0x1ec0 [ 355.223025] ? kasan_check_read+0x11/0x20 [ 355.227194] ? __sched_text_start+0x8/0x8 [ 355.231383] ? find_held_lock+0x36/0x1c0 [ 355.235512] ? check_same_owner+0x340/0x340 [ 355.239858] ? filename_parentat.isra.58+0x570/0x570 [ 355.244985] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 355.250556] __should_failslab+0x124/0x180 [ 355.254838] should_failslab+0x9/0x14 [ 355.258665] kmem_cache_alloc+0x2af/0x760 15:17:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 355.262843] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.268416] ? getname_flags+0x26e/0x5a0 [ 355.268443] getname_flags+0xd0/0x5a0 15:17:28 executing program 4 (fault-call:5 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xc000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 355.268466] do_linkat+0x1bd/0xaa0 [ 355.268502] ? __ia32_sys_symlink+0x80/0x80 15:17:28 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000500)) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x40002, 0x0) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000000580)={0x3b, @multicast1, 0x4e22, 0x3, 'fo\x00', 0x0, 0x5, 0xd969}, 0x2c) ioprio_get$pid(0x3, r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000300)={[], 0x766a, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r9 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x412000, 0x0) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f00000002c0)=[0x0, 0x100000001]) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000180)={0x3, r10}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000880)=ANY=[@ANYBLOB="4d96335b2dc660f3a3c6d153590300000020000000000000000000000000000044e9efa455e5fa001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2360fc2158d3d748a16e0c00110bcbe74819b9c52f30a68c291795455e5ae73e796ad2d9d97205aaa3b56eea84502bc382ad904be"]) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) 15:17:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8906}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 355.268522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.268541] ? fput+0x130/0x1a0 [ 355.268559] ? ksys_write+0x1ae/0x260 15:17:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x8) [ 355.268580] ? __ia32_sys_read+0xb0/0xb0 [ 355.268602] ? syscall_slow_exit_work+0x500/0x500 15:17:29 executing program 4 (fault-call:5 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 355.268626] __x64_sys_link+0x5e/0x80 15:17:29 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xe4020000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x500}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 355.268645] do_syscall_64+0x1b9/0x820 [ 355.268660] ? finish_task_switch+0x1d3/0x870 [ 355.268680] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.268701] ? syscall_return_slowpath+0x31d/0x5e0 15:17:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0xd4e}) [ 355.268736] ? __switch_to_asm+0x34/0x70 [ 355.268755] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 355.268781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.268810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.268824] RIP: 0033:0x457089 [ 355.268845] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.268857] RSP: 002b:00007f87a41c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 355.268878] RAX: ffffffffffffffda RBX: 00007f87a41c76d4 RCX: 0000000000457089 [ 355.268890] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 355.268901] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 355.268912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 355.268923] R13: 00000000004d2420 R14: 00000000004f34b3 R15: 0000000000000002 [ 355.379657] IPVS: ftp: loaded support on port[0] = 21 [ 355.443965] IPVS: ftp: loaded support on port[0] = 21 [ 355.591618] FAULT_INJECTION: forcing a failure. [ 355.591618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 355.591641] CPU: 0 PID: 24747 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 355.591654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.591663] Call Trace: [ 355.591690] dump_stack+0x1c9/0x2b4 [ 355.591734] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.591763] ? rcu_is_watching+0x8c/0x150 [ 355.591794] should_fail.cold.4+0xa/0x11 [ 355.591822] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.591849] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 355.591866] ? kernel_text_address+0x79/0xf0 [ 355.591893] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 355.591912] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 355.591945] ? perf_tp_event+0xc40/0xc40 [ 355.592001] ? memset+0x31/0x40 [ 355.592036] ? perf_trace_lock+0x49d/0x920 [ 355.592064] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 355.592091] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.592110] ? should_fail+0x246/0xd86 [ 355.592132] ? zap_class+0x740/0x740 [ 355.592159] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.592199] __alloc_pages_nodemask+0x36e/0xdb0 [ 355.592221] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 355.592264] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 355.592311] ? rcu_is_watching+0x8c/0x150 [ 355.592348] ? find_held_lock+0x36/0x1c0 [ 355.592421] ? check_same_owner+0x340/0x340 [ 355.592449] ? filename_parentat.isra.58+0x570/0x570 [ 355.592488] cache_grow_begin+0x91/0x710 [ 355.592534] kmem_cache_alloc+0x689/0x760 [ 355.592568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.592602] getname_flags+0xd0/0x5a0 [ 355.592636] do_linkat+0x1bd/0xaa0 [ 355.592674] ? __ia32_sys_symlink+0x80/0x80 [ 355.592696] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.592735] ? fput+0x130/0x1a0 [ 355.592764] ? ksys_write+0x1ae/0x260 [ 355.592798] ? __ia32_sys_read+0xb0/0xb0 [ 355.592819] ? filp_open+0x80/0x80 [ 355.592853] ? ksys_mount+0xa8/0x140 [ 355.592891] __x64_sys_link+0x5e/0x80 [ 355.592920] do_syscall_64+0x1b9/0x820 [ 355.592942] ? finish_task_switch+0x1d3/0x870 [ 355.592980] ? syscall_return_slowpath+0x5e0/0x5e0 [ 355.593010] ? syscall_return_slowpath+0x31d/0x5e0 [ 355.593036] ? __switch_to_asm+0x34/0x70 [ 355.593062] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 355.593100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 355.593142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 355.593161] RIP: 0033:0x457089 [ 355.593183] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 355.593197] RSP: 002b:00007f87a41c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 355.593221] RAX: ffffffffffffffda RBX: 00007f87a41c76d4 RCX: 0000000000457089 15:17:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) 15:17:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2900}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:30 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xee03, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:30 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) 15:17:30 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r4, 0x4040ae77, &(0x7f0000000640)) r5 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r6 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = getpid() ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r7) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000500)={0x0, 0x200}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) getpeername$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r9 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r10, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r8, 0x4008af21, &(0x7f0000000180)={0x3, r10}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2aebbc70162b2f546e62360000000000000000000000000000"]) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 355.593234] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 355.593255] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 355.593269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 355.593284] R13: 00000000004d2420 R14: 00000000004f34b3 R15: 0000000000000003 [ 356.853400] IPVS: ftp: loaded support on port[0] = 21 [ 356.864557] attempt to access beyond end of device [ 356.869630] loop3: rw=4096, want=136, limit=119 [ 356.874368] gfs2: error 10 reading superblock 15:17:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2f00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 356.901655] IPVS: ftp: loaded support on port[0] = 21 15:17:30 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = socket$inet6(0xa, 0x1000000000006, 0x0) mknod$loop(&(0x7f0000000040)='.\x00', 0x0, 0xffffffffffffffff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000200)='./file0\x00') chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000640)='./file0\x00', 0x4) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') r1 = msgget$private(0x0, 0x80) msgctl$IPC_RMID(r1, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)='ramfs\x00', &(0x7f0000000200)='ramfs\x00', &(0x7f0000000240)='ramfs\x00', &(0x7f0000000280)="5b766d6e6574312b275e6574683070726f632b65746831707070312876626f786e6574316d696d655f7479706576626f786e6574302d6b657972696e6726296e6f6465760100", &(0x7f0000000300)='selinux\x00', &(0x7f0000000340)='ramfs\x00'], &(0x7f0000000540)=[&(0x7f00000003c0)='ramfs\x00', &(0x7f0000000400)='ramfs\x00', &(0x7f0000000440)='ramfs\x00', &(0x7f0000000480)='ppp1\x00', &(0x7f00000004c0)='ramfs\x00', &(0x7f0000000500)='/:\x00']) [ 356.966323] IPVS: ftp: loaded support on port[0] = 21 [ 356.985862] QAT: Invalid ioctl [ 356.994650] attempt to access beyond end of device [ 356.997859] 9pnet: p9_fd_create_unix (24818): problem connecting socket: éq‰Y’3aK: -111 [ 356.999774] loop3: rw=4096, want=136, limit=119 [ 357.012959] gfs2: error 10 reading superblock [ 357.084207] 9pnet: p9_fd_create_unix (24833): problem connecting socket: éq‰Y’3aK: -111 [ 357.114720] QAT: Invalid ioctl 15:17:30 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffdd86}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:30 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x73cfb08198a06eab, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000500)) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:30 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xe402, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x4, 0x5, 0xa, 0x2b}, 0x166) [ 357.472650] attempt to access beyond end of device [ 357.477798] loop3: rw=4096, want=136, limit=114 [ 357.482568] gfs2: error 10 reading superblock [ 357.555665] attempt to access beyond end of device [ 357.560753] loop3: rw=4096, want=136, limit=114 [ 357.565488] gfs2: error 10 reading superblock [ 357.571676] QAT: Invalid ioctl 15:17:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) 15:17:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) 15:17:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88caffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='./file0\x00') fanotify_mark(r0, 0x0, 0x48000001, r0, &(0x7f0000000140)='./bus\x00') [ 357.750812] QAT: Invalid ioctl 15:17:31 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x3f00, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={"6c6f0000004f50fa522e40a856000010", 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@setlink={0x28, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 357.864797] IPVS: ftp: loaded support on port[0] = 21 [ 357.889765] IPVS: ftp: loaded support on port[0] = 21 15:17:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2800000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 357.938133] IPVS: ftp: loaded support on port[0] = 21 [ 357.945748] 9pnet: p9_fd_create_unix (24899): problem connecting socket: éq‰Y’3aK: -111 15:17:31 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f252a39f5c78fac6bee013"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) [ 358.003078] attempt to access beyond end of device [ 358.008210] loop3: rw=4096, want=136, limit=31 [ 358.012863] gfs2: error 10 reading superblock 15:17:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 358.045689] attempt to access beyond end of device [ 358.050808] loop3: rw=4096, want=136, limit=31 [ 358.055460] gfs2: error 10 reading superblock 15:17:31 executing program 5: 15:17:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3a000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 358.291790] QAT: Invalid ioctl 15:17:31 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:31 executing program 5: 15:17:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 358.437378] QAT: Invalid ioctl 15:17:32 executing program 5: 15:17:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) 15:17:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3f000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:32 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:32 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x805, 0xffff) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f00000006c0)={"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"}) 15:17:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xffffff8c, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x110) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000200)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:32 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) socket$unix(0x1, 0x1, 0x0) 15:17:32 executing program 5: [ 358.885183] IPVS: ftp: loaded support on port[0] = 21 [ 358.915227] 9pnet: p9_fd_create_unix (24970): problem connecting socket: éq‰Y’3aK: -111 [ 358.931210] IPVS: ftp: loaded support on port[0] = 21 [ 358.986814] 9pnet: p9_fd_create_unix (24987): problem connecting socket: éq‰Y’3aK: -111 [ 359.018685] QAT: Invalid ioctl 15:17:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x9000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xe00, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 359.039970] IPVS: ftp: loaded support on port[0] = 21 15:17:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:32 executing program 5: [ 359.116098] QAT: Invalid ioctl 15:17:32 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000500)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea632eae70d586a653bbc159a2b2280578b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) [ 359.233526] attempt to access beyond end of device [ 359.238590] loop3: rw=4096, want=136, limit=7 [ 359.243164] gfs2: error 10 reading superblock 15:17:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2100}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:32 executing program 5: [ 359.355640] attempt to access beyond end of device [ 359.360735] loop3: rw=4096, want=136, limit=7 [ 359.365323] gfs2: error 10 reading superblock 15:17:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x10c) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x54) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) [ 359.625396] QAT: Invalid ioctl [ 359.688332] QAT: Invalid ioctl 15:17:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x80) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x5) link(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='./file1\x00') ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xaa, 0x3, &(0x7f0000000580)=[{&(0x7f0000000300)="46435b014352fa9fcf5271bdbef50e5cd399ce1eb61eb0fedb130021205ee846017f8cd790058275cc43f4be15500ef3f03cdf74236149823b9face7f5ea47d631154520dfff8c82e50af5fa875371e2bef84ffdf0f1134a37a7030a1067c6c2a044949b71222834b0efb9f1d4c517965abbf42b05a8a1ccda03cb127cb0f750563248a8a881d4fc09c7deb59ead9eb3826209a75e79686fa48cb34d6266efa4b0e0ab0103af8de7ea92e46f77f77a1556c09b4035adcd7c15020f6322f9e29469d48c4da6df4ae91a27f25c0237b9fbb990d3f4f4525076c0c65bb78ca70f26aaeca44675e6c2cc2e0eb09d8ae64e0be90e3e", 0xf3, 0x9}, {&(0x7f0000000400)="6104054d2a80517f78bac3b536c0ee8654d4efdb925eccc90c27e2f1c53105bdd0dd61719fa0dacde9e9252e9b5a619e9997f2307206622d6d9959859c1fcd1b241a81640561aee482aad794495eca0239b44e0ff38787ab7263187448b89bd54ea89fb2d08043332f04d89e0f03b3bdd6348bc119e010a384680e4d8d0967b3f6f06d66f24bc5ea32de0b685df597cfe4411dad82bf16d80fe10979480125e5ee98ff4c8e10d9d19f8e29b4f64aa10156754f1c5ab890e68a2c0e98f7f07bcebeabab7ab0475ecf818cc4", 0xcb, 0x5}, {&(0x7f0000000500)="b571c4ae108cc28b065235dbd7ccfb08f7ef7793a42fe7d546e93c8b0ed893165eecfc7037ececadb08d88131276787647bf81a60847ea7e326a3b8c795b94edd7c2cf8f646a8c1cfa2da42d8e52535f5866eaab6f691abefa74b6fc36d91d8234979b37eb95b4", 0x67, 0x1}], 0x20000, &(0x7f0000000600)={[{@shortname_winnt='shortname=winnt'}, {@utf8no='utf8=0'}, {@shortname_mixed='shortname=mixed'}, {@rodir='rodir'}, {@uni_xlate='uni_xlate=1'}, {@utf8='utf8=1'}]}) 15:17:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x5003000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:33 executing program 5: 15:17:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffca88}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:33 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000540)={0x1, 0x7}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) write$UHID_CREATE(r1, &(0x7f00000006c0)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000500)=""/40, 0x28, 0xa259, 0x5, 0xcb, 0x1ff}, 0x120) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:33 executing program 5: [ 359.912818] IPVS: ftp: loaded support on port[0] = 21 [ 359.920164] IPVS: ftp: loaded support on port[0] = 21 15:17:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2f00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4001000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:33 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x100, 0x80) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000380)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xffff, 0x20000) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x10090, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@mmap='mmap'}, {@cache_fscache='cache=fscache'}, {@cache_mmap='cache=mmap'}, {@debug={'debug'}}, {@version_u='version=9p2000.u'}, {@version_L='version=9p2000.L'}, {@uname={'uname'}}, {@access_user='access=user'}, {@cache_none='cache=none'}]}}) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 360.094160] IPVS: ftp: loaded support on port[0] = 21 15:17:33 executing program 5: [ 360.200211] QAT: Invalid ioctl [ 360.288560] 9pnet: Insufficient options for proto=fd 15:17:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xdc050000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xb8030000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 360.352996] QAT: Invalid ioctl 15:17:33 executing program 5: 15:17:34 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x80404, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000340)=ANY=[@ANYBLOB="03000000200000000000000022fa9234ab893b9c00000000000000001d85a2785da48e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b8"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) [ 360.807521] QAT: Invalid ioctl 15:17:34 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x86) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='ramfs\x00'}, 0x10) rt_sigpending(&(0x7f0000000280), 0x8) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000240)={0x9, 0xff}) r1 = shmget$private(0x0, 0x1000, 0x908, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000080)=""/29) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x800e0000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xa000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:34 executing program 5: 15:17:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 360.860773] QAT: Invalid ioctl 15:17:34 executing program 5: [ 360.971948] IPVS: ftp: loaded support on port[0] = 21 [ 360.972471] attempt to access beyond end of device [ 360.982304] loop3: rw=4096, want=136, limit=80 [ 360.986939] gfs2: error 10 reading superblock 15:17:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x28000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 361.013019] IPVS: ftp: loaded support on port[0] = 21 15:17:34 executing program 6: socketpair$inet(0x2, 0xf, 0x100000001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000000c0)=0xffffffffffffff77) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x1c1000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x400, 0x4, 0x7fff, 0x83}}, 0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x4040ae77, &(0x7f0000000640)) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x100) r5 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = getpid() ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000003c0)) ioprio_get$pid(0x3, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4d426f6e84796b7c, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={[], 0x766c, 0x9, 0x3f, 0x401, 0xe30}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r8 = socket$inet6(0xa, 0x5, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000400)={[{0x200, 0x4, 0x3, 0x4, 0x1ff, 0xa000000, 0x9, 0x1, 0x100000001, 0x7ff, 0x7ff, 0xd7, 0x8}, {0x7, 0xfffffffffffffffd, 0x7, 0x8, 0x436a056, 0x9, 0x500000000000000, 0x3, 0xffffffff, 0x91, 0x7fff, 0x5c7, 0x2}, {0x0, 0xffff, 0x2, 0x4, 0x9, 0x100, 0x0, 0x0, 0x3a, 0xbdf, 0x40, 0xffffffffffff6856, 0x6}], 0x1}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000240), &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0xffffffffffffffd8, 0x20000000004, 0x1, 0x0, 0x1}, 0x2c) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x80401, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000300)=[0x0, 0x7]) ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000180)={0x3, r9}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000500)=ANY=[@ANYBLOB="03000000200000000000000000000000000000001d85a2785da4e91a8d16ffd39d74821d07df8e42e6358c1742b7b725bd1436cf43dd376112da0e7a2a42ebbc1a0670162b2f546e6236fcb076b87e4e8c56fb8683f2"]) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000030080000a8030000a8030000a803000048020000400600006007000060070000600700006007000060070000060b38ec9dda45448fc851e93f12a47271b22ef57ccfc74e69191e1e0929b7edc2e74bab41bc6360c130ebf99cc7f90c44e12143b91232e9e93ee30eab02fb9e287ba4717a35a2e1cc1f51b7bea68b7918d3b2609db8a6c13755b1e7afd5f70b7dff4e2438c4c4de5b847f1bfc5e81b0bae43c87d1d265688febf088da56fab6eb8fe93d9a40fb5bd76b6afd09cbf289d0aa628308b988330c4b8c4bbee8617793000000"], 0x1) 15:17:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x40000, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 361.071354] attempt to access beyond end of device [ 361.076760] loop3: rw=4096, want=136, limit=80 [ 361.081424] gfs2: error 10 reading superblock 15:17:34 executing program 5: 15:17:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x900, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 361.224784] IPVS: ftp: loaded support on port[0] = 21 15:17:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8035}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 361.297112] 9pnet: p9_fd_create_unix (25167): problem connecting socket: éq‰Y’3aK: -111 [ 361.385748] QAT: Invalid ioctl 15:17:34 executing program 5: 15:17:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000240)=""/122, 0x7a}], 0x3, &(0x7f0000000740)=[@fadd={0x58, 0x114, 0x6, {{0x40, 0x80}, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x20, 0x80000001, 0x92, 0x4, 0x9a7, 0x20, 0x76e}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x5}, &(0x7f0000000380)=0x2400000, &(0x7f00000003c0)=0x10001, 0x7ea, 0x994, 0x1, 0x2, 0xc, 0x1ff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000400)=""/31, 0x1f}, &(0x7f0000000440), 0x50}}, @fadd={0x58, 0x114, 0x6, {{0xa652, 0x7}, &(0x7f0000000480)=0x7, &(0x7f00000004c0)=0x1, 0xa4cd, 0xffffffff, 0x524, 0x2, 0x24, 0x6f8999b1}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x1}, &(0x7f0000000500)=0x8843, &(0x7f0000000540)=0x2, 0x9, 0x7f, 0x2, 0x1000, 0x1, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x7}, &(0x7f0000000580)=0x6, &(0x7f00000005c0)=0x3f, 0x1, 0x2, 0x10000, 0xee0e, 0x10, 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x2}], 0x218, 0x8004}, 0x4) [ 361.464643] QAT: Invalid ioctl [ 361.480242] attempt to access beyond end of device [ 361.485362] loop3: rw=4096, want=136, limit=4 [ 361.489967] gfs2: error 10 reading superblock [ 361.572218] attempt to access beyond end of device [ 361.577329] loop3: rw=4096, want=136, limit=4 [ 361.581907] gfs2: error 10 reading superblock 15:17:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) 15:17:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x1100}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:35 executing program 5: 15:17:35 executing program 6: 15:17:35 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4800, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000200)=""/86, &(0x7f0000000280)=0x56) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000140)={0x1, r0, 0x1}) 15:17:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2b}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 361.922121] IPVS: ftp: loaded support on port[0] = 21 15:17:35 executing program 6: 15:17:35 executing program 5: [ 361.978852] attempt to access beyond end of device [ 361.983961] loop3: rw=4096, want=136, limit=36 [ 361.988636] gfs2: error 10 reading superblock [ 362.001694] IPVS: ftp: loaded support on port[0] = 21 [ 362.083552] attempt to access beyond end of device [ 362.088632] loop3: rw=4096, want=136, limit=36 [ 362.093329] gfs2: error 10 reading superblock [ 362.118358] 9pnet: p9_fd_create_unix (25231): problem connecting socket: éq‰Y’3aK: -111 [ 362.119549] IPVS: ftp: loaded support on port[0] = 21 15:17:35 executing program 5: 15:17:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xc75, 0x4640) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000400)='./file1\x00', &(0x7f00000003c0)='./bus\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6=@ipv4={[], [], @local}}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) 15:17:35 executing program 6: 15:17:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8100000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:35 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) 15:17:36 executing program 5: 15:17:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:36 executing program 6: 15:17:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88480000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x511000, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="15001a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x44854) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000200)='./bus\x00', &(0x7f0000000140)='./file0\x00') [ 362.699868] IPVS: ftp: loaded support on port[0] = 21 [ 362.768395] IPVS: ftp: loaded support on port[0] = 21 15:17:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x100000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:36 executing program 5: 15:17:36 executing program 6: 15:17:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x806}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4, 0x4) 15:17:36 executing program 5: 15:17:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4800000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 363.058116] IPVS: ftp: loaded support on port[0] = 21 15:17:36 executing program 6: 15:17:36 executing program 5: [ 363.140856] 9pnet: p9_fd_create_unix (25305): problem connecting socket: éq‰Y’3aK: -111 15:17:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3a00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1\x00', r2}) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f6275732021272f6d696d655f7479706520656d302f766d6e6591305e70726f636d643573756d2d2072616d6673002072616d6673002072616d6673000a42e1946c696c7284cffa8d1b35fe7302a50489a1059bb7460942b3fd3241aa1cdf9710348f2b4a6ce05463f13710543c00ca397b9632a12d5273d9880c908b01e456f8418e000ac31130b466564681a8374ae9746e20a0151a1aec7cb2d697fa16a47fa89e053beb14d911947bc77a2b80384d308498ac81e8da739120e2f2dac59f43d05d8738914f6cd0351fe9e8d83e772e8e8f9a0465"], 0x56) 15:17:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xa000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:36 executing program 6: 15:17:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) [ 363.510021] IPVS: ftp: loaded support on port[0] = 21 [ 363.629923] IPVS: ftp: loaded support on port[0] = 21 15:17:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:37 executing program 5: 15:17:37 executing program 6: 15:17:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x6000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x73, 0x80) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) 15:17:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xb803, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:37 executing program 5: 15:17:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x60}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:37 executing program 6: 15:17:37 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 363.910836] attempt to access beyond end of device [ 363.915959] loop3: rw=4096, want=136, limit=92 [ 363.920631] gfs2: error 10 reading superblock [ 363.977873] IPVS: ftp: loaded support on port[0] = 21 15:17:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x2000080, &(0x7f0000000240)="50262426a4a25ab09f5180ddc2bb285337340ea0939c47b41abf31bed6733a0e460924ef21813be405f6a15f7b75a64cbefd2c9d670767f1e41cc764cadacca49e288c4350ae1abcda9d62ab82be2e3ddd1a0ac7cd5d5e2ae44a33771fb15a27a8e1c728212cca4fb495d9") ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x1, r0}) 15:17:37 executing program 5: 15:17:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xd}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:37 executing program 6: 15:17:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xf508, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 364.147596] IPVS: ftp: loaded support on port[0] = 21 15:17:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) [ 364.379516] attempt to access beyond end of device [ 364.384761] loop3: rw=4096, want=136, limit=122 [ 364.389526] gfs2: error 10 reading superblock 15:17:37 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:37 executing program 5: 15:17:37 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:37 executing program 6: 15:17:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x30}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 364.500264] IPVS: ftp: loaded support on port[0] = 21 [ 364.552322] attempt to access beyond end of device [ 364.557416] loop3: rw=4096, want=136, limit=122 [ 364.562171] gfs2: error 10 reading superblock 15:17:38 executing program 5: 15:17:38 executing program 6: 15:17:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 364.759647] IPVS: ftp: loaded support on port[0] = 21 15:17:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xf5ffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:38 executing program 5: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x80000) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}) keyctl$join(0x1, &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}) 15:17:38 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x8403, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:38 executing program 4: r0 = dup(0xffffffffffffff9c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, r0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:38 executing program 6: rt_sigaction(0x400000000000007, &(0x7f0000000080)={0x40e5cf, {0xffffdfbfffbff275}}, &(0x7f0000000000), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/llc\x00') [ 365.041120] IPVS: ftp: loaded support on port[0] = 21 15:17:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) socket$unix(0x1, 0x1, 0x0) 15:17:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_aout(r0, &(0x7f00000001c0)={{}, "178b294fe3660be2ebdcf152b9fb"}, 0x2e) 15:17:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 365.096369] 9pnet: p9_fd_create_unix (25445): problem connecting socket: éq‰Y’3aK: -111 [ 365.148218] attempt to access beyond end of device [ 365.153540] loop3: rw=4096, want=136, limit=66 [ 365.158205] gfs2: error 10 reading superblock 15:17:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 365.198106] attempt to access beyond end of device [ 365.203210] loop3: rw=4096, want=136, limit=66 [ 365.207866] gfs2: error 10 reading superblock 15:17:38 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/userio\x00', 0xfffffffffffffffc, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file1\x00', &(0x7f0000000200)='9p\x00', 0x2000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug'}}, {@fscache='fscache'}, {@nodevmap='nodevmap'}, {@access_any='access=any'}, {@access_any='access=any'}]}}) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:38 executing program 6: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) writev(r0, &(0x7f0000701000)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000000e80002040000040d000300ea1100000005000000", 0x29}], 0x1) 15:17:38 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:38 executing program 5: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x800044, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141046, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) sendfile(r1, r1, &(0x7f0000000400), 0x8080fffffffe) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000004c0)="791d96a5d870c1b3cffda52db5b1267d7cdc2ecf96e7d2040b5a5de24b7ccc114bace8de2759f7cbaed541c1f14415dd53021fa1622b2cce14927b1e7fcd0387d18effc356a45bdfae268d6c15f343cfaaca8abc1157f2c11be385381af7f414298b8a625517abb82837ee10b562aad5865c9018e55ac5828b1be2a4ad3b87fb126cd8c3115808bcc2c5ccfc82585abe77e213a0de82d0ca636316308c776be5566bcf6a00980abf8717ec51bfa66e2226432f31b24ee64fbb9467aa578d61f7156692672004b10b77a49ae4e6c5ac3b36192bf2", 0xd4) pread64(0xffffffffffffffff, &(0x7f00000012c0)=""/4096, 0x1000, 0x0) sendfile(r1, r1, &(0x7f0000000380), 0x1000000020000) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0xb239, 0x6}, 0x8) socket$inet6_udplite(0xa, 0x2, 0x88) shmget(0xffffffffffffffff, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) [ 365.348698] IPVS: ftp: loaded support on port[0] = 21 15:17:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 365.390749] IPVS: ftp: loaded support on port[0] = 21 15:17:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x200000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 366.129480] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.137087] FAT-fs (loop5): Filesystem has been set read-only [ 366.156672] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.164925] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.176618] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.185436] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.232707] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.296636] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.334509] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) [ 366.345085] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 366.365963] FAT-fs (loop5): error, invalid access to FAT (entry 0x000007a3) 15:17:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(r1, 0x8) chdir(&(0x7f0000000240)='./file0\x00') r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000300)=[{0x4, 0xffffffffffff0001}, {0x2, 0x7}, {0x3, 0x2}, {0x0, 0x200}, {0x2, 0xfffffffffffffffa}, {0x0, 0x2}, {0x8, 0xfffffffffffffc77}, {0x7, 0x8000}, {0x0, 0x7}], 0x9) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x3, 0xfffffffffffffffb, 0x1000}}, 0x28) r4 = request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000005c0)='bdev!em0lokeyringkeyring\x00', 0xfffffffffffffff9) r5 = request_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='mime_typekeyring\x00', 0xfffffffffffffffb) r6 = add_key(&(0x7f00000006c0)='syzkaller\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000780)="a779a26324a37a0e93f5cb483f6ab94da0bb7bb9a48edc1ae3d5bf3c247d815f9e6ff035cfbdc57463bd769a9ba2435298f07d757db063b2ccd63787e545342f37fb632dc01598ad39765cc47c9f2d832f3646fa2b8016cba4258e343d24dfa8876902422da4e31827d6e07b7eec6a58999e1e6bbe8e80d9c9cd4ea85cdf27b92be2e1c4bdfcd3d99712dd44f1a8de6d5a03c1", 0x93, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000840)={r4, r5, r6}, &(0x7f0000000880)=""/167, 0xa7, &(0x7f0000000a40)={&(0x7f0000000940)={'sha512_mb\x00'}, &(0x7f0000000980)="16f826f702f2ad9b093ef6e14e1939dd76fc67ea4da2aeec4e59435ee31584393997d34b97e640f6a3ee2d2113d22bff44ae18f74c8d9c46702261af3f408a5082d15f75e565ae1e05436c72714bf9e05e9610e54345dfa3db84237dfed326693f3eb7b27a77c093c06b0ddae3a2241dd1dbdb86d178d95e530e0c3d8c6b662b63b56f0b39971a2139a04feaf1713e55c23c", 0x92}) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') write$P9_RWSTAT(r3, &(0x7f00000000c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)={r2, r0, 0x4c1d, 0xb35, &(0x7f0000000380)="af5fbfe3f7d85145081bcb94f4f6effaab09eec34627c638cfd5a28aee4e293f41586dec0f2785b6a1e1b2c000b5fffeb265fa72ef7cb13dd2114c466d0965b27dc91cbeec8d5422ca9afa61115bf203b5f7f16f5b4d72edd155cb2484370d3f28b5ef42283226fb6ef7cb2e285cf5e8d8545f1bb7db41b8db631c6ecdcb7b530edc867285f4e54459c0aa9175573877622efecaca5d42c4fd21b1198ba739b566abbbff3d63e012c674f0deb7524cdfd0dc06cada", 0x0, 0x0, 0x8, 0x9, 0x401, 0x101, 0x5, "eee175788da7639627024ae62d2a81f73f511fc6f21df2257fa8825da659cec5624915c75f8a73a4b4c173caf03d204e3f2efb638204b183aa123954c68cec3a0d68e73c118d2a2a9f87ed41e04be4a8b11e058bfbddd1ca9811883c4c7754805885da52948b26d57f5f79eabecddeb48be23057062f074c7319b31b04f3aba0c2a2c60fcabf69fc89620eedf3116e78a535aba4c8cee6b6aa84c18ce2b93f406c6679dcc1fd6838e7a73bfdd2a805"}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r7 = getpgrp(0x0) ptrace$cont(0x18, r7, 0x6, 0x4) 15:17:41 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:41 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000480)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 15:17:41 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xedc000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:41 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@pptp={0x18, 0x2, {0x0, @broadcast}}, {&(0x7f0000000000)=""/52, 0x34}, &(0x7f0000000040)}, 0xa0) 15:17:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88470000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 368.227562] IPVS: ftp: loaded support on port[0] = 21 15:17:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x1000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x2000080, &(0x7f0000000240)="50262426a4a25ab09f5180ddc2bb285337340ea0939c47b41abf31bed6733a0e460924ef21813be405f6a15f7b75a64cbefd2c9d670767f1e41cc764cadacca49e288c4350ae1abcda9d62ab82be2e3ddd1a0ac7cd5d5e2ae44a33771fb15a27a8e1c728212cca4fb495d9") ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000002c0)={0x1, r0}) 15:17:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') uselib(&(0x7f00000000c0)='./file0\x00') [ 368.335534] IPVS: ftp: loaded support on port[0] = 21 15:17:41 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x23, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 368.390466] IPVS: ftp: loaded support on port[0] = 21 15:17:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x6}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x2b4, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) r4 = socket$unix(0x1, 0x1, 0x0) dup2(r4, r3) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000, 0x80) setsockopt$inet6_mreq(r5, 0x29, 0x1d, &(0x7f0000000180)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, 0x14) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000004ffc)=0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6c851494, 0x200) [ 368.829874] IPVS: ftp: loaded support on port[0] = 21 [ 368.840063] attempt to access beyond end of device [ 368.845199] loop3: rw=4096, want=136, limit=1 [ 368.849789] gfs2: error 10 reading superblock [ 368.907413] attempt to access beyond end of device [ 368.911598] IPVS: ftp: loaded support on port[0] = 21 [ 368.912526] loop3: rw=4096, want=136, limit=1 [ 368.912540] gfs2: error 10 reading superblock 15:17:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x21}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400881, 0x0) recvfrom$unix(r0, &(0x7f0000000400)=""/166, 0xffffffffffffffbd, 0x10004, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0xffffffffffffffc9) creat(&(0x7f0000000700)='./bus\x00', 0x0) 15:17:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xa0000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8035000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 369.301672] IPVS: ftp: loaded support on port[0] = 21 [ 369.321638] IPVS: ftp: loaded support on port[0] = 21 15:17:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xc0, 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000000140)=0xde, 0x4) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x9000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:42 executing program 5 (fault-call:1 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 369.438510] IPVS: ftp: loaded support on port[0] = 21 [ 369.447764] IPVS: ftp: loaded support on port[0] = 21 [ 369.526050] 9pnet: p9_fd_create_unix (25623): problem connecting socket: éq‰Y’3aK: -111 15:17:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x4305000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 369.655041] FAULT_INJECTION: forcing a failure. [ 369.655041] name failslab, interval 1, probability 0, space 0, times 0 [ 369.666852] CPU: 0 PID: 25633 Comm: syz-executor5 Not tainted 4.18.0+ #190 [ 369.673902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.683264] Call Trace: [ 369.685880] dump_stack+0x1c9/0x2b4 [ 369.689536] ? dump_stack_print_info.cold.2+0x52/0x52 [ 369.694776] should_fail.cold.4+0xa/0x11 [ 369.698866] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 369.704000] ? print_usage_bug+0xc0/0xc0 [ 369.708091] ? graph_lock+0x170/0x170 [ 369.711923] ? check_noncircular+0x20/0x20 [ 369.716179] ? perf_trace_lock+0xde/0x920 [ 369.720353] ? print_usage_bug+0xc0/0xc0 [ 369.724446] ? __lock_is_held+0xb5/0x140 [ 369.728536] ? print_usage_bug+0xc0/0xc0 [ 369.732618] ? check_same_owner+0x340/0x340 [ 369.736966] ? rcu_note_context_switch+0x730/0x730 [ 369.741929] __should_failslab+0x124/0x180 [ 369.746181] should_failslab+0x9/0x14 [ 369.750009] kmem_cache_alloc+0x2af/0x760 [ 369.754191] jbd2__journal_start+0x1e7/0xa80 [ 369.758629] ? jbd2_write_access_granted.part.8+0x430/0x430 [ 369.764371] ? rcu_note_context_switch+0x730/0x730 [ 369.769325] ? ext4_setattr+0x28b0/0x28b0 [ 369.773526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.779095] ? ext4_setattr+0x28b0/0x28b0 [ 369.783265] __ext4_journal_start_sb+0x182/0x600 [ 369.788057] ? ext4_dirty_inode+0x62/0xc0 [ 369.792238] ? ext4_journal_abort_handle.isra.4+0x260/0x260 [ 369.797954] ? __lock_is_held+0xb5/0x140 [ 369.802040] ? ext4_setattr+0x28b0/0x28b0 [ 369.806222] ext4_dirty_inode+0x62/0xc0 [ 369.810208] __mark_inode_dirty+0x825/0x1550 [ 369.814614] ? __inode_attach_wb+0x13d0/0x13d0 [ 369.819220] ? print_usage_bug+0xc0/0xc0 [ 369.823308] ? lock_downgrade+0x8f0/0x8f0 [ 369.827464] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 369.832321] ? mark_held_locks+0xc9/0x160 [ 369.836494] ? ktime_get_coarse_real_ts64+0x288/0x3a0 [ 369.841691] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 369.846729] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 369.851772] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 369.856978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.862534] ? timespec64_trunc+0xea/0x180 [ 369.866781] ? inode_init_owner+0x340/0x340 [ 369.871125] generic_update_time+0x26a/0x450 [ 369.875546] ? dentry_needs_remove_privs.part.25+0x70/0x70 [ 369.881172] ? lock_acquire+0x1e4/0x540 [ 369.885172] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.890708] ? mnt_clone_write+0xed/0x130 [ 369.894877] ? dentry_needs_remove_privs.part.25+0x70/0x70 [ 369.900499] file_update_time+0x390/0x640 [ 369.904655] ? current_time+0x1b0/0x1b0 [ 369.908640] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 369.913660] ? generic_write_checks+0x385/0x5d0 [ 369.918344] ? page_endio+0x630/0x630 [ 369.922159] ? ext4_file_write_iter+0x2a1/0x1450 [ 369.926929] __generic_file_write_iter+0x1dc/0x630 [ 369.931870] ext4_file_write_iter+0x390/0x1450 [ 369.936523] ? ext4_file_mmap+0x410/0x410 [ 369.940698] ? __fget+0x4d5/0x740 [ 369.944177] ? perf_trace_lock+0x920/0x920 [ 369.948425] ? ksys_dup3+0x690/0x690 [ 369.952156] ? save_stack+0xa9/0xd0 [ 369.955791] ? graph_lock+0x170/0x170 [ 369.959603] ? proc_fail_nth_write+0x9e/0x210 [ 369.964094] ? kasan_check_read+0x11/0x20 [ 369.968233] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.973980] ? iov_iter_init+0xc9/0x1f0 [ 369.978021] __vfs_write+0x6af/0x9d0 [ 369.981764] ? kernel_read+0x120/0x120 [ 369.985677] ? __lock_is_held+0xb5/0x140 [ 369.989790] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 369.995330] ? __sb_start_write+0x17f/0x300 [ 369.999658] vfs_write+0x1f8/0x560 [ 370.003211] ksys_write+0x101/0x260 [ 370.006842] ? __ia32_sys_read+0xb0/0xb0 [ 370.010895] __x64_sys_write+0x73/0xb0 [ 370.014788] do_syscall_64+0x1b9/0x820 [ 370.018689] ? finish_task_switch+0x1d3/0x870 [ 370.023183] ? syscall_return_slowpath+0x5e0/0x5e0 [ 370.028115] ? syscall_return_slowpath+0x31d/0x5e0 [ 370.033062] ? __switch_to_asm+0x34/0x70 [ 370.037139] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 370.042543] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 370.047404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.052611] RIP: 0033:0x457089 [ 370.055821] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.074746] RSP: 002b:00007ff789a58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.082470] RAX: ffffffffffffffda RBX: 00007ff789a596d4 RCX: 0000000000457089 [ 370.089762] RDX: 000000000000fff9 RSI: 00000000200001c0 RDI: 0000000000000003 [ 370.097032] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 370.104298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 370.111570] R13: 00000000004d76a0 R14: 00000000004ca731 R15: 0000000000000000 15:17:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:43 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x3000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:43 executing program 5 (fault-call:1 fault-nth:1): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:43 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) r3 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x20, 0x8, 0x2, 0x8, r3, 0x1}, 0x2c) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0x4}}}]}, 0x34}}, 0x0) 15:17:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8906000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 370.473605] IPVS: ftp: loaded support on port[0] = 21 [ 370.514487] FAULT_INJECTION: forcing a failure. [ 370.514487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 370.526451] CPU: 0 PID: 25664 Comm: syz-executor5 Not tainted 4.18.0+ #190 [ 370.533494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.535514] IPVS: ftp: loaded support on port[0] = 21 [ 370.542847] Call Trace: [ 370.542947] dump_stack+0x1c9/0x2b4 [ 370.542973] ? dump_stack_print_info.cold.2+0x52/0x52 [ 370.555405] 9pnet: p9_fd_create_unix (25666): problem connecting socket: éq‰Y’3aK: -111 [ 370.559560] ? kasan_check_write+0x14/0x20 [ 370.559576] ? __switch_to_asm+0x40/0x70 [ 370.559608] should_fail.cold.4+0xa/0x11 [ 370.559625] ? __switch_to_asm+0x40/0x70 [ 370.584367] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 370.589483] ? __switch_to_asm+0x34/0x70 [ 370.593559] ? __switch_to_asm+0x40/0x70 [ 370.597636] ? __switch_to_asm+0x34/0x70 [ 370.601708] ? __switch_to_asm+0x40/0x70 [ 370.605798] ? __switch_to_asm+0x34/0x70 [ 370.609874] ? __switch_to_asm+0x40/0x70 [ 370.613946] ? __schedule+0x884/0x1ec0 [ 370.617852] ? __sched_text_start+0x8/0x8 [ 370.622022] ? __lock_is_held+0xb5/0x140 [ 370.626118] ? check_same_owner+0x340/0x340 [ 370.630479] __alloc_pages_nodemask+0x36e/0xdb0 [ 370.635165] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 370.640205] ? kernel_text_address+0x79/0xf0 [ 370.644619] ? __kernel_text_address+0xd/0x40 [ 370.649127] ? unwind_get_return_address+0x61/0xa0 [ 370.654073] ? __save_stack_trace+0x8d/0xf0 [ 370.658430] ? save_stack+0xa9/0xd0 [ 370.662063] ? save_stack+0x43/0xd0 [ 370.665692] ? __kasan_slab_free+0x11a/0x170 [ 370.670124] ? kasan_slab_free+0xe/0x10 [ 370.674109] ? kmem_cache_free+0x86/0x2d0 [ 370.678266] ? jbd2_journal_stop+0x449/0x15d0 [ 370.682772] ? __ext4_journal_stop+0xde/0x1f0 [ 370.687267] ? ext4_dirty_inode+0xab/0xc0 [ 370.691430] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 370.696979] alloc_pages_current+0x10c/0x210 [ 370.701400] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.706798] __page_cache_alloc+0x398/0x5e0 [ 370.711131] ? print_usage_bug+0xc0/0xc0 [ 370.715209] ? kasan_check_write+0x14/0x20 [ 370.719450] ? __filemap_set_wb_err+0x3b0/0x3b0 [ 370.724124] ? trace_hardirqs_off+0xd/0x10 [ 370.728368] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 370.733483] pagecache_get_page+0x3a1/0xe40 [ 370.737820] ? find_get_pages_contig+0x1650/0x1650 [ 370.742772] ? jbd2_journal_stop+0x449/0x15d0 [ 370.747293] ? jbd2_journal_stop+0x449/0x15d0 [ 370.751798] ? rcu_read_lock_sched_held+0x108/0x120 [ 370.756825] ? kmem_cache_free+0x25c/0x2d0 [ 370.761071] ? jbd2_journal_stop+0x235/0x15d0 [ 370.765582] ? jbd2_journal_put_journal_head+0x3dd/0x56e [ 370.771056] ? jbd2_buffer_abort_trigger+0x90/0x90 [ 370.776011] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.781574] ? graph_lock+0x170/0x170 [ 370.785396] ? ext4_mark_inode_dirty+0x24e/0xb50 [ 370.790162] ? ext4_dirty_inode+0x97/0xc0 [ 370.794326] ? __lock_is_held+0xb5/0x140 [ 370.798405] grab_cache_page_write_begin+0x75/0xa0 [ 370.803357] ext4_da_write_begin+0x38c/0x1280 [ 370.807872] ? __lock_is_held+0xb5/0x140 [ 370.811955] ? ext4_write_begin+0x1820/0x1820 [ 370.816471] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 370.821495] ? __mark_inode_dirty+0x495/0x1550 [ 370.826107] ? __inode_attach_wb+0x13d0/0x13d0 [ 370.830704] ? print_usage_bug+0xc0/0xc0 [ 370.834796] ? lock_downgrade+0x8f0/0x8f0 [ 370.838960] ? mark_held_locks+0xc9/0x160 [ 370.843134] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.848676] ? iov_iter_fault_in_readable+0x23d/0x460 [ 370.853872] ? copy_page_from_iter+0x890/0x890 [ 370.858460] ? write_comp_data+0x60/0x70 [ 370.862542] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 370.867750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.873309] ? timespec64_trunc+0xea/0x180 [ 370.877571] ? inode_init_owner+0x340/0x340 [ 370.881917] generic_perform_write+0x3ae/0x6c0 [ 370.886511] ? generic_update_time+0x26a/0x450 [ 370.891155] ? add_page_wait_queue+0x2c0/0x2c0 [ 370.895752] ? file_update_time+0xe4/0x640 [ 370.900004] ? current_time+0x1b0/0x1b0 [ 370.903996] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 370.909025] ? generic_write_checks+0x385/0x5d0 [ 370.913701] ? page_endio+0x630/0x630 [ 370.917520] ? ext4_file_write_iter+0x2a1/0x1450 [ 370.922291] __generic_file_write_iter+0x26e/0x630 [ 370.927247] ext4_file_write_iter+0x390/0x1450 [ 370.931850] ? ext4_file_mmap+0x410/0x410 [ 370.936008] ? __fget+0x4d5/0x740 [ 370.939478] ? ksys_dup3+0x690/0x690 [ 370.943212] ? save_stack+0xa9/0xd0 [ 370.946851] ? graph_lock+0x170/0x170 [ 370.950666] ? proc_fail_nth_write+0x9e/0x210 [ 370.955174] ? proc_cwd_link+0x1d0/0x1d0 [ 370.959272] ? kasan_check_read+0x11/0x20 [ 370.963434] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.968989] ? iov_iter_init+0xc9/0x1f0 [ 370.972972] __vfs_write+0x6af/0x9d0 [ 370.976729] ? kernel_read+0x120/0x120 [ 370.980629] ? __lock_is_held+0xb5/0x140 [ 370.984713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 370.990273] ? __sb_start_write+0x17f/0x300 [ 370.994616] vfs_write+0x1f8/0x560 [ 370.998175] ksys_write+0x101/0x260 [ 371.001811] ? __ia32_sys_read+0xb0/0xb0 [ 371.005890] __x64_sys_write+0x73/0xb0 [ 371.009789] do_syscall_64+0x1b9/0x820 [ 371.013679] ? finish_task_switch+0x1d3/0x870 [ 371.018203] ? syscall_return_slowpath+0x5e0/0x5e0 [ 371.023149] ? syscall_return_slowpath+0x31d/0x5e0 [ 371.028085] ? __switch_to_asm+0x34/0x70 [ 371.032151] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 371.037538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.042414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.047615] RIP: 0033:0x457089 15:17:44 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000300)='./file0\x00') r1 = accept4(r0, &(0x7f0000000200)=@can, &(0x7f00000000c0)=0x80, 0x0) accept(r1, &(0x7f0000000280)=@ipx, &(0x7f0000000140)=0x80) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 371.050816] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.069726] RSP: 002b:00007ff789a58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.077688] RAX: ffffffffffffffda RBX: 00007ff789a596d4 RCX: 0000000000457089 [ 371.084965] RDX: 000000000000fff9 RSI: 00000000200001c0 RDI: 0000000000000003 [ 371.092242] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 371.099514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 371.106781] R13: 00000000004d76a0 R14: 00000000004ca731 R15: 0000000000000001 15:17:44 executing program 5 (fault-call:1 fault-nth:2): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:44 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x8f5, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8848000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 371.247010] IPVS: ftp: loaded support on port[0] = 21 15:17:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80, 0x0) ioctl$KDDELIO(r6, 0x4b35, 0x80) nanosleep(&(0x7f0000000080)={r4, r5+10000000}, &(0x7f0000000100)) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ustat(0x0, &(0x7f0000000000)) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047453, &(0x7f0000000180)) prctl$setmm(0x23, 0x2, &(0x7f0000a9f000/0x3000)=nil) [ 371.477752] FAULT_INJECTION: forcing a failure. [ 371.477752] name failslab, interval 1, probability 0, space 0, times 0 [ 371.489131] CPU: 1 PID: 25689 Comm: syz-executor5 Not tainted 4.18.0+ #190 [ 371.496169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.505541] Call Trace: [ 371.508153] dump_stack+0x1c9/0x2b4 [ 371.511813] ? dump_stack_print_info.cold.2+0x52/0x52 [ 371.517036] should_fail.cold.4+0xa/0x11 [ 371.521094] ? unwind_get_return_address+0x61/0xa0 [ 371.526020] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 371.531158] ? add_to_page_cache_lru+0x2a3/0x5e0 [ 371.535942] ? graph_lock+0x170/0x170 [ 371.539791] ? add_to_page_cache_locked+0x40/0x40 [ 371.544664] ? jbd2_journal_stop+0x449/0x15d0 [ 371.549179] ? __ext4_journal_stop+0xde/0x1f0 [ 371.550461] attempt to access beyond end of device [ 371.553688] ? ext4_dirty_inode+0xab/0xc0 [ 371.553738] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 371.553781] ? __lock_is_held+0xb5/0x140 [ 371.558732] loop3: rw=4096, want=136, limit=4 [ 371.562846] ? __page_cache_alloc+0x191/0x5e0 [ 371.562877] ? check_same_owner+0x340/0x340 [ 371.562897] ? rcu_note_context_switch+0x730/0x730 [ 371.568450] gfs2: error 10 reading superblock [ 371.572481] ? pagecache_get_page+0x2dd/0xe40 [ 371.572518] __should_failslab+0x124/0x180 [ 371.603984] should_failslab+0x9/0x14 [ 371.607812] kmem_cache_alloc+0x2af/0x760 [ 371.611985] jbd2__journal_start+0x1e7/0xa80 [ 371.616430] ? jbd2_write_access_granted.part.8+0x430/0x430 [ 371.622147] ? rcu_note_context_switch+0x730/0x730 [ 371.627109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.632664] __ext4_journal_start_sb+0x182/0x600 [ 371.637439] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 371.643001] ? ext4_da_write_begin+0x5c6/0x1280 [ 371.647679] ? ext4_journal_abort_handle.isra.4+0x260/0x260 [ 371.653403] ? set_page_dirty_lock+0x1a0/0x1a0 [ 371.658003] ? __lock_is_held+0xb5/0x140 [ 371.662090] ext4_da_write_begin+0x5c6/0x1280 [ 371.666653] ? __lock_is_held+0xb5/0x140 [ 371.670732] ? ext4_write_begin+0x1820/0x1820 [ 371.675244] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 371.680271] ? __mark_inode_dirty+0x495/0x1550 [ 371.684874] ? __inode_attach_wb+0x13d0/0x13d0 [ 371.689463] ? print_usage_bug+0xc0/0xc0 [ 371.693575] ? lock_downgrade+0x8f0/0x8f0 [ 371.697738] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 371.702615] ? mark_held_locks+0xc9/0x160 [ 371.706787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.712334] ? iov_iter_fault_in_readable+0x23d/0x460 [ 371.717542] ? copy_page_from_iter+0x890/0x890 [ 371.722134] ? write_comp_data+0x60/0x70 [ 371.726205] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 371.731444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.736992] ? timespec64_trunc+0xea/0x180 [ 371.741237] ? inode_init_owner+0x340/0x340 [ 371.745582] generic_perform_write+0x3ae/0x6c0 [ 371.750186] ? generic_update_time+0x26a/0x450 [ 371.754794] ? add_page_wait_queue+0x2c0/0x2c0 [ 371.759388] ? file_update_time+0xe4/0x640 [ 371.763672] ? current_time+0x1b0/0x1b0 [ 371.767659] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 371.772685] ? generic_write_checks+0x385/0x5d0 [ 371.777359] ? page_endio+0x630/0x630 [ 371.781172] ? ext4_file_write_iter+0x2a1/0x1450 [ 371.785942] __generic_file_write_iter+0x26e/0x630 [ 371.790889] ext4_file_write_iter+0x390/0x1450 [ 371.795496] ? ext4_file_mmap+0x410/0x410 [ 371.799647] ? __fget+0x4d5/0x740 [ 371.803126] ? perf_trace_lock+0x920/0x920 [ 371.807382] ? ksys_dup3+0x690/0x690 [ 371.811105] ? save_stack+0xa9/0xd0 [ 371.814756] ? graph_lock+0x170/0x170 [ 371.818568] ? proc_fail_nth_write+0x9e/0x210 [ 371.823072] ? proc_cwd_link+0x1d0/0x1d0 [ 371.827145] ? kasan_check_read+0x11/0x20 [ 371.831304] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.836852] ? iov_iter_init+0xc9/0x1f0 [ 371.840853] __vfs_write+0x6af/0x9d0 [ 371.844596] ? kernel_read+0x120/0x120 [ 371.848506] ? __lock_is_held+0xb5/0x140 [ 371.852598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 371.858150] ? __sb_start_write+0x17f/0x300 [ 371.862491] vfs_write+0x1f8/0x560 [ 371.866060] ksys_write+0x101/0x260 [ 371.869700] ? __ia32_sys_read+0xb0/0xb0 [ 371.873792] __x64_sys_write+0x73/0xb0 [ 371.877688] do_syscall_64+0x1b9/0x820 [ 371.881592] ? finish_task_switch+0x1d3/0x870 [ 371.886097] ? syscall_return_slowpath+0x5e0/0x5e0 [ 371.891035] ? syscall_return_slowpath+0x31d/0x5e0 [ 371.895980] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 371.901382] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 371.906241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.911438] RIP: 0033:0x457089 [ 371.914639] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.933549] RSP: 002b:00007ff789a58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.941265] RAX: ffffffffffffffda RBX: 00007ff789a596d4 RCX: 0000000000457089 [ 371.948552] RDX: 000000000000fff9 RSI: 00000000200001c0 RDI: 0000000000000003 [ 371.955831] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 371.963104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 371.970630] R13: 00000000004d76a0 R14: 00000000004ca731 R15: 0000000000000002 15:17:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x80350000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 372.065240] attempt to access beyond end of device [ 372.070550] loop3: rw=4096, want=136, limit=4 [ 372.075133] gfs2: error 10 reading superblock 15:17:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000380)='./bus\x00', &(0x7f0000000340)='./bus\x00') 15:17:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xf0ffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:45 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x6c000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x2) accept$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={r1, @rand_addr=0x10001, @local}, 0xc) prctl$setfpexc(0xc, 0x40000) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x8) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:48 executing program 5 (fault-call:1 fault-nth:3): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:48 executing program 6: syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7b42, 0x800) sendmsg$nl_crypto(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@alg={0x128, 0x10, 0x8, 0x70bd26, 0x25dfdbfb, {{'gcm_base(lrw-serpent-avx2,cbcmac(fcrypt-generic))\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x3bad}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0xfffffffffffffff9}, {0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x8004) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x21, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}}, 0x0) 15:17:48 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xc00, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x43050000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 375.147924] FAULT_INJECTION: forcing a failure. [ 375.147924] name failslab, interval 1, probability 0, space 0, times 0 [ 375.150425] IPVS: ftp: loaded support on port[0] = 21 [ 375.159799] CPU: 0 PID: 25744 Comm: syz-executor5 Not tainted 4.18.0+ #190 [ 375.172085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.181460] Call Trace: [ 375.184089] dump_stack+0x1c9/0x2b4 [ 375.187745] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.192965] should_fail.cold.4+0xa/0x11 [ 375.197060] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.202182] ? graph_lock+0x170/0x170 [ 375.205996] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 375.211023] ? graph_lock+0x170/0x170 [ 375.214847] ? print_usage_bug+0xc0/0xc0 [ 375.218929] ? graph_lock+0x170/0x170 [ 375.222750] ? find_held_lock+0x36/0x1c0 [ 375.226835] ? __lock_is_held+0xb5/0x140 [ 375.230918] ? check_same_owner+0x340/0x340 [ 375.235247] ? rcu_note_context_switch+0x730/0x730 [ 375.240213] __should_failslab+0x124/0x180 [ 375.244459] should_failslab+0x9/0x14 [ 375.248268] __kmalloc+0x2c8/0x760 [ 375.251842] ? ext4_find_extent+0x775/0xa10 [ 375.256172] ext4_find_extent+0x775/0xa10 [ 375.260421] ext4_ext_map_blocks+0x293/0x62e0 [ 375.264925] ? save_stack+0x43/0xd0 [ 375.268564] ? create_empty_buffers+0xd8/0x970 [ 375.273242] ? graph_lock+0x170/0x170 [ 375.277066] ? __generic_file_write_iter+0x26e/0x630 [ 375.282181] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 375.287222] ? perf_trace_lock+0xde/0x920 [ 375.291383] ? find_held_lock+0x36/0x1c0 [ 375.295469] ? graph_lock+0x170/0x170 [ 375.299278] ? graph_lock+0x170/0x170 [ 375.303110] ? lock_downgrade+0x8f0/0x8f0 [ 375.307283] ? lock_acquire+0x1e4/0x540 [ 375.311271] ? ext4_da_get_block_prep+0x84b/0x1b70 [ 375.316216] ? lock_release+0xa30/0xa30 [ 375.320194] ? check_same_owner+0x340/0x340 [ 375.324521] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.330061] ? ext4_es_lookup_extent+0x465/0xde0 [ 375.334826] ? rcu_note_context_switch+0x730/0x730 [ 375.339777] ? down_read+0xb5/0x1d0 [ 375.343423] ? ext4_da_get_block_prep+0x84b/0x1b70 [ 375.348381] ? __down_interruptible+0x700/0x700 [ 375.353064] ? create_empty_buffers+0x642/0x970 [ 375.357760] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.363324] ext4_da_get_block_prep+0x10c1/0x1b70 [ 375.368174] ? attach_nobh_buffers+0x630/0x630 [ 375.372779] ? ext4_inode_attach_jinode.part.67+0x150/0x150 [ 375.378500] ? __page_cache_alloc+0x191/0x5e0 [ 375.383018] ? graph_lock+0x170/0x170 [ 375.386866] ? __lock_is_held+0xb5/0x140 [ 375.390953] ext4_block_write_begin+0x5e2/0x1580 [ 375.395741] ? ext4_inode_attach_jinode.part.67+0x150/0x150 [ 375.401473] ? __check_block_validity.constprop.78+0x210/0x210 [ 375.407449] ? jbd2_write_access_granted.part.8+0x430/0x430 [ 375.413175] ? __lock_is_held+0xb5/0x140 [ 375.417250] ? __ext4_journal_start_sb+0x18a/0x600 [ 375.422193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.427741] ? wait_for_stable_page+0x18e/0x360 [ 375.432437] ? set_page_dirty_lock+0x1a0/0x1a0 [ 375.437037] ext4_da_write_begin+0x410/0x1280 [ 375.441550] ? ext4_write_begin+0x1820/0x1820 [ 375.446070] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 375.451105] ? __mark_inode_dirty+0x495/0x1550 [ 375.455701] ? __inode_attach_wb+0x13d0/0x13d0 [ 375.460296] ? print_usage_bug+0xc0/0xc0 [ 375.464391] ? lock_downgrade+0x8f0/0x8f0 [ 375.468561] ? mark_held_locks+0xc9/0x160 [ 375.472732] ? iov_iter_fault_in_readable+0x23d/0x460 [ 375.477957] ? copy_page_from_iter+0x890/0x890 [ 375.482556] ? write_comp_data+0x60/0x70 [ 375.486621] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 375.491817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.497374] ? timespec64_trunc+0xea/0x180 [ 375.501620] ? inode_init_owner+0x340/0x340 [ 375.505971] generic_perform_write+0x3ae/0x6c0 [ 375.510578] ? generic_update_time+0x26a/0x450 [ 375.515182] ? add_page_wait_queue+0x2c0/0x2c0 [ 375.519770] ? file_update_time+0xe4/0x640 [ 375.524022] ? current_time+0x1b0/0x1b0 [ 375.528017] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 375.533043] ? generic_write_checks+0x385/0x5d0 [ 375.537720] ? page_endio+0x630/0x630 [ 375.541582] ? ext4_file_write_iter+0x2a1/0x1450 [ 375.546365] __generic_file_write_iter+0x26e/0x630 [ 375.551312] ext4_file_write_iter+0x390/0x1450 [ 375.555934] ? ext4_file_mmap+0x410/0x410 [ 375.560085] ? __fget+0x4d5/0x740 [ 375.563549] ? ksys_dup3+0x690/0x690 [ 375.567269] ? save_stack+0xa9/0xd0 [ 375.570925] ? graph_lock+0x170/0x170 [ 375.574744] ? proc_fail_nth_write+0x9e/0x210 [ 375.579247] ? kasan_check_read+0x11/0x20 [ 375.583406] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.588955] ? iov_iter_init+0xc9/0x1f0 [ 375.592942] __vfs_write+0x6af/0x9d0 [ 375.596665] ? kernel_read+0x120/0x120 [ 375.600560] ? __lock_is_held+0xb5/0x140 [ 375.604649] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.610194] ? __sb_start_write+0x17f/0x300 [ 375.614525] vfs_write+0x1f8/0x560 [ 375.618076] ksys_write+0x101/0x260 [ 375.621709] ? __ia32_sys_read+0xb0/0xb0 [ 375.625795] __x64_sys_write+0x73/0xb0 [ 375.629689] do_syscall_64+0x1b9/0x820 [ 375.633579] ? finish_task_switch+0x1d3/0x870 [ 375.638093] ? syscall_return_slowpath+0x5e0/0x5e0 [ 375.643031] ? syscall_return_slowpath+0x31d/0x5e0 [ 375.647969] ? __switch_to_asm+0x34/0x70 [ 375.652081] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 375.657469] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.662359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.667563] RIP: 0033:0x457089 [ 375.670773] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.689675] RSP: 002b:00007ff789a58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.697386] RAX: ffffffffffffffda RBX: 00007ff789a596d4 RCX: 0000000000457089 [ 375.704658] RDX: 000000000000fff9 RSI: 00000000200001c0 RDI: 0000000000000003 [ 375.711924] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 375.719195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 375.726466] R13: 00000000004d76a0 R14: 00000000004ca731 R15: 0000000000000003 [ 375.745704] 9pnet: p9_fd_create_unix (25751): problem connecting socket: éq‰Y’3aK: -111 [ 375.756814] attempt to access beyond end of device [ 375.761888] loop3: rw=4096, want=136, limit=6 [ 375.766536] gfs2: error 10 reading superblock 15:17:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xd000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:49 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/con.track\x00', 0x2, 0x0) sendmsg$rds(r0, &(0x7f0000001a00)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)=""/41, 0x29}, {&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/206, 0xce}], 0x4, &(0x7f0000001840)=[@mask_fadd={0x58, 0x114, 0x8, {{0x94b455f, 0x80000001}, &(0x7f0000000280)=0x8000, &(0x7f00000002c0), 0x7, 0x8, 0xfbe, 0x2, 0x1, 0x7}}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0x3}, &(0x7f0000000300)=0xfff, &(0x7f0000000340)=0x7, 0x1ff, 0xb70, 0x8001, 0x0, 0x0, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x7fff}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x9baa}, {&(0x7f0000000380)=""/4096, 0x1000}, &(0x7f00000016c0)=[{&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001480)=""/168, 0xa8}, {&(0x7f0000001540)=""/121, 0x79}, {&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/38, 0x26}], 0x5, 0x6b, 0x9}}, @mask_fadd={0x58, 0x114, 0x8, {{0x68, 0x7}, &(0x7f0000001740)=0x80, &(0x7f0000001780)=0x6, 0x8, 0x80000001, 0x5, 0x5, 0x10, 0x9}}, @mask_cswp={0x58, 0x114, 0x9, {{0x7, 0xa1}, &(0x7f00000017c0)=0x868a, &(0x7f0000001800)=0x326, 0xa3c3, 0x4, 0x40, 0x8, 0x61, 0x9}}], 0x1c0, 0x4}, 0x810) 15:17:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:49 executing program 5 (fault-call:1 fault-nth:4): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$P9_RSTATFS(r0, &(0x7f0000000200)={0x43, 0x9, 0x2, {0x4, 0x8000, 0x7fff, 0x5, 0x5, 0x7, 0x14fbc556, 0x10000, 0x2}}, 0x43) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 375.854644] attempt to access beyond end of device [ 375.859715] loop3: rw=4096, want=136, limit=6 [ 375.864306] gfs2: error 10 reading superblock 15:17:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffd, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 375.920903] 9pnet: p9_fd_create_unix (25750): problem connecting socket: éq‰Y’3aK: -111 [ 375.929567] IPVS: ftp: loaded support on port[0] = 21 [ 376.162754] FAULT_INJECTION: forcing a failure. [ 376.162754] name failslab, interval 1, probability 0, space 0, times 0 [ 376.174516] CPU: 0 PID: 25779 Comm: syz-executor5 Not tainted 4.18.0+ #190 [ 376.181555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.190918] Call Trace: [ 376.193533] dump_stack+0x1c9/0x2b4 [ 376.197181] ? dump_stack_print_info.cold.2+0x52/0x52 [ 376.202428] should_fail.cold.4+0xa/0x11 [ 376.206532] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 376.211654] ? trace_hardirqs_on+0x10/0x10 [ 376.215918] ? find_held_lock+0x36/0x1c0 [ 376.220029] ? perf_trace_lock+0xde/0x920 [ 376.224208] ? zap_class+0x740/0x740 [ 376.227954] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 376.232655] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 376.237346] ? graph_lock+0x170/0x170 [ 376.241175] ? is_bpf_text_address+0xd7/0x170 [ 376.245713] ? kernel_text_address+0x79/0xf0 [ 376.250163] __should_failslab+0x124/0x180 [ 376.254420] should_failslab+0x9/0x14 [ 376.258233] kmem_cache_alloc+0x47/0x760 [ 376.262319] ? find_held_lock+0x36/0x1c0 [ 376.266401] ? __es_tree_search.isra.12+0x1ba/0x220 [ 376.271447] __es_insert_extent+0x305/0x1140 [ 376.275928] ? ext4_es_insert_extent+0x21c/0x7e0 [ 376.280696] ? ext4_es_free_extent+0x820/0x820 [ 376.285297] ? lock_release+0xa30/0xa30 [ 376.289306] ? __lock_is_held+0xb5/0x140 [ 376.293388] ? kasan_check_write+0x14/0x20 [ 376.297641] ? do_raw_write_lock+0xbd/0x1b0 [ 376.302019] ext4_es_insert_extent+0x2ea/0x7e0 [ 376.306675] ? ext4_es_find_delayed_extent_range+0xd80/0xd80 [ 376.312505] ? __lock_is_held+0xb5/0x140 [ 376.316597] ? rcu_read_lock_sched_held+0x108/0x120 [ 376.321636] ? __kmalloc+0x5f9/0x760 [ 376.325381] ext4_ext_put_gap_in_cache+0x158/0x1f0 [ 376.330323] ? ext4_zeroout_es+0x160/0x160 [ 376.334593] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 376.340173] ext4_ext_map_blocks+0x2453/0x62e0 [ 376.344786] ? create_empty_buffers+0xd8/0x970 [ 376.349384] ? graph_lock+0x170/0x170 [ 376.353202] ? ext4_find_delalloc_cluster+0xc0/0xc0 [ 376.358241] ? perf_trace_lock+0xde/0x920 [ 376.362415] ? find_held_lock+0x36/0x1c0 [ 376.366501] ? graph_lock+0x170/0x170 [ 376.370312] ? graph_lock+0x170/0x170 [ 376.374133] ? lock_downgrade+0x8f0/0x8f0 [ 376.378311] ? lock_acquire+0x1e4/0x540 [ 376.382316] ? ext4_da_get_block_prep+0x84b/0x1b70 [ 376.387270] ? lock_release+0xa30/0xa30 [ 376.391253] ? check_same_owner+0x340/0x340 [ 376.395583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.401124] ? ext4_es_lookup_extent+0x465/0xde0 [ 376.405886] ? rcu_note_context_switch+0x730/0x730 [ 376.410830] ? down_read+0xb5/0x1d0 15:17:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8060000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:49 executing program 6: listxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/141, 0x8d) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x4000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x180000000) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x8001) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000300)={0x0, @loopback, 0x4e24, 0x2, 'lc\x00', 0x20, 0x3, 0x55}, 0x2c) readv(r1, &(0x7f0000008fe0)=[{&(0x7f0000011fff)=""/1, 0x1}], 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/139, &(0x7f0000000100)=""/88, &(0x7f0000000180)=""/45, 0x5000}) [ 376.414505] ? ext4_da_get_block_prep+0x84b/0x1b70 [ 376.419459] ? __down_interruptible+0x700/0x700 [ 376.424166] ? create_empty_buffers+0x642/0x970 [ 376.428850] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.434412] ext4_da_get_block_prep+0x10c1/0x1b70 [ 376.439270] ? attach_nobh_buffers+0x630/0x630 [ 376.443877] ? ext4_inode_attach_jinode.part.67+0x150/0x150 [ 376.449607] ? __page_cache_alloc+0x191/0x5e0 [ 376.454124] ? graph_lock+0x170/0x170 [ 376.457935] ? __lock_is_held+0xb5/0x140 [ 376.462035] ext4_block_write_begin+0x5e2/0x1580 [ 376.466826] ? ext4_inode_attach_jinode.part.67+0x150/0x150 [ 376.472591] ? __check_block_validity.constprop.78+0x210/0x210 [ 376.478575] ? jbd2_write_access_granted.part.8+0x430/0x430 [ 376.484306] ? __lock_is_held+0xb5/0x140 [ 376.488400] ? __ext4_journal_start_sb+0x18a/0x600 [ 376.493353] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.498908] ? wait_for_stable_page+0x18e/0x360 [ 376.503593] ? set_page_dirty_lock+0x1a0/0x1a0 [ 376.508191] ext4_da_write_begin+0x410/0x1280 [ 376.512718] ? ext4_write_begin+0x1820/0x1820 [ 376.517272] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 376.522314] ? __mark_inode_dirty+0x495/0x1550 [ 376.526927] ? __inode_attach_wb+0x13d0/0x13d0 [ 376.531518] ? print_usage_bug+0xc0/0xc0 [ 376.535595] ? lock_downgrade+0x8f0/0x8f0 [ 376.539782] ? mark_held_locks+0xc9/0x160 [ 376.543954] ? iov_iter_fault_in_readable+0x23d/0x460 [ 376.549187] ? copy_page_from_iter+0x890/0x890 [ 376.553795] ? write_comp_data+0x60/0x70 [ 376.557879] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 376.563175] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.568721] ? timespec64_trunc+0xea/0x180 [ 376.572979] ? inode_init_owner+0x340/0x340 [ 376.577353] generic_perform_write+0x3ae/0x6c0 [ 376.581948] ? generic_update_time+0x26a/0x450 [ 376.586553] ? add_page_wait_queue+0x2c0/0x2c0 [ 376.591145] ? file_update_time+0xe4/0x640 [ 376.595421] ? current_time+0x1b0/0x1b0 [ 376.599409] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 376.604439] ? generic_write_checks+0x385/0x5d0 [ 376.609116] ? page_endio+0x630/0x630 [ 376.612935] ? ext4_file_write_iter+0x2a1/0x1450 [ 376.617759] __generic_file_write_iter+0x26e/0x630 [ 376.622748] ext4_file_write_iter+0x390/0x1450 [ 376.627349] ? ext4_file_mmap+0x410/0x410 [ 376.631505] ? __fget+0x4d5/0x740 [ 376.634981] ? ksys_dup3+0x690/0x690 [ 376.638713] ? save_stack+0xa9/0xd0 [ 376.642359] ? graph_lock+0x170/0x170 [ 376.646224] ? proc_fail_nth_write+0x9e/0x210 [ 376.650751] ? kasan_check_read+0x11/0x20 [ 376.654914] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 376.660451] ? iov_iter_init+0xc9/0x1f0 [ 376.664459] __vfs_write+0x6af/0x9d0 [ 376.668196] ? kernel_read+0x120/0x120 [ 376.672093] ? __lock_is_held+0xb5/0x140 [ 376.676171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.681747] ? __sb_start_write+0x17f/0x300 [ 376.686095] vfs_write+0x1f8/0x560 [ 376.689653] ksys_write+0x101/0x260 [ 376.693292] ? __ia32_sys_read+0xb0/0xb0 [ 376.697369] __x64_sys_write+0x73/0xb0 [ 376.701274] do_syscall_64+0x1b9/0x820 [ 376.705177] ? finish_task_switch+0x1d3/0x870 [ 376.709691] ? syscall_return_slowpath+0x5e0/0x5e0 15:17:50 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 376.714659] ? syscall_return_slowpath+0x31d/0x5e0 [ 376.719595] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 376.724965] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 376.729839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.735051] RIP: 0033:0x457089 [ 376.738248] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.757160] RSP: 002b:00007ff789a58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 15:17:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 376.764895] RAX: ffffffffffffffda RBX: 00007ff789a596d4 RCX: 0000000000457089 [ 376.772172] RDX: 000000000000fff9 RSI: 00000000200001c0 RDI: 0000000000000003 [ 376.779472] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 376.786754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 376.794032] R13: 00000000004d76a0 R14: 00000000004ca731 R15: 0000000000000004 15:17:50 executing program 5 (fault-call:1 fault-nth:5): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') 15:17:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xc0ed0000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 377.194265] IPVS: ftp: loaded support on port[0] = 21 [ 377.207594] IPVS: ftp: loaded support on port[0] = 21 [ 377.222546] FAULT_INJECTION: forcing a failure. [ 377.222546] name failslab, interval 1, probability 0, space 0, times 0 [ 377.233869] CPU: 0 PID: 25807 Comm: syz-executor5 Not tainted 4.18.0+ #190 [ 377.240889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.250248] Call Trace: [ 377.252856] dump_stack+0x1c9/0x2b4 [ 377.256528] ? dump_stack_print_info.cold.2+0x52/0x52 [ 377.261739] ? ext4_block_write_begin+0x5e2/0x1580 [ 377.266677] ? ext4_da_write_begin+0x410/0x1280 [ 377.271352] ? generic_perform_write+0x3ae/0x6c0 [ 377.276121] ? __generic_file_write_iter+0x26e/0x630 [ 377.281237] should_fail.cold.4+0xa/0x11 [ 377.285312] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 377.290424] ? print_usage_bug+0xc0/0xc0 [ 377.294497] ? trace_hardirqs_on+0x10/0x10 [ 377.298746] ? trace_hardirqs_on+0x10/0x10 [ 377.302997] ? __lock_acquire+0x7fc/0x5020 [ 377.307274] __should_failslab+0x124/0x180 [ 377.311521] should_failslab+0x9/0x14 [ 377.315339] kmem_cache_alloc+0x47/0x760 [ 377.319406] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 377.324440] ? ext4_es_can_be_merged+0x238/0x2a0 [ 377.329217] __es_insert_extent+0x305/0x1140 [ 377.333640] ? ext4_es_free_extent+0x820/0x820 [ 377.338233] ? lock_release+0xa30/0xa30 [ 377.342229] ? __lock_is_held+0xb5/0x140 [ 377.346330] ? kasan_check_write+0x14/0x20 [ 377.350572] ? do_raw_write_lock+0xbd/0x1b0 [ 377.354906] ext4_es_insert_extent+0x2ea/0x7e0 [ 377.359493] ? ext4_es_find_delayed_extent_range+0xd80/0xd80 [ 377.365297] ? lock_downgrade+0x8f0/0x8f0 [ 377.369459] ? kasan_check_read+0x11/0x20 [ 377.373612] ? do_raw_spin_unlock+0xa7/0x2f0 [ 377.378030] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 377.382672] ext4_da_get_block_prep+0xc51/0x1b70 [ 377.387475] ? ext4_inode_attach_jinode.part.67+0x150/0x150 [ 377.393211] ? __page_cache_alloc+0x191/0x5e0 [ 377.397753] ? graph_lock+0x170/0x170 [ 377.401571] ? __lock_is_held+0xb5/0x140 [ 377.405656] ext4_block_write_begin+0x5e2/0x1580 [ 377.410439] ? ext4_inode_attach_jinode.part.67+0x150/0x150 [ 377.416173] ? __check_block_validity.constprop.78+0x210/0x210 [ 377.422150] ? jbd2_write_access_granted.part.8+0x430/0x430 [ 377.427876] ? __lock_is_held+0xb5/0x140 [ 377.431948] ? __ext4_journal_start_sb+0x18a/0x600 [ 377.436898] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.442441] ? wait_for_stable_page+0x18e/0x360 [ 377.447117] ? set_page_dirty_lock+0x1a0/0x1a0 [ 377.451714] ext4_da_write_begin+0x410/0x1280 [ 377.456242] ? ext4_write_begin+0x1820/0x1820 [ 377.460768] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 377.465791] ? __mark_inode_dirty+0x495/0x1550 [ 377.470386] ? __inode_attach_wb+0x13d0/0x13d0 [ 377.474971] ? print_usage_bug+0xc0/0xc0 [ 377.479065] ? lock_downgrade+0x8f0/0x8f0 [ 377.483234] ? mark_held_locks+0xc9/0x160 [ 377.487421] ? iov_iter_fault_in_readable+0x23d/0x460 [ 377.492624] ? copy_page_from_iter+0x890/0x890 [ 377.497222] ? write_comp_data+0x60/0x70 [ 377.501291] ? ktime_get_coarse_real_ts64+0x243/0x3a0 [ 377.506511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.512067] ? timespec64_trunc+0xea/0x180 [ 377.516332] ? inode_init_owner+0x340/0x340 [ 377.520676] generic_perform_write+0x3ae/0x6c0 [ 377.525281] ? generic_update_time+0x26a/0x450 [ 377.529893] ? add_page_wait_queue+0x2c0/0x2c0 [ 377.534485] ? file_update_time+0xe4/0x640 [ 377.538739] ? current_time+0x1b0/0x1b0 [ 377.542736] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 377.547772] ? generic_write_checks+0x385/0x5d0 [ 377.552453] ? page_endio+0x630/0x630 [ 377.556260] ? ext4_file_write_iter+0x2a1/0x1450 [ 377.561034] __generic_file_write_iter+0x26e/0x630 [ 377.565983] ext4_file_write_iter+0x390/0x1450 [ 377.570585] ? ext4_file_mmap+0x410/0x410 [ 377.574743] ? __fget+0x4d5/0x740 [ 377.578212] ? ksys_dup3+0x690/0x690 [ 377.581945] ? save_stack+0xa9/0xd0 [ 377.585590] ? graph_lock+0x170/0x170 [ 377.589403] ? proc_fail_nth_write+0x9e/0x210 [ 377.593904] ? proc_cwd_link+0x1d0/0x1d0 [ 377.597982] ? kasan_check_read+0x11/0x20 [ 377.602172] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 377.607715] ? iov_iter_init+0xc9/0x1f0 [ 377.611712] __vfs_write+0x6af/0x9d0 [ 377.615452] ? kernel_read+0x120/0x120 [ 377.619359] ? __lock_is_held+0xb5/0x140 [ 377.623456] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.629007] ? __sb_start_write+0x17f/0x300 [ 377.633346] vfs_write+0x1f8/0x560 [ 377.636902] ksys_write+0x101/0x260 [ 377.640539] ? __ia32_sys_read+0xb0/0xb0 [ 377.644612] ? syscall_slow_exit_work+0x500/0x500 [ 377.649472] __x64_sys_write+0x73/0xb0 [ 377.653371] do_syscall_64+0x1b9/0x820 [ 377.657268] ? finish_task_switch+0x1d3/0x870 [ 377.661866] ? syscall_return_slowpath+0x5e0/0x5e0 [ 377.666812] ? syscall_return_slowpath+0x31d/0x5e0 [ 377.671755] ? __switch_to_asm+0x34/0x70 [ 377.675824] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 377.681214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 377.686073] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.691265] RIP: 0033:0x457089 [ 377.694489] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.713391] RSP: 002b:00007ff789a58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.721119] RAX: ffffffffffffffda RBX: 00007ff789a596d4 RCX: 0000000000457089 [ 377.728401] RDX: 000000000000fff9 RSI: 00000000200001c0 RDI: 0000000000000003 [ 377.735681] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 15:17:51 executing program 6: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x440) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x52}]}]}, 0x40}}, 0x4000) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:17:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xfffffff5}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 377.743011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 377.750285] R13: 00000000004d76a0 R14: 00000000004ca731 R15: 0000000000000005 15:17:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:51 executing program 5 (fault-call:1 fault-nth:6): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xa, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0x80) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x4788}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 378.314062] IPVS: ftp: loaded support on port[0] = 21 15:17:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:17:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x1f00000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x81000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 378.372675] IPVS: ftp: loaded support on port[0] = 21 [ 378.378853] 9pnet: p9_fd_create_unix (25859): problem connecting socket: éq‰Y’3aK: -111 15:17:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x80000, 0x0) ioctl$void(r0, 0x5451) chdir(&(0x7f0000000180)='./file0\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2400, 0x0) sendto(r1, &(0x7f0000000200)="865c32416f907720515d2f7ed6e40c50a55328fdec262c83f2af81cc5ace2d66e1ecc6390240043cf05d59a467737a3048cb39f8b8cfd0d08e4a0b7d044f030dac34e038c22ea738fcaa25ca4b244e7079feb08c1aae89d1768db36f3f4329a607cbc47588132a3475a0e3af4dc6b2b0beedfaed62c041ddcb1a60599f1b755eff7b9403d711e1c541004aa49562d00d585bb5f5672d37d8c7eeca", 0x9b, 0xffffffffffffffff, &(0x7f0000000340)=@generic={0x3, "08a046c5e52c100879cbfc1866adb41028b9c57e3578328b7a508f5042dc486933f24c0bb3bd971bebb062e8cdb70666b9c5dec9ec7baabc2a554ae9b77d9ffef4855e1022804742a4da01e294b0bd1409fcda3ccfe49e9aeb30d06f76e504ba4af969c61355731df345c2fb49585651a61c73f99b211b55ba3811c6c510"}, 0x80) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:51 executing program 6: r0 = socket(0x10, 0x802, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) write(r0, &(0x7f0000000140)="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", 0xfc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 15:17:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x33000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4c00000000000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="746872656164656404", 0xfff9) 15:17:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) 15:17:52 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000009500)={&(0x7f0000008fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000009480)=[{&(0x7f000000a080)="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", 0x12d}], 0x1}, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000280), 0x1) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x101, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={[], 0x6, 0x3, 0x2, 0xd276, 0x9, r1}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0x10000, 0x2, 0xdc}, 0xc) 15:17:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xe00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 379.019904] IPVS: ftp: loaded support on port[0] = 21 [ 379.051943] IPVS: ftp: loaded support on port[0] = 21 15:17:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="746872656164656488", 0xfff9) 15:17:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x7019160101000000, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x1100000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564f0", 0xfff9) 15:17:52 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0xfdfdffff, 0x0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000200)=""/80, 0x3}) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2b00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 379.664357] IPVS: ftp: loaded support on port[0] = 21 15:17:53 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x11000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:53 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="320000000600000000007ac000080000050000000000020000000000000009c7cf4b5c00000034681c65616465640000"], 0x32) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fallocate(r2, 0x3, 0x7fff, 0x8000) pwrite64(r2, &(0x7f0000000140)="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", 0xfa, 0x0) fallocate(r2, 0x3, 0x0, 0xfff9) 15:17:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\t', 0xfff9) 15:17:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3b000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\n', 0xfff9) 15:17:53 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:53 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:53 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564e0", 0xfff9) 15:17:54 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x48000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3800000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x900000000000000, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x7fffffff, 'syz0\x00', 0x9}, 0x6, 0x400, 0x4, r1, 0x2, 0x1000, 'syz1\x00', &(0x7f00000000c0)=['\x00', 'wlan1\x00'], 0x7, [], [0x7fff, 0x7, 0x4, 0x7ffffffd]}) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564f0", 0xfff9) 15:17:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x300}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x900000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:55 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:55 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x181002, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000001c0)={0x14}, 0x14) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44) 15:17:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564e0", 0xfff9) 15:17:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8100}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000001ac1414aa000000000200107cd0a273a69c9f23e5e1fddeaf1400401414bbe0000002"], 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) [ 381.940789] IPVS: ftp: loaded support on port[0] = 21 15:17:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:55 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r1 = syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x5, 0x2) getsockopt$nfc_llcp(r1, 0x118, 0x7, &(0x7f00000005c0)=""/195, 0xc3) chdir(&(0x7f0000000180)='./file0\x00') io_setup(0xfff, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xf6, 0x40000) io_cancel(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000200)="6342b35405fa9191e8241f841429b63bcc93ecd83ba0f6643f48e231ffdf26bec307aa9782e9c1a0a3debdacbfd496babf44c85d119b268889af0b691c009b8b6d8dbf2fbefb7995631948517c702fc06603c539d69af131e522711361fbff441928ad83415a6228712ec5123daefe57745acb3baac4aea01455460fb2d8de7838c597c2467767cee68a85927fa184de94634cbc2875b29834b743c16e2240230245fe5c42c161f2390156575d6c7c41df32048a9227867a7290295217a18fd574bc5940538ddb0decbc596c3d19626fb7d1e8251038eeb21f", 0xd9, 0x9, 0x0, 0x1, r3}, &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb8, r4, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x60}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0xc004) r5 = creat(&(0x7f0000000140)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') write$evdev(r5, &(0x7f00000006c0)=[{{0x0, 0x2710}, 0x1f, 0x80000001, 0x7}, {{0x0, 0x2710}, 0x16, 0x4, 0x3}, {{0x0, 0x2710}, 0x4, 0x5a2, 0xfffffffffffffff8}], 0x48) 15:17:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="74687265616465640f", 0xfff9) 15:17:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x4888}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000280)='./bus/file0\x00', 0x10000, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r1}}, 0x18) 15:17:55 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564f0", 0xfff9) 15:17:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x608}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:55 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x300, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:55 executing program 6: socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x800, 0x4) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0xfddb) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x4e23}, {0x1, @dev={[], 0x1a}}, 0x10, {0x2, 0x4e20, @local}, 'gre0\x00'}) r1 = socket$inet6(0xa, 0x80001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000200), 0x248955a8) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(r2, r3, &(0x7f00000000c0), 0xc6) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000540)={'filter\x00', 0x0, 0x3, 0x45, [], 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=""/69}, &(0x7f00000003c0)=0x78) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e21, 0xffff, @remote, 0x3f}, {0xa, 0x4e20, 0xfffffffffffffff8, @mcast2, 0x8}, 0x100, [0x8, 0x6, 0xffffffffffffff80, 0x400000000, 0x3f, 0xfffffffffffffff9, 0x7fe00000000, 0x2]}, 0x5c) r4 = getpid() perf_event_open(&(0x7f0000000600)={0x4, 0x70, 0x10000, 0x7, 0x4, 0x5, 0x0, 0x69c9, 0x10, 0x1, 0x4, 0x4, 0x6, 0x20, 0x247629b2, 0x2, 0x1, 0xffffffff00000000, 0x1, 0x101, 0x10000000000000, 0x6, 0x0, 0x5, 0x0, 0x3ff, 0x1, 0x62923b51, 0x98, 0x8, 0x0, 0x8, 0x8, 0x7fffffff, 0x7ff, 0xcda, 0x5, 0x9, 0x0, 0x1000, 0xcc09c7d82fcfe472, @perf_bp={&(0x7f00000005c0), 0x8}, 0x639, 0x0, 0x10308d9e, 0x7, 0x8a96, 0xffff, 0x20}, r4, 0x8, r3, 0x3) r5 = fcntl$dupfd(r0, 0x406, r0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="da43aaa971de29a0fa36c92d09a3b78fe944e826932d36f96c6b2350e998802d404011c4caa3f94eeb4651bf6d5787ec38772788678f2ee79270d3498b3d1c0bec2b4591475c10a71556642fe239e90b587ae06e5e19b7eed3b0828bf8e42a0e8d8c54a242e7c97bf5", 0x69}], 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snapshot\x00', 0xa000, 0x0) 15:17:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000200)=""/197) 15:17:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564f0", 0xfff9) 15:17:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x300000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:56 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x0, &(0x7f0000000700)={0x7ff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x4e23, @multicast1}}}, 0x108) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000180)={0xfffffffffffffff9, 0x77, 0x1, 0xffffffffffffffff}, 0xfffffce2) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access'}}, {@cache_loose='cache=loose'}]}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 15:17:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x33c, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 382.854421] IPVS: ftp: loaded support on port[0] = 21 15:17:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./bus\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') r0 = gettid() syz_open_procfs(r0, &(0x7f00000000c0)='net/mcfilter6\x00') 15:17:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffff88}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xfff9) 15:17:56 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564e0", 0xfff9) 15:17:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x400, 0x0) mq_getsetattr(r0, &(0x7f0000000240)={0x3ff, 0x9, 0x7fff, 0xc0, 0x5, 0x2, 0x8c, 0x3}, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=0x0, &(0x7f0000000300)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @rand_addr=0x6}}, [0xecf0, 0x6235fee2, 0x101, 0x4, 0x7, 0x7, 0x8000, 0xc0a7, 0x100000001, 0x6, 0xc16, 0x8, 0xebc9, 0x6853, 0xffffffffffffff81]}, &(0x7f0000000440)=0x100) mkdir(&(0x7f0000000080)='./bus\x00', 0x20) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./bus\x00') mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x33}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:56 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\a', 0xfff9) 15:17:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xe80}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:57 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:57 executing program 4: r0 = getegid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mkdir(&(0x7f0000000500)='./file0\x00', 0x4) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount$bpf(0x0, &(0x7f0000001d40)='./file0/file0\x00', &(0x7f0000001d80)='bpf\x00', 0x80000, &(0x7f0000001dc0)={[{@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x2}}]}) chdir(&(0x7f0000000180)='./file0\x00') r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./bus/file0\x00', 0x5, 0x9, &(0x7f0000001b40)=[{&(0x7f00000004c0)="43acdebb7f54540a34a27fece288f4758fe19aa352b6ff9f7240aa9e03c8f10e147159703ec8c3cc86796bbb4d716d085704db237f86463495b2667315", 0x3d, 0x2}, {&(0x7f0000000540)="1d488f7c9f5b1415d2d404ad1b6f095a474e4c57a5ee156c8c23382768b818d93397d404eaa5f75f29ce8f53e645d1f76f904c319b718e9a15f6fed5", 0x3c, 0x7}, {&(0x7f0000001740)="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", 0xfc, 0x8}, {&(0x7f0000001840)="4d21ab60aa6af1fabeae444854d2fcb2a84f1e43c79cda3f6ce837c579a2ae6bbd0281b864c2460e2ac5ab467b8cfde63c509f39f8044a28c8a2860a45c6a95c8b8913d2e5821cf4cf848e3d2cd33b2ce4e287f659a7a19e705af0bd5a4515884308f0b6a4633bbc2070a2abae209519a7076bdc1dc371e7f8dbbb032cc750ff411fd2e69991b35cdae62ca1c880b18dc175f3ad3deeadb25d2c69e3273fb07f2a316000bfa8e8a701cec4ab28d27a76a19afebef5bb8276dcbd17392454e82b2cb8bfb610bd644c09247ccef6ae0efe19381f6d2e658abf78b8dd7cb4babf836df6fc8c5b0b828cc033527ae58888f6ab999f", 0xf3, 0x1ff}, {&(0x7f0000000580)="5ef3d6a10aa9711ae3405bab545e638c5ad226452b88ff871e75fac894286bea6191e34f9c0dbd64f0", 0x29, 0x3}, {&(0x7f0000000640)="427f14c5fa545ad36e0edb9deaaec7439fdedd5091e88b34b0c9088758306e9a99f59a91f745cd192428c9e45764000961ef3a814fff6aee62cad35145bef6b94d99a1de2b0f84cd743b8081f552cfb40dc1dc891a4020efa44d498afb598fae49987e65c26c0012309bb805ef40e665953b24364405", 0x76, 0x3e7}, {&(0x7f00000006c0)="85d0b1ac082e7a6204d38d8f8fc86deabf0b68328057ea42f218d377d39a6459dbfc7edc88f6b37bbbac7f", 0x2b, 0x9}, {&(0x7f0000001940)="a7319b218d4ed84a96576369de2ceb1d8ae6be874e2911593630651ff8b3dd4edf8dafe2620954484b3ade547eb29f8534827e9933f1e1b49ff352eee9b76c43c6ed5128f994d4a969048ef730d493eaa050cd0a1ca219ad36e87e2efd9cae850915086cff5249d9c07ca8ac67fc7eb5f8adbc1b738997b3279a07558eb7e1a5ed39f491844466797ace92bade16124452b5c13634f84e88322a66ad91b2a72e7fc63b504ae9120585d8fdc79020177afa894eda6f5691bf299c5193b2c3fb16b88f5e28c24ef613e515", 0xca, 0x7fffffff}, {&(0x7f0000001a40)="0f5f6228e77824e00b0f26c2fd1b422bf6c190718252ba78f0cb4be8dd8d6bba89c79afef1aece3697e8ba924014df28462d8838d24da2461178f3b342b46b6fb14caf4ec4ccf8d346101b3b595400b1266e07795a725af6d84dc7f982a1fa075f2a5903a3520741f660cb5a70b7be59d666c560aaa06ab0b1b63bf3dbe811bd9b602612cdf416976919b6a88c7166550b8c8e8999163a91f401babed00100ee9d9163abece9f6b052338c4680a713eb835d261cfab29668f6b3a9ed1b6effc05f39", 0xc2, 0xc6de}], 0x2000000, &(0x7f0000001c40)={[{@overriderock='overriderockperm'}, {@session={'session', 0x3d, 0x3f}}, {@check_relaxed='check=relaxed'}, {@hide='hide'}, {@gid={'gid', 0x3d, r0}}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@map_acorn='map=acorn'}, {@check_strict='check=strict'}, {@dmode={'dmode', 0x3d, 0x100}}, {@cruft='cruft'}]}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000400)) rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./file0\x00') ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000200)=@nfc_llcp={0x27, 0x1, 0x1, 0x2, 0x1f, 0x40000, "02048c76331caf210e496303c20cc32fc5d39d97a9c7a51d1c672216b09fb1851c01bd2567858d58bf0c2a10afee0674325bca4ecf9cbce3538f02d906d031", 0x1b}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000280)="5bc853b51923e1dac7a329aaa903908655894a13d7", 0x15}], 0x2, &(0x7f0000002b40)=ANY=[@ANYBLOB="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"], 0x1338, 0x80}, 0xfff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="ba90dd33310889413c923c74486c4efd2c03f5291afd83c8e45c49d6b60c7fe9f21e53b0683c053d8e324fcde9ad54352c3ceedb5a692593b2bf43687c9c45260542e0cc4a2f9e9c7504764b9b6e6531bc447bc58ce7b5ccbf1ca227f96fff8ada57436bae3d02431a0b8a8ab75b3643d9597a50ab755fa99f3168dbee2b528a6435969abd22cfcba80e10f0a702c9c08bd763a435029b446a50e496912831ea73c2a9768f88ef61252a86533f1584b89db4ece1", 0xb4}], 0x1, &(0x7f0000000400), 0x0, 0x4000014}, 0x2}], 0x2, 0x40000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000001d00)={0x1000, 0x4, 0x2}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./bus/file0\x00') [ 383.824108] IPVS: ftp: loaded support on port[0] = 21 15:17:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564fe", 0xfff9) 15:17:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3b00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:57 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') getgroups(0x5, &(0x7f0000000480)=[0xee00, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000500)={{0x8001, 0x2, 0x8d, 0x80000000, 0x6}, 0x6, 0xff0, 0x7, 0xfffffffffffffffd, 0x2, "7556e84da1d2b5cd54aa137f0ad93f5276a8269843ccaf45cfa598420df35cc637efdc7fbb32ce7ba428c3b3baa43113177743e5f27e3f67fb6311063608bb4a13e1aef30720d93f2ad1a92243fcd68edd42aa51d124a795619fba0b8e02e7d07679e1f7a21c31dcc0b62a853b9711ef4548b833e343334576c9de24e7c85c60"}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000640)={0x81}, 0x4) r3 = socket(0x8, 0x0, 0xff) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f00000005c0)={{0x1000, 0xffff, 0x3, 0xdca4, 0x0, 0x7}}) syz_mount_image$hfsplus(&(0x7f00000000c0)='hfsplus\x00', &(0x7f0000000140)='./file1\x00', 0x3f, 0x4, &(0x7f0000000400)=[{&(0x7f0000000200)="47c02905acb954e9697e2e00ea85a1bab1b98e0a2c88b7149cf5bb267e1490c524366c369be2cd19401c57202f488a12c2bd821aaddf28aeff5d634c79014745a1c6165725dd5ab5a0e3d0469fb1ecb5980caf8fb0d1009bb8f33723d505d0e62ccbb4299185b74f07d099a6e857df6b1630e25b50e858cd91b6adf226e7f92fe3f2224d73eeb6b4ecefec9bf878f44c52c632ffb6008b88ed7f7cfdbc0ddee5f40d5b6314f34c685aaeb3db9187b361a6c64b", 0xb3, 0xfffffffffffffff8}, {&(0x7f0000000740)="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", 0x1000, 0x3ff}, {&(0x7f00000002c0)="4e70f643fe853230cb69dac1c13f73cc787ef0eaa055835d931c3ad1733769e850f709410089a01fa213c77e68e78d75c49488e14e9db0ada03461bbe8f2a4897e81479a395656619fe1c289b17e8beb37a432a0c71d585222736cfdbd5aa5b9cbcb", 0x62, 0x1f}, {&(0x7f0000000340)="afdbf7ae7737a5da4e3d0d80ae25371b5da613a99637740f9389bf98ae34f26f28bab3e9398d7765634b89fbac6e9b31276a5249496c084254e38131bcd4779309cd2f352694f7513be3f2c36d6cfc1559fc00f5ef1309a785ca4f41bfa451cc3c1b09679a7daf04842dd3641eaabda1200f53501e0e746856c93bb0680ae5b7135df6fad730d1377b5a80637cd9aa5d", 0x90, 0x1}], 0x80, &(0x7f0000000600)=ANY=[@ANYBLOB="6769643da69f9ecc390b5de4ba67000011", @ANYRESHEX=r1, @ANYBLOB=',\x00']) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:57 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="7468726561646564e0", 0xfff9) 15:17:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3b}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 384.190692] hfsplus: unable to parse mount options [ 384.276149] hfsplus: unable to parse mount options 15:17:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\x00', 0xfff9) 15:17:57 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffff8d}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x1100000, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@mmap='mmap'}, {@access_any='access=any'}, {@nodevmap='nodevmap'}, {@noextend='noextend'}, {@access_any='access=any'}, {@access_user='access=user'}, {@cache_fscache='cache=fscache'}]}}) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:58 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:58 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)="746872656164656410", 0xfff9) 15:17:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x800e000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0xffffffffffffffff, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) fanotify_mark(r0, 0x4, 0x2, r1, &(0x7f0000000300)='./bus\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000140)=0x8) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000340)) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0x6, 0x4) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000240)={0x1, r3}) 15:17:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() unshare(0x64000400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 384.909633] IPVS: ftp: loaded support on port[0] = 21 15:17:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8864}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfffffffffffffdef) 15:17:58 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) symlinkat(&(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000140)='./file1\x00') link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x2000) 15:17:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffa888}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:58 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:17:58 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xe000) 15:17:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) epoll_create1(0x80000) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6tnl0\x00'}}) 15:17:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2300, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) gettid() r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x7000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') truncate(&(0x7f00000000c0)='./file0\x00', 0x3) 15:17:59 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:17:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff0) 15:17:59 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb402, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:17:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88caffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:17:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x7000) 15:17:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}) 15:17:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xa000) 15:18:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8dffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) prctl$setendian(0x14, 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:00 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9c01, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x10) 15:18:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1402) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x600}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xd000) 15:18:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000340)) syz_emit_ethernet(0xb5, &(0x7f0000000240)={@remote, @link_local, [], {@ipx={0x8137, {0xffff, 0xa7, 0x1, 0x5, {@current, @current, 0x3}, {@broadcast, @broadcast, 0x6}, "6ccd827edabeec71703c476818d54c8bd273c9ccb2c51bdaabcef3a25f381cf63341871bafd7936b291d20f7a4b3ba7cfb62cff816d8b744b50f7baf7e606a0063b13e533247280ae61f65ac9dbad52f8cb9c4e979f2b885cdf8d13de30493dd72149111d9b76315a08401dac8ab7ffb248d236d528e564ee3b48c42f74fa07a3fe8212d49e6aacf98"}}}}, &(0x7f0000000300)={0x0, 0x2, [0x0, 0xe04, 0xd56, 0xae0]}) mount(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='cpuset\x00', 0x200040, &(0x7f0000000740)="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") fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:00 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3300}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:00 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="dff62b95b11c8c303cf1df7c350a478cd46386563effc2003c7aefe2ae2909ecb7e4502d893e0918f5c68c8a8d7ba8e11180b7b3abcded61bd5e2f550b5f6a57bc257cd96635d917d6869d1fb35f06c73b", 0x51, 0x3}, {&(0x7f0000000740)="2768e9d194c2a0f526960776ae5051ed521fd78033b43fc4fc8e71ab302b0f9dc6372f72504275cebcb946b36ddcbf512a5c0d4ff91dd23f82dca5169246ccda5099be33ccf7f93e22940140c9a67edf90e38a92c1f6e941456427769250278604e580d5dc5aa13c3c2a160b8e3a877cea4ab6f142200b8431ab814f101076e20d8f143ba32c3f52d24575d2a867853a67d5a7950f8c338d1b6dc4b1891826d001182f89e8410c9ef099d7ec048ed37dd8aee5ceead1769792eb0de21b490ee374c5bd3980fef727a84aa837a2faabf3564f5377645cb24ed4bb0971639ae1cc5baed736db65ded2fe82544907e68c57bb52eabc42760d504d390619c601693a8e75b896d471011c2bdc67641a860d7e5592b68a3102b96e47b2f4ad6a00923647419444b8c20dd56304fea5a361b47b6a48b60a313db3e50a04225e89ba6792c4f429bf1414f77d0d767f044eae3c001bd8b56e0b5f63225b438ca6f38422794260dba16a793a9f51c114a5d6fd518a374239b31c0564875ba2d7b3c6636a1336af3430e3faa5d97d03e96553a4ede9f79fa0eef20741e0d7d4203e7d2763aac78b43fa2466db1742a7b0bc012a9266b9234679709311a5020efbd0ba21e99cefb91ab3f372c431cb54d68d9d2936be05e1e16c9b49f63737c4e3698b9333fa3947dce75041dd7312decbe0467c2e56f4aea4341329869b46b005b70383eedc0eb02e84e56ce15e3043649ccbe38e9a77805434ccdfb88ef18e62bda31a480ebbd08198395a0ba5262b022137a809ab2c0dcd1ed2346beee6e3bbb250704e1639c8770b1690a70ba22f80fbc5be937f684b914973741abfb9f70626bd9dc3636905a94a30ab558ab962b93bf6457175981ae10f56aa3d362dc36c45d1e59a17c267b48af592d32141a156448f85b4947043ff2d4db63928b622197bab207e3e82b5d26de6eb466374d915e9e4fb06f48d521d04f00da8207c6a1e420d28b0964c39f823d412cf4dd0181a890a419dd4e7a5aa5cd3fff7f5dd4da3e79d140b444d191d8598db9cc97dad968bd010cd9bd0e1dceb7383cff8e1d79055f86d4d2f6e24388d7620c877341e9d0946d600c78bf37e18555c03734a3d2680e6d9c6035f35bad433c40661d899c505b84f0e9e5d0e47e6f5eba8e0612f9d66bc187465590443a884b0066a713b2dc399ddc80a682385ba8224e1f544a84947fd2ef922f421e266ba7591459b205c21accb1b18f61f8fdb4ce91a9c3cad10233c887cb8b72d5e99d1637fa03a2c6810a68661055f7872e5c7a977de256300dffef71879889a0313414533479e3527682ae72099163724decd490ea1a7017f096d0774485469f3887e2bacfae19010f4405eb3e8d885ed1528399a2af0a7cce0ed7454d4831bd58e5779d874f8c6b2f78b8bfd02e3ed070f8ddabb749d9deb14b333bb942713db00524e9a12a09193917f8bd30652b59da82187c6ca862fee572b3072ef80a5a7728b1a8ecfc821cbc3a91c98cbe441a2551e29fb3e25bc025198eb4947e63af69727d25fbbbf2c10e3e2ea6e6913fe3856d20b4b4d1a76f3314688b9d6ba97a86a2763831138a945142a8cc971a24855ae45730382d4fede003cf5d9d7e877b7c835588f40c83fcf47cc4633a8c5854c31ce3d526684f6deb980f59d9bcdd78488766fb4190da65fc59e927681c51ae376885b04ec3fa55ce405ed4b899ec081548922d4c704603c764edf7c0d6235784932bb61dabd4ed6e2dada76764f8d10e2a7fb5adbcc46ec5c66a209c5188248234490a28e9612415d1709ca80b8b65bedfbd33e304db387d00fb92849e64418cb0efa6f177dbed4a1ba2f2120404bd872bbf0d496e3a0b8f898c9045a952b027b71820f6b1c6b0869d8b561e5e502c73a31baf278ebbc48d36265871a28c226691bf7cb40924f8209502f19dd8d4b8cae779a827f6bb87f3907474f44c939affec72ad7cd4f5e292beef08f28a75d1d89724cd4dc1b9a03964f4a9437e62f5dadb4de38f07065a58b6040ab8dad092ed1e1d5a7c3a2b1ba789648ff06bf539206ac5864f8c257ed5df497b46aa2a7809eeb19a19f0d9bc609b0200541a82e9bce3ea4bf1075158479feca97343bc1cf4aadb25b9c06255f7c683ce0d5eec273d78b1eda803ecc26eb537e1b915f1b968a6878d740c3be7a6b4538a3e0b8dc9428370a74e532cdbcf4d784017cb2dacd96f6bbf551a88db314ff6e18faa62d6000ab551bc53daf81a56ded9d88756bb95af449f70831cf6393f4d5b844d3ed115415ed2f9016d7d0fb071dfaae2e03c378b7b60a6cd126e1019423366c932bf4ad353d6408af590faa697a37d0ea70ab3b1855fa9fee1a21d34786bc736a49b23bb26e8bfa991deb9c8299927a72dcc7857f1499f81d80488876cfaabf8be55f00dc2c23c23995e20100501eba9d67beb96a306a9ca2076b18e9bd0957b3f855c512ef9b759dec9b03fe8af8eeb960f7d127cde48750455d50bf32735db987f29e870018e093e5dedf7206d7adad734ae9463f38e7279d92c47dca00e0ab43921ee66c6517e620a27f5990c142a03a311e4a0bd179456f430bd4549264b22b2400525895b2a07e6f8eef75e46787b60f08fc0630e80c2a0ce74776b3b50bbe8efeea96d88e1b732c7a9dbe5670fa2eda0d27531e7c439da7e0b52f66e1f346cfd27327cd872aa6c79c31b54476b76b9daf9e0ad348a96752a8736dd4cdfbedeb1cbd28c0170bf783f988a96ba1763183e4f6a5e776b7e1f04d010ab3bb3d9845e27d4b542c479f8a98b78fad370b1794d69a5eac8e7ab9ceea484f95e8f34d6685e441fdb9facc325a0978e6b0b4d081c812e7cbb60fa183ea4d92c2de1e170dacaf5fbe54ecf6d1bd916ac02066e758d3732fc4ba914d5d7527720c9701407af742ab38fa3e15fa875c3235a2882be17e37870c72b2ad2953a05fd26a703c0870c2091c478ecae842d66c88cd258175d1b2aef59cd8fffbd8cacf4bd329fa8e9b26d6866fb532156066630812d1a148f776c2d79b4c95df72b3409f0e4d8f5612179c385049ff927e65b7ab19bbc1ddc68d68787514debac60a49b0eaa3176c4805bad011f82a0dc09611f64a38b447e066b531f2e66e8b78cf40ed3e8e878599d12535fd4e88ddf76bfcb8e1bf0011fd9987b7265229a11ebcedfb4063ffc5ca13ff675be88a643865801f7f589f887edadee1ecd41c9f7ae0c5ec51f9670c34369de164d4fb3d0583e00d34bae69d8dc04958dbd5357e478d3b2a4b06c6e7350096f1fd50744f5dc5462ca9febff9e427ac47db02aa2de445658ae89adef1f46dd3fda95f4eb027dd984d8bcb680d2f3ea7916d8ceb1ba77549c94155181ffdd2cb8e8981b7de6ddea27df94674e4d5db5fbeae0d47f6932a6644b35563c02e63dbd9bebcef153803748340487faea01ee9167dbf8d0b66d3f71b5e44dfc12f1e231b19f3846ca93ceeb137a1b31f684e35a2dc3b0412553649c60108c7b332773e434c6513e9283725b1e86d6995adecefa2799bf5689327d1ddac288ed38425660fe2cc19c5d2d40063b2ab00af63d5e74811c33b32d8a63a4d1b6d44bb46a79bf6ece3581628234c6762827d4b02d91e149946c5483f10379b4acc00c81ad814759f7a60ce35d63a7335639b9d8293ac256cb71f5f98ad5a2e20f76544de26256642a73404375c2c163fb91ca604db388a0c4be239feba9f776ca3d814bd8ffcfb7e635da9ac12356a3029aeec932c968620d7de2c06e0ea397e39c06c2680145afdc308cf52c65f09cddf37e1f8b6704e8c6be542b597d5dff37c50ef70aa3b30a448a8cfe1d25bc441dfbab173dd14bff318ee5d377888c1db322f4e463fd5a5570e516479b93e5b97a351be29f44fda8fe244859c69d634fe78c37cad4a243feb792e74cd4ad3eb986d065461ed9ddb24c087e0d01c85eb07ca1849b41da5f8403cd1fbc9e99c8486d0b52522fbd88ddc5a6ed1e669118bf5ea08161d280f1c622124bdb33bc9195a4bddfe62a28f3bc7c91b7f8a23d27bd6342865b182fb080df61c57c418cdda87bf7fe31fbc07113a5f47aee5fc487d10a7c550dda1bd9d5f0888e8bddec8d332524066d406e7d7d1b3e1a436e83c8071f711e3ec291e94d694263cf24d0d94383e33a593d3c7ef5ca8f1ec14b85148a3abd12b4fcbb31aaedb1b0d204ee561aa5c8a802d173ca8bd90634f442b9c9d195affb7833e6c9d40abf75c3bd9f6810750170429a5fe84b29f05e58ee0fef2b1fb637f2205cd0d967ef77d8811ec167c7e26649a9760a2ff79849448c566312f782e36738408b7cfa82c301dbecdbd8cbae98198eabf8133444e273212b09d8d4d83e79c613e24f3ef4397080c1af9f85f80b5020cca88b75889b7e485197542e91e6223c8b17108e18fee548b878527d7e48c3a98cb0ccb4929f4fdff66e848cc7bc58abab2f3f493756fd23263abff8df3c82afcb656e42550c7f8f57a12a0321b5a3fe97b87523181177b715c71e40c959377994e8a4bf5f4beea4d7c2d8b9d8311cbb9390a9791ad284840cf9101bf52d5078856c06590141ac7bfc55104837047102913ba0c1a3910617996cdc6c84692e419c48c741fd7fe3d261374bbc8bc3e843d00fb47ba6e58abeee9cbd2e8dd5c3692545a787cc0ac155ef0e093cd6d960fd6c804eaa7486667a389a711e92aa2148744fccfbe0563a9a57fa9f0bb0930c06e8f179085a8c8e0706e4840de0bacdceb3cce063774e000df401971bcdb2dff274cb602e5cd5701b770b2e3483e7f50c1a4d5328fc25f0ad9778e4f3f2098a9df910b489d44f2de9983edb9fdf19ec163488f4e63645cd8e3bd599507a410f03918187708e20403c10ed55e7e307dfdce2543516db00c3a4ded32a60d72461672a25c80674cb9d7b82703ed0b81a2ced2ca7469de3f922591bddf38c7103077c425b5c8ed78d2f99093f7a344e9454df801e56eedbf70f99dfa07c4d7ab33bc02ad9a219b5cca4b4abb4bb3ee6d50124c2d5ca339a78211fd368d76a3142c28e9ac02359489e0fbfac09a3c1d4e9bae4b7f85954ef78c910441a30110a1ade1802585a7c71b413da02787f907c033d6bef241b6956a37a9df632043a45e2eb2a9f9d24cfeb5fdf1edf6bc97982076c55fc94b2f867a151c67e99f2a127eb2045978747e5ec0e01dd896034939c0b8826961c44f97c476058e37113a3ce58effff883b7e91fa6d68f3ddb6b815bda71cbbc2cf7101bfc7891c3650bf7de15345ae402d25e05c0498c1d214098a99acdfe17f6da5a95c4ab83da16fd068d10c5d81c5bf08de4e12c5893cbd6d2c8f3a2c2e1b0ada19b570c773a2342abf9f282fc9805317ef043be2550fde14596b22cd0b8cf99015594617c77847e936ff38094b56c4ed5161f0c3e08e374dc9791bb57eaa12924aae50a0c04cc41dad655ec5c2058ba0cf5f590627d1086b48a385c7a50c9aa47fc558685015e250b5464470d6ba39fc25ee152592aa3508210095c00604714e0daaca5be2cd8a89042f2f4c8d64b4f377ece2b9a60ffa8954b492394856483284c269859d8186bf526981261280f249f860a5e774d678f046e8c17a3bcd8f73f272fa4ca80c4e729443bcce6971c4b53e59c17ff9ce1a99fdfd3115ea8473bce84066de0f5022542a22428c70edc70aea9c3ae33c2b5a6dc206926fa61013226c3a27f583e2d2c4123c807444479212bd1db831d64901b35a3c9cf7540dd1c1c8fc3f88cf87b5eb86a082946f670c61ddce31ff3ecb6552", 0x1000, 0xffffffffffff9312}], 0x10, &(0x7f00000002c0)='ramfs\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) sendto(r0, &(0x7f0000000300)="7378603f58f7002f96e0167b608775402d35004911a2239cc8d1bd0558909e335e73a4a8ff125b2021d91d4e287e6d083905d7eea6c41b7d0aa7d7a0dd7bcb13f902eb047ee6fa4a110b2a0295135fcdfe0f4dc5ff09ac257a8e7f853f4018543788b42f09844a941a1c4f749a6b730e1a8d28ef63e74365a3e7930a081b98b5a14b305376296899f82c18af018b8d5e03d17cc85e3f74129a5b15e2a5aced353c5fcf60a2c81b", 0xa7, 0x80, &(0x7f00000003c0)=@in={0x2, 0x4e24, @remote}, 0x80) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00') 15:18:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x3000) 15:18:00 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2b00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 387.227020] 9pnet: p9_fd_create_unix (26429): problem connecting socket: éq‰Y’3aK: -111 15:18:01 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xc000) 15:18:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2f}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f00000000c0)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 387.803419] 9pnet: p9_fd_create_unix (26466): problem connecting socket: éq‰Y’3aK: -111 15:18:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x689}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x4000) 15:18:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8403000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:01 executing program 7: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./bus\x00', r0, r1) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./file0\x00') link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x8800000) 15:18:01 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x86ddffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 388.194577] 9pnet: p9_fd_create_unix (26498): problem connecting socket: éq‰Y’3aK: -111 15:18:01 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xf6ffffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:02 executing program 7: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2900000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000200)=@framed={{}, [@generic={0xe7, 0x2, 0x0, 0x1ff}, @jmp={0x5, 0x0, 0xf, 0x6, 0x0, 0xfffffffffffffffe, 0x10}, @ldst={0x3, 0x0, 0x1, 0x5, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x74, 0x33b9c89db2424280, 0x6, 0x7, 0x80, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0xe2, 0xe1, &(0x7f0000000280)=""/225, 0x40f00, 0x1, [], 0x0, 0xf}, 0x48) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe4020000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:02 executing program 7: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xdc05000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x202, 0x0) ioctl$TIOCSBRK(r0, 0x5427) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x200) accept(r1, &(0x7f0000000200)=@sco, &(0x7f0000000140)=0x80) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000280)) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f00000002c0)='./file0\x00') 15:18:02 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8cffffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:02 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3000000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xb000) 15:18:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 0: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x5, 0x200000) 15:18:03 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x6000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x6000) 15:18:03 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3c00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:03 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000003540)) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xf000) 15:18:03 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x68, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:03 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x5000) 15:18:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xfffffffffffff000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:04 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = socket$vsock_dgram(0x28, 0x2, 0x0) getpeername(r0, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000140)=0x80) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x401, 0x101000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'nr0\x00', 0xd010}) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:04 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:04 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x101161970, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:04 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfffffdef) 15:18:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xfeffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:04 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x74, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:04 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:04 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88a8ffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./bus\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) symlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./bus\x00') prctl$setmm(0x23, 0x0, &(0x7f0000ffc000/0x2000)=nil) chdir(&(0x7f0000000180)='./bus\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 391.179009] 9pnet: p9_fd_create_unix (26677): problem connecting socket: éq‰Y’3aK: -111 15:18:04 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:04 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 391.480027] 9pnet: p9_fd_create_unix (26700): problem connecting socket: éq‰Y’3aK: -111 15:18:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xfffff000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:05 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:05 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x4800, &(0x7f0000000440)={'trans=unix,', {[{@access_uid={'access', 0x3d, r0}}, {@cache_fscache='cache=fscache'}, {@fscache='fscache'}, {@afid={'afid', 0x3d, 0xcb}}, {@uname={'uname', 0x3d, 'vmnet1.)-))B'}}, {@uname={'uname', 0x3d, 'ramfs\x00'}}, {@access_any='access=any'}, {@dfltuid={'dfltuid', 0x3d, r1}}]}}) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1fffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 391.747840] 9pnet: p9_fd_create_unix (26713): problem connecting socket: ./file0: -111 [ 391.805937] 9pnet: p9_fd_create_unix (26722): problem connecting socket: éq‰Y’3aK: -111 15:18:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfdef) 15:18:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88ffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000240)='./bus\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r1, 0x35, &(0x7f0000000140)={0x18, 0x9, 0x3ff, 0x90ed}) bind(r0, &(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x80) 15:18:05 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:05 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7400000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:05 executing program 0: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:05 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x89060000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0x10000, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x9000) 15:18:06 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb402000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:06 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x800000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x200101b9) 15:18:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000140)=0x6e) bind(r0, &(0x7f0000000380)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8) 15:18:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x89ffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:06 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:06 executing program 4: r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000002bc0)='./file0/bus\x00', &(0x7f0000002c00)) creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, r1, 0x1}) chdir(&(0x7f0000000180)='./file0\x00') write$P9_RXATTRCREATE(r2, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') r3 = shmget(0x3, 0x1000, 0x1402, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000280)=""/83) 15:18:06 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6800, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:06 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xf5ffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 392.944431] Unknown ioctl -1072910624 [ 392.979543] Unknown ioctl -1072910624 15:18:06 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:06 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x800e}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:07 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb803, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:07 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x7}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xffffffff000) 15:18:07 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xf000000000000000, 0x1) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x29}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:07 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0xe9bd, 0xfffffffffffff801, 0x9, 0x9, 0x0, 0x1c92, 0x2, 0x8, 0x4, 0x0, 0x4, 0x7, 0x20, 0x9, 0x7ff, 0x80000001, 0x1, 0x40, 0x9, 0x0, 0x4, 0xffffffff, 0x1f, 0xfffffffffffffffb, 0x2, 0x6, 0x100000001, 0x4, 0x2f, 0x5, 0x0, 0x5, 0x43, 0x1, 0x10000, 0x80000000, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x291, 0x1, 0x5, 0x2, 0x3f, 0x6, 0x1}, r1, 0xe, 0xffffffffffffffff, 0x4444753d863d75e7) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:07 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x400000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:07 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffdfd, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xd4d, 0x101000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) connect$llc(r1, &(0x7f0000000140)={0x1a, 0x8, 0x1000, 0x7, 0x9, 0x7fff}, 0x10) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xe00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 394.080897] 9pnet: p9_fd_create_unix (26875): problem connecting socket: éq‰Y’3aK: -111 15:18:08 executing program 6: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:08 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000200)='./bus\x00', &(0x7f00000000c0)='./file0\x00') 15:18:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x88640000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xff10) 15:18:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xffff1f0000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:08 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000200)="068e4f261c4a85effc7df32ec16412857f53659839144cce99383b5316de53d535a4e044b1a510353d363e291b5880dfb22018fe93f037eca5feb88300e6bc2c9d42ae5a8887a911508b03cf49d8c42b34a45b902723c17c785f4aff243b4dc945e4943adb8901eb651956d00092d42b6106bcaf0608c96b1b60a6286a45557462328ed3b708433f579753cc4c5e47f8c635da48d710b3be63d0e0a8828b098670713f60c5b99621d8cf1f0a2269c86a545371674c86d4") chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 394.701960] 9pnet: p9_fd_create_unix (26900): problem connecting socket: éq‰Y’3aK: -111 15:18:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x80040200}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:08 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:08 executing program 6: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xd00}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) pipe(&(0x7f00000002c0)) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:08 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xedc0, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 395.032104] 9pnet: p9_fd_create_unix (26928): problem connecting socket: éq‰Y’3aK: -111 15:18:08 executing program 6: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x38}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000002c0)={@in6={0xa, 0x4e21, 0x100, @local, 0x6}, {&(0x7f0000000200)=""/157, 0x9d}, &(0x7f0000000140), 0x1}, 0xa0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000040)='./bus\x00') 15:18:08 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x90080) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x80000000, {{0x2, 0x4e24, @rand_addr=0x1ff}}}, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000200)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 15:18:08 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xe}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:09 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfdffffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:09 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x140) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='./bus\x00') 15:18:09 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 5: r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfffffffffffffd83) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x47, 0x0, 0xadc8, 0x8, 0x8001, 0x7, 0x5, 0x200, 0xffffffff00000001}, {0xd000, 0x0, 0xb, 0x6, 0x8, 0x6, 0xce4, 0x8, 0x4, 0x5, 0x996, 0x6}, {0x2000, 0x1000, 0xf, 0x81, 0x1e7, 0x6, 0x2, 0x6, 0x7fffffff, 0x1, 0x1ff}, {0x1f000, 0xf000, 0xf, 0x3ff, 0xffffffffffffffff, 0x7ff, 0x2, 0x101, 0x0, 0x795e, 0x0, 0x3}, {0xd000, 0xd000, 0x4, 0xcc700000000, 0x0, 0x1, 0x1000, 0x40d423cc00, 0x2, 0x8, 0x7fff, 0x400}, {0x4000, 0x10000, 0x10, 0x3f, 0x20, 0x3, 0x8, 0x7f, 0x401, 0x7, 0x4}, {0xd000, 0x0, 0xf, 0x2, 0x7, 0x4, 0x40, 0x2, 0x40, 0x4, 0x1f, 0x1}, {0x5000, 0x1000, 0x1f, 0xfffffffffffffffa, 0xd71, 0x100, 0x8, 0xc72, 0x6, 0x6, 0x1, 0x8d20}, {0x100002, 0xf002}, {0xf002}, 0x40000004, 0x0, 0x5, 0x10000, 0x4, 0xd00, 0x0, [0x79, 0x0, 0x8, 0x7fff]}) openat$cgroup_type(r1, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) 15:18:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x500000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:09 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x80) signalfd(r0, &(0x7f0000000000)={0x2}, 0x8) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:09 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x600, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000000c0)={0xd515, 0xdaa5, 0x100000000, 0x306}) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x700000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:09 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 7: r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) lstat(&(0x7f0000002bc0)='./file0/bus\x00', &(0x7f0000002c00)) creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0/bus\x00', &(0x7f00000001c0), 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, r1, 0x1}) chdir(&(0x7f0000000180)='./file0\x00') write$P9_RXATTRCREATE(r2, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') r3 = shmget(0x3, 0x1000, 0x1402, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000280)=""/83) 15:18:09 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 396.138949] FAULT_INJECTION: forcing a failure. [ 396.138949] name failslab, interval 1, probability 0, space 0, times 0 [ 396.150299] CPU: 1 PID: 27014 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 396.157338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.166716] Call Trace: [ 396.169345] dump_stack+0x1c9/0x2b4 [ 396.173002] ? dump_stack_print_info.cold.2+0x52/0x52 [ 396.178219] should_fail.cold.4+0xa/0x11 [ 396.182298] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 396.187436] ? lock_downgrade+0x8f0/0x8f0 [ 396.191632] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 396.197193] ? proc_fail_nth_write+0x9e/0x210 [ 396.201697] ? find_held_lock+0x36/0x1c0 [ 396.205795] ? check_same_owner+0x340/0x340 [ 396.210123] ? __lock_is_held+0xb5/0x140 [ 396.214192] ? rcu_note_context_switch+0x730/0x730 [ 396.219128] __should_failslab+0x124/0x180 [ 396.223364] should_failslab+0x9/0x14 [ 396.227177] __kmalloc_track_caller+0x2c4/0x760 [ 396.231863] ? strncpy_from_user+0x510/0x510 [ 396.236282] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 396.242133] ? strndup_user+0x77/0xd0 [ 396.245951] memdup_user+0x2c/0xa0 [ 396.249501] strndup_user+0x77/0xd0 [ 396.253149] ksys_mount+0x3c/0x140 [ 396.256705] __x64_sys_mount+0xbe/0x150 [ 396.260686] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 396.265712] do_syscall_64+0x1b9/0x820 [ 396.269622] ? finish_task_switch+0x1d3/0x870 [ 396.274128] ? syscall_return_slowpath+0x5e0/0x5e0 [ 396.279085] ? syscall_return_slowpath+0x31d/0x5e0 [ 396.284059] ? __switch_to_asm+0x34/0x70 [ 396.288127] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 396.293515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.298384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.303595] RIP: 0033:0x457089 [ 396.306801] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.325733] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x84}, &(0x7f0000000140)=0x8) [ 396.333470] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 396.340757] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 396.348027] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 396.355293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 396.362587] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000000 [ 396.375200] Unknown ioctl -1072910624 15:18:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x600000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:09 executing program 2: r0 = socket$unix(0x1, 0x0, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:09 executing program 7 (fault-call:3 fault-nth:0): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:10 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0xd) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 15:18:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe0000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 396.724407] FAULT_INJECTION: forcing a failure. [ 396.724407] name failslab, interval 1, probability 0, space 0, times 0 [ 396.735739] CPU: 1 PID: 27057 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 396.742806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.752175] Call Trace: [ 396.754792] dump_stack+0x1c9/0x2b4 [ 396.758444] ? dump_stack_print_info.cold.2+0x52/0x52 [ 396.763655] should_fail.cold.4+0xa/0x11 [ 396.767729] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 396.772847] ? lock_downgrade+0x8f0/0x8f0 [ 396.777003] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 396.782561] ? proc_fail_nth_write+0x9e/0x210 [ 396.787078] ? find_held_lock+0x36/0x1c0 [ 396.791184] ? check_same_owner+0x340/0x340 [ 396.795550] ? __lock_is_held+0xb5/0x140 [ 396.799661] ? rcu_note_context_switch+0x730/0x730 [ 396.804616] __should_failslab+0x124/0x180 [ 396.808874] should_failslab+0x9/0x14 [ 396.812714] __kmalloc_track_caller+0x2c4/0x760 [ 396.817424] ? strncpy_from_user+0x510/0x510 [ 396.821869] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 396.823515] FAULT_INJECTION: forcing a failure. [ 396.823515] name failslab, interval 1, probability 0, space 0, times 0 [ 396.827431] ? strndup_user+0x77/0xd0 [ 396.827451] memdup_user+0x2c/0xa0 [ 396.827469] strndup_user+0x77/0xd0 [ 396.827490] ksys_mount+0x3c/0x140 [ 396.827516] __x64_sys_mount+0xbe/0x150 [ 396.827532] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 396.827561] do_syscall_64+0x1b9/0x820 [ 396.866020] ? syscall_return_slowpath+0x5e0/0x5e0 [ 396.870998] ? syscall_return_slowpath+0x31d/0x5e0 [ 396.875930] ? __switch_to_asm+0x34/0x70 [ 396.879990] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 396.885372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 396.890222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 396.895411] RIP: 0033:0x457089 [ 396.898610] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.917505] RSP: 002b:00007f4a2480fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) socket(0x10, 0x5, 0x1) r1 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="aa64b3bdd23ffc27ce60c0dc6c13be53787580ba70324a97d40c71a4a0c1bc3e61a304e3de2732a76753df7a9b5ebf587476f9ecff2407d6cbbded4dd983ca5ade298b349ff05035adcdf294d776bb5b9eafcb0f8af9e9e8d12790e95521bbe360e00b1b0d072af761c9e6b3f4adff542b9a292fa78af89ee48f7a5826aa0914a68523a2caed8b2fc8611413fbb06f22309a281aaa3d9b61aec1849a583d792f1cda4e2a24f7dc945fb214c4a88468df00cca796dce8b39e63615ddb399c1827913b6b034607ee91508515", 0xcb, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) 15:18:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x89ffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:10 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:10 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 396.925228] RAX: ffffffffffffffda RBX: 00007f4a248106d4 RCX: 0000000000457089 [ 396.932498] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 396.939777] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 396.947044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 396.954306] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000000 [ 396.961591] CPU: 0 PID: 27055 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 396.968609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.977948] Call Trace: [ 396.980544] dump_stack+0x1c9/0x2b4 [ 396.984171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 396.989367] ? __kernel_text_address+0xd/0x40 [ 396.993869] ? unwind_get_return_address+0x61/0xa0 [ 396.998819] should_fail.cold.4+0xa/0x11 [ 397.002907] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 397.008024] ? save_stack+0x43/0xd0 [ 397.011648] ? kasan_kmalloc+0xc4/0xe0 [ 397.015539] ? __kmalloc_track_caller+0x14a/0x760 [ 397.020393] ? memdup_user+0x2c/0xa0 [ 397.024104] ? strndup_user+0x77/0xd0 [ 397.027905] ? graph_lock+0x170/0x170 [ 397.031703] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 397.037066] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 397.042603] ? proc_fail_nth_write+0x9e/0x210 [ 397.047124] ? find_held_lock+0x36/0x1c0 [ 397.051219] ? check_same_owner+0x340/0x340 [ 397.055554] ? lock_release+0xa30/0xa30 [ 397.059532] ? rcu_note_context_switch+0x730/0x730 [ 397.064466] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 397.069488] __should_failslab+0x124/0x180 [ 397.073945] should_failslab+0x9/0x14 [ 397.077765] __kmalloc_track_caller+0x2c4/0x760 [ 397.082436] ? strncpy_from_user+0x510/0x510 [ 397.086841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 397.092392] ? strndup_user+0x77/0xd0 [ 397.096458] memdup_user+0x2c/0xa0 [ 397.100027] strndup_user+0x77/0xd0 [ 397.103659] ksys_mount+0x73/0x140 [ 397.107200] __x64_sys_mount+0xbe/0x150 [ 397.111205] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 397.116221] do_syscall_64+0x1b9/0x820 [ 397.120124] ? finish_task_switch+0x1d3/0x870 [ 397.124625] ? syscall_return_slowpath+0x5e0/0x5e0 [ 397.129554] ? syscall_return_slowpath+0x31d/0x5e0 [ 397.134481] ? __switch_to_asm+0x34/0x70 [ 397.138540] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 397.143914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.148796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 397.153988] RIP: 0033:0x457089 [ 397.157199] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:18:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bpq0\x00', {0x2, 0x4e22, @loopback}}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00') mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:10 executing program 7 (fault-call:3 fault-nth:1): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 397.176125] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 397.183847] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 397.191115] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 397.198386] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 397.205644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 397.212901] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000001 15:18:10 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:10 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:10 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3800}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:11 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:11 executing program 5: lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000100)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c00", 0x5e, 0x3) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) socket$inet6_sctp(0xa, 0x8000005, 0x84) keyctl$session_to_parent(0x12) ioctl$VT_WAITACTIVE(r0, 0x5607) 15:18:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400, 0x0) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000000280)="44399b28046b8c6e1d06b1b5d5d8b3ea2467850d29234f4c6b0ede89986885328b7ed01c2334f26a56ef39300305698274630727423129bd39a4304e1d02c2c149235b5d2e21ff0808fa056df3d6b14c5f51a86cedd89a9fcd703c17b8065b285a18cf8a77b2377bfaa2c4df6da3c79bf76f5fcca6fb551831c05c72f6b03bfe6d4f4b47694dbd2eb9c23dd994a84057536efbcf5b9f491b13f4ae3ff72f34d810f0a1bccedeafb3dc848bad9a26c4a90eda", 0xb2}], 0x2, 0x0, 0x0, 0x20000804}, 0x20000000) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 397.634092] FAULT_INJECTION: forcing a failure. [ 397.634092] name failslab, interval 1, probability 0, space 0, times 0 [ 397.645526] CPU: 0 PID: 27092 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 397.652546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.661934] Call Trace: [ 397.664518] dump_stack+0x1c9/0x2b4 [ 397.668176] ? dump_stack_print_info.cold.2+0x52/0x52 [ 397.673357] ? __kernel_text_address+0xd/0x40 [ 397.677839] ? unwind_get_return_address+0x61/0xa0 [ 397.682774] should_fail.cold.4+0xa/0x11 [ 397.686823] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 397.691914] ? save_stack+0x43/0xd0 [ 397.695524] ? kasan_kmalloc+0xc4/0xe0 [ 397.699409] ? __kmalloc_track_caller+0x14a/0x760 [ 397.704238] ? memdup_user+0x2c/0xa0 [ 397.707940] ? strndup_user+0x77/0xd0 [ 397.711728] ? graph_lock+0x170/0x170 [ 397.715522] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 397.720872] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 397.726416] ? proc_fail_nth_write+0x9e/0x210 [ 397.730939] ? find_held_lock+0x36/0x1c0 [ 397.735047] ? check_same_owner+0x340/0x340 [ 397.739357] ? lock_release+0xa30/0xa30 [ 397.743318] ? rcu_note_context_switch+0x730/0x730 [ 397.748231] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 397.753239] __should_failslab+0x124/0x180 [ 397.757465] should_failslab+0x9/0x14 [ 397.761280] __kmalloc_track_caller+0x2c4/0x760 [ 397.765944] ? strncpy_from_user+0x510/0x510 [ 397.770335] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 397.775852] ? strndup_user+0x77/0xd0 [ 397.779633] memdup_user+0x2c/0xa0 [ 397.783152] strndup_user+0x77/0xd0 [ 397.786784] ksys_mount+0x73/0x140 [ 397.790344] __x64_sys_mount+0xbe/0x150 [ 397.794310] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 397.799328] do_syscall_64+0x1b9/0x820 [ 397.803196] ? finish_task_switch+0x1d3/0x870 [ 397.807688] ? syscall_return_slowpath+0x5e0/0x5e0 [ 397.812615] ? syscall_return_slowpath+0x31d/0x5e0 [ 397.817541] ? __switch_to_asm+0x34/0x70 [ 397.821580] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 397.826941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.831777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 397.836962] RIP: 0033:0x457089 [ 397.840139] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.859026] RSP: 002b:00007f4a247eec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 397.866714] RAX: ffffffffffffffda RBX: 00007f4a247ef6d4 RCX: 0000000000457089 [ 397.873965] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 397.881217] RBP: 0000000000930140 R08: 0000000020000140 R09: 0000000000000000 [ 397.888467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 397.895717] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000001 [ 397.904605] FAULT_INJECTION: forcing a failure. [ 397.904605] name failslab, interval 1, probability 0, space 0, times 0 [ 397.916053] CPU: 0 PID: 27093 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 397.923083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.932434] Call Trace: 15:18:11 executing program 7 (fault-call:3 fault-nth:2): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 397.935049] dump_stack+0x1c9/0x2b4 [ 397.938699] ? dump_stack_print_info.cold.2+0x52/0x52 [ 397.943904] ? __kernel_text_address+0xd/0x40 [ 397.948390] ? unwind_get_return_address+0x61/0xa0 [ 397.953334] should_fail.cold.4+0xa/0x11 [ 397.957396] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 397.962493] ? save_stack+0xa9/0xd0 [ 397.966533] ? kasan_kmalloc+0xc4/0xe0 [ 397.970420] ? __kmalloc_track_caller+0x14a/0x760 [ 397.976390] ? memdup_user+0x2c/0xa0 [ 397.980087] ? strndup_user+0x77/0xd0 [ 397.983875] ? graph_lock+0x170/0x170 [ 397.987691] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 397.993247] ? proc_fail_nth_write+0x9e/0x210 [ 397.997771] ? find_held_lock+0x36/0x1c0 [ 398.001831] ? check_same_owner+0x340/0x340 [ 398.006151] ? lock_release+0xa30/0xa30 [ 398.010133] ? check_same_owner+0x340/0x340 [ 398.014473] ? rcu_note_context_switch+0x730/0x730 [ 398.019410] ? __check_object_size+0x9d/0x5f2 [ 398.023896] __should_failslab+0x124/0x180 [ 398.028134] should_failslab+0x9/0x14 [ 398.031925] kmem_cache_alloc_trace+0x2cb/0x780 [ 398.036677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.042234] ? _copy_from_user+0xdf/0x150 [ 398.046399] copy_mount_options+0x5f/0x380 [ 398.050626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.056161] ksys_mount+0xd0/0x140 [ 398.059692] __x64_sys_mount+0xbe/0x150 [ 398.063689] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 398.068704] do_syscall_64+0x1b9/0x820 [ 398.072591] ? finish_task_switch+0x1d3/0x870 [ 398.077099] ? syscall_return_slowpath+0x5e0/0x5e0 [ 398.082043] ? syscall_return_slowpath+0x31d/0x5e0 [ 398.086970] ? __switch_to_asm+0x34/0x70 [ 398.091044] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 398.096409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.101254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.106439] RIP: 0033:0x457089 [ 398.109615] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.128506] RSP: 002b:00007f263d2a9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:11 executing program 0 (fault-call:3 fault-nth:3): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 398.136202] RAX: ffffffffffffffda RBX: 00007f263d2aa6d4 RCX: 0000000000457089 [ 398.143460] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 398.150711] RBP: 0000000000930140 R08: 0000000020000140 R09: 0000000000000000 [ 398.157961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 398.165211] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000002 15:18:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x543}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:11 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 398.267685] 9pnet: p9_fd_create_unix (27099): problem connecting socket: éq‰Y’3aK: -111 15:18:11 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3ee, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:11 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 398.477056] FAULT_INJECTION: forcing a failure. [ 398.477056] name failslab, interval 1, probability 0, space 0, times 0 [ 398.488403] CPU: 1 PID: 27119 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 398.495430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.504780] Call Trace: [ 398.507381] dump_stack+0x1c9/0x2b4 [ 398.511034] ? dump_stack_print_info.cold.2+0x52/0x52 [ 398.516243] ? __kernel_text_address+0xd/0x40 [ 398.520779] ? perf_trace_lock+0xde/0x920 [ 398.524953] should_fail.cold.4+0xa/0x11 [ 398.529039] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 398.534175] ? zap_class+0x740/0x740 [ 398.536685] FAULT_INJECTION: forcing a failure. [ 398.536685] name failslab, interval 1, probability 0, space 0, times 0 [ 398.537914] ? save_stack+0xa9/0xd0 [ 398.537935] ? kasan_kmalloc+0xc4/0xe0 [ 398.537955] ? __kmalloc_track_caller+0x14a/0x760 [ 398.537982] ? memdup_user+0x2c/0xa0 [ 398.565250] ? strndup_user+0x77/0xd0 [ 398.569064] ? graph_lock+0x170/0x170 [ 398.572879] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 398.578429] ? proc_fail_nth_write+0x9e/0x210 [ 398.582947] ? find_held_lock+0x36/0x1c0 [ 398.587044] ? check_same_owner+0x340/0x340 [ 398.591372] ? lock_release+0xa30/0xa30 [ 398.595350] ? check_same_owner+0x340/0x340 [ 398.599677] ? rcu_note_context_switch+0x730/0x730 [ 398.604626] ? __check_object_size+0x9d/0x5f2 [ 398.609136] __should_failslab+0x124/0x180 [ 398.613380] should_failslab+0x9/0x14 [ 398.617189] kmem_cache_alloc_trace+0x2cb/0x780 [ 398.621869] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.627411] ? _copy_from_user+0xdf/0x150 [ 398.631571] copy_mount_options+0x5f/0x380 [ 398.635815] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.641361] ksys_mount+0xd0/0x140 [ 398.644911] __x64_sys_mount+0xbe/0x150 [ 398.648890] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 398.653931] do_syscall_64+0x1b9/0x820 [ 398.657826] ? finish_task_switch+0x1d3/0x870 [ 398.662328] ? syscall_return_slowpath+0x5e0/0x5e0 [ 398.667267] ? syscall_return_slowpath+0x31d/0x5e0 [ 398.672205] ? __switch_to_asm+0x34/0x70 [ 398.676270] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 398.681652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.686513] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.691706] RIP: 0033:0x457089 [ 398.694906] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.713809] RSP: 002b:00007f4a2480fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.721526] RAX: ffffffffffffffda RBX: 00007f4a248106d4 RCX: 0000000000457089 [ 398.728798] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 398.736067] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 398.743336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 398.750605] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000002 [ 398.757905] CPU: 0 PID: 27121 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 398.764934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.774280] Call Trace: [ 398.776873] dump_stack+0x1c9/0x2b4 [ 398.780504] ? dump_stack_print_info.cold.2+0x52/0x52 [ 398.785699] ? perf_trace_lock+0xde/0x920 [ 398.789855] should_fail.cold.4+0xa/0x11 [ 398.793923] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 398.799059] ? lock_downgrade+0x8f0/0x8f0 [ 398.803219] ? rcu_is_watching+0x8c/0x150 [ 398.807376] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 398.812057] ? find_held_lock+0x36/0x1c0 [ 398.816141] ? check_same_owner+0x340/0x340 [ 398.820466] ? rcu_note_context_switch+0x730/0x730 [ 398.825397] ? save_stack+0xa9/0xd0 [ 398.829049] __should_failslab+0x124/0x180 [ 398.833289] should_failslab+0x9/0x14 [ 398.837095] kmem_cache_alloc+0x2af/0x760 [ 398.841254] getname_flags+0xd0/0x5a0 [ 398.845065] user_path_at_empty+0x2d/0x50 [ 398.849216] do_mount+0x17a/0x30e0 [ 398.852785] ? copy_mount_string+0x40/0x40 [ 398.857034] ? rcu_pm_notify+0xc0/0xc0 [ 398.860933] ? copy_mount_options+0x5f/0x380 [ 398.865355] ? rcu_read_lock_sched_held+0x108/0x120 [ 398.870380] ? kmem_cache_alloc_trace+0x616/0x780 [ 398.875234] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.880779] ? copy_mount_options+0x285/0x380 [ 398.885287] ksys_mount+0x12d/0x140 [ 398.888961] __x64_sys_mount+0xbe/0x150 [ 398.892932] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 398.897968] do_syscall_64+0x1b9/0x820 [ 398.901888] ? syscall_return_slowpath+0x5e0/0x5e0 [ 398.906817] ? syscall_return_slowpath+0x31d/0x5e0 [ 398.911758] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 398.917127] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.921985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.927188] RIP: 0033:0x457089 [ 398.930387] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.949300] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 398.957028] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 398.964292] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 398.971554] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 15:18:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffff87}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xffffff92) [ 398.978825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 398.986094] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000003 15:18:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x1ff, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x9) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x70, 0x0, 0x8000, 0x7e, 0x1, 0x0, 0x0, 0x8008, 0x9, 0x3f, 0x1, 0x2, 0xff, 0x1, 0x8, 0x937, 0x8, 0xfff, 0x1ff, 0x1f, 0x1, 0x5, 0x0, 0x0, 0x1ff, 0x7e, 0x78, 0x5, 0x0, 0x7, 0x3, 0x5, 0x8001, 0x1, 0x40, 0xfe, 0xffffffffffff8000, 0x0, 0x2, 0x0, @perf_config_ext={0x80000001, 0x9}, 0x28920, 0x2, 0x80000001, 0x6, 0x9, 0x0, 0x8001}, r2, 0xf, r1, 0xb) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') fcntl$setown(r0, 0x8, r2) 15:18:12 executing program 7 (fault-call:3 fault-nth:3): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:12 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:12 executing program 0 (fault-call:3 fault-nth:4): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 399.057660] 9pnet: p9_fd_create_unix (27129): problem connecting socket: éq‰Y’3aK: -111 15:18:12 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x84ffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:12 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x700000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 399.323733] FAULT_INJECTION: forcing a failure. [ 399.323733] name failslab, interval 1, probability 0, space 0, times 0 [ 399.335201] CPU: 0 PID: 27154 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 399.342213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.351563] Call Trace: [ 399.354143] dump_stack+0x1c9/0x2b4 [ 399.357783] ? dump_stack_print_info.cold.2+0x52/0x52 [ 399.362990] ? perf_trace_lock+0xde/0x920 [ 399.367138] should_fail.cold.4+0xa/0x11 [ 399.371220] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 399.376330] ? lock_downgrade+0x8f0/0x8f0 [ 399.380484] ? rcu_is_watching+0x8c/0x150 [ 399.384642] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 399.389344] ? find_held_lock+0x36/0x1c0 [ 399.393447] ? check_same_owner+0x340/0x340 [ 399.397803] ? rcu_note_context_switch+0x730/0x730 [ 399.402757] ? save_stack+0xa9/0xd0 [ 399.406405] __should_failslab+0x124/0x180 [ 399.410662] should_failslab+0x9/0x14 [ 399.414497] kmem_cache_alloc+0x2af/0x760 [ 399.418682] getname_flags+0xd0/0x5a0 [ 399.422513] user_path_at_empty+0x2d/0x50 [ 399.426686] do_mount+0x17a/0x30e0 [ 399.430257] ? copy_mount_string+0x40/0x40 [ 399.434516] ? rcu_pm_notify+0xc0/0xc0 [ 399.438441] ? copy_mount_options+0x5f/0x380 [ 399.442871] ? rcu_read_lock_sched_held+0x108/0x120 [ 399.447910] ? kmem_cache_alloc_trace+0x616/0x780 [ 399.452799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.458359] ? copy_mount_options+0x285/0x380 [ 399.462889] ksys_mount+0x12d/0x140 [ 399.466547] __x64_sys_mount+0xbe/0x150 [ 399.470538] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 399.475656] do_syscall_64+0x1b9/0x820 [ 399.479563] ? finish_task_switch+0x1d3/0x870 [ 399.484087] ? syscall_return_slowpath+0x5e0/0x5e0 [ 399.489056] ? syscall_return_slowpath+0x31d/0x5e0 [ 399.494031] ? __switch_to_asm+0x34/0x70 [ 399.498125] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 399.503509] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.508385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.513586] RIP: 0033:0x457089 [ 399.516792] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.535707] RSP: 002b:00007f4a2480fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 399.543446] RAX: ffffffffffffffda RBX: 00007f4a248106d4 RCX: 0000000000457089 [ 399.550725] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 399.558073] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 399.565376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 399.572657] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000003 15:18:13 executing program 7 (fault-call:3 fault-nth:4): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000480)="c6bd65ccf704a0b34293dc4692249df68f550f") chdir(&(0x7f0000000180)='./file0\x00') stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() lchown(&(0x7f0000000340)='./bus\x00', r0, r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x100, @loopback, 0xcf93}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e21, 0x40, @loopback, 0x9}], 0x48) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000000c0)={'irlan0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000f00300000802000000000000f0000000080200000000000020030000ff0f000020030000200300002003000004000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff020000000000000000000000000001ff010000000000000000000000000001ff000000ffffff00ffffff00ffffffffffffffffff000000ffffffff000000ff76657468305f746f5f626f6e640000006772657461703000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00040102000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800686c000000000000000000000000000000000000000000000000000000000000000000000000280053594e50524f585900000000000000000000000000000000000000000000040003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000028006d680000000000000000000000000000000000000000000000000000000000020000000000002800434c41535349465900000000000000000000000000000000000000000000d40d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x450) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/110, 0x6e) getegid() link(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='./file0\x00') [ 399.612704] 9pnet: p9_fd_create_unix (27158): problem connecting socket: éq‰Y’3aK: -111 15:18:13 executing program 6 (fault-call:3 fault-nth:0): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 399.701590] FAULT_INJECTION: forcing a failure. [ 399.701590] name failslab, interval 1, probability 0, space 0, times 0 [ 399.713999] CPU: 0 PID: 27161 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 399.721038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.730377] Call Trace: [ 399.732981] dump_stack+0x1c9/0x2b4 [ 399.736600] ? dump_stack_print_info.cold.2+0x52/0x52 [ 399.741785] should_fail.cold.4+0xa/0x11 [ 399.745839] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 399.750932] ? print_usage_bug+0xc0/0xc0 [ 399.754978] ? rcu_is_watching+0x8c/0x150 [ 399.759144] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 399.763810] ? is_bpf_text_address+0xd7/0x170 [ 399.768316] ? find_held_lock+0x36/0x1c0 [ 399.772424] ? check_same_owner+0x340/0x340 [ 399.776772] ? kasan_slab_free+0xe/0x10 [ 399.780776] ? kmem_cache_free+0x86/0x2d0 [ 399.784941] ? putname+0xf2/0x130 [ 399.788412] ? rcu_note_context_switch+0x730/0x730 [ 399.793355] ? ksys_mount+0x12d/0x140 [ 399.797231] ? __x64_sys_mount+0xbe/0x150 [ 399.801391] __should_failslab+0x124/0x180 [ 399.805645] should_failslab+0x9/0x14 [ 399.809465] kmem_cache_alloc+0x2af/0x760 [ 399.813605] ? kasan_check_write+0x14/0x20 [ 399.817832] ? do_raw_spin_lock+0xc1/0x200 [ 399.822060] alloc_vfsmnt+0xe8/0x9f0 [ 399.825782] ? mnt_free_id.isra.27+0x60/0x60 [ 399.830205] ? graph_lock+0x170/0x170 [ 399.834033] ? rcu_pm_notify+0xc0/0xc0 [ 399.837916] ? putname+0xf2/0x130 [ 399.841374] ? find_held_lock+0x36/0x1c0 [ 399.845446] ? lock_downgrade+0x8f0/0x8f0 [ 399.849585] ? lock_release+0xa30/0xa30 [ 399.853575] ? mpi_free.cold.1+0x19/0x19 [ 399.857699] vfs_kern_mount.part.34+0x90/0x4e0 [ 399.862314] ? may_umount+0xb0/0xb0 [ 399.865950] ? _raw_read_unlock+0x22/0x30 [ 399.870094] ? __get_fs_type+0x97/0xc0 [ 399.873997] do_mount+0x581/0x30e0 [ 399.877557] ? copy_mount_string+0x40/0x40 [ 399.881846] ? copy_mount_options+0x5f/0x380 [ 399.886281] ? rcu_read_lock_sched_held+0x108/0x120 [ 399.891323] ? kmem_cache_alloc_trace+0x616/0x780 [ 399.896182] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 399.901704] ? _copy_from_user+0xdf/0x150 [ 399.905851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.911392] ? copy_mount_options+0x285/0x380 [ 399.915898] ksys_mount+0x12d/0x140 [ 399.919543] __x64_sys_mount+0xbe/0x150 [ 399.923510] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 399.928532] do_syscall_64+0x1b9/0x820 [ 399.932420] ? finish_task_switch+0x1d3/0x870 [ 399.936904] ? syscall_return_slowpath+0x5e0/0x5e0 [ 399.941831] ? syscall_return_slowpath+0x31d/0x5e0 [ 399.946794] ? __switch_to_asm+0x34/0x70 [ 399.950852] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 399.956215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.961068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.966666] RIP: 0033:0x457089 [ 399.969854] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.988760] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:13 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:13 executing program 0 (fault-call:3 fault-nth:5): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 399.996474] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 400.003754] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 400.011037] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 400.018297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 400.025586] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000004 15:18:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x87ffffff00000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:13 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x8000) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x29, 0x32, 0x2, 0xb, 0x8, 0x1, 0x1, 0x97}) openat$cgroup_ro(r1, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) 15:18:13 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1f00000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 400.334094] FAULT_INJECTION: forcing a failure. [ 400.334094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.345961] CPU: 0 PID: 27184 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 400.352983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.362340] Call Trace: [ 400.364920] dump_stack+0x1c9/0x2b4 [ 400.368546] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.373729] should_fail.cold.4+0xa/0x11 [ 400.377808] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.382917] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 400.387575] ? lock_downgrade+0x8f0/0x8f0 [ 400.391710] ? trace_hardirqs_on+0x10/0x10 [ 400.395946] ? graph_lock+0x170/0x170 [ 400.399770] ? print_usage_bug+0xc0/0xc0 [ 400.403830] ? find_held_lock+0x36/0x1c0 [ 400.407902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.413430] ? should_fail+0x246/0xd86 [ 400.417320] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.422428] __alloc_pages_nodemask+0x36e/0xdb0 [ 400.427084] ? kasan_check_read+0x11/0x20 [ 400.431233] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 400.436251] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 400.440943] ? find_held_lock+0x36/0x1c0 [ 400.445031] ? check_same_owner+0x340/0x340 [ 400.449362] cache_grow_begin+0x91/0x710 [ 400.453464] kmem_cache_alloc+0x689/0x760 [ 400.457683] getname_flags+0xd0/0x5a0 [ 400.461497] user_path_at_empty+0x2d/0x50 [ 400.465643] do_mount+0x17a/0x30e0 [ 400.469191] ? copy_mount_string+0x40/0x40 [ 400.473443] ? rcu_pm_notify+0xc0/0xc0 [ 400.477349] ? copy_mount_options+0x5f/0x380 [ 400.481771] ? rcu_read_lock_sched_held+0x108/0x120 [ 400.486809] ? kmem_cache_alloc_trace+0x616/0x780 [ 400.491685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 400.497228] ? _copy_from_user+0xdf/0x150 [ 400.501383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.506919] ? copy_mount_options+0x285/0x380 [ 400.511404] ksys_mount+0x12d/0x140 [ 400.515040] __x64_sys_mount+0xbe/0x150 [ 400.519023] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 400.524066] do_syscall_64+0x1b9/0x820 [ 400.527942] ? finish_task_switch+0x1d3/0x870 [ 400.532426] ? syscall_return_slowpath+0x5e0/0x5e0 [ 400.537350] ? syscall_return_slowpath+0x31d/0x5e0 [ 400.542280] ? __switch_to_asm+0x34/0x70 [ 400.546390] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 400.551762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.556595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.561775] RIP: 0033:0x457089 [ 400.564996] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.583916] RSP: 002b:00007f4a2480fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 400.591617] RAX: ffffffffffffffda RBX: 00007f4a248106d4 RCX: 0000000000457089 [ 400.598876] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 400.606148] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 400.613406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 400.620669] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000004 [ 400.677990] FAULT_INJECTION: forcing a failure. [ 400.677990] name failslab, interval 1, probability 0, space 0, times 0 [ 400.689353] CPU: 1 PID: 27191 Comm: syz-executor6 Not tainted 4.18.0+ #190 [ 400.696449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.705798] Call Trace: [ 400.708408] dump_stack+0x1c9/0x2b4 [ 400.712039] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.717238] ? perf_trace_lock+0xde/0x920 [ 400.721422] should_fail.cold.4+0xa/0x11 [ 400.725476] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.730582] ? lock_downgrade+0x8f0/0x8f0 [ 400.734730] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.740286] ? proc_fail_nth_write+0x9e/0x210 [ 400.744800] ? find_held_lock+0x36/0x1c0 [ 400.748859] ? check_same_owner+0x340/0x340 [ 400.753166] ? rcu_note_context_switch+0x730/0x730 [ 400.758110] __should_failslab+0x124/0x180 [ 400.762349] should_failslab+0x9/0x14 [ 400.766137] __kmalloc_track_caller+0x2c4/0x760 [ 400.770805] ? strncpy_from_user+0x510/0x510 [ 400.775213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.780736] ? strndup_user+0x77/0xd0 [ 400.784545] memdup_user+0x2c/0xa0 [ 400.788092] strndup_user+0x77/0xd0 [ 400.791755] ksys_mount+0x3c/0x140 [ 400.795298] __x64_sys_mount+0xbe/0x150 [ 400.799281] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 400.804311] do_syscall_64+0x1b9/0x820 [ 400.808192] ? finish_task_switch+0x1d3/0x870 [ 400.812701] ? syscall_return_slowpath+0x5e0/0x5e0 [ 400.817653] ? syscall_return_slowpath+0x31d/0x5e0 [ 400.822586] ? __switch_to_asm+0x34/0x70 [ 400.826634] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 400.832014] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.836869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.842063] RIP: 0033:0x457089 [ 400.845271] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.864261] RSP: 002b:00007fb491733c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:14 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 400.872001] RAX: ffffffffffffffda RBX: 00007fb4917346d4 RCX: 0000000000457089 [ 400.879297] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 400.886579] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 400.893874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 400.901137] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000000 15:18:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2b000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:14 executing program 6 (fault-call:3 fault-nth:1): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 400.946667] FAULT_INJECTION: forcing a failure. [ 400.946667] name failslab, interval 1, probability 0, space 0, times 0 [ 400.957985] CPU: 0 PID: 27194 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 400.965036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.974400] Call Trace: [ 400.977018] dump_stack+0x1c9/0x2b4 [ 400.980661] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.985861] ? perf_trace_lock+0xde/0x920 [ 400.990025] should_fail.cold.4+0xa/0x11 [ 400.994087] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.999181] ? print_usage_bug+0xc0/0xc0 [ 401.003239] ? rcu_is_watching+0x8c/0x150 [ 401.007401] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 401.012068] ? zap_class+0x740/0x740 [ 401.015805] ? is_bpf_text_address+0xd7/0x170 [ 401.020328] ? find_held_lock+0x36/0x1c0 [ 401.024417] ? check_same_owner+0x340/0x340 [ 401.028728] ? kasan_slab_free+0xe/0x10 [ 401.032715] ? kmem_cache_free+0x86/0x2d0 [ 401.036892] ? putname+0xf2/0x130 [ 401.040369] ? rcu_note_context_switch+0x730/0x730 [ 401.045309] ? ksys_mount+0x12d/0x140 [ 401.049128] ? __x64_sys_mount+0xbe/0x150 [ 401.053312] __should_failslab+0x124/0x180 [ 401.057543] should_failslab+0x9/0x14 [ 401.061342] kmem_cache_alloc+0x2af/0x760 [ 401.065507] ? perf_trace_lock+0xde/0x920 [ 401.069658] ? kasan_check_write+0x14/0x20 [ 401.074152] ? do_raw_spin_lock+0xc1/0x200 [ 401.078407] alloc_vfsmnt+0xe8/0x9f0 [ 401.082138] ? mnt_free_id.isra.27+0x60/0x60 [ 401.086540] ? graph_lock+0x170/0x170 [ 401.090328] ? rcu_pm_notify+0xc0/0xc0 [ 401.094207] ? putname+0xf2/0x130 [ 401.097693] ? find_held_lock+0x36/0x1c0 [ 401.101797] ? lock_downgrade+0x8f0/0x8f0 [ 401.105947] ? lock_release+0xa30/0xa30 [ 401.109914] ? mpi_free.cold.1+0x19/0x19 [ 401.113981] vfs_kern_mount.part.34+0x90/0x4e0 [ 401.118577] ? may_umount+0xb0/0xb0 [ 401.122196] ? _raw_read_unlock+0x22/0x30 [ 401.126335] ? __get_fs_type+0x97/0xc0 [ 401.130212] do_mount+0x581/0x30e0 [ 401.133744] ? copy_mount_string+0x40/0x40 [ 401.137986] ? copy_mount_options+0x5f/0x380 [ 401.142396] ? rcu_read_lock_sched_held+0x108/0x120 [ 401.147416] ? kmem_cache_alloc_trace+0x616/0x780 [ 401.152271] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 401.157818] ? _copy_from_user+0xdf/0x150 [ 401.161978] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.167505] ? copy_mount_options+0x285/0x380 [ 401.171994] ksys_mount+0x12d/0x140 [ 401.175638] __x64_sys_mount+0xbe/0x150 [ 401.179603] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 401.184635] do_syscall_64+0x1b9/0x820 [ 401.188514] ? finish_task_switch+0x1d3/0x870 [ 401.193044] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.197989] ? syscall_return_slowpath+0x31d/0x5e0 [ 401.202922] ? __switch_to_asm+0x34/0x70 [ 401.206986] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 401.212345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.217980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.223184] RIP: 0033:0x457089 [ 401.226366] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:18:14 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000200)='./bus\x00', 0x80000000000000) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:14 executing program 0 (fault-call:3 fault-nth:6): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 401.245285] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.253026] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 401.260288] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 401.267557] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 401.274822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 401.282101] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000005 15:18:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ustat(0x7, &(0x7f0000000080)) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 401.584796] FAULT_INJECTION: forcing a failure. [ 401.584796] name failslab, interval 1, probability 0, space 0, times 0 [ 401.596130] CPU: 0 PID: 27222 Comm: syz-executor6 Not tainted 4.18.0+ #190 [ 401.603188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.612543] Call Trace: [ 401.615156] dump_stack+0x1c9/0x2b4 [ 401.618827] ? dump_stack_print_info.cold.2+0x52/0x52 [ 401.624034] ? __kernel_text_address+0xd/0x40 [ 401.628543] ? unwind_get_return_address+0x61/0xa0 [ 401.633484] should_fail.cold.4+0xa/0x11 [ 401.633509] FAULT_INJECTION: forcing a failure. [ 401.633509] name failslab, interval 1, probability 0, space 0, times 0 [ 401.637557] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.637581] ? save_stack+0x43/0xd0 [ 401.637606] ? kasan_kmalloc+0xc4/0xe0 [ 401.661374] ? __kmalloc_track_caller+0x14a/0x760 [ 401.666214] ? memdup_user+0x2c/0xa0 [ 401.669930] ? strndup_user+0x77/0xd0 [ 401.673740] ? graph_lock+0x170/0x170 [ 401.677553] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.682937] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 401.688482] ? proc_fail_nth_write+0x9e/0x210 [ 401.692988] ? find_held_lock+0x36/0x1c0 [ 401.697087] ? check_same_owner+0x340/0x340 [ 401.701411] ? lock_release+0xa30/0xa30 [ 401.705387] ? rcu_note_context_switch+0x730/0x730 [ 401.710324] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 401.715402] __should_failslab+0x124/0x180 [ 401.719668] should_failslab+0x9/0x14 [ 401.723473] __kmalloc_track_caller+0x2c4/0x760 [ 401.728151] ? strncpy_from_user+0x510/0x510 [ 401.732573] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 401.738111] ? strndup_user+0x77/0xd0 [ 401.741920] memdup_user+0x2c/0xa0 [ 401.745477] strndup_user+0x77/0xd0 [ 401.749110] ksys_mount+0x73/0x140 [ 401.752660] __x64_sys_mount+0xbe/0x150 [ 401.756641] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 401.761659] do_syscall_64+0x1b9/0x820 [ 401.765546] ? finish_task_switch+0x1d3/0x870 [ 401.770060] ? syscall_return_slowpath+0x5e0/0x5e0 [ 401.775000] ? syscall_return_slowpath+0x31d/0x5e0 [ 401.779947] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 401.785322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.790188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.795375] RIP: 0033:0x457089 [ 401.798575] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.817482] RSP: 002b:00007fb491733c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.825195] RAX: ffffffffffffffda RBX: 00007fb4917346d4 RCX: 0000000000457089 15:18:15 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5003000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3c000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 401.832466] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 401.839735] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 401.847033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 401.854300] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000001 [ 401.861602] CPU: 1 PID: 27226 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 401.868633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.877997] Call Trace: [ 401.880614] dump_stack+0x1c9/0x2b4 15:18:15 executing program 6 (fault-call:3 fault-nth:2): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 401.884258] ? dump_stack_print_info.cold.2+0x52/0x52 [ 401.889466] ? trace_hardirqs_on+0x10/0x10 [ 401.893731] should_fail.cold.4+0xa/0x11 [ 401.897816] ? unwind_get_return_address+0x61/0xa0 [ 401.902784] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 401.907914] ? save_stack+0x43/0xd0 [ 401.911549] ? kasan_kmalloc+0xc4/0xe0 [ 401.915460] ? kasan_slab_alloc+0x12/0x20 [ 401.919619] ? kmem_cache_alloc+0x12e/0x760 [ 401.923948] ? alloc_vfsmnt+0xe8/0x9f0 [ 401.927858] ? find_held_lock+0x36/0x1c0 [ 401.928972] 9pnet: p9_fd_create_unix (27229): problem connecting socket: éq‰Y’3aK: -111 [ 401.931953] ? check_same_owner+0x340/0x340 [ 401.931972] ? rcu_note_context_switch+0x730/0x730 [ 401.931993] __should_failslab+0x124/0x180 [ 401.953809] should_failslab+0x9/0x14 [ 401.957641] __kmalloc_track_caller+0x2c4/0x760 [ 401.962332] ? kasan_check_read+0x11/0x20 [ 401.966828] ? do_raw_spin_unlock+0xa7/0x2f0 [ 401.971252] ? kstrdup_const+0x66/0x80 [ 401.975157] kstrdup+0x39/0x70 [ 401.978366] kstrdup_const+0x66/0x80 [ 401.982096] alloc_vfsmnt+0x1bb/0x9f0 [ 401.985915] ? mnt_free_id.isra.27+0x60/0x60 [ 401.990338] ? graph_lock+0x170/0x170 [ 401.994150] ? rcu_pm_notify+0xc0/0xc0 [ 401.998046] ? putname+0xf2/0x130 [ 402.001506] ? find_held_lock+0x36/0x1c0 [ 402.005585] ? lock_downgrade+0x8f0/0x8f0 [ 402.009773] ? lock_release+0xa30/0xa30 [ 402.013798] ? mpi_free.cold.1+0x19/0x19 [ 402.015381] FAULT_INJECTION: forcing a failure. [ 402.015381] name failslab, interval 1, probability 0, space 0, times 0 [ 402.017871] vfs_kern_mount.part.34+0x90/0x4e0 [ 402.017890] ? may_umount+0xb0/0xb0 [ 402.017907] ? _raw_read_unlock+0x22/0x30 [ 402.017922] ? __get_fs_type+0x97/0xc0 [ 402.017943] do_mount+0x581/0x30e0 [ 402.017964] ? copy_mount_string+0x40/0x40 [ 402.017989] ? copy_mount_options+0x5f/0x380 [ 402.018016] ? rcu_read_lock_sched_held+0x108/0x120 [ 402.062612] ? kmem_cache_alloc_trace+0x616/0x780 [ 402.067490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.073053] ? copy_mount_options+0x285/0x380 [ 402.077559] ksys_mount+0x12d/0x140 [ 402.081206] __x64_sys_mount+0xbe/0x150 [ 402.085179] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 402.090200] do_syscall_64+0x1b9/0x820 [ 402.094094] ? finish_task_switch+0x1d3/0x870 [ 402.098601] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.103544] ? syscall_return_slowpath+0x31d/0x5e0 [ 402.108480] ? __switch_to_asm+0x34/0x70 [ 402.112549] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 402.117941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.122798] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.127992] RIP: 0033:0x457089 [ 402.131193] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.150101] RSP: 002b:00007f263d2a9c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.157825] RAX: ffffffffffffffda RBX: 00007f263d2aa6d4 RCX: 0000000000457089 [ 402.165099] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 402.172370] RBP: 0000000000930140 R08: 0000000020000140 R09: 0000000000000000 [ 402.179643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 402.186913] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000006 [ 402.194206] CPU: 0 PID: 27232 Comm: syz-executor6 Not tainted 4.18.0+ #190 [ 402.201237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.210590] Call Trace: [ 402.213196] dump_stack+0x1c9/0x2b4 [ 402.216841] ? dump_stack_print_info.cold.2+0x52/0x52 [ 402.222067] ? __kernel_text_address+0xd/0x40 [ 402.226665] ? unwind_get_return_address+0x61/0xa0 [ 402.231635] should_fail.cold.4+0xa/0x11 [ 402.235702] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.240812] ? save_stack+0xa9/0xd0 [ 402.244445] ? kasan_kmalloc+0xc4/0xe0 [ 402.248341] ? __kmalloc_track_caller+0x14a/0x760 [ 402.253184] ? memdup_user+0x2c/0xa0 [ 402.256905] ? strndup_user+0x77/0xd0 [ 402.260714] ? graph_lock+0x170/0x170 [ 402.264530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 402.270072] ? proc_fail_nth_write+0x9e/0x210 [ 402.274578] ? find_held_lock+0x36/0x1c0 [ 402.278671] ? check_same_owner+0x340/0x340 [ 402.282997] ? lock_release+0xa30/0xa30 [ 402.286984] ? check_same_owner+0x340/0x340 [ 402.291317] ? rcu_note_context_switch+0x730/0x730 [ 402.296248] ? __check_object_size+0x9d/0x5f2 [ 402.300771] __should_failslab+0x124/0x180 [ 402.305024] should_failslab+0x9/0x14 [ 402.308830] kmem_cache_alloc_trace+0x2cb/0x780 [ 402.313511] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 402.319053] ? _copy_from_user+0xdf/0x150 [ 402.323213] copy_mount_options+0x5f/0x380 [ 402.327455] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 402.333003] ksys_mount+0xd0/0x140 [ 402.336562] __x64_sys_mount+0xbe/0x150 [ 402.340553] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 402.345578] do_syscall_64+0x1b9/0x820 [ 402.349468] ? finish_task_switch+0x1d3/0x870 [ 402.353967] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.358924] ? syscall_return_slowpath+0x31d/0x5e0 [ 402.363860] ? __switch_to_asm+0x34/0x70 [ 402.367927] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 402.373304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.378163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 402.383369] RIP: 0033:0x457089 [ 402.386593] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.405505] RSP: 002b:00007fb491733c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.413234] RAX: ffffffffffffffda RBX: 00007fb4917346d4 RCX: 0000000000457089 [ 402.420514] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 402.427786] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 15:18:15 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:15 executing program 0 (fault-call:3 fault-nth:7): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:15 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='%p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0xd0e341436ba57175, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x1cf138d7306817dc, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r1, 0xffffffff80000000}}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='efivarfs\x00', 0x40, 0x0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 402.435056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 402.442410] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000002 15:18:15 executing program 6 (fault-call:3 fault-nth:3): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:16 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) fadvise64(r0, 0x0, 0x3, 0x3) getsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffffffffff0a) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f00000012c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001340)='threaded\b', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000001380)='keyring\x00', &(0x7f00000013c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x40000000000009, r2) r3 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)="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", 0x1000, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000001400)='keyring\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r2) keyctl$search(0xa, r3, &(0x7f0000000180)='rxrpc\x00', &(0x7f0000001200)={0x73, 0x79, 0x7a, 0x0}, r4) write$UHID_DESTROY(r1, &(0x7f0000001480), 0x4) socket$key(0xf, 0x3, 0x2) accept4$bt_l2cap(r1, &(0x7f0000001240), &(0x7f0000001440)=0xe, 0x80000) semget(0x0, 0x4, 0x40) write$cgroup_type(r1, &(0x7f0000001300)='threaded\b', 0x9) [ 402.747597] 9pnet: p9_fd_create_unix (27249): problem connecting socket: éq‰Y’3aK: -111 [ 402.789774] FAULT_INJECTION: forcing a failure. [ 402.789774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 402.801671] CPU: 1 PID: 27253 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 402.808703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.818066] Call Trace: [ 402.820695] dump_stack+0x1c9/0x2b4 [ 402.824350] ? dump_stack_print_info.cold.2+0x52/0x52 [ 402.829558] ? rcu_is_watching+0x8c/0x150 [ 402.833716] ? rcu_pm_notify+0xc0/0xc0 [ 402.837619] should_fail.cold.4+0xa/0x11 [ 402.841685] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 402.846812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.852377] ? graph_lock+0x170/0x170 [ 402.856236] ? pcpu_balance_workfn+0x1700/0x1700 [ 402.861024] ? find_held_lock+0x36/0x1c0 [ 402.865116] ? check_same_owner+0x340/0x340 [ 402.869445] ? __lockdep_init_map+0x105/0x590 [ 402.873958] ? rcu_note_context_switch+0x730/0x730 [ 402.878903] __alloc_pages_nodemask+0x36e/0xdb0 [ 402.883566] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 402.888595] ? rcu_pm_notify+0xc0/0xc0 [ 402.892496] ? find_held_lock+0x36/0x1c0 [ 402.896560] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 402.902099] alloc_pages_current+0x10c/0x210 [ 402.906507] __get_free_pages+0xf/0x40 [ 402.910394] get_zeroed_page+0x11/0x20 [ 402.914270] mount_fs+0x210/0x328 [ 402.917730] ? mpi_free.cold.1+0x19/0x19 [ 402.921805] vfs_kern_mount.part.34+0xdc/0x4e0 [ 402.926374] ? may_umount+0xb0/0xb0 [ 402.929998] ? _raw_read_unlock+0x22/0x30 [ 402.934165] ? __get_fs_type+0x97/0xc0 [ 402.938069] do_mount+0x581/0x30e0 [ 402.941631] ? copy_mount_string+0x40/0x40 [ 402.945875] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 402.950726] ? retint_kernel+0x10/0x10 [ 402.954635] ? copy_mount_options+0x1f0/0x380 [ 402.959131] ? copy_mount_options+0x1f6/0x380 [ 402.963644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 402.969198] ? copy_mount_options+0x285/0x380 [ 402.973701] ksys_mount+0x12d/0x140 [ 402.977353] __x64_sys_mount+0xbe/0x150 [ 402.981330] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 402.986349] do_syscall_64+0x1b9/0x820 [ 402.990232] ? finish_task_switch+0x1d3/0x870 [ 402.994720] ? syscall_return_slowpath+0x5e0/0x5e0 [ 402.999676] ? syscall_return_slowpath+0x31d/0x5e0 [ 403.004602] ? __switch_to_asm+0x34/0x70 [ 403.008660] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 403.014022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.018900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.024086] RIP: 0033:0x457089 15:18:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x4000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 403.027292] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.046203] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 403.053908] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 403.061165] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 403.068422] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 403.076174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 403.083438] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000007 15:18:16 executing program 0 (fault-call:3 fault-nth:8): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 403.111646] FAULT_INJECTION: forcing a failure. [ 403.111646] name failslab, interval 1, probability 0, space 0, times 0 [ 403.123003] CPU: 0 PID: 27258 Comm: syz-executor6 Not tainted 4.18.0+ #190 [ 403.130034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.139412] Call Trace: [ 403.142023] dump_stack+0x1c9/0x2b4 [ 403.145667] ? dump_stack_print_info.cold.2+0x52/0x52 [ 403.150880] should_fail.cold.4+0xa/0x11 [ 403.154963] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.160092] ? lock_downgrade+0x8f0/0x8f0 [ 403.164268] ? kasan_check_read+0x11/0x20 [ 403.168424] ? rcu_is_watching+0x8c/0x150 [ 403.172566] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 403.177237] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 403.181914] ? find_held_lock+0x36/0x1c0 [ 403.186032] ? check_same_owner+0x340/0x340 [ 403.190361] ? rcu_note_context_switch+0x730/0x730 [ 403.195295] ? save_stack+0xa9/0xd0 [ 403.198920] __should_failslab+0x124/0x180 [ 403.203140] should_failslab+0x9/0x14 [ 403.206936] kmem_cache_alloc+0x2af/0x760 [ 403.211078] getname_flags+0xd0/0x5a0 [ 403.214885] user_path_at_empty+0x2d/0x50 [ 403.219036] do_mount+0x17a/0x30e0 [ 403.222583] ? copy_mount_string+0x40/0x40 [ 403.226827] ? rcu_pm_notify+0xc0/0xc0 [ 403.230723] ? copy_mount_options+0x5f/0x380 [ 403.235134] ? rcu_read_lock_sched_held+0x108/0x120 [ 403.240158] ? kmem_cache_alloc_trace+0x616/0x780 [ 403.245032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.250573] ? _copy_from_user+0xdf/0x150 [ 403.254730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.260273] ? copy_mount_options+0x285/0x380 [ 403.264801] ksys_mount+0x12d/0x140 [ 403.268458] __x64_sys_mount+0xbe/0x150 [ 403.272437] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 403.277483] do_syscall_64+0x1b9/0x820 [ 403.281374] ? finish_task_switch+0x1d3/0x870 [ 403.285850] ? syscall_return_slowpath+0x5e0/0x5e0 [ 403.290780] ? syscall_return_slowpath+0x31d/0x5e0 [ 403.295711] ? __switch_to_asm+0x34/0x70 [ 403.299774] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 403.305133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.309962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.315138] RIP: 0033:0x457089 [ 403.318688] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.337597] RSP: 002b:00007fb491733c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 403.345319] RAX: ffffffffffffffda RBX: 00007fb4917346d4 RCX: 0000000000457089 [ 403.352591] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 15:18:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:16 executing program 6 (fault-call:3 fault-nth:4): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 403.359860] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 403.367113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 403.374375] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000003 15:18:16 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9%\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0xc400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000002c0)={0x10001, 0x1, {0xffffffffffffffff, 0x0, 0x7ff, 0x2, 0x6147}}) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff}) creat(&(0x7f0000000240)='./bus\x00', 0x1c0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000200)={@my=0x1}) 15:18:16 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3f000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:17 executing program 5: socketpair(0xf, 0x6, 0x3f, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x5, 0x10000000000000, &(0x7f0000000200)=""/80, &(0x7f0000000180)=0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f67726f75702e73746174003c23fb572a1f0294e688a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c01009e6a350900000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 403.659104] FAULT_INJECTION: forcing a failure. [ 403.659104] name failslab, interval 1, probability 0, space 0, times 0 [ 403.670422] CPU: 0 PID: 27283 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 403.677470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.686823] Call Trace: [ 403.689424] dump_stack+0x1c9/0x2b4 [ 403.693110] ? dump_stack_print_info.cold.2+0x52/0x52 [ 403.698335] ? graph_lock+0x170/0x170 [ 403.702158] should_fail.cold.4+0xa/0x11 [ 403.706266] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 403.711400] ? find_held_lock+0x36/0x1c0 [ 403.715482] ? lock_downgrade+0x8f0/0x8f0 [ 403.717746] 9pnet: p9_fd_create_unix (27291): problem connecting socket: éq‰Y’3aK: -111 [ 403.719654] ? find_held_lock+0x36/0x1c0 [ 403.719694] ? check_same_owner+0x340/0x340 [ 403.736356] ? unwind_get_return_address+0x61/0xa0 [ 403.741302] ? rcu_note_context_switch+0x730/0x730 [ 403.746218] __should_failslab+0x124/0x180 [ 403.750435] should_failslab+0x9/0x14 [ 403.754231] __kmalloc_track_caller+0x2c4/0x760 [ 403.758897] ? save_stack+0xa9/0xd0 [ 403.762526] ? save_stack+0x43/0xd0 [ 403.766160] ? kasan_kmalloc+0xc4/0xe0 [ 403.770041] ? kmem_cache_alloc_trace+0x152/0x780 [ 403.774904] ? mount_fs+0xae/0x328 [ 403.778442] ? v9fs_session_init+0xdd/0x1a80 [ 403.782845] kstrdup+0x39/0x70 [ 403.786041] v9fs_session_init+0xdd/0x1a80 [ 403.790294] ? find_held_lock+0x36/0x1c0 [ 403.794364] ? v9fs_show_options+0x7e0/0x7e0 [ 403.798771] ? kasan_check_read+0x11/0x20 [ 403.802899] ? rcu_is_watching+0x8c/0x150 [ 403.807043] ? rcu_pm_notify+0xc0/0xc0 [ 403.810934] ? v9fs_mount+0x61/0x900 [ 403.814639] ? rcu_read_lock_sched_held+0x108/0x120 [ 403.819652] ? kmem_cache_alloc_trace+0x616/0x780 [ 403.824492] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 403.830023] v9fs_mount+0x7c/0x900 [ 403.833573] mount_fs+0xae/0x328 [ 403.836956] vfs_kern_mount.part.34+0xdc/0x4e0 [ 403.841542] ? may_umount+0xb0/0xb0 [ 403.845154] ? _raw_read_unlock+0x22/0x30 [ 403.849302] ? __get_fs_type+0x97/0xc0 [ 403.853207] do_mount+0x581/0x30e0 [ 403.856764] ? copy_mount_string+0x40/0x40 [ 403.861004] ? copy_mount_options+0x5f/0x380 [ 403.865419] ? rcu_read_lock_sched_held+0x108/0x120 [ 403.870434] ? kmem_cache_alloc_trace+0x616/0x780 [ 403.875270] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 403.880823] ? _copy_from_user+0xdf/0x150 [ 403.884970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 403.890494] ? copy_mount_options+0x285/0x380 [ 403.894986] ksys_mount+0x12d/0x140 [ 403.898613] __x64_sys_mount+0xbe/0x150 [ 403.902573] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 403.907578] do_syscall_64+0x1b9/0x820 [ 403.911448] ? finish_task_switch+0x1d3/0x870 [ 403.915931] ? syscall_return_slowpath+0x5e0/0x5e0 [ 403.920848] ? syscall_return_slowpath+0x31d/0x5e0 [ 403.925769] ? __switch_to_asm+0x34/0x70 [ 403.929833] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 403.935189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 403.940033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 403.945205] RIP: 0033:0x457089 [ 403.948395] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 403.967313] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 403.975041] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 403.982384] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 403.989637] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 403.996896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 15:18:17 executing program 0 (fault-call:3 fault-nth:9): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 404.004176] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000008 15:18:17 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 404.095575] FAULT_INJECTION: forcing a failure. [ 404.095575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 404.107429] CPU: 1 PID: 27297 Comm: syz-executor6 Not tainted 4.18.0+ #190 [ 404.114425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.123766] Call Trace: [ 404.126355] dump_stack+0x1c9/0x2b4 [ 404.130018] ? dump_stack_print_info.cold.2+0x52/0x52 [ 404.135213] ? graph_lock+0x170/0x170 [ 404.139038] should_fail.cold.4+0xa/0x11 [ 404.143102] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 404.148204] ? find_held_lock+0x36/0x1c0 [ 404.152272] ? lock_downgrade+0x8f0/0x8f0 [ 404.156443] ? finish_task_switch+0x18a/0x870 [ 404.160939] ? kasan_check_read+0x11/0x20 [ 404.165087] ? do_raw_spin_unlock+0xa7/0x2f0 [ 404.169492] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 404.174069] ? compat_start_thread+0x80/0x80 [ 404.178474] ? _raw_spin_unlock_irq+0x27/0x70 [ 404.182962] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 404.187968] ? kasan_check_write+0x14/0x20 [ 404.192219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.197791] ? should_fail+0x246/0xd86 [ 404.201697] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 404.206800] ? __switch_to_asm+0x40/0x70 [ 404.210875] ? __switch_to_asm+0x34/0x70 [ 404.214932] ? __switch_to_asm+0x40/0x70 [ 404.218984] __alloc_pages_nodemask+0x36e/0xdb0 [ 404.223649] ? __switch_to_asm+0x34/0x70 [ 404.227714] ? __switch_to_asm+0x40/0x70 [ 404.231813] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 404.236819] ? __sched_text_start+0x8/0x8 [ 404.240995] ? find_held_lock+0x36/0x1c0 [ 404.245076] ? check_same_owner+0x340/0x340 [ 404.249401] cache_grow_begin+0x91/0x710 [ 404.253496] kmem_cache_alloc+0x689/0x760 [ 404.257672] getname_flags+0xd0/0x5a0 [ 404.261474] user_path_at_empty+0x2d/0x50 [ 404.265621] do_mount+0x17a/0x30e0 [ 404.269150] ? copy_mount_string+0x40/0x40 [ 404.273366] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 404.278105] ? retint_kernel+0x10/0x10 [ 404.281978] ? copy_mount_options+0x1a1/0x380 [ 404.286457] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 404.291304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.296880] ? copy_mount_options+0x285/0x380 [ 404.301378] ksys_mount+0x12d/0x140 [ 404.304989] __x64_sys_mount+0xbe/0x150 [ 404.308971] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 404.313969] do_syscall_64+0x1b9/0x820 [ 404.317848] ? finish_task_switch+0x1d3/0x870 [ 404.322348] ? syscall_return_slowpath+0x5e0/0x5e0 [ 404.327284] ? syscall_return_slowpath+0x31d/0x5e0 [ 404.332221] ? __switch_to_asm+0x34/0x70 [ 404.336296] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 404.341677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.346506] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.351697] RIP: 0033:0x457089 [ 404.354897] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.373787] RSP: 002b:00007fb491733c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 404.381489] RAX: ffffffffffffffda RBX: 00007fb4917346d4 RCX: 0000000000457089 [ 404.388778] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 404.396051] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 404.403308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 404.410568] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000004 15:18:17 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="391000", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\b', 0xbbf20c0f52aca264) 15:18:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x361040, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x27, 0x0, 0x2, 0x4, 0x4, 0x6, "bebe310c1eadd32f26703a749cc1bc0a07e20c3fdd637b530df86cfdfaed9956a49f2d542cff68c3f554d10b893384bd7193347a878e43b5d5c4692a4a70e0", 0x20}, 0x60, &(0x7f0000001980)=[{&(0x7f0000000440)="5c7b222baa7c01bdf3724d1c35be156aa3a5f367fd16acd349dc893e488e536841db73545f3907002d1194d027630254930ec7f8f1d9f38f82ced52b66b2e51ce0788bab1d17cc49ef238ef8f5dbff3a3a433b8c668c96d1f61d84d47d5505179a4be16d06b60f5b6d2c3247c6f2cbce8309412961f95355cc5b7e6b15742cd73931ee84743c1e07db69247aea89a1eb343bb2183e49b55f4ea6b5ce2aa1c1bf2c712e8bcebf0b851bb2115dec40f6ebe7b4a0eba538a355d46da76a13", 0xbd}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="2bc6a3da1cd8021fc7be1644a75c1f84db1118bde9b50ca578d515449dcd1a9e704d5c0c3c9903942c96199d49204cf44c75f2a05c263c7a827865d04412aa62c16102325d44417e6a458652e3188b7408e13604d6215bf2f804a4f4e32fcbd0a1c3ee46d285b92d1cc3dd9aee4d456e85ed9e5bf693bf523f9a2fe15523492f2b0c4e97ad419cc492664e84bb0fc65869968766d1e5fabf85810d9fb2ed2c9b4affdb872065443e29b79c41496b8a8fd052e3c3dbaa33e972836efc3aec", 0xbe}, {&(0x7f00000015c0)="235e1d91600ac15e070d5651f8a3ca781caf6d69408708b70f4c6d42357912f897f268a1884e5490e0b1f96ab25dc8f6f6a4de7d3050945d3de37f8c223b5eb477bb012439657042308d5963e46dde24e45e14055af69f24b2034c8c8e2527f933300dd2c09428874292749873f2d7bbe1cc132667592b100271ba0a78643519cb21b759567a0b9e96", 0x89}, {&(0x7f0000001680)="f8b9f3dc6a7b9317bf17c4e10d73d032e61579106badd5aa47229036551aae40097fda24eaf58ae24663c0fbebc3bb17902f70c4d870da27b0aeaa958e720b48a3fdccdbd5a09ed2d7834068cf3c829a10553f084491b7f02a0d055374f9d3b44a8b14735be9f06c37b4c3fb4981d0333e4c044c479a29510156fa13632467d3678e54bab4be20b96f216bdc6598be4cc436afb22a1bb9072e0572da93c610a5f81126b9ec6b3eb5c8db5ce98e4a4bcf1c09d8ba1d6d8db0632b811d960170b856f0ad5c39ed3f6f08afead19cce05d8", 0xd0}, {&(0x7f0000001780)="f6b5fb511316bd3e551421cb0ba07784f47e63ff19e3e70abe9baa181d6ba4332c94ed9ab67376c2438e34efb67d8e19e9d9a73bd725ce8674c7ae507526461568b207301f6d34981ae3a9cb8915da4335fdeb7dc59393fd2e35af2b30f2ddd79979953852971fdf66552782dd5960b17c65104e627b84d7ea251707d8db8db5a72e9c37a2d1301cc5bed314c2d57d28e0b31025c7bbc74c68f74b799ec8977956e5141ed8363ebd6df1170d5f6b218c9273d23539854895164d53fd5349298ad784e5c10db866b1be306fcbe64208", 0xcf}, {&(0x7f0000001880)="071bc0a31fd81300316015d4af58e63dc204ec47c6d62e209a1346e68c188794678b6f51518c0e5f6a9019706df3421d367f970bd1cf127049d8a92556d1aa996fd2aabe7c5744470c236e384ed6f097ec165568ba6b365f4e7b5c11881d02fb238a927933a4c757a1cb186e43a0c9779d51633dfc5f33f7b7f73baad80bb4f38c96654525c72a373f95ac1716a3ff6a2e311c8b97532825b67842a0c966d0ae555b624b79ff780a7657983ce7d1c5e796303206bcd1fee389bc73d8d095809111aa304f62e8f4fdd332a447a9ebf6394c61e6d00fde5783be12fab9a847719e41db9f011e9affb859b5d324ef9b91506be3ad5ce933f32ba5c05f46f6", 0xfd}], 0x7, &(0x7f0000001a00)={0x80, 0x10e, 0x89e, "f266f79847dd4198d2b1ce2cdd66742b33c91e3a6c5999acf4587f7a99296a1ce47925d91cd4db02b5c053a78721c28ff7ecd7fb48fdd2f5a0507af33befd5e196f5ea8d805cc38a8bb2ed82c91fdbd33314305ffda98458540b3096c720ee99c72b2d91f6bd18911843dc5f"}, 0x80, 0xcabf77a2eb0d7100}, 0x40080c4) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000140)='./bus\x00', 0x0) pipe(&(0x7f0000000280)) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') bind$bt_rfcomm(r0, &(0x7f00000002c0)={0x1f, {0x401, 0x94, 0x1, 0x1, 0x9, 0xe54}}, 0xa) 15:18:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfcfdffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3a}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 404.719991] FAULT_INJECTION: forcing a failure. [ 404.719991] name failslab, interval 1, probability 0, space 0, times 0 [ 404.731332] CPU: 1 PID: 27317 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 404.738364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.747743] Call Trace: [ 404.750362] dump_stack+0x1c9/0x2b4 [ 404.753510] 9pnet: p9_fd_create_unix (27319): problem connecting socket: éq‰Y’3aK: -111 [ 404.754014] ? dump_stack_print_info.cold.2+0x52/0x52 [ 404.754070] ? graph_lock+0x170/0x170 [ 404.771374] should_fail.cold.4+0xa/0x11 [ 404.775478] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 404.780621] ? find_held_lock+0x36/0x1c0 [ 404.784713] ? lock_downgrade+0x8f0/0x8f0 [ 404.788900] ? find_held_lock+0x36/0x1c0 [ 404.792998] ? check_same_owner+0x340/0x340 [ 404.797329] ? unwind_get_return_address+0x61/0xa0 [ 404.802269] ? rcu_note_context_switch+0x730/0x730 [ 404.807218] __should_failslab+0x124/0x180 [ 404.811471] should_failslab+0x9/0x14 [ 404.815300] __kmalloc_track_caller+0x2c4/0x760 [ 404.820157] ? save_stack+0xa9/0xd0 [ 404.823805] ? save_stack+0x43/0xd0 [ 404.827447] ? kasan_kmalloc+0xc4/0xe0 [ 404.831362] ? kmem_cache_alloc_trace+0x152/0x780 [ 404.836233] ? mount_fs+0xae/0x328 [ 404.839804] ? v9fs_session_init+0xdd/0x1a80 [ 404.844247] kstrdup+0x39/0x70 [ 404.847459] v9fs_session_init+0xdd/0x1a80 [ 404.851723] ? find_held_lock+0x36/0x1c0 [ 404.855837] ? v9fs_show_options+0x7e0/0x7e0 [ 404.860268] ? kasan_check_read+0x11/0x20 [ 404.864432] ? rcu_is_watching+0x8c/0x150 [ 404.868597] ? rcu_pm_notify+0xc0/0xc0 [ 404.872502] ? v9fs_mount+0x61/0x900 [ 404.876242] ? rcu_read_lock_sched_held+0x108/0x120 [ 404.881279] ? kmem_cache_alloc_trace+0x616/0x780 [ 404.886148] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 404.891720] v9fs_mount+0x7c/0x900 [ 404.895305] mount_fs+0xae/0x328 [ 404.898703] vfs_kern_mount.part.34+0xdc/0x4e0 [ 404.903302] ? may_umount+0xb0/0xb0 [ 404.906943] ? _raw_read_unlock+0x22/0x30 [ 404.911123] ? __get_fs_type+0x97/0xc0 [ 404.915025] do_mount+0x581/0x30e0 [ 404.918583] ? copy_mount_string+0x40/0x40 [ 404.922850] ? copy_mount_options+0x5f/0x380 [ 404.927276] ? rcu_read_lock_sched_held+0x108/0x120 [ 404.932325] ? kmem_cache_alloc_trace+0x616/0x780 [ 404.937195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.942746] ? copy_mount_options+0x285/0x380 [ 404.947275] ksys_mount+0x12d/0x140 [ 404.950936] __x64_sys_mount+0xbe/0x150 [ 404.954933] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 404.959970] do_syscall_64+0x1b9/0x820 [ 404.963951] ? finish_task_switch+0x1d3/0x870 [ 404.968464] ? syscall_return_slowpath+0x5e0/0x5e0 [ 404.973400] ? syscall_return_slowpath+0x31d/0x5e0 [ 404.978342] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 404.983721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 404.988589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.993795] RIP: 0033:0x457089 [ 404.996997] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:18:18 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 405.015917] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.023643] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 405.030919] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 405.038193] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 405.045465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 405.052737] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000009 15:18:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x512e) 15:18:18 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffff89}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:18 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 405.169898] FAULT_INJECTION: forcing a failure. [ 405.169898] name failslab, interval 1, probability 0, space 0, times 0 [ 405.181617] CPU: 0 PID: 27338 Comm: syz-executor2 Not tainted 4.18.0+ #190 [ 405.188656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.198007] Call Trace: [ 405.200602] dump_stack+0x1c9/0x2b4 [ 405.204273] ? dump_stack_print_info.cold.2+0x52/0x52 [ 405.209504] ? perf_trace_lock+0xde/0x920 [ 405.213680] should_fail.cold.4+0xa/0x11 15:18:18 executing program 0 (fault-call:3 fault-nth:10): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 405.217788] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 405.222919] ? lock_downgrade+0x8f0/0x8f0 [ 405.227116] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 405.232674] ? proc_fail_nth_write+0x9e/0x210 [ 405.237198] ? find_held_lock+0x36/0x1c0 [ 405.241302] ? check_same_owner+0x340/0x340 [ 405.245647] ? rcu_note_context_switch+0x730/0x730 [ 405.250583] __should_failslab+0x124/0x180 [ 405.254821] should_failslab+0x9/0x14 [ 405.258657] __kmalloc_track_caller+0x2c4/0x760 [ 405.263346] ? strncpy_from_user+0x510/0x510 [ 405.267811] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 405.273361] ? strndup_user+0x77/0xd0 [ 405.277169] memdup_user+0x2c/0xa0 [ 405.280707] strndup_user+0x77/0xd0 [ 405.284334] ksys_mount+0x3c/0x140 [ 405.287906] __x64_sys_mount+0xbe/0x150 [ 405.291883] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 405.296920] do_syscall_64+0x1b9/0x820 [ 405.300807] ? finish_task_switch+0x1d3/0x870 [ 405.305307] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.310256] ? syscall_return_slowpath+0x31d/0x5e0 [ 405.315223] ? __switch_to_asm+0x34/0x70 [ 405.319304] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 405.324693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 405.329529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.334710] RIP: 0033:0x457089 [ 405.337900] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.356795] RSP: 002b:00007fe91850fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:18 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 405.364516] RAX: ffffffffffffffda RBX: 00007fe9185106d4 RCX: 0000000000457089 [ 405.371786] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 405.379039] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 405.386303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 405.393560] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000000 15:18:18 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x1}, 0x685) close(r0) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:18 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a00, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 405.684501] FAULT_INJECTION: forcing a failure. [ 405.684501] name failslab, interval 1, probability 0, space 0, times 0 [ 405.695896] CPU: 1 PID: 27364 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 405.702925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.712283] Call Trace: [ 405.714893] dump_stack+0x1c9/0x2b4 [ 405.718549] ? dump_stack_print_info.cold.2+0x52/0x52 [ 405.723777] ? __kernel_text_address+0xd/0x40 [ 405.728303] ? unwind_get_return_address+0x61/0xa0 15:18:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x900000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:19 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)="77200000002c32b0427d9691158cc29b04503f449d94d9b001a021e1fc1e3b1eeffcd9097dd75266ea00000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\b', 0x9) mkdir(&(0x7f0000000080)='./file0\x00', 0x20) getsockname$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) [ 405.733258] should_fail.cold.4+0xa/0x11 [ 405.737353] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 405.742480] ? save_stack+0x43/0xd0 [ 405.746119] ? kasan_kmalloc+0xc4/0xe0 [ 405.750036] ? __kmalloc_track_caller+0x14a/0x760 [ 405.754894] ? kstrdup+0x39/0x70 [ 405.758284] ? v9fs_session_init+0xdd/0x1a80 [ 405.762713] ? v9fs_mount+0x7c/0x900 [ 405.766432] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 405.771214] ? do_mount+0x581/0x30e0 [ 405.774936] ? ksys_mount+0x12d/0x140 [ 405.778738] ? __x64_sys_mount+0xbe/0x150 [ 405.782891] ? do_syscall_64+0x1b9/0x820 [ 405.786957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.792336] ? find_held_lock+0x36/0x1c0 [ 405.796431] ? check_same_owner+0x340/0x340 [ 405.800806] ? unwind_get_return_address+0x61/0xa0 [ 405.803373] FAULT_INJECTION: forcing a failure. [ 405.803373] name failslab, interval 1, probability 0, space 0, times 0 [ 405.805763] ? rcu_note_context_switch+0x730/0x730 [ 405.805792] __should_failslab+0x124/0x180 [ 405.805812] should_failslab+0x9/0x14 [ 405.805833] __kmalloc_track_caller+0x2c4/0x760 [ 405.805850] ? save_stack+0xa9/0xd0 [ 405.805868] ? save_stack+0x43/0xd0 [ 405.805883] ? kasan_kmalloc+0xc4/0xe0 [ 405.805902] ? kmem_cache_alloc_trace+0x152/0x780 [ 405.805923] ? v9fs_session_init+0x115/0x1a80 [ 405.805959] kstrdup+0x39/0x70 [ 405.858326] v9fs_session_init+0x115/0x1a80 [ 405.862662] ? find_held_lock+0x36/0x1c0 [ 405.866742] ? v9fs_show_options+0x7e0/0x7e0 [ 405.871191] ? kasan_check_read+0x11/0x20 [ 405.875339] ? rcu_is_watching+0x8c/0x150 [ 405.879492] ? rcu_pm_notify+0xc0/0xc0 [ 405.883399] ? v9fs_mount+0x61/0x900 [ 405.887123] ? rcu_read_lock_sched_held+0x108/0x120 [ 405.892146] ? kmem_cache_alloc_trace+0x616/0x780 [ 405.897002] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 405.902555] v9fs_mount+0x7c/0x900 [ 405.906124] mount_fs+0xae/0x328 [ 405.909510] vfs_kern_mount.part.34+0xdc/0x4e0 [ 405.914123] ? may_umount+0xb0/0xb0 [ 405.917767] ? _raw_read_unlock+0x22/0x30 [ 405.921921] ? __get_fs_type+0x97/0xc0 [ 405.925820] do_mount+0x581/0x30e0 [ 405.929395] ? copy_mount_string+0x40/0x40 [ 405.933637] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 405.938411] ? retint_kernel+0x10/0x10 [ 405.942311] ? copy_mount_options+0x1f0/0x380 [ 405.946825] ? copy_mount_options+0x202/0x380 [ 405.951328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.956871] ? copy_mount_options+0x285/0x380 [ 405.961374] ksys_mount+0x12d/0x140 [ 405.965368] __x64_sys_mount+0xbe/0x150 [ 405.969349] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 405.974376] do_syscall_64+0x1b9/0x820 [ 405.978279] ? finish_task_switch+0x1d3/0x870 [ 405.982826] ? syscall_return_slowpath+0x5e0/0x5e0 [ 405.987775] ? syscall_return_slowpath+0x31d/0x5e0 [ 405.992716] ? __switch_to_asm+0x34/0x70 [ 405.996796] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 406.002171] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.007026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.012220] RIP: 0033:0x457089 [ 406.015421] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.034330] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 406.042057] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 406.049340] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 406.056616] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 406.063892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 406.071166] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 000000000000000a [ 406.078556] CPU: 0 PID: 27372 Comm: syz-executor2 Not tainted 4.18.0+ #190 [ 406.085595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.094950] Call Trace: [ 406.097550] dump_stack+0x1c9/0x2b4 [ 406.101188] ? dump_stack_print_info.cold.2+0x52/0x52 [ 406.106391] ? __kernel_text_address+0xd/0x40 [ 406.110891] ? unwind_get_return_address+0x61/0xa0 [ 406.115836] should_fail.cold.4+0xa/0x11 [ 406.119905] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 406.125030] ? save_stack+0x43/0xd0 [ 406.128662] ? kasan_kmalloc+0xc4/0xe0 [ 406.132810] ? __kmalloc_track_caller+0x14a/0x760 [ 406.137655] ? memdup_user+0x2c/0xa0 [ 406.141383] ? strndup_user+0x77/0xd0 [ 406.145191] ? graph_lock+0x170/0x170 [ 406.148994] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.154372] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 406.159937] ? proc_fail_nth_write+0x9e/0x210 [ 406.164455] ? find_held_lock+0x36/0x1c0 [ 406.168560] ? check_same_owner+0x340/0x340 [ 406.172890] ? lock_release+0xa30/0xa30 [ 406.176874] ? rcu_note_context_switch+0x730/0x730 [ 406.181816] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 406.186848] __should_failslab+0x124/0x180 [ 406.191094] should_failslab+0x9/0x14 [ 406.194901] __kmalloc_track_caller+0x2c4/0x760 [ 406.199584] ? strncpy_from_user+0x510/0x510 [ 406.203997] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.209546] ? strndup_user+0x77/0xd0 [ 406.213353] memdup_user+0x2c/0xa0 [ 406.216901] strndup_user+0x77/0xd0 [ 406.220537] ksys_mount+0x73/0x140 [ 406.224087] __x64_sys_mount+0xbe/0x150 [ 406.228070] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 406.233094] do_syscall_64+0x1b9/0x820 [ 406.236987] ? finish_task_switch+0x1d3/0x870 [ 406.241511] ? syscall_return_slowpath+0x5e0/0x5e0 [ 406.246453] ? syscall_return_slowpath+0x31d/0x5e0 [ 406.251390] ? __switch_to_asm+0x34/0x70 [ 406.255452] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 406.260831] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.265687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.270879] RIP: 0033:0x457089 [ 406.274081] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.292998] RSP: 002b:00007fe9184eec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 406.300728] RAX: ffffffffffffffda RBX: 00007fe9184ef6d4 RCX: 0000000000457089 [ 406.308040] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 406.315336] RBP: 0000000000930140 R08: 0000000020000140 R09: 0000000000000000 [ 406.322600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 406.329865] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000001 15:18:19 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) syz_mount_image$ntfs(&(0x7f0000000240)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6c733d0a59fb45de062a55d5d1ba61636761656c69632c00"]) r1 = socket$inet6(0xa, 0x1000000000002, 0x1ff) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x6) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @remote, 0x7ff}, 0x1c) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) listen(r0, 0x7e) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000080)={0x5, 0x7, 0x7, 0x2, 0x400000000010001}) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000100)) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000140)) [ 406.474617] 9pnet: p9_fd_create_unix (27384): problem connecting socket: éq‰Y’3aK: -111 15:18:20 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2e4, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:20 executing program 0 (fault-call:3 fault-nth:11): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:20 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x60000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:20 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9pH', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) [ 406.664996] FAULT_INJECTION: forcing a failure. [ 406.664996] name failslab, interval 1, probability 0, space 0, times 0 [ 406.676474] CPU: 0 PID: 27391 Comm: syz-executor2 Not tainted 4.18.0+ #190 [ 406.683504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.692870] Call Trace: [ 406.695478] dump_stack+0x1c9/0x2b4 [ 406.699141] ? dump_stack_print_info.cold.2+0x52/0x52 [ 406.704355] ? __kernel_text_address+0xd/0x40 [ 406.708865] ? unwind_get_return_address+0x61/0xa0 [ 406.713815] should_fail.cold.4+0xa/0x11 [ 406.717891] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 406.723014] ? save_stack+0xa9/0xd0 [ 406.726664] ? kasan_kmalloc+0xc4/0xe0 [ 406.730567] ? __kmalloc_track_caller+0x14a/0x760 [ 406.735419] ? memdup_user+0x2c/0xa0 [ 406.739146] ? strndup_user+0x77/0xd0 [ 406.742963] ? graph_lock+0x170/0x170 [ 406.746804] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 406.752362] ? proc_fail_nth_write+0x9e/0x210 [ 406.756881] ? find_held_lock+0x36/0x1c0 [ 406.760975] ? check_same_owner+0x340/0x340 [ 406.765308] ? lock_release+0xa30/0xa30 [ 406.769301] ? check_same_owner+0x340/0x340 [ 406.773642] ? rcu_note_context_switch+0x730/0x730 [ 406.778578] ? __check_object_size+0x9d/0x5f2 [ 406.783115] __should_failslab+0x124/0x180 [ 406.787367] should_failslab+0x9/0x14 [ 406.791183] kmem_cache_alloc_trace+0x2cb/0x780 [ 406.795878] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.801427] ? _copy_from_user+0xdf/0x150 [ 406.805597] copy_mount_options+0x5f/0x380 [ 406.809847] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.815400] ksys_mount+0xd0/0x140 [ 406.818956] __x64_sys_mount+0xbe/0x150 [ 406.822940] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 406.827974] do_syscall_64+0x1b9/0x820 [ 406.831875] ? finish_task_switch+0x1d3/0x870 [ 406.836394] ? syscall_return_slowpath+0x5e0/0x5e0 [ 406.841343] ? syscall_return_slowpath+0x31d/0x5e0 [ 406.846298] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 406.851688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.856558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.861767] RIP: 0033:0x457089 [ 406.864969] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.883881] RSP: 002b:00007fe91850fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 406.891600] RAX: ffffffffffffffda RBX: 00007fe9185106d4 RCX: 0000000000457089 [ 406.898878] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 406.906154] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 406.913432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 406.920703] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000002 15:18:20 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 407.042233] FAULT_INJECTION: forcing a failure. [ 407.042233] name failslab, interval 1, probability 0, space 0, times 0 [ 407.053609] CPU: 1 PID: 27410 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 407.060640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.070000] Call Trace: [ 407.073132] dump_stack+0x1c9/0x2b4 [ 407.076802] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.082017] ? kernel_text_address+0x79/0xf0 [ 407.086438] ? __kernel_text_address+0xd/0x40 [ 407.090951] should_fail.cold.4+0xa/0x11 [ 407.095057] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.100191] ? save_stack+0xa9/0xd0 [ 407.103838] ? save_stack+0x43/0xd0 [ 407.107484] ? kasan_kmalloc+0xc4/0xe0 [ 407.111399] ? kmem_cache_alloc_trace+0x152/0x780 [ 407.116262] ? v9fs_session_init+0x21a/0x1a80 [ 407.120790] ? v9fs_mount+0x7c/0x900 [ 407.124533] ? mount_fs+0xae/0x328 [ 407.128091] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 407.132860] ? do_mount+0x581/0x30e0 [ 407.136597] ? ksys_mount+0x12d/0x140 [ 407.140420] ? __x64_sys_mount+0xbe/0x150 [ 407.144588] ? do_syscall_64+0x1b9/0x820 [ 407.148669] ? find_held_lock+0x36/0x1c0 [ 407.152779] ? check_same_owner+0x340/0x340 [ 407.157121] ? kasan_check_read+0x11/0x20 [ 407.161298] ? rcu_is_watching+0x8c/0x150 [ 407.165469] ? rcu_note_context_switch+0x730/0x730 [ 407.170409] ? rcu_pm_notify+0xc0/0xc0 [ 407.174319] __should_failslab+0x124/0x180 [ 407.178594] should_failslab+0x9/0x14 [ 407.182420] kmem_cache_alloc_trace+0x2cb/0x780 [ 407.187122] ? kmem_cache_alloc_trace+0x616/0x780 [ 407.191988] ? __lockdep_init_map+0x105/0x590 [ 407.195409] FAULT_INJECTION: forcing a failure. [ 407.195409] name failslab, interval 1, probability 0, space 0, times 0 [ 407.196511] p9_idpool_create+0x42/0x190 [ 407.196543] p9_client_create+0x286/0x1770 [ 407.196565] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 407.196592] ? do_mount+0x581/0x30e0 [ 407.196626] ? __x64_sys_mount+0xbe/0x150 [ 407.228674] ? do_syscall_64+0x1b9/0x820 [ 407.232737] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.238126] ? p9_client_read+0xc60/0xc60 [ 407.242279] ? find_held_lock+0x36/0x1c0 [ 407.246369] ? __lockdep_init_map+0x105/0x590 [ 407.250877] ? kasan_check_write+0x14/0x20 [ 407.255121] ? __init_rwsem+0x1cc/0x2a0 [ 407.259101] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 407.264128] ? rcu_read_lock_sched_held+0x108/0x120 [ 407.269150] ? __kmalloc_track_caller+0x5f5/0x760 [ 407.273998] ? save_stack+0xa9/0xd0 [ 407.277625] ? save_stack+0x43/0xd0 [ 407.281254] ? kasan_kmalloc+0xc4/0xe0 [ 407.285146] ? kmem_cache_alloc_trace+0x152/0x780 [ 407.290006] ? memcpy+0x45/0x50 [ 407.293309] v9fs_session_init+0x21a/0x1a80 [ 407.297639] ? find_held_lock+0x36/0x1c0 [ 407.301713] ? v9fs_show_options+0x7e0/0x7e0 [ 407.306133] ? kasan_check_read+0x11/0x20 [ 407.310282] ? rcu_is_watching+0x8c/0x150 [ 407.314436] ? rcu_pm_notify+0xc0/0xc0 [ 407.318335] ? v9fs_mount+0x61/0x900 [ 407.322080] ? rcu_read_lock_sched_held+0x108/0x120 [ 407.327103] ? kmem_cache_alloc_trace+0x616/0x780 [ 407.331959] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 407.337540] v9fs_mount+0x7c/0x900 [ 407.341094] mount_fs+0xae/0x328 [ 407.344476] vfs_kern_mount.part.34+0xdc/0x4e0 [ 407.349067] ? may_umount+0xb0/0xb0 [ 407.352697] ? _raw_read_unlock+0x22/0x30 [ 407.356850] ? __get_fs_type+0x97/0xc0 [ 407.360751] do_mount+0x581/0x30e0 [ 407.364312] ? interrupt_entry+0xb1/0xf0 [ 407.368381] ? copy_mount_string+0x40/0x40 [ 407.372623] ? retint_kernel+0x10/0x10 [ 407.376528] ? copy_mount_options+0x213/0x380 [ 407.381042] ? write_comp_data+0x22/0x70 [ 407.385115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.390672] ? copy_mount_options+0x285/0x380 [ 407.395178] ksys_mount+0x12d/0x140 [ 407.398815] __x64_sys_mount+0xbe/0x150 [ 407.402792] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 407.407818] do_syscall_64+0x1b9/0x820 [ 407.411720] ? finish_task_switch+0x1d3/0x870 [ 407.416232] ? syscall_return_slowpath+0x5e0/0x5e0 [ 407.421165] ? syscall_return_slowpath+0x31d/0x5e0 [ 407.426112] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 407.431510] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.436369] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.441559] RIP: 0033:0x457089 [ 407.444770] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 407.463679] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.471402] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 407.478690] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 407.485968] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 407.493241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 407.500534] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 000000000000000b [ 407.507843] CPU: 0 PID: 27417 Comm: syz-executor2 Not tainted 4.18.0+ #190 [ 407.514870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.522467] ntfs: (device loop5): parse_options(): NLS character set [ 407.522467] YûEÞ*UÕѺacgaelic not found. [ 407.524226] Call Trace: [ 407.524250] dump_stack+0x1c9/0x2b4 15:18:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x900}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:21 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970ff", 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 407.524272] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.524289] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 407.524318] should_fail.cold.4+0xa/0x11 [ 407.555364] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 407.560492] ? __switch_to_asm+0x40/0x70 [ 407.564572] ? __switch_to_asm+0x34/0x70 [ 407.568642] ? __switch_to_asm+0x40/0x70 [ 407.572709] ? __switch_to_asm+0x34/0x70 [ 407.576787] ? __switch_to_asm+0x40/0x70 [ 407.580890] ? __switch_to_asm+0x34/0x70 [ 407.584965] ? __switch_to_asm+0x34/0x70 [ 407.589033] ? __switch_to_asm+0x40/0x70 [ 407.593098] ? __switch_to_asm+0x40/0x70 [ 407.597159] ? __switch_to_asm+0x34/0x70 [ 407.601228] ? __switch_to_asm+0x40/0x70 [ 407.605301] ? __schedule+0x884/0x1ec0 [ 407.609214] ? __sched_text_start+0x8/0x8 [ 407.613366] ? find_held_lock+0x36/0x1c0 [ 407.617452] ? check_same_owner+0x340/0x340 [ 407.621788] ? save_stack+0xa9/0xd0 [ 407.625420] __should_failslab+0x124/0x180 [ 407.629667] should_failslab+0x9/0x14 [ 407.633473] kmem_cache_alloc+0x2af/0x760 [ 407.637634] getname_flags+0xd0/0x5a0 [ 407.641443] user_path_at_empty+0x2d/0x50 [ 407.645601] do_mount+0x17a/0x30e0 [ 407.649143] ? retint_kernel+0x10/0x10 [ 407.653044] ? copy_mount_string+0x40/0x40 [ 407.657281] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 407.662054] ? retint_kernel+0x10/0x10 [ 407.665953] ? copy_mount_options+0x213/0x380 [ 407.670452] ? write_comp_data+0x1b/0x70 [ 407.674517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.680060] ? copy_mount_options+0x285/0x380 [ 407.684562] ksys_mount+0x12d/0x140 [ 407.688196] __x64_sys_mount+0xbe/0x150 [ 407.692170] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 407.697190] do_syscall_64+0x1b9/0x820 [ 407.701078] ? finish_task_switch+0x1d3/0x870 [ 407.705584] ? syscall_return_slowpath+0x5e0/0x5e0 [ 407.710512] ? syscall_return_slowpath+0x31d/0x5e0 [ 407.715461] ? __switch_to_asm+0x34/0x70 [ 407.719534] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 407.724902] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.729748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.734961] RIP: 0033:0x457089 [ 407.738166] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 407.757064] RSP: 002b:00007fe91850fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 407.764782] RAX: ffffffffffffffda RBX: 00007fe9185106d4 RCX: 0000000000457089 [ 407.772049] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 407.779311] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 407.786572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 407.793833] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000003 15:18:21 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397010", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:21 executing program 2 (fault-call:3 fault-nth:4): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:21 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x600000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 407.945268] ntfs: (device loop5): parse_options(): NLS character set [ 407.945268] YûEÞ*UÕѺacgaelic not found. 15:18:21 executing program 5: r0 = accept4$bt_l2cap(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80000) r1 = getpgid(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x1, 0x100000000, 0x6, r1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r2, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:21 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) fdatasync(r0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x7000013) 15:18:21 executing program 0 (fault-call:3 fault-nth:12): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xffffff84}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 408.165697] FAULT_INJECTION: forcing a failure. [ 408.165697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.177566] CPU: 1 PID: 27448 Comm: syz-executor2 Not tainted 4.18.0+ #190 [ 408.184585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.193952] Call Trace: [ 408.196574] dump_stack+0x1c9/0x2b4 [ 408.200230] ? dump_stack_print_info.cold.2+0x52/0x52 [ 408.205489] should_fail.cold.4+0xa/0x11 [ 408.209581] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 408.214711] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 408.219409] ? lock_downgrade+0x8f0/0x8f0 [ 408.223584] ? trace_hardirqs_on+0x10/0x10 [ 408.227843] ? graph_lock+0x170/0x170 [ 408.231664] ? print_usage_bug+0xc0/0xc0 [ 408.235772] ? find_held_lock+0x36/0x1c0 [ 408.239862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.245420] ? should_fail+0x246/0xd86 [ 408.249326] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 408.254445] __alloc_pages_nodemask+0x36e/0xdb0 [ 408.256266] FAULT_INJECTION: forcing a failure. [ 408.256266] name failslab, interval 1, probability 0, space 0, times 0 [ 408.259127] ? kasan_check_read+0x11/0x20 [ 408.259151] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 408.259169] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 408.259206] ? find_held_lock+0x36/0x1c0 [ 408.259249] ? check_same_owner+0x340/0x340 [ 408.259275] cache_grow_begin+0x91/0x710 [ 408.259303] kmem_cache_alloc+0x689/0x760 [ 408.259333] getname_flags+0xd0/0x5a0 [ 408.259355] user_path_at_empty+0x2d/0x50 [ 408.259379] do_mount+0x17a/0x30e0 [ 408.259406] ? copy_mount_string+0x40/0x40 [ 408.259421] ? rcu_pm_notify+0xc0/0xc0 [ 408.259452] ? copy_mount_options+0x5f/0x380 [ 408.324884] ? rcu_read_lock_sched_held+0x108/0x120 [ 408.329917] ? kmem_cache_alloc_trace+0x616/0x780 [ 408.334780] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 408.340327] ? _copy_from_user+0xdf/0x150 [ 408.344492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.350043] ? copy_mount_options+0x285/0x380 [ 408.354555] ksys_mount+0x12d/0x140 [ 408.358205] __x64_sys_mount+0xbe/0x150 [ 408.362180] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 408.367205] do_syscall_64+0x1b9/0x820 [ 408.371097] ? finish_task_switch+0x1d3/0x870 [ 408.375601] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.380558] ? syscall_return_slowpath+0x31d/0x5e0 [ 408.385488] ? __switch_to_asm+0x34/0x70 [ 408.389557] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 408.394929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.399787] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.404990] RIP: 0033:0x457089 [ 408.408204] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.427119] RSP: 002b:00007fe91850fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 408.434834] RAX: ffffffffffffffda RBX: 00007fe9185106d4 RCX: 0000000000457089 [ 408.442107] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 408.449376] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 408.456645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 408.463910] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000004 [ 408.471199] CPU: 0 PID: 27454 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 408.478230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.487597] Call Trace: [ 408.490199] dump_stack+0x1c9/0x2b4 [ 408.493842] ? dump_stack_print_info.cold.2+0x52/0x52 [ 408.499051] ? radix_tree_clear_tags+0xc0/0xc0 [ 408.503652] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 408.509211] should_fail.cold.4+0xa/0x11 15:18:22 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:22 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9pd', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 408.513289] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 408.518395] ? save_stack+0xa9/0xd0 [ 408.522039] ? save_stack+0x43/0xd0 [ 408.525679] ? __radix_tree_replace+0x1fc/0x360 [ 408.530405] ? find_held_lock+0x36/0x1c0 [ 408.534495] ? check_same_owner+0x340/0x340 [ 408.538825] ? rcu_note_context_switch+0x730/0x730 [ 408.543777] __should_failslab+0x124/0x180 [ 408.548030] should_failslab+0x9/0x14 [ 408.551835] __kmalloc_track_caller+0x2c4/0x760 [ 408.556494] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 408.561584] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 408.566588] ? p9_client_create+0x48f/0x1770 [ 408.570979] kstrdup+0x39/0x70 [ 408.574159] p9_client_create+0x48f/0x1770 [ 408.578383] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 408.583140] ? __x64_sys_mount+0xbe/0x150 [ 408.587286] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.592650] ? p9_client_read+0xc60/0xc60 [ 408.596783] ? find_held_lock+0x36/0x1c0 [ 408.600851] ? __lockdep_init_map+0x105/0x590 [ 408.605363] ? kasan_check_write+0x14/0x20 [ 408.609600] ? __init_rwsem+0x1cc/0x2a0 [ 408.613587] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 408.618612] ? rcu_read_lock_sched_held+0x108/0x120 [ 408.623628] ? __kmalloc_track_caller+0x5f5/0x760 [ 408.628482] ? save_stack+0xa9/0xd0 [ 408.632101] ? save_stack+0x43/0xd0 [ 408.635728] ? kasan_kmalloc+0xc4/0xe0 [ 408.639628] ? kmem_cache_alloc_trace+0x152/0x780 [ 408.644454] ? memcpy+0x45/0x50 [ 408.647728] v9fs_session_init+0x21a/0x1a80 [ 408.652050] ? find_held_lock+0x36/0x1c0 [ 408.656180] ? v9fs_show_options+0x7e0/0x7e0 [ 408.660594] ? kasan_check_read+0x11/0x20 [ 408.664748] ? rcu_is_watching+0x8c/0x150 [ 408.668909] ? rcu_pm_notify+0xc0/0xc0 [ 408.672815] ? v9fs_mount+0x61/0x900 [ 408.676527] ? rcu_read_lock_sched_held+0x108/0x120 [ 408.681547] ? kmem_cache_alloc_trace+0x616/0x780 [ 408.686394] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 408.691917] v9fs_mount+0x7c/0x900 [ 408.695446] mount_fs+0xae/0x328 [ 408.698821] vfs_kern_mount.part.34+0xdc/0x4e0 [ 408.703404] ? may_umount+0xb0/0xb0 [ 408.707024] ? _raw_read_unlock+0x22/0x30 [ 408.711158] ? __get_fs_type+0x97/0xc0 [ 408.715056] do_mount+0x581/0x30e0 [ 408.718603] ? copy_mount_string+0x40/0x40 [ 408.722828] ? copy_mount_options+0x5f/0x380 [ 408.727223] ? rcu_read_lock_sched_held+0x108/0x120 [ 408.732240] ? kmem_cache_alloc_trace+0x616/0x780 [ 408.737088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 408.742640] ? _copy_from_user+0xdf/0x150 [ 408.746785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.752321] ? copy_mount_options+0x285/0x380 [ 408.756832] ksys_mount+0x12d/0x140 [ 408.760469] __x64_sys_mount+0xbe/0x150 [ 408.764440] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 408.769468] do_syscall_64+0x1b9/0x820 [ 408.773341] ? finish_task_switch+0x1d3/0x870 [ 408.777846] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.782794] ? syscall_return_slowpath+0x31d/0x5e0 [ 408.787725] ? __switch_to_asm+0x34/0x70 [ 408.791785] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 408.797156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.802003] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.807181] RIP: 0033:0x457089 [ 408.810388] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.829300] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 408.837017] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 408.844338] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 408.851609] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 408.858879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 408.866138] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 000000000000000c 15:18:22 executing program 0 (fault-call:3 fault-nth:13): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x4}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:22 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4001000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000180)=0xe8) bind$packet(r0, &(0x7f0000000200)={0x11, 0x4e29388a5ef0cfb4, r1, 0x1, 0x1, 0x6, @random="e461a2e1141e"}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bcsf0\x00', 0x0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000002c0)={r2, 0x1, 0x9c, 0x35e3, 0x4, 0x4, 0x5f}) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xf0ffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:22 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397003", 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 409.306815] FAULT_INJECTION: forcing a failure. [ 409.306815] name failslab, interval 1, probability 0, space 0, times 0 [ 409.318177] CPU: 0 PID: 27489 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 409.325195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.334575] Call Trace: [ 409.337178] dump_stack+0x1c9/0x2b4 [ 409.340829] ? dump_stack_print_info.cold.2+0x52/0x52 [ 409.346054] ? kernel_text_address+0x79/0xf0 [ 409.350478] ? __kernel_text_address+0xd/0x40 [ 409.354996] should_fail.cold.4+0xa/0x11 [ 409.359090] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 409.364214] ? save_stack+0xa9/0xd0 [ 409.367828] ? save_stack+0x43/0xd0 [ 409.371455] ? kasan_kmalloc+0xc4/0xe0 [ 409.375345] ? kmem_cache_alloc_trace+0x152/0x780 [ 409.380177] ? v9fs_session_init+0x21a/0x1a80 [ 409.384655] ? v9fs_mount+0x7c/0x900 [ 409.388374] ? mount_fs+0xae/0x328 [ 409.391945] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 409.396687] ? do_mount+0x581/0x30e0 [ 409.400396] ? ksys_mount+0x12d/0x140 [ 409.404209] ? __x64_sys_mount+0xbe/0x150 [ 409.408363] ? do_syscall_64+0x1b9/0x820 [ 409.412442] ? find_held_lock+0x36/0x1c0 [ 409.416537] ? check_same_owner+0x340/0x340 [ 409.420881] ? kasan_check_read+0x11/0x20 [ 409.425036] ? rcu_is_watching+0x8c/0x150 [ 409.429187] ? rcu_note_context_switch+0x730/0x730 [ 409.434118] ? rcu_pm_notify+0xc0/0xc0 [ 409.438014] __should_failslab+0x124/0x180 [ 409.442277] should_failslab+0x9/0x14 [ 409.446085] kmem_cache_alloc_trace+0x2cb/0x780 [ 409.450769] ? kmem_cache_alloc_trace+0x616/0x780 [ 409.455618] ? __lockdep_init_map+0x105/0x590 [ 409.460105] p9_idpool_create+0x42/0x190 [ 409.464160] p9_client_create+0x286/0x1770 [ 409.468403] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 409.473147] ? do_mount+0x581/0x30e0 [ 409.476858] ? __x64_sys_mount+0xbe/0x150 [ 409.481008] ? do_syscall_64+0x1b9/0x820 [ 409.485099] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.490458] ? p9_client_read+0xc60/0xc60 [ 409.494598] ? find_held_lock+0x36/0x1c0 [ 409.498654] ? __lockdep_init_map+0x105/0x590 [ 409.503158] ? kasan_check_write+0x14/0x20 [ 409.507399] ? __init_rwsem+0x1cc/0x2a0 [ 409.511370] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 409.516411] ? rcu_read_lock_sched_held+0x108/0x120 [ 409.521410] ? __kmalloc_track_caller+0x5f5/0x760 [ 409.526243] ? save_stack+0xa9/0xd0 [ 409.529875] ? save_stack+0x43/0xd0 [ 409.533493] ? kasan_kmalloc+0xc4/0xe0 [ 409.537380] ? kmem_cache_alloc_trace+0x152/0x780 [ 409.542221] ? memcpy+0x45/0x50 [ 409.545525] v9fs_session_init+0x21a/0x1a80 [ 409.549863] ? find_held_lock+0x36/0x1c0 [ 409.553932] ? v9fs_show_options+0x7e0/0x7e0 [ 409.558333] ? kasan_check_read+0x11/0x20 [ 409.562471] ? rcu_is_watching+0x8c/0x150 [ 409.566607] ? rcu_pm_notify+0xc0/0xc0 [ 409.570504] ? v9fs_mount+0x61/0x900 [ 409.574214] ? rcu_read_lock_sched_held+0x108/0x120 [ 409.579231] ? kmem_cache_alloc_trace+0x616/0x780 [ 409.584076] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 409.589601] v9fs_mount+0x7c/0x900 [ 409.593156] mount_fs+0xae/0x328 [ 409.596556] vfs_kern_mount.part.34+0xdc/0x4e0 [ 409.601152] ? may_umount+0xb0/0xb0 [ 409.604784] ? _raw_read_unlock+0x22/0x30 [ 409.608938] ? __get_fs_type+0x97/0xc0 [ 409.612819] do_mount+0x581/0x30e0 [ 409.616365] ? copy_mount_string+0x40/0x40 [ 409.620617] ? copy_mount_options+0x5f/0x380 [ 409.625040] ? rcu_read_lock_sched_held+0x108/0x120 [ 409.630070] ? kmem_cache_alloc_trace+0x616/0x780 [ 409.634919] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 409.640475] ? _copy_from_user+0xdf/0x150 [ 409.644639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 409.650190] ? copy_mount_options+0x285/0x380 [ 409.654687] ksys_mount+0x12d/0x140 [ 409.658318] __x64_sys_mount+0xbe/0x150 [ 409.662293] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 409.667312] do_syscall_64+0x1b9/0x820 [ 409.671199] ? finish_task_switch+0x1d3/0x870 [ 409.675700] ? syscall_return_slowpath+0x5e0/0x5e0 [ 409.680623] ? syscall_return_slowpath+0x31d/0x5e0 [ 409.685588] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 409.690956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.695813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.700997] RIP: 0033:0x457089 [ 409.704185] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.723084] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 409.730792] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 409.738049] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 409.745307] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 15:18:23 executing program 0 (fault-call:3 fault-nth:14): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 409.752580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 409.759865] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 000000000000000d 15:18:23 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a00000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000280)='./bus\x00', 0x1) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="62747266732e72616d667300bfae70a01be15eb66233"], &(0x7f0000000740)=""/4096, 0x1000) 15:18:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x4, 0x3}) write$cgroup_type(r0, &(0x7f0000000100)='threaded\b', 0x37f) 15:18:23 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 409.989734] 9pnet: p9_fd_create_unix (27507): problem connecting socket: éq‰Y’3aK: -111 15:18:23 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9pd', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x200000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:23 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 410.181349] FAULT_INJECTION: forcing a failure. [ 410.181349] name failslab, interval 1, probability 0, space 0, times 0 [ 410.192809] CPU: 0 PID: 27518 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 410.199844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.209208] Call Trace: [ 410.211814] dump_stack+0x1c9/0x2b4 [ 410.215470] ? dump_stack_print_info.cold.2+0x52/0x52 [ 410.220691] should_fail.cold.4+0xa/0x11 [ 410.224787] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 410.229915] ? __save_stack_trace+0x8d/0xf0 [ 410.234309] ? save_stack+0xa9/0xd0 [ 410.237949] ? find_held_lock+0x36/0x1c0 [ 410.242010] ? check_same_owner+0x340/0x340 [ 410.246336] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 410.251435] ? rcu_note_context_switch+0x730/0x730 [ 410.256357] __should_failslab+0x124/0x180 [ 410.260583] should_failslab+0x9/0x14 [ 410.264376] kmem_cache_alloc_trace+0x2cb/0x780 [ 410.269054] ? kfree+0x111/0x260 [ 410.272411] ? p9_client_create+0x7f9/0x1770 [ 410.276824] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 410.281834] p9_idpool_create+0x42/0x190 [ 410.285881] p9_client_create+0x852/0x1770 [ 410.290133] ? p9_client_read+0xc60/0xc60 [ 410.294298] ? find_held_lock+0x36/0x1c0 [ 410.298382] ? __lockdep_init_map+0x105/0x590 [ 410.302902] ? kasan_check_write+0x14/0x20 [ 410.307130] ? __init_rwsem+0x1cc/0x2a0 [ 410.311102] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 410.316120] ? rcu_read_lock_sched_held+0x108/0x120 [ 410.321131] ? __kmalloc_track_caller+0x5f5/0x760 [ 410.325969] ? save_stack+0xa9/0xd0 [ 410.329576] ? save_stack+0x43/0xd0 [ 410.333187] ? kasan_kmalloc+0xc4/0xe0 [ 410.337079] ? kmem_cache_alloc_trace+0x152/0x780 [ 410.341928] ? memcpy+0x45/0x50 [ 410.345196] v9fs_session_init+0x21a/0x1a80 [ 410.349521] ? find_held_lock+0x36/0x1c0 [ 410.353597] ? v9fs_show_options+0x7e0/0x7e0 [ 410.357993] ? kasan_check_read+0x11/0x20 [ 410.362125] ? rcu_is_watching+0x8c/0x150 [ 410.366273] ? rcu_pm_notify+0xc0/0xc0 [ 410.370174] ? v9fs_mount+0x61/0x900 [ 410.373873] ? rcu_read_lock_sched_held+0x108/0x120 [ 410.378874] ? kmem_cache_alloc_trace+0x616/0x780 [ 410.383732] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 410.389259] v9fs_mount+0x7c/0x900 [ 410.392799] mount_fs+0xae/0x328 [ 410.396164] vfs_kern_mount.part.34+0xdc/0x4e0 [ 410.400729] ? may_umount+0xb0/0xb0 [ 410.404361] ? _raw_read_unlock+0x22/0x30 [ 410.408507] ? __get_fs_type+0x97/0xc0 [ 410.412384] do_mount+0x581/0x30e0 [ 410.415927] ? copy_mount_string+0x40/0x40 [ 410.420165] ? copy_mount_options+0x5f/0x380 [ 410.424557] ? rcu_read_lock_sched_held+0x108/0x120 [ 410.429569] ? kmem_cache_alloc_trace+0x616/0x780 [ 410.434418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 410.439937] ? copy_mount_options+0x285/0x380 [ 410.444416] ksys_mount+0x12d/0x140 [ 410.448057] __x64_sys_mount+0xbe/0x150 [ 410.452031] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 410.457058] do_syscall_64+0x1b9/0x820 [ 410.460940] ? finish_task_switch+0x1d3/0x870 [ 410.465421] ? syscall_return_slowpath+0x5e0/0x5e0 [ 410.470354] ? syscall_return_slowpath+0x31d/0x5e0 [ 410.475281] ? __switch_to_asm+0x34/0x70 [ 410.479360] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 410.484712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 410.489554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.494728] RIP: 0033:0x457089 [ 410.497905] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.516785] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 410.524489] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 15:18:24 executing program 0 (fault-call:3 fault-nth:15): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 410.531752] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 410.539016] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 410.546283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 410.553547] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 000000000000000e 15:18:24 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xc00, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0x4000, 0x10002, 0x9, 0x2, 0x4}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 410.753676] 9pnet: p9_fd_create_unix (27541): problem connecting socket: éq‰Y’3aK: -111 15:18:24 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3c00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:24 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:24 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x6, 0x0, 0x7, 0x3}) mkdir(&(0x7f0000000a40)='./file0\x00', 0x80) unlink(&(0x7f0000000900)='./bus/file0\x00') mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x81, 0x8, &(0x7f0000000800)=[{&(0x7f0000000200)="3c999d26d347ab2962c842ef247f3284932495056ba902603f2ce01ecc47f8b7ef2d68457a8993e4d258d452b6947958f1f20f03b7083afebdcd840aa6d3d98ac9fe88ef64ae33436d54b7d25d20574e264254becd8c31c30674890c54672d364595c5a735990877ac78187afe4b88ae", 0x70, 0x2}, {&(0x7f0000000280)="a4a7d5b68569d0553dffce33322b3eb9fed59791e9d8b2da59c55cd438706ccf9d52e7ada67143d237d22d0db9a2c597f54140149c6aeb2c02d772546d256efc136394d406da880bc87ff26727e6955e453ed85107bf71459ccd214a35fcd76867f627b2bac61cd970366ba2c91f967b88207e17afa62d6089015ffe493611570c81206cf3eaa60d04237a46981154de48f274743396e266b905fbc84b8aa99d6687fd95dc734f2129b6dde82fc69b33c9f0fa06570eafc2041048077045a49f6d80870f29998604ba2ae381c555af000dce84bae136b2a83dc869727a8b", 0xde}, {&(0x7f0000000380)="a1466cf59e257c7042c760df5001", 0xe, 0x2}, {&(0x7f00000003c0)="cbc926576b87e378a048ddbb8fe27cb9eb17812dec944540a435810751a44fce88d64299d0b6264291a574534b0bc5d3cf7f8e834e9c7c795ccf3c2a9a3df124bc6a4c5a44daa0c5ebd51dd341220c03226491b87d4ee68c15560f2d0fda86762fcc63babdebe797c332e10818ebdfea418a3581d8ad166c3d19e4f1ae1b5fad2bdfeef0cd615c7e06c998f9674a589aef31119b39521ecf2c814104ae094c79dae8b67c9e503d054aa7943c4e30556def32892974d68b2b98e577a578488aece1d7277d0311255195fd257a5a9ac3d41f4d992b7140306330e2879abaeea0d7895f7279e368adcb", 0xe8, 0x7}, {&(0x7f00000004c0)="92f4197a6207994dd2ffab4f5590fec6c59f7a324a1275ae70623f8f2d73baef16009fbaf78f9ce510765d73a0b10d4577f511dc0a9131a39d803f62020512f778295951d5ca8835645985fefa2c25a82b1d21f5c1e3411b29ae3d6244c637eea51e5b020011017a73a93d984e354e3f6d95b248f851bb772c8a34eb0d9596e030c476feff95e5fca4e56c5bc4cbe0cbc638b09e5f6df1457db3bf25c68a63f2ed968058eda79393f851c047dd346452765a7262857fc0a74e3232c15647de361415f8cc50de6334", 0xc8, 0x6}, {&(0x7f00000005c0)="fbbf76f23a107cbf254b3ef222bf98326c9421fa224d79f09d998dad721314d42088fa4dd57f4ce26182983ce4504f7a8460fba5fa03a50b8a3847f5be08603ec7f12e4cf91443ae9242ea3986a8e531044ee7ee56571b79d811e13a533a95858169b11b11e8c267d441857ef7e482c94a9349311ff45ed0e6e0a4ab4ec31ce43bc5a0b6f2c2c44f55dcb651e7d30d9c72929eca439e6604aaa2fa79", 0x9c, 0x7fffffff}, {&(0x7f0000000680)="e781596b99e5f314f21a53dd18caf859ac3376e5e600b8d1c0b5f35e3ae6aeb89bb897d04b0b3e368ae1ae0fd6a69e95b83f21ae096ebeda83fb5061c85416a901ccb331823458e327dd1a1e57705699bf031b03cda634648942ee652265ac44e15b870dc94acb72b5262b1187daaab87d", 0x71, 0x1}, {&(0x7f0000000740)="7c0b06b1474dcc424dda103d4751fa1894760b0d7b1f7922ea7ee71b85348052c4be2554fe84d1d9d68db080445cc73e919c5244ae6f1c5e1d7e823eb7851d6e831ffe4d5d798e3ac9c57dd51f8bfe63773779b4ef1f453ed169ab1334a805a5b5617e7e3cb7eb6ad291926e413894ac38965af42cacceb9b93055ca5e9d28db62a03c640c62373118fd8db0dcb31b043a08dd43b957ab40762cde11f651aa5b508793cc61228fbf0935b7c4a8898481f733c2bb0556b210", 0xb8, 0x39d}], 0x1080, &(0x7f00000008c0)={[{@discard='discard'}, {@noautodefrag='noautodefrag'}]}) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 410.986866] FAULT_INJECTION: forcing a failure. [ 410.986866] name failslab, interval 1, probability 0, space 0, times 0 [ 410.998268] CPU: 1 PID: 27554 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 411.005298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.014687] Call Trace: [ 411.017325] dump_stack+0x1c9/0x2b4 [ 411.020960] ? dump_stack_print_info.cold.2+0x52/0x52 [ 411.026146] should_fail.cold.4+0xa/0x11 [ 411.030210] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 411.035333] ? __save_stack_trace+0x8d/0xf0 [ 411.039699] ? save_stack+0xa9/0xd0 [ 411.043371] ? find_held_lock+0x36/0x1c0 [ 411.047471] ? check_same_owner+0x340/0x340 [ 411.051811] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 411.056939] ? rcu_note_context_switch+0x730/0x730 [ 411.061920] __should_failslab+0x124/0x180 [ 411.066182] should_failslab+0x9/0x14 [ 411.070001] kmem_cache_alloc_trace+0x2cb/0x780 [ 411.075206] ? kfree+0x111/0x260 [ 411.078582] ? p9_client_create+0x7f9/0x1770 [ 411.082994] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 411.088026] p9_idpool_create+0x42/0x190 [ 411.092116] p9_client_create+0x852/0x1770 [ 411.096371] ? p9_client_read+0xc60/0xc60 [ 411.100545] ? find_held_lock+0x36/0x1c0 [ 411.104650] ? __lockdep_init_map+0x105/0x590 [ 411.109163] ? kasan_check_write+0x14/0x20 [ 411.113406] ? __init_rwsem+0x1cc/0x2a0 [ 411.117388] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 411.122431] ? rcu_read_lock_sched_held+0x108/0x120 [ 411.127456] ? __kmalloc_track_caller+0x5f5/0x760 [ 411.132303] ? save_stack+0xa9/0xd0 [ 411.135943] ? save_stack+0x43/0xd0 [ 411.139576] ? kasan_kmalloc+0xc4/0xe0 [ 411.143473] ? kmem_cache_alloc_trace+0x152/0x780 [ 411.148325] ? memcpy+0x45/0x50 [ 411.151620] v9fs_session_init+0x21a/0x1a80 [ 411.155951] ? find_held_lock+0x36/0x1c0 [ 411.160035] ? v9fs_show_options+0x7e0/0x7e0 [ 411.164456] ? kasan_check_read+0x11/0x20 [ 411.168612] ? rcu_is_watching+0x8c/0x150 [ 411.172797] ? rcu_pm_notify+0xc0/0xc0 [ 411.176699] ? v9fs_mount+0x61/0x900 [ 411.180415] ? rcu_read_lock_sched_held+0x108/0x120 [ 411.185450] ? kmem_cache_alloc_trace+0x616/0x780 [ 411.190307] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 411.195860] v9fs_mount+0x7c/0x900 [ 411.199409] mount_fs+0xae/0x328 [ 411.202790] vfs_kern_mount.part.34+0xdc/0x4e0 [ 411.207382] ? may_umount+0xb0/0xb0 [ 411.211012] ? _raw_read_unlock+0x22/0x30 [ 411.215164] ? __get_fs_type+0x97/0xc0 [ 411.219062] do_mount+0x581/0x30e0 [ 411.222614] ? copy_mount_string+0x40/0x40 [ 411.226874] ? copy_mount_options+0x5f/0x380 [ 411.231300] ? rcu_read_lock_sched_held+0x108/0x120 [ 411.236328] ? kmem_cache_alloc_trace+0x616/0x780 [ 411.241179] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.246720] ? _copy_from_user+0xdf/0x150 [ 411.250900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.256453] ? copy_mount_options+0x285/0x380 [ 411.260985] ksys_mount+0x12d/0x140 [ 411.264632] __x64_sys_mount+0xbe/0x150 [ 411.268606] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 411.273629] do_syscall_64+0x1b9/0x820 [ 411.277528] ? syscall_slow_exit_work+0x500/0x500 [ 411.282379] ? syscall_return_slowpath+0x5e0/0x5e0 [ 411.287319] ? syscall_return_slowpath+0x31d/0x5e0 [ 411.292257] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 411.297637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.302505] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.307711] RIP: 0033:0x457089 [ 411.310910] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.329815] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b15f524c59c0100e89e6a357c000000", 0x2761, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x7, 0x4) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 411.337540] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 411.344812] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 411.352084] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 411.359359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 411.366624] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 000000000000000f 15:18:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x5000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:24 executing program 0 (fault-call:3 fault-nth:16): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:25 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b8, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@l2, &(0x7f00000000c0)=0x80) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000380)={r1, 0xffffffffffffffc1, 0x309, 0xda, 0x6, 0x6, 0x20}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[{0xb, 0xffffffffaeb531ee}, {0x8, 0x1ff}, {0x87cbc93ff2ee4755}, {0x6, 0x4000000000}, {0x3, 0x2f}, {0x0, 0x1}, {0xa, 0x8}, {0x8, 0x3}, {0x2, 0x1}], 0x9) 15:18:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x11}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:25 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x80000) r1 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="65746831196d696d655f747970655d00", 0xfffffffffffffffd) r2 = add_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000300)="238726f519ecf097fa31b827efbe7f12cd0c590e9d9ae2866cff328fee3424610678dc46153076240343d1253df98f719ec783e7d4c2a4b1805cc3409ea9fc4014cd00773c75795bf3f6a41cf08334266c2aa10feaa0ae8bacc000de5c286b819c9f16ddf13bea", 0x67, 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, r2) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$int_in(r0, 0x5473, &(0x7f0000000080)=0x565c) socket$bt_bnep(0x1f, 0x3, 0x4) [ 411.728089] 9pnet: p9_fd_create_unix (27596): problem connecting socket: éq‰Y’3aK: -111 [ 411.781054] FAULT_INJECTION: forcing a failure. [ 411.781054] name failslab, interval 1, probability 0, space 0, times 0 [ 411.792503] CPU: 0 PID: 27599 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 411.799538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.808875] Call Trace: [ 411.811450] dump_stack+0x1c9/0x2b4 [ 411.815079] ? dump_stack_print_info.cold.2+0x52/0x52 [ 411.820305] ? prep_compound_page+0x231/0x380 [ 411.824856] should_fail.cold.4+0xa/0x11 [ 411.828937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 411.834039] ? print_usage_bug+0xc0/0xc0 [ 411.838097] ? kernel_poison_pages+0x136/0x220 [ 411.842682] ? graph_lock+0x170/0x170 [ 411.846472] ? graph_lock+0x170/0x170 [ 411.850279] ? find_held_lock+0x36/0x1c0 [ 411.854371] ? check_same_owner+0x340/0x340 [ 411.858701] ? rcu_note_context_switch+0x730/0x730 [ 411.863640] ? kasan_check_read+0x11/0x20 [ 411.867811] __should_failslab+0x124/0x180 [ 411.872042] should_failslab+0x9/0x14 [ 411.875839] kmem_cache_alloc+0x2af/0x760 [ 411.880008] ? is_bpf_text_address+0xd7/0x170 [ 411.884501] sock_alloc_inode+0x78/0x320 [ 411.888550] ? sock_destroy_inode+0x70/0x70 [ 411.892864] ? __save_stack_trace+0x8d/0xf0 [ 411.897187] ? sock_destroy_inode+0x70/0x70 [ 411.901511] alloc_inode+0x63/0x190 [ 411.905143] new_inode_pseudo+0x71/0x1a0 [ 411.909206] ? prune_icache_sb+0x1b0/0x1b0 [ 411.913441] ? save_stack+0x43/0xd0 [ 411.917059] ? kasan_kmalloc+0xc4/0xe0 [ 411.920944] ? kmem_cache_alloc_trace+0x152/0x780 [ 411.925777] ? p9_idpool_create+0x42/0x190 [ 411.929996] ? p9_client_create+0x852/0x1770 [ 411.934393] ? v9fs_session_init+0x21a/0x1a80 [ 411.938874] sock_alloc+0x41/0x270 [ 411.942398] __sock_create+0x175/0x940 [ 411.946282] ? kernel_sock_ip_overhead+0x570/0x570 [ 411.951232] p9_fd_create_unix+0x1c3/0x370 [ 411.955466] ? p9_socket_open+0x220/0x220 [ 411.959616] ? rcu_read_lock_sched_held+0x108/0x120 [ 411.965071] ? kmem_cache_alloc_trace+0x616/0x780 [ 411.969916] ? __lockdep_init_map+0x105/0x590 [ 411.974399] ? lockdep_init_map+0x9/0x10 [ 411.978460] ? __raw_spin_lock_init+0x2d/0x100 [ 411.983061] p9_client_create+0x8ed/0x1770 [ 411.987302] ? p9_client_read+0xc60/0xc60 [ 411.991435] ? find_held_lock+0x36/0x1c0 [ 411.995502] ? __lockdep_init_map+0x105/0x590 [ 411.999983] ? kasan_check_write+0x14/0x20 [ 412.004201] ? __init_rwsem+0x1cc/0x2a0 [ 412.008172] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 412.013180] ? rcu_read_lock_sched_held+0x108/0x120 [ 412.018181] ? __kmalloc_track_caller+0x5f5/0x760 [ 412.023007] ? save_stack+0xa9/0xd0 [ 412.026647] ? save_stack+0x43/0xd0 [ 412.030291] ? kasan_kmalloc+0xc4/0xe0 [ 412.034188] ? kmem_cache_alloc_trace+0x152/0x780 [ 412.039011] ? memcpy+0x45/0x50 [ 412.042305] v9fs_session_init+0x21a/0x1a80 [ 412.046618] ? find_held_lock+0x36/0x1c0 [ 412.050679] ? v9fs_show_options+0x7e0/0x7e0 [ 412.055089] ? kasan_check_read+0x11/0x20 [ 412.059243] ? rcu_is_watching+0x8c/0x150 [ 412.063418] ? rcu_pm_notify+0xc0/0xc0 [ 412.067314] ? v9fs_mount+0x61/0x900 [ 412.071035] ? rcu_read_lock_sched_held+0x108/0x120 [ 412.076043] ? kmem_cache_alloc_trace+0x616/0x780 [ 412.080884] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 412.086422] v9fs_mount+0x7c/0x900 [ 412.089962] mount_fs+0xae/0x328 [ 412.093346] vfs_kern_mount.part.34+0xdc/0x4e0 [ 412.097927] ? may_umount+0xb0/0xb0 [ 412.101543] ? _raw_read_unlock+0x22/0x30 [ 412.105699] ? __get_fs_type+0x97/0xc0 [ 412.109589] do_mount+0x581/0x30e0 [ 412.113119] ? copy_mount_string+0x40/0x40 [ 412.117368] ? copy_mount_options+0x5f/0x380 [ 412.121782] ? rcu_read_lock_sched_held+0x108/0x120 [ 412.126799] ? kmem_cache_alloc_trace+0x616/0x780 [ 412.131637] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 412.137196] ? _copy_from_user+0xdf/0x150 [ 412.141344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.146864] ? copy_mount_options+0x285/0x380 [ 412.151346] ksys_mount+0x12d/0x140 [ 412.154984] __x64_sys_mount+0xbe/0x150 [ 412.158975] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 412.164008] do_syscall_64+0x1b9/0x820 [ 412.167905] ? finish_task_switch+0x1d3/0x870 [ 412.172394] ? syscall_return_slowpath+0x5e0/0x5e0 [ 412.177325] ? syscall_return_slowpath+0x31d/0x5e0 [ 412.182257] ? __switch_to_asm+0x34/0x70 [ 412.186323] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 412.191687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.196525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.201707] RIP: 0033:0x457089 [ 412.204912] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.223813] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:25 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:25 executing program 0 (fault-call:3 fault-nth:17): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 412.231504] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 412.238779] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 412.246048] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 412.253310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 412.260566] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000010 [ 412.269194] socket: no more sockets [ 412.272893] 9pnet: p9_fd_create_unix (27599): problem creating socket 15:18:25 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397004", 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 412.319087] 9pnet: p9_fd_create_unix (27602): problem connecting socket: éq‰Y’3aK: -111 15:18:26 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3c03000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3c}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x20) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x80000000, 0x2042) write$P9_RLOPEN(r0, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x10, 0x4, 0x4}, 0xc0b}}, 0x18) creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 412.755063] FAULT_INJECTION: forcing a failure. [ 412.755063] name failslab, interval 1, probability 0, space 0, times 0 [ 412.766360] CPU: 1 PID: 27635 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 412.773364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.782717] Call Trace: [ 412.785320] dump_stack+0x1c9/0x2b4 [ 412.788958] ? dump_stack_print_info.cold.2+0x52/0x52 [ 412.794154] ? print_usage_bug+0xc0/0xc0 [ 412.798233] should_fail.cold.4+0xa/0x11 [ 412.802356] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 412.807536] ? find_held_lock+0x36/0x1c0 [ 412.811666] ? find_held_lock+0x36/0x1c0 [ 412.815788] ? check_same_owner+0x340/0x340 [ 412.820155] ? kernel_text_address+0x79/0xf0 [ 412.824599] ? rcu_note_context_switch+0x730/0x730 [ 412.829559] __should_failslab+0x124/0x180 [ 412.833825] should_failslab+0x9/0x14 [ 412.837647] kmem_cache_alloc+0x2af/0x760 [ 412.841813] ? __lock_acquire+0x7fc/0x5020 [ 412.846074] sk_prot_alloc+0x69/0x2e0 [ 412.849905] sk_alloc+0x106/0x17b0 [ 412.853457] ? trace_hardirqs_on+0x10/0x10 [ 412.857708] ? sock_def_error_report+0x720/0x720 [ 412.862534] ? do_syscall_64+0x1b9/0x820 [ 412.866622] ? lockdep_init_map+0x9/0x10 [ 412.870701] ? kasan_check_write+0x14/0x20 [ 412.874970] ? __init_rwsem+0x1cc/0x2a0 [ 412.878958] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 412.883994] ? graph_lock+0x170/0x170 [ 412.887816] ? __put_user_ns+0x60/0x60 [ 412.891723] ? kasan_check_read+0x11/0x20 [ 412.895904] ? rcu_is_watching+0x8c/0x150 [ 412.900073] ? find_held_lock+0x36/0x1c0 [ 412.904159] ? graph_lock+0x170/0x170 [ 412.907955] ? lock_downgrade+0x8f0/0x8f0 [ 412.912128] unix_create1+0x1ca/0x670 [ 412.915949] ? unix_stream_splice_actor+0x180/0x180 [ 412.920978] ? lock_downgrade+0x8f0/0x8f0 [ 412.925124] ? kasan_check_read+0x11/0x20 [ 412.929270] ? rcu_is_watching+0x8c/0x150 [ 412.933452] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 412.938156] unix_create+0x184/0x1e0 [ 412.941879] __sock_create+0x53c/0x940 [ 412.945811] ? kernel_sock_ip_overhead+0x570/0x570 [ 412.950803] p9_fd_create_unix+0x1c3/0x370 [ 412.955056] ? p9_socket_open+0x220/0x220 [ 412.959217] ? rcu_read_lock_sched_held+0x108/0x120 [ 412.964282] ? kmem_cache_alloc_trace+0x616/0x780 [ 412.969133] ? __lockdep_init_map+0x105/0x590 [ 412.973649] ? lockdep_init_map+0x9/0x10 [ 412.977722] ? __raw_spin_lock_init+0x2d/0x100 [ 412.982308] p9_client_create+0x8ed/0x1770 [ 412.986576] ? p9_client_read+0xc60/0xc60 [ 412.990733] ? find_held_lock+0x36/0x1c0 [ 412.994831] ? __lockdep_init_map+0x105/0x590 [ 412.999355] ? kasan_check_write+0x14/0x20 [ 413.003617] ? __init_rwsem+0x1cc/0x2a0 [ 413.007593] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 413.012598] ? rcu_read_lock_sched_held+0x108/0x120 [ 413.017612] ? __kmalloc_track_caller+0x5f5/0x760 [ 413.022460] ? save_stack+0xa9/0xd0 [ 413.026110] ? save_stack+0x43/0xd0 [ 413.029748] ? kasan_kmalloc+0xc4/0xe0 [ 413.033683] ? kmem_cache_alloc_trace+0x152/0x780 [ 413.038561] ? memcpy+0x45/0x50 [ 413.041862] v9fs_session_init+0x21a/0x1a80 [ 413.046204] ? find_held_lock+0x36/0x1c0 [ 413.050299] ? v9fs_show_options+0x7e0/0x7e0 [ 413.054712] ? kasan_check_read+0x11/0x20 [ 413.058850] ? rcu_is_watching+0x8c/0x150 [ 413.062995] ? rcu_pm_notify+0xc0/0xc0 [ 413.066889] ? v9fs_mount+0x61/0x900 [ 413.070605] ? rcu_read_lock_sched_held+0x108/0x120 [ 413.075615] ? kmem_cache_alloc_trace+0x616/0x780 [ 413.080460] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 413.086018] v9fs_mount+0x7c/0x900 [ 413.089575] mount_fs+0xae/0x328 [ 413.092966] vfs_kern_mount.part.34+0xdc/0x4e0 [ 413.097571] ? may_umount+0xb0/0xb0 [ 413.101217] ? _raw_read_unlock+0x22/0x30 [ 413.105369] ? __get_fs_type+0x97/0xc0 [ 413.109272] do_mount+0x581/0x30e0 [ 413.112823] ? copy_mount_string+0x40/0x40 [ 413.117062] ? copy_mount_options+0x5f/0x380 [ 413.121483] ? rcu_read_lock_sched_held+0x108/0x120 [ 413.126555] ? kmem_cache_alloc_trace+0x616/0x780 [ 413.131452] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.137001] ? _copy_from_user+0xdf/0x150 [ 413.141207] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.146775] ? copy_mount_options+0x285/0x380 [ 413.151294] ksys_mount+0x12d/0x140 [ 413.154944] __x64_sys_mount+0xbe/0x150 [ 413.158932] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 413.163965] do_syscall_64+0x1b9/0x820 [ 413.167860] ? finish_task_switch+0x1d3/0x870 [ 413.172359] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.177288] ? syscall_return_slowpath+0x31d/0x5e0 [ 413.182229] ? __switch_to_asm+0x34/0x70 [ 413.186300] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 413.191687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.196554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.201752] RIP: 0033:0x457089 [ 413.204958] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.223849] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 413.231730] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 413.239011] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 413.246277] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 15:18:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 413.253556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 413.260829] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000011 [ 413.268408] 9pnet: p9_fd_create_unix (27635): problem creating socket 15:18:26 executing program 0 (fault-call:3 fault-nth:18): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x20480}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:26 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7019160101000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:26 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:26 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/udp6\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r1, r2}}, 0x18) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') 15:18:27 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x400100, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:27 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 413.537411] FAULT_INJECTION: forcing a failure. [ 413.537411] name failslab, interval 1, probability 0, space 0, times 0 [ 413.548687] CPU: 1 PID: 27661 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 413.555711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.565072] Call Trace: [ 413.567675] dump_stack+0x1c9/0x2b4 [ 413.571348] ? dump_stack_print_info.cold.2+0x52/0x52 [ 413.576586] should_fail.cold.4+0xa/0x11 [ 413.580651] ? trace_hardirqs_on+0x10/0x10 [ 413.584896] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 413.590036] ? print_usage_bug+0xc0/0xc0 [ 413.594138] ? lock_downgrade+0x8f0/0x8f0 [ 413.598315] ? find_held_lock+0x36/0x1c0 [ 413.602427] ? check_same_owner+0x340/0x340 [ 413.606781] ? rcu_note_context_switch+0x730/0x730 [ 413.611732] __should_failslab+0x124/0x180 [ 413.615987] should_failslab+0x9/0x14 [ 413.619816] kmem_cache_alloc+0x2af/0x760 [ 413.623986] ? lock_downgrade+0x8f0/0x8f0 [ 413.628157] sk_prot_alloc+0x69/0x2e0 [ 413.631972] sk_alloc+0x106/0x17b0 [ 413.635538] ? sock_def_error_report+0x720/0x720 [ 413.640320] ? rcu_is_watching+0x8c/0x150 [ 413.644486] ? sk_alloc+0xccc/0x17b0 [ 413.648207] ? graph_lock+0x170/0x170 [ 413.652027] ? lockdep_init_map+0x9/0x10 [ 413.656097] ? init_timer_key+0x187/0x490 [ 413.660243] ? find_held_lock+0x36/0x1c0 [ 413.664328] ? lock_downgrade+0x8f0/0x8f0 [ 413.668496] ? __lockdep_init_map+0x105/0x590 [ 413.673023] ? kasan_check_read+0x11/0x20 [ 413.677191] ? do_raw_spin_unlock+0xa7/0x2f0 [ 413.681623] unix_create1+0x1ca/0x670 [ 413.685442] ? unix_stream_splice_actor+0x180/0x180 [ 413.690477] ? __local_bh_enable_ip+0x161/0x230 [ 413.695164] ? unix_create1+0x159/0x670 [ 413.699157] ? m_show+0x5d0/0x5d0 [ 413.702627] ? unix_stream_splice_actor+0x180/0x180 [ 413.707657] ? lock_downgrade+0x8f0/0x8f0 [ 413.711818] ? unix_mkname+0x11e/0x1d0 [ 413.715723] unix_stream_connect+0x297/0x11e0 [ 413.720243] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 413.724928] ? security_socket_post_create+0x9f/0xd0 [ 413.730047] ? unix_shutdown+0xa60/0xa60 [ 413.734133] ? kernel_sock_ip_overhead+0x570/0x570 [ 413.739090] p9_fd_create_unix+0x258/0x370 [ 413.743341] ? p9_socket_open+0x220/0x220 [ 413.747511] ? rcu_read_lock_sched_held+0x108/0x120 [ 413.752571] ? kmem_cache_alloc_trace+0x616/0x780 [ 413.757446] ? __lockdep_init_map+0x105/0x590 [ 413.761952] ? lockdep_init_map+0x9/0x10 [ 413.766026] ? __raw_spin_lock_init+0x2d/0x100 [ 413.770641] p9_client_create+0x8ed/0x1770 [ 413.774910] ? p9_client_read+0xc60/0xc60 [ 413.779070] ? find_held_lock+0x36/0x1c0 [ 413.783161] ? __lockdep_init_map+0x105/0x590 [ 413.787656] ? kasan_check_write+0x14/0x20 [ 413.791887] ? __init_rwsem+0x1cc/0x2a0 [ 413.795876] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 413.800907] ? rcu_read_lock_sched_held+0x108/0x120 [ 413.805955] ? __kmalloc_track_caller+0x5f5/0x760 [ 413.810824] ? save_stack+0xa9/0xd0 [ 413.814440] ? save_stack+0x43/0xd0 [ 413.818066] ? kasan_kmalloc+0xc4/0xe0 [ 413.821963] ? kmem_cache_alloc_trace+0x152/0x780 [ 413.826813] ? memcpy+0x45/0x50 [ 413.830117] v9fs_session_init+0x21a/0x1a80 [ 413.834459] ? find_held_lock+0x36/0x1c0 15:18:27 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = semget(0x1, 0x3, 0x10) semctl$SETVAL(r1, 0x3, 0x10, &(0x7f0000000140)=0xe0000000) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x2000080, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0x000N000000004e24,rq=0x%000000000000000,\x00']) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r4, &(0x7f0000000100)={r4, r0, 0x7}) r5 = openat$cgroup_ro(r3, &(0x7f0000001400)="6d656c6f72792e63757272656e74df", 0x2761, 0x0) io_setup(0x7fffffffffffff6d, &(0x7f0000001340)=0x0) io_cancel(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x81, r5, &(0x7f00000002c0)="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", 0x1000, 0xb92a, 0x0, 0x1, r3}, &(0x7f0000001300)) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000280)='syz1\x00') write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x6, 0x2, 0x5}}, 0x14) write$cgroup_type(r5, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 413.838540] ? v9fs_show_options+0x7e0/0x7e0 [ 413.842964] ? kasan_check_read+0x11/0x20 [ 413.847115] ? rcu_is_watching+0x8c/0x150 [ 413.851259] ? rcu_pm_notify+0xc0/0xc0 [ 413.855170] ? v9fs_mount+0x61/0x900 [ 413.858894] ? rcu_read_lock_sched_held+0x108/0x120 [ 413.863919] ? kmem_cache_alloc_trace+0x616/0x780 [ 413.868781] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 413.874333] v9fs_mount+0x7c/0x900 [ 413.877872] mount_fs+0xae/0x328 [ 413.881232] vfs_kern_mount.part.34+0xdc/0x4e0 [ 413.885818] ? may_umount+0xb0/0xb0 [ 413.889473] ? _raw_read_unlock+0x22/0x30 [ 413.893636] ? __get_fs_type+0x97/0xc0 [ 413.897548] do_mount+0x581/0x30e0 [ 413.901088] ? copy_mount_string+0x40/0x40 [ 413.905363] ? copy_mount_options+0x5f/0x380 [ 413.909810] ? rcu_read_lock_sched_held+0x108/0x120 [ 413.914857] ? kmem_cache_alloc_trace+0x616/0x780 [ 413.919704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.925235] ? _copy_from_user+0xdf/0x150 [ 413.929424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.934978] ? copy_mount_options+0x285/0x380 [ 413.939484] ksys_mount+0x12d/0x140 [ 413.943142] __x64_sys_mount+0xbe/0x150 [ 413.947116] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 413.952123] do_syscall_64+0x1b9/0x820 [ 413.956004] ? syscall_return_slowpath+0x5e0/0x5e0 [ 413.960941] ? syscall_return_slowpath+0x31d/0x5e0 [ 413.966089] ? __switch_to_asm+0x34/0x70 [ 413.970184] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 413.975571] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.980447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.985642] RIP: 0033:0x457089 15:18:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') sendfile(r1, r1, 0x0, 0x8) openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x4) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 413.988842] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.007750] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.015485] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 414.022792] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 414.030068] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 15:18:27 executing program 0 (fault-call:3 fault-nth:19): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 414.037338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 414.044616] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000012 [ 414.052141] 9pnet: p9_fd_create_unix (27661): problem connecting socket: éq‰Y’3aK: -12 15:18:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x806000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:27 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x10, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x205, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x2}, 0x8) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x21, 0x3, 0x0, {0x5}}, 0x21) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') [ 414.316869] FAULT_INJECTION: forcing a failure. [ 414.316869] name failslab, interval 1, probability 0, space 0, times 0 [ 414.328324] CPU: 0 PID: 27703 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 414.335343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.344685] Call Trace: [ 414.347293] dump_stack+0x1c9/0x2b4 [ 414.350941] ? dump_stack_print_info.cold.2+0x52/0x52 [ 414.356159] should_fail.cold.4+0xa/0x11 [ 414.360247] ? trace_hardirqs_on+0x10/0x10 [ 414.364493] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 414.369612] ? print_usage_bug+0xc0/0xc0 [ 414.373681] ? lock_downgrade+0x8f0/0x8f0 [ 414.377822] ? find_held_lock+0x36/0x1c0 [ 414.381883] ? check_same_owner+0x340/0x340 [ 414.386195] ? rcu_note_context_switch+0x730/0x730 [ 414.391134] __should_failslab+0x124/0x180 [ 414.395382] should_failslab+0x9/0x14 [ 414.399174] kmem_cache_alloc+0x2af/0x760 [ 414.403313] ? lock_downgrade+0x8f0/0x8f0 [ 414.407453] sk_prot_alloc+0x69/0x2e0 [ 414.411261] sk_alloc+0x106/0x17b0 [ 414.414806] ? sock_def_error_report+0x720/0x720 [ 414.419550] ? rcu_is_watching+0x8c/0x150 [ 414.423694] ? sk_alloc+0xccc/0x17b0 [ 414.427448] ? graph_lock+0x170/0x170 [ 414.431269] ? lockdep_init_map+0x9/0x10 [ 414.435337] ? init_timer_key+0x187/0x490 [ 414.439496] ? find_held_lock+0x36/0x1c0 [ 414.443588] ? lock_downgrade+0x8f0/0x8f0 [ 414.447745] ? __lockdep_init_map+0x105/0x590 [ 414.452254] ? kasan_check_read+0x11/0x20 [ 414.456442] ? do_raw_spin_unlock+0xa7/0x2f0 [ 414.460869] unix_create1+0x1ca/0x670 [ 414.464671] ? unix_stream_splice_actor+0x180/0x180 [ 414.469698] ? __local_bh_enable_ip+0x161/0x230 [ 414.474381] ? unix_create1+0x159/0x670 [ 414.478356] ? m_show+0x5d0/0x5d0 [ 414.481812] ? unix_stream_splice_actor+0x180/0x180 [ 414.486830] ? lock_downgrade+0x8f0/0x8f0 [ 414.490989] ? unix_mkname+0x11e/0x1d0 [ 414.494891] unix_stream_connect+0x297/0x11e0 [ 414.499374] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 414.504075] ? security_socket_post_create+0x9f/0xd0 [ 414.509207] ? unix_shutdown+0xa60/0xa60 [ 414.513262] ? kernel_sock_ip_overhead+0x570/0x570 [ 414.518220] p9_fd_create_unix+0x258/0x370 [ 414.522467] ? p9_socket_open+0x220/0x220 [ 414.526635] ? rcu_read_lock_sched_held+0x108/0x120 [ 414.531664] ? kmem_cache_alloc_trace+0x616/0x780 [ 414.536505] ? __lockdep_init_map+0x105/0x590 [ 414.540990] ? lockdep_init_map+0x9/0x10 [ 414.545049] ? __raw_spin_lock_init+0x2d/0x100 [ 414.549619] p9_client_create+0x8ed/0x1770 [ 414.553869] ? p9_client_read+0xc60/0xc60 [ 414.558018] ? find_held_lock+0x36/0x1c0 [ 414.562083] ? __lockdep_init_map+0x105/0x590 [ 414.566566] ? kasan_check_write+0x14/0x20 [ 414.570803] ? __init_rwsem+0x1cc/0x2a0 [ 414.574796] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 414.579822] ? rcu_read_lock_sched_held+0x108/0x120 [ 414.584856] ? __kmalloc_track_caller+0x5f5/0x760 [ 414.589692] ? save_stack+0xa9/0xd0 [ 414.593314] ? save_stack+0x43/0xd0 [ 414.596948] ? kasan_kmalloc+0xc4/0xe0 [ 414.600835] ? kmem_cache_alloc_trace+0x152/0x780 [ 414.605660] ? memcpy+0x45/0x50 [ 414.608932] v9fs_session_init+0x21a/0x1a80 [ 414.613250] ? find_held_lock+0x36/0x1c0 [ 414.617351] ? v9fs_show_options+0x7e0/0x7e0 [ 414.621786] ? kasan_check_read+0x11/0x20 [ 414.625948] ? rcu_is_watching+0x8c/0x150 [ 414.630088] ? rcu_pm_notify+0xc0/0xc0 [ 414.633969] ? v9fs_mount+0x61/0x900 [ 414.637673] ? rcu_read_lock_sched_held+0x108/0x120 [ 414.642680] ? kmem_cache_alloc_trace+0x616/0x780 [ 414.647526] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 414.653082] v9fs_mount+0x7c/0x900 [ 414.656625] mount_fs+0xae/0x328 [ 414.659983] vfs_kern_mount.part.34+0xdc/0x4e0 [ 414.664566] ? may_umount+0xb0/0xb0 [ 414.668196] ? _raw_read_unlock+0x22/0x30 [ 414.672346] ? __get_fs_type+0x97/0xc0 [ 414.676239] do_mount+0x581/0x30e0 [ 414.679784] ? copy_mount_string+0x40/0x40 [ 414.684013] ? copy_mount_options+0x5f/0x380 [ 414.688421] ? rcu_read_lock_sched_held+0x108/0x120 [ 414.693454] ? kmem_cache_alloc_trace+0x616/0x780 [ 414.698297] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 414.703854] ? _copy_from_user+0xdf/0x150 [ 414.707998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 414.713547] ? copy_mount_options+0x285/0x380 15:18:28 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:28 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 414.718069] ksys_mount+0x12d/0x140 [ 414.721723] __x64_sys_mount+0xbe/0x150 [ 414.725698] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 414.730722] do_syscall_64+0x1b9/0x820 [ 414.734649] ? finish_task_switch+0x1d3/0x870 [ 414.739157] ? syscall_return_slowpath+0x5e0/0x5e0 [ 414.744098] ? syscall_return_slowpath+0x31d/0x5e0 [ 414.749045] ? __switch_to_asm+0x34/0x70 [ 414.753106] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 414.758457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.763307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 414.768490] RIP: 0033:0x457089 [ 414.771689] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.790608] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 414.798316] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 414.805574] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 15:18:28 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:28 executing program 0 (fault-call:3 fault-nth:20): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 414.812834] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 414.820099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 414.827354] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000013 [ 414.834987] 9pnet: p9_fd_create_unix (27703): problem connecting socket: éq‰Y’3aK: -12 15:18:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8004020000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:28 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7400, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000100)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="6f73322e2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad10700e1c88875e05b18a4cb3a9cd12dceaf40d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df9c0100e89e6a357c00000000000000000000"]) 15:18:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x3) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0xe03fe, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0x9d, &(0x7f0000000200)=0x1) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000700)='./bus\x00', 0x0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='./file0\x00') socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000002c0)) chdir(&(0x7f0000000300)='./bus\x00') 15:18:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8848}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 415.272086] FAULT_INJECTION: forcing a failure. [ 415.272086] name failslab, interval 1, probability 0, space 0, times 0 [ 415.283365] CPU: 1 PID: 27744 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 415.290376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.299737] Call Trace: [ 415.302361] dump_stack+0x1c9/0x2b4 [ 415.306006] ? dump_stack_print_info.cold.2+0x52/0x52 [ 415.311205] ? __lock_acquire+0x7fc/0x5020 [ 415.315448] should_fail.cold.4+0xa/0x11 [ 415.319554] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 415.324665] ? trace_hardirqs_on+0x10/0x10 [ 415.328900] ? find_held_lock+0x36/0x1c0 [ 415.332967] ? check_same_owner+0x340/0x340 [ 415.337295] ? lockdep_init_map+0x9/0x10 [ 415.341377] ? rcu_note_context_switch+0x730/0x730 [ 415.346325] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 415.351365] __should_failslab+0x124/0x180 [ 415.355621] should_failslab+0x9/0x14 [ 415.359442] kmem_cache_alloc_node+0x272/0x780 [ 415.364053] __alloc_skb+0x119/0x770 [ 415.367790] ? skb_scrub_packet+0x520/0x520 [ 415.372119] ? do_raw_spin_unlock+0xa7/0x2f0 [ 415.376541] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 415.381117] ? __local_bh_enable_ip+0x161/0x230 [ 415.385800] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 415.390841] ? unix_create1+0x588/0x670 [ 415.394825] ? trace_hardirqs_on+0xd/0x10 [ 415.398998] ? __local_bh_enable_ip+0x161/0x230 [ 415.403715] ? unix_create1+0x159/0x670 [ 415.407711] ? unix_stream_splice_actor+0x180/0x180 [ 415.412739] ? __local_bh_enable_ip+0x161/0x230 [ 415.417436] sock_wmalloc+0x16d/0x1f0 [ 415.421250] ? skb_set_owner_w+0x320/0x320 [ 415.425508] ? unix_mkname+0x11e/0x1d0 [ 415.429408] unix_stream_connect+0x2c1/0x11e0 [ 415.433905] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 415.438592] ? security_socket_post_create+0x9f/0xd0 [ 415.443721] ? unix_shutdown+0xa60/0xa60 [ 415.447821] ? kernel_sock_ip_overhead+0x570/0x570 [ 415.452801] p9_fd_create_unix+0x258/0x370 [ 415.457084] ? p9_socket_open+0x220/0x220 [ 415.461269] ? rcu_read_lock_sched_held+0x108/0x120 [ 415.466303] ? kmem_cache_alloc_trace+0x616/0x780 [ 415.471166] ? __lockdep_init_map+0x105/0x590 [ 415.475686] ? lockdep_init_map+0x9/0x10 [ 415.479785] ? __raw_spin_lock_init+0x2d/0x100 [ 415.484401] p9_client_create+0x8ed/0x1770 [ 415.488672] ? p9_client_read+0xc60/0xc60 [ 415.492833] ? find_held_lock+0x36/0x1c0 [ 415.496948] ? __lockdep_init_map+0x105/0x590 [ 415.501477] ? kasan_check_write+0x14/0x20 [ 415.505716] ? __init_rwsem+0x1cc/0x2a0 [ 415.509692] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 415.514720] ? rcu_read_lock_sched_held+0x108/0x120 [ 415.519755] ? __kmalloc_track_caller+0x5f5/0x760 [ 415.524608] ? save_stack+0xa9/0xd0 [ 415.528242] ? save_stack+0x43/0xd0 [ 415.531881] ? kasan_kmalloc+0xc4/0xe0 [ 415.535796] ? kmem_cache_alloc_trace+0x152/0x780 [ 415.540675] ? memcpy+0x45/0x50 [ 415.543984] v9fs_session_init+0x21a/0x1a80 [ 415.548319] ? find_held_lock+0x36/0x1c0 [ 415.552408] ? v9fs_show_options+0x7e0/0x7e0 [ 415.556827] ? kasan_check_read+0x11/0x20 [ 415.560984] ? rcu_is_watching+0x8c/0x150 [ 415.565152] ? rcu_pm_notify+0xc0/0xc0 [ 415.569063] ? v9fs_mount+0x61/0x900 [ 415.572792] ? rcu_read_lock_sched_held+0x108/0x120 [ 415.577816] ? kmem_cache_alloc_trace+0x616/0x780 [ 415.582682] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 415.588226] v9fs_mount+0x7c/0x900 [ 415.591787] mount_fs+0xae/0x328 [ 415.595166] vfs_kern_mount.part.34+0xdc/0x4e0 [ 415.599757] ? may_umount+0xb0/0xb0 [ 415.603402] ? _raw_read_unlock+0x22/0x30 [ 415.607554] ? __get_fs_type+0x97/0xc0 [ 415.611453] do_mount+0x581/0x30e0 [ 415.615012] ? copy_mount_string+0x40/0x40 [ 415.619255] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 415.624022] ? retint_kernel+0x10/0x10 [ 415.627921] ? copy_mount_options+0x213/0x380 [ 415.632425] ? copy_mount_options+0x19c/0x380 [ 415.636922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 415.642461] ? copy_mount_options+0x285/0x380 [ 415.646964] ksys_mount+0x12d/0x140 [ 415.650611] __x64_sys_mount+0xbe/0x150 [ 415.654600] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 415.659634] do_syscall_64+0x1b9/0x820 [ 415.663563] ? finish_task_switch+0x1d3/0x870 [ 415.668085] ? syscall_return_slowpath+0x5e0/0x5e0 [ 415.673016] ? syscall_return_slowpath+0x31d/0x5e0 [ 415.677954] ? __switch_to_asm+0x34/0x70 [ 415.682019] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 415.687406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.692261] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 415.697456] RIP: 0033:0x457089 [ 415.700652] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.719571] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 415.727308] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 415.734580] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 415.741848] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 415.749114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 415.756382] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000014 [ 415.764063] 9pnet: p9_fd_create_unix (27744): problem connecting socket: éq‰Y’3aK: -12 15:18:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x86ddffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:29 executing program 0 (fault-call:3 fault-nth:21): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:29 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xffffff8c, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:29 executing program 5: clock_gettime(0xfffffffffffffffd, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r0, r1+30000000}, &(0x7f0000000100)) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x4000, 0x0) write$UHID_CREATE(r3, &(0x7f0000000340)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000280)=""/129, 0x81, 0x40, 0x9, 0x5a10, 0x7fff, 0x6}, 0x120) setsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000240)=0x8, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x8, 0x4001) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f0000000180)) write$cgroup_type(r4, &(0x7f00000001c0)='threaded\b', 0xfff9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) [ 416.039983] 9pnet: p9_fd_create_unix (27771): problem connecting socket: éq‰Y’3aK: -111 [ 416.125697] FAULT_INJECTION: forcing a failure. [ 416.125697] name failslab, interval 1, probability 0, space 0, times 0 [ 416.137013] CPU: 1 PID: 27782 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 416.144037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.153393] Call Trace: [ 416.155972] dump_stack+0x1c9/0x2b4 [ 416.159600] ? dump_stack_print_info.cold.2+0x52/0x52 [ 416.164790] ? print_usage_bug+0xc0/0xc0 [ 416.168873] should_fail.cold.4+0xa/0x11 [ 416.172939] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 416.178038] ? find_held_lock+0x36/0x1c0 [ 416.182096] ? find_held_lock+0x36/0x1c0 [ 416.186194] ? check_same_owner+0x340/0x340 [ 416.190536] ? kernel_text_address+0x79/0xf0 [ 416.194937] ? rcu_note_context_switch+0x730/0x730 [ 416.199858] __should_failslab+0x124/0x180 [ 416.204085] should_failslab+0x9/0x14 [ 416.207890] kmem_cache_alloc+0x2af/0x760 [ 416.212025] ? __lock_acquire+0x7fc/0x5020 [ 416.216265] sk_prot_alloc+0x69/0x2e0 [ 416.220073] sk_alloc+0x106/0x17b0 [ 416.223617] ? trace_hardirqs_on+0x10/0x10 [ 416.227855] ? sock_def_error_report+0x720/0x720 [ 416.232614] ? do_syscall_64+0x1b9/0x820 [ 416.236684] ? lockdep_init_map+0x9/0x10 [ 416.240734] ? kasan_check_write+0x14/0x20 [ 416.244968] ? __init_rwsem+0x1cc/0x2a0 [ 416.248946] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 416.253968] ? graph_lock+0x170/0x170 [ 416.257810] ? __put_user_ns+0x60/0x60 [ 416.261702] ? kasan_check_read+0x11/0x20 [ 416.265855] ? rcu_is_watching+0x8c/0x150 [ 416.270033] ? find_held_lock+0x36/0x1c0 [ 416.274120] ? graph_lock+0x170/0x170 [ 416.277923] ? lock_downgrade+0x8f0/0x8f0 [ 416.282067] unix_create1+0x1ca/0x670 [ 416.285861] ? unix_stream_splice_actor+0x180/0x180 [ 416.290881] ? lock_downgrade+0x8f0/0x8f0 [ 416.295034] ? kasan_check_read+0x11/0x20 [ 416.299215] ? rcu_is_watching+0x8c/0x150 [ 416.303355] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 416.308018] unix_create+0x184/0x1e0 [ 416.311724] __sock_create+0x53c/0x940 [ 416.315620] ? kernel_sock_ip_overhead+0x570/0x570 [ 416.320605] p9_fd_create_unix+0x1c3/0x370 [ 416.324832] ? p9_socket_open+0x220/0x220 [ 416.328993] ? rcu_read_lock_sched_held+0x108/0x120 [ 416.334024] ? kmem_cache_alloc_trace+0x616/0x780 [ 416.338866] ? __lockdep_init_map+0x105/0x590 [ 416.343360] ? lockdep_init_map+0x9/0x10 [ 416.347407] ? __raw_spin_lock_init+0x2d/0x100 [ 416.351977] p9_client_create+0x8ed/0x1770 [ 416.356217] ? p9_client_read+0xc60/0xc60 [ 416.360357] ? find_held_lock+0x36/0x1c0 [ 416.364439] ? __lockdep_init_map+0x105/0x590 [ 416.368942] ? kasan_check_write+0x14/0x20 [ 416.373159] ? __init_rwsem+0x1cc/0x2a0 [ 416.377133] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 416.382180] ? rcu_read_lock_sched_held+0x108/0x120 [ 416.387199] ? __kmalloc_track_caller+0x5f5/0x760 [ 416.392030] ? save_stack+0xa9/0xd0 [ 416.395664] ? save_stack+0x43/0xd0 [ 416.399305] ? kasan_kmalloc+0xc4/0xe0 [ 416.403206] ? kmem_cache_alloc_trace+0x152/0x780 [ 416.408059] ? memcpy+0x45/0x50 [ 416.411341] v9fs_session_init+0x21a/0x1a80 [ 416.415675] ? find_held_lock+0x36/0x1c0 [ 416.419725] ? v9fs_show_options+0x7e0/0x7e0 [ 416.424119] ? kasan_check_read+0x11/0x20 [ 416.428260] ? rcu_is_watching+0x8c/0x150 [ 416.432407] ? rcu_pm_notify+0xc0/0xc0 [ 416.436302] ? v9fs_mount+0x61/0x900 [ 416.440009] ? rcu_read_lock_sched_held+0x108/0x120 [ 416.445024] ? kmem_cache_alloc_trace+0x616/0x780 [ 416.449877] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 416.455416] v9fs_mount+0x7c/0x900 [ 416.458982] mount_fs+0xae/0x328 [ 416.462364] vfs_kern_mount.part.34+0xdc/0x4e0 [ 416.466935] ? may_umount+0xb0/0xb0 [ 416.470554] ? _raw_read_unlock+0x22/0x30 [ 416.474688] ? __get_fs_type+0x97/0xc0 [ 416.478577] do_mount+0x581/0x30e0 [ 416.482126] ? copy_mount_string+0x40/0x40 [ 416.486376] ? copy_mount_options+0x5f/0x380 [ 416.490800] ? rcu_read_lock_sched_held+0x108/0x120 [ 416.495817] ? kmem_cache_alloc_trace+0x616/0x780 [ 416.500662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 416.506189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 416.511711] ? copy_mount_options+0x285/0x380 [ 416.516205] ksys_mount+0x12d/0x140 [ 416.519845] __x64_sys_mount+0xbe/0x150 [ 416.523822] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 416.528829] do_syscall_64+0x1b9/0x820 [ 416.532716] ? syscall_return_slowpath+0x5e0/0x5e0 [ 416.537648] ? syscall_return_slowpath+0x31d/0x5e0 [ 416.542575] ? __switch_to_asm+0x34/0x70 [ 416.546640] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 416.552021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.556866] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 416.562079] RIP: 0033:0x457089 [ 416.565307] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.584210] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 416.591914] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 416.599179] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 416.606447] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 416.613700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 15:18:30 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:30 executing program 4: r0 = socket$inet(0x2, 0x805, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x3ff}, 0x8) sendto$inet(r0, &(0x7f0000000200)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) 15:18:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x84ffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:30 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:30 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9pL', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:30 executing program 0 (fault-call:3 fault-nth:22): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 416.620954] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000015 [ 416.628501] 9pnet: p9_fd_create_unix (27782): problem creating socket 15:18:30 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x500000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r0, r0, 0x0, 0x1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:18:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xfeffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:30 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) [ 416.990755] FAULT_INJECTION: forcing a failure. [ 416.990755] name failslab, interval 1, probability 0, space 0, times 0 [ 417.002092] CPU: 1 PID: 27809 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 417.009114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.018470] Call Trace: [ 417.021077] dump_stack+0x1c9/0x2b4 [ 417.024820] ? dump_stack_print_info.cold.2+0x52/0x52 [ 417.030025] ? kasan_kmalloc+0xc4/0xe0 [ 417.033939] ? __kmalloc_node_track_caller+0x47/0x70 [ 417.039059] ? __kmalloc_reserve.isra.40+0x3a/0xe0 [ 417.044004] ? __alloc_skb+0x155/0x770 [ 417.047913] ? unix_stream_connect+0x2c1/0x11e0 [ 417.052608] should_fail.cold.4+0xa/0x11 [ 417.056693] ? do_syscall_64+0x1b9/0x820 [ 417.060797] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 417.065954] ? rcu_is_watching+0x8c/0x150 [ 417.070119] ? rcu_pm_notify+0xc0/0xc0 [ 417.074558] ? find_held_lock+0x36/0x1c0 [ 417.078684] ? check_same_owner+0x340/0x340 [ 417.083026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.088582] ? __alloc_skb+0x4c6/0x770 [ 417.092484] ? rcu_note_context_switch+0x730/0x730 [ 417.097428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.102992] __should_failslab+0x124/0x180 [ 417.107250] should_failslab+0x9/0x14 [ 417.111087] kmem_cache_alloc+0x2af/0x760 [ 417.115254] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 417.120298] ? unix_create1+0x588/0x670 [ 417.124286] ? trace_hardirqs_on+0xd/0x10 [ 417.128456] getname_kernel+0x54/0x370 [ 417.132369] kern_path+0x1e/0x40 [ 417.135756] unix_find_other+0xdd/0x5b0 [ 417.139795] ? unix_stream_recvmsg+0x2e0/0x2e0 [ 417.144398] ? unix_mkname+0x11e/0x1d0 [ 417.148312] unix_stream_connect+0x35e/0x11e0 [ 417.152839] ? security_socket_post_create+0x9f/0xd0 [ 417.157976] ? unix_shutdown+0xa60/0xa60 [ 417.162071] ? kernel_sock_ip_overhead+0x570/0x570 [ 417.167043] p9_fd_create_unix+0x258/0x370 [ 417.171302] ? p9_socket_open+0x220/0x220 [ 417.175484] ? rcu_read_lock_sched_held+0x108/0x120 [ 417.180562] ? kmem_cache_alloc_trace+0x616/0x780 [ 417.185434] ? __lockdep_init_map+0x105/0x590 [ 417.189944] ? lockdep_init_map+0x9/0x10 [ 417.194015] ? __raw_spin_lock_init+0x2d/0x100 [ 417.198621] p9_client_create+0x8ed/0x1770 [ 417.202906] ? p9_client_read+0xc60/0xc60 [ 417.207092] ? find_held_lock+0x36/0x1c0 [ 417.211194] ? __lockdep_init_map+0x105/0x590 [ 417.215710] ? kasan_check_write+0x14/0x20 [ 417.219951] ? __init_rwsem+0x1cc/0x2a0 [ 417.223938] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 417.228977] ? rcu_read_lock_sched_held+0x108/0x120 [ 417.234007] ? __kmalloc_track_caller+0x5f5/0x760 [ 417.238861] ? save_stack+0xa9/0xd0 [ 417.242501] ? save_stack+0x43/0xd0 [ 417.246137] ? kasan_kmalloc+0xc4/0xe0 [ 417.250029] ? kmem_cache_alloc_trace+0x152/0x780 [ 417.254879] ? memcpy+0x45/0x50 [ 417.258172] v9fs_session_init+0x21a/0x1a80 [ 417.262501] ? find_held_lock+0x36/0x1c0 [ 417.266603] ? v9fs_show_options+0x7e0/0x7e0 [ 417.271019] ? kasan_check_read+0x11/0x20 [ 417.275184] ? rcu_is_watching+0x8c/0x150 [ 417.279337] ? rcu_pm_notify+0xc0/0xc0 [ 417.283245] ? v9fs_mount+0x61/0x900 [ 417.286967] ? rcu_read_lock_sched_held+0x108/0x120 [ 417.291988] ? kmem_cache_alloc_trace+0x616/0x780 [ 417.296841] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 417.302386] v9fs_mount+0x7c/0x900 [ 417.305940] mount_fs+0xae/0x328 [ 417.309325] vfs_kern_mount.part.34+0xdc/0x4e0 [ 417.313916] ? may_umount+0xb0/0xb0 [ 417.317555] ? _raw_read_unlock+0x22/0x30 [ 417.321710] ? __get_fs_type+0x97/0xc0 [ 417.325609] do_mount+0x581/0x30e0 [ 417.329165] ? copy_mount_string+0x40/0x40 [ 417.333411] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 417.338190] ? retint_kernel+0x10/0x10 [ 417.342093] ? copy_mount_options+0x1f0/0x380 [ 417.346593] ? copy_mount_options+0x202/0x380 [ 417.351110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.356655] ? copy_mount_options+0x285/0x380 [ 417.361162] ksys_mount+0x12d/0x140 [ 417.364822] __x64_sys_mount+0xbe/0x150 [ 417.368808] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 417.373835] do_syscall_64+0x1b9/0x820 [ 417.377735] ? syscall_return_slowpath+0x5e0/0x5e0 [ 417.382682] ? syscall_return_slowpath+0x31d/0x5e0 [ 417.387618] ? __switch_to_asm+0x34/0x70 [ 417.391728] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 417.397102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.401957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.407151] RIP: 0033:0x457089 [ 417.410347] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.429248] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:30 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397002", 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 417.436978] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 417.444245] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 417.451517] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 417.458799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 417.466066] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000016 [ 417.473653] 9pnet: p9_fd_create_unix (27809): problem connecting socket: éq‰Y’3aK: -12 15:18:31 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x6000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) shmctl$IPC_RMID(r0, 0x0) shmdt(r1) 15:18:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) 15:18:31 executing program 0 (fault-call:3 fault-nth:23): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:31 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397010", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:31 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8000000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 417.792405] FAULT_INJECTION: forcing a failure. [ 417.792405] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.804239] CPU: 0 PID: 27855 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 417.811250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.820605] Call Trace: [ 417.823201] dump_stack+0x1c9/0x2b4 [ 417.826826] ? dump_stack_print_info.cold.2+0x52/0x52 [ 417.832035] should_fail.cold.4+0xa/0x11 [ 417.836109] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 417.841244] ? is_bpf_text_address+0xd7/0x170 [ 417.845771] ? kernel_text_address+0x79/0xf0 [ 417.850171] ? trace_hardirqs_on+0x10/0x10 [ 417.854409] ? save_stack+0xa9/0xd0 [ 417.858026] ? save_stack+0x43/0xd0 [ 417.861652] ? kasan_kmalloc+0xc4/0xe0 [ 417.865542] ? __kmalloc_node_track_caller+0x47/0x70 [ 417.870659] ? __alloc_skb+0x155/0x770 [ 417.874558] ? sock_wmalloc+0x16d/0x1f0 [ 417.878537] ? unix_stream_connect+0x2c1/0x11e0 [ 417.883208] ? p9_fd_create_unix+0x258/0x370 [ 417.887626] ? p9_client_create+0x8ed/0x1770 [ 417.892073] ? v9fs_session_init+0x21a/0x1a80 [ 417.896576] ? v9fs_mount+0x7c/0x900 [ 417.900324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.905889] ? should_fail+0x246/0xd86 [ 417.909793] ? do_syscall_64+0x1b9/0x820 [ 417.913842] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 417.919214] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 417.924343] __alloc_pages_nodemask+0x36e/0xdb0 [ 417.929008] ? rcu_is_watching+0x8c/0x150 [ 417.933153] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 417.938174] ? find_held_lock+0x36/0x1c0 [ 417.942295] ? check_same_owner+0x340/0x340 [ 417.946641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 417.952200] cache_grow_begin+0x91/0x710 [ 417.956278] kmem_cache_alloc+0x689/0x760 [ 417.960439] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 417.965731] getname_kernel+0x54/0x370 [ 417.969631] kern_path+0x1e/0x40 [ 417.973001] unix_find_other+0xdd/0x5b0 [ 417.976998] ? unix_stream_recvmsg+0x2e0/0x2e0 [ 417.981588] ? unix_mkname+0x11e/0x1d0 [ 417.985475] unix_stream_connect+0x35e/0x11e0 [ 417.989977] ? security_socket_post_create+0x9f/0xd0 [ 417.995090] ? unix_shutdown+0xa60/0xa60 [ 417.999159] ? kernel_sock_ip_overhead+0x570/0x570 [ 418.004101] p9_fd_create_unix+0x258/0x370 [ 418.008340] ? p9_socket_open+0x220/0x220 [ 418.012510] ? rcu_read_lock_sched_held+0x108/0x120 [ 418.017532] ? kmem_cache_alloc_trace+0x616/0x780 [ 418.022374] ? __lockdep_init_map+0x105/0x590 [ 418.026874] ? lockdep_init_map+0x9/0x10 [ 418.030937] ? __raw_spin_lock_init+0x2d/0x100 [ 418.035531] p9_client_create+0x8ed/0x1770 [ 418.039794] ? p9_client_read+0xc60/0xc60 [ 418.043943] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 418.048960] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 418.053722] ? retint_kernel+0x10/0x10 [ 418.057618] ? __raw_spin_lock_init+0xd3/0x100 [ 418.062201] ? kasan_check_write+0x14/0x20 [ 418.066434] ? __init_rwsem+0x1cc/0x2a0 [ 418.070404] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 418.075423] ? rcu_read_lock_sched_held+0x108/0x120 [ 418.080441] ? __kmalloc_track_caller+0x5f5/0x760 [ 418.085285] ? save_stack+0xa9/0xd0 [ 418.088917] ? save_stack+0x43/0xd0 [ 418.092539] ? kasan_kmalloc+0xc4/0xe0 [ 418.096430] ? kmem_cache_alloc_trace+0x152/0x780 [ 418.101272] ? memcpy+0x45/0x50 [ 418.104563] v9fs_session_init+0x21a/0x1a80 [ 418.108887] ? find_held_lock+0x36/0x1c0 [ 418.112956] ? v9fs_show_options+0x7e0/0x7e0 [ 418.117364] ? kasan_check_read+0x11/0x20 [ 418.121511] ? rcu_is_watching+0x8c/0x150 [ 418.125658] ? rcu_pm_notify+0xc0/0xc0 [ 418.129545] ? v9fs_mount+0x61/0x900 [ 418.133261] ? rcu_read_lock_sched_held+0x108/0x120 [ 418.138291] ? kmem_cache_alloc_trace+0x616/0x780 [ 418.143154] ? __sanitizer_cov_trace_const_cmp2+0xf/0x20 [ 418.148611] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 418.154154] v9fs_mount+0x7c/0x900 [ 418.157698] mount_fs+0xae/0x328 [ 418.161072] vfs_kern_mount.part.34+0xdc/0x4e0 [ 418.165658] ? may_umount+0xb0/0xb0 [ 418.169287] ? _raw_read_unlock+0x22/0x30 [ 418.173462] ? __get_fs_type+0x97/0xc0 [ 418.177356] do_mount+0x581/0x30e0 [ 418.180905] ? copy_mount_string+0x40/0x40 [ 418.185145] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 418.189904] ? retint_kernel+0x10/0x10 [ 418.193886] ? copy_mount_options+0x213/0x380 [ 418.198381] ? copy_mount_options+0x19c/0x380 [ 418.202892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.208442] ? copy_mount_options+0x285/0x380 [ 418.212950] ksys_mount+0x12d/0x140 [ 418.216580] __x64_sys_mount+0xbe/0x150 [ 418.220563] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 418.225583] do_syscall_64+0x1b9/0x820 [ 418.229469] ? finish_task_switch+0x1d3/0x870 [ 418.233966] ? syscall_return_slowpath+0x5e0/0x5e0 [ 418.238897] ? syscall_return_slowpath+0x31d/0x5e0 [ 418.243824] ? __switch_to_asm+0x34/0x70 [ 418.247882] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 418.253249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.258100] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.263289] RIP: 0033:0x457089 [ 418.266487] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.285386] RSP: 002b:00007f263d2cac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 15:18:31 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x6000000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000080000000007d81612a5db45ddc208bc5"]) [ 418.293097] RAX: ffffffffffffffda RBX: 00007f263d2cb6d4 RCX: 0000000000457089 [ 418.300363] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000000 [ 418.307627] RBP: 00000000009300a0 R08: 0000000020000140 R09: 0000000000000000 [ 418.314917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 418.322181] R13: 00000000004d27b0 R14: 00000000004c7c0c R15: 0000000000000017 15:18:31 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 15:18:31 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xfffffffe}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x384, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:32 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x8000000000004, 0x362) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) 15:18:32 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x12000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x600000, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team_slave_0\x00', 0x80000000}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000100)) 15:18:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2c}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6c, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:32 executing program 5: syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x14200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x800, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x60) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:32 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = open(&(0x7f0000000140)='./bus\x00', 0x40, 0x0) close(r1) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000100)="000000008c00000001000000008000", 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000001280), 0x12) ioctl$LOOP_CLR_FD(r1, 0x4c01) 15:18:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xf000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:32 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9pV', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:32 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x28}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 419.454079] 9pnet: p9_fd_create_unix (27942): problem connecting socket: éq‰Y’3aK: -111 15:18:33 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:33 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2000000009) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2000000000000000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r2, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x8, {"7cd1a9b35c564d998c584e2e7bbf78d7"}, 0x1, 0x20, 0x9}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x18}, 0x8000}}}, 0x118) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0) 15:18:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r1, 0x29, 0x20, 0x0, 0x300) 15:18:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3b00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:33 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:33 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xf6ffffff00000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1}}, 0x0) 15:18:33 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397002", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:33 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x400, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='rdma.current\x00', 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0xd00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000001000000022, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x5, 0x0, "dcbd7013560987c90ebd84b6e984c7242a057f7f7f8b85f0aba26dc45e69c2db87180107eba9f36e22ba7df5228e6a97e954627eb3966137d05054d92ff0e25078b35ba8d6f9e3ab5b89afb667636ae0"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote}, 0x1c) 15:18:33 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1f00, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:33 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397004", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x1, {{0x43, 0x6, 0x7, 0x7fffffff, 0x200, 0x80, 0x3}}}, 0x60) 15:18:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x3f00000000000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 420.542023] 9pnet: p9_fd_create_unix (28031): problem connecting socket: éq‰Y’3aK: -111 15:18:34 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:34 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2c000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:34 executing program 5: r0 = getpgid(0x0) sched_getscheduler(r0) tkill(r0, 0x3d) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\b', 0x2) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000000c0)={'bpq0\x00', 0x1}) [ 420.589963] 9pnet: p9_fd_create_unix (28033): problem connecting socket: éq‰Y’3aK: -111 15:18:34 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8403, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:34 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet6(r0, &(0x7f0000000200)="d0648c6bc7e3c1068fba87b85a08cebb197a44fe44720a0398f81e1deb148fdbaede8f5f08530f1cf835b2c1282d0efe21bff88856c04b5ebb028cae13b52790b69a9554daa18d861131ae18ad3e3933600da5754215907c2bc278acf464a06818b3fdb1f2c15e1c723a7a51246987560b9749bf87365b2f59201cf95ee43f4e2fa140efb6da9f92ccbc03be64323ce4fd", 0x91, 0x40000, &(0x7f0000000180)={0xa, 0x4e22, 0x9bf, @remote, 0x3122}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0xb4, r1, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x55}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_ADDR={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 15:18:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x30000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 420.769027] 9pnet: p9_fd_create_unix (28047): problem connecting socket: éq‰Y’3aK: -111 15:18:34 executing program 5: dup(0xffffffffffffffff) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x8002) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x185000, 0x10) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x400000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x9, 0x4000) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)="63700e41ebbad5451130af000000008f523749ddfb152c920b0f1ecbab381e742e75736167", 0x2761, 0x0) write$cgroup_type(r2, &(0x7f00000001c0)='threaded\b', 0xfff9) fcntl$setflags(r1, 0x2, 0x1) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x2, r1}) 15:18:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x8847}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:34 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffd, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) r2 = getegid() write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x2000, {0x4, 0x1, 0x1}, 0x80, r1, r2, 0x2, 0x3, 0x9, 0x5, 0x6, 0x9, 0x3, 0x40, 0x8, 0x7180, 0x1ff, 0x2, 0x400, 0xf4a, 0x20}}, 0xa0) [ 421.465671] 9pnet: p9_fd_create_unix (28093): problem connecting socket: éq‰Y’3aK: -111 15:18:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:35 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:35 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x19c, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:35 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='threaded\b', 0xfff9) pipe(&(0x7f0000000140)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x109000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x100000000}, &(0x7f0000000100)=0x8) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/hwrng\x00'}, {0x20, 'threaded\b'}, {0x20, '/dev/hwrng\x00'}, {0x20, 'threaded\b'}], 0xa, "f3b8843f2673ea4d4fcea066eb1deacb07329edcdace6a9c5114e75da0556fe43015b12600319b8730fb04fbd40179243ea715e4775c7eeffca5e5ba2ca87b7d58523d6d1da3cbcda771733cb0b9bd562e745c4813629f56974476ab"}, 0x93) 15:18:35 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:35 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x9) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x9c6) 15:18:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x21000000}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:35 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:35 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffff5, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev={[], 0x700}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0xa, 0x4}, 0x37}}, 0x18) r1 = fcntl$getown(r0, 0x9) ptrace(0x4207, r1) getcwd(&(0x7f00000000c0)=""/244, 0xf4) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:35 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x9c01000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3c000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:36 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:36 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:36 executing program 5: r0 = dup(0xffffffffffffff9c) r1 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x5, 0x200000) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='pids.events\x00', 0x2761, 0x0) write$cgroup_type(r2, &(0x7f0000000100)='threaded\b', 0xffffff8a) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x10, 0x3, 0x6}, &(0x7f0000000040)=0x18) write(r0, &(0x7f00000001c0)="efe0918d2879de197400203b15be9d2f2a22a58078d1655b0b85f9588d657d5ade9688af8ee77ff0ef0b5aec752d84e11d58c7857a4ff7f7eb24a275bd019115398d9e48fee319ba401d224df676b55b4e7e6ea6a222a6ebbf1b713a34031ecb39da5a657ddd500c4f07dc4cab011819bb7801cd67d0d8a8e000c1eb55f5cb01ae53d11d57b329f74518d9ed27670ea86157af8145f325703a927a34978033deba2cc407d0fd5e7a56178cfc7d25624e01afbd073555d2787ef1c3f9430d3a2242ac0f2f345d51a5c5c3202ec94a9a4dea3b06f1941d2c3f8a9cee060c5e5990567f7f07485b5d2ac045a56e21", 0xed) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0x70000000000000}, &(0x7f00000000c0)=0x8) 15:18:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x8100, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 422.505158] 9pnet: p9_fd_create_unix (28173): problem connecting socket: éq‰Y’3aK: -111 [ 422.613258] 9pnet: p9_fd_create_unix (28182): problem connecting socket: éq‰Y’3aK: -111 [ 422.634867] 9pnet: p9_fd_create_unix (28184): problem connecting socket: éq‰Y’3aK: -111 15:18:36 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970fe", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) getsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 15:18:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x689, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:36 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:36 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:36 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x2b, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:36 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)=r1, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 15:18:36 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:36 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x50030000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:37 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x8906000000000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:37 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) 15:18:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x84030000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 423.531527] 9pnet: p9_fd_create_unix (28244): problem connecting socket: éq‰Y’3aK: -111 15:18:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x2f000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:37 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x2761, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:37 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970ff", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:37 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb8030000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:37 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 423.700823] 9pnet: p9_fd_create_unix (28261): problem connecting socket: éq‰Y’3aK: -111 15:18:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x2b000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:37 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xff) connect$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, {0x7, 0xa2, 0x3, 0x7ff, 0xfffffffffffffffb}, 0xfa}, 0xa) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000440)={0x8, 0x0, 0x5, 0xffffffffffff5be0, 'syz1\x00', 0x7ff}) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0xfff, 0x7ff, 0xff, 0x80000000}, {0x7ff, 0x9, 0x80, 0x8db}, {0x6, 0x6, 0x3, 0x1f}, {0x1, 0x0, 0x1}, {0x2, 0x401, 0x10001, 0x2}, {0xffffffff7fffffff, 0x4, 0xfffffffffffffffc, 0xab0}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180)=0x0, &(0x7f0000000300), &(0x7f0000000340)) write$P9_RGETATTR(r0, &(0x7f0000000380)={0xa0, 0x19, 0x1, {0x2000, {0x80, 0x3}, 0x99, r1, r2, 0x9, 0xffffffffffffffff, 0x7, 0x3f, 0x1000, 0x7fffffff, 0x2, 0x80000000, 0xd0, 0x344, 0x20, 0x7ff, 0x4, 0x3, 0x103}}, 0xa0) 15:18:37 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:37 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 423.939241] 9pnet: p9_fd_create_unix (28284): problem connecting socket: éq‰Y’3aK: -111 15:18:38 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:38 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x350, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x89ffffff, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:38 executing program 5: syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xffffffff, 0x400040) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x400000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)="dce7d049a2782e7374617400", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 424.491023] 9pnet: p9_fd_create_unix (28314): problem connecting socket: éq‰Y’3aK: -111 15:18:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @loopback}, {0x1, @random="f386ab31e727"}, 0x20, {0x2, 0x4e24, @multicast2}, 'ip6gretap0\x00'}) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000080)={0x20, 0x8}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000200)=ANY=[@ANYBLOB="001000002400000007000000001000000800000000feff030000000000080000ffff00009d0200400c5200008bb77dc200ca5b44c0f7576368f8bc13968c73ccd59e54e46f2231b419592f21f88e84908e3d2fbb220acada120be39b02b5ef33efac6ffb20040e288d0b63a0fccf29e60568a217fa38c4cf946f772c34443e55b9dc5043c08f54d8687ee34069b7962fe6539e5606192555128dea50b40923c7764a768f5831cf406b04e8d479d4ffc02cb74c6b3c1cda0e40ca73422525f3147d411c5c16d9a8ad701948146d9186d19f260feb5d69a8f8eb18c3c6c940829dfc2b3afec1d9331b"]) 15:18:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3f00, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:38 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:38 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x9, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:38 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:38 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0ed0000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) prctl$getname(0x10, &(0x7f0000000200)=""/4096) gettid() ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0xd9) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x5f3) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:38 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:38 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 425.005684] 9pnet: p9_fd_create_unix (28363): problem connecting socket: éq‰Y’3aK: -111 15:18:39 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x7, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000180)) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000140)=0xf000) time(&(0x7f0000000100)) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) linkat(r0, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file0\x00', 0x1000) sendmsg$nfc_llcp(r1, &(0x7f00000008c0)={&(0x7f0000000280)={0x27, 0x0, 0x0, 0x7, 0xd93, 0x7ff, "e894bbe5e8db396bf29319e5f745a240b28febbed2becd806e08d79389cb3874a932ddabdefab569424ea1f55615b2f630e1f4dd29bbf7f86a275392f534ed", 0x34}, 0x60, &(0x7f0000000780)=[{&(0x7f0000000300)="424dc281435087fa4d57a4c74a4b982fa3d5ef80b9b684598c979814d436ee5ada1587afc3e32db3aefa511c3cd8022b81696e75267a9753aa68a7f37c7a5fd55414462d8d16f7e517791b24b2bf63c335c083751f8df9c8a319a382f6f10bdf1e9af4ec1f4a12330f56b1002fa4cca17c6ab02a03d77a6270", 0x79}, {&(0x7f0000000380)="c59246b86c022b325bd4c1e7442b7ab96a28171ca6869dc7db30747e6cf04af1b936d8519103ed2e59fb53908963d7b37999ac6049d7996e2ebf91ce356f004ca4ec5975e811", 0x46}, {&(0x7f0000000400)="f9a40032f0727d0333121d2078c0ab6f6a29b7d5f7191b0dcefe3b7663af555b75e98fe55ec9bcc0c8fc9204d930b8981785ae4781369be5ddb1a290f6b897dfa0fd3250c8312587c73fdc74798ec08fdede5a2930a8bd70eddcb8dc1f0042fcff6b17202c5177af5cdb9d7670f8d641c2ad85bd61ce4e8ab047584dc99a4fb063197fb3fe3c04901cdff381b0692cf0615b970c10fc57a4abe6175af90900a7145d418bf0d23005948561f7a888910d5c4f835cf33f2044dc6774caf894d1e06de78e2ffb84d7f2023be43f1842bfb0a36dd2c9c434e30fdf2ef3d99dff6b2c755eec231164425abc4361ef3f5b02e23e", 0xf1}, {&(0x7f0000000500)="15aa2ac4d7291d3d5b8f9a9ece22008f4df979d36b07a5da999f5011fff3e991c844", 0x22}, {&(0x7f0000000540)="9184c345d8e7a147f774c564f3068fa330ee900bafd555d9968cfba818a9075f", 0x20}, {&(0x7f0000000580)="735636af9aef7c09e1acf5bac377e7428370cdf97f0f24e69928d4395ced0b6fa37847660ca8a68624809adcbf937c43aca9394b27d8d685caa48bca5f2f238e579007b8bf9acc97d85f7bed43c32bb46c3e50b8f1ede2a69707a298ba9000476b646dc4fd2bae34b1e2", 0x6a}, {&(0x7f0000000600)="67a11eeff77f47fdcef98161cae19b17876b45d9cb73bcd1bd1040d0407d360aee903d81b5699f4c62024606e77ee1d9632ccb6e7c9ab9942d88ec3db964b8e13e4f07c29e91b60e5d83e04c0358b5c62a08c451ae4f410dda", 0x59}, {&(0x7f0000000680)="0188bf562500dbc406cde9dfd7f94ac8d2f97af1beecc099fd4e5e479bca826cd3b5d1d5f4be698bb99ce0ec5f85682228e943d1e451815d67c7e19db3c2833291df8c327b81bbd85417d39f0e49081e3b9bafe165bb101bd39bf959de677108c9e6cb1947b660201d8dc3f108117c12cf3efa77b3f7cc617a7f220de8a0824ebf15af0354861ff71f205b6a377158b152461fe1b28829a1dd57fc340850d08edfd8e8cfd4bd41584024dfdefb858c0a8c8edb133917d88efaa8d39e4740caf8ed78eb0dec8f37c8217741e4b5a8fed3ed55fddf0558784184d90233399b126560859a7d1edef348aa62fe4a23c0", 0xee}], 0x8, &(0x7f0000000800)={0xa0, 0x11d, 0x10000, "c00f05983d8d8e4888f7309d4ab3a5f8ca9ee7ac3e84e4b2954545b82b7a98e273a8d9b8b06029757695dec2d5e18e77895b7b26d9a67e950ad7ce48baad757deccab1de80150c553626ac3da1c9b620f9b5a5c2dfb4f5365c3f58e4f692726239ad172a1ecae9a95b392617c1ae3598a9f06665f25baf0fc96848e5e36266ab924f09f1d8343201075727"}, 0xa0, 0x40}, 0x0) 15:18:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 425.494985] 9pnet: p9_fd_create_unix (28388): problem connecting socket: éq‰Y’3aK: -111 15:18:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xd000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) time(&(0x7f00000003c0)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0x835eb83ace518a3d, 0x3, 0x8, @buffer={0x0, 0xc2, &(0x7f0000000080)=""/194}, &(0x7f0000000180)="b56d1c", &(0x7f0000000200)=""/197, 0x7, 0x10000, 0x0, &(0x7f0000000300)}) getpgrp(0xffffffffffffffff) r1 = getpid() kcmp(r1, r1, 0x5, r0, r0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000400)={{0x2, 0x4e22, @broadcast}, {0x306, @random="6720dc5557d2"}, 0x42, {0x2, 0x4e21}, 'team_slave_1\x00'}) 15:18:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2300000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}], 0x20000000000000fb, 0x0) 15:18:39 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x8906, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$VT_ACTIVATE(r0, 0x5606, 0x7ff) 15:18:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}], 0x20000000000000fb, 0x0) 15:18:39 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xf508000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:39 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:39 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970c0", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:40 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:40 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}], 0x20000000000000fb, 0x0) 15:18:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x8035, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:40 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x40000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad19cd12dcea440a4a64a9e0a1a3638045eb2d899c22c652b3a471b4a7fa2f3fdf6e034d804000000000000000000000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:40 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6c00, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:40 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 426.491056] 9pnet: p9_fd_create_unix (28470): problem connecting socket: éq‰Y’3aK: -111 15:18:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x2f, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {r0}], 0x20000000000000fb, 0x0) 15:18:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000080)=""/196) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:40 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:40 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfdfdffff00000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xe000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {r0}], 0x20000000000000fb, 0x0) 15:18:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000000c0)=""/211) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={r2, 0xe0, "a195b54543071ea7035d26203e9df322f4d88ce2e63fbfaa745667b6fb512985ddaf9f2e0e9a5db1cabf486fd6657294583c8c13d2e67a1cb66cfc01c6ddca2f83734c6b6185aaf8320bf5b65e90e537fdf078071e5f93edcb48d559fbe0773da138b4e4527ac60c683625b17edf4e2c153507bb5e81aba3251eb5aecc0ce99bc148196707a070c9548057db50653aac60e0cdeb0bb03dbbbee2c2fb8f8ea6b31398b655ce6adfd72394df08e88b6f2153cbafdc35b090e9d462e2f6e22b2f51a0607cf030d94ac2e5f2353c264a4d0e323c74dea805f3977e2cdf5236e19859"}, &(0x7f0000000380)=0xe8) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) [ 426.822763] 9pnet: p9_fd_create_unix (28503): problem connecting socket: éq‰Y’3aK: -111 15:18:40 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x4305, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) [ 427.331798] 9pnet: p9_fd_create_unix (28538): problem connecting socket: éq‰Y’3aK: -111 15:18:40 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970fe", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:40 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {r0}], 0x20000000000000fb, 0x0) 15:18:40 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xf5ffffff00000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x300, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:40 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 427.460901] 9pnet: p9_fd_create_unix (28541): problem connecting socket: éq‰Y’3aK: -111 15:18:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xfffffff5, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 15:18:41 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:41 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x40000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:41 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x88ffffff, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) [ 427.815422] 9pnet: p9_fd_create_unix (28574): problem connecting socket: éq‰Y’3aK: -111 15:18:41 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970ff", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$VT_WAITACTIVE(r0, 0x5607) fallocate(r0, 0x50, 0x2, 0x3) 15:18:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xdc050000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:41 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xf903, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x87ffffff, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x9) 15:18:41 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x80040200, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:41 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 428.715650] 9pnet: p9_fd_create_unix (28640): problem connecting socket: éq‰Y’3aK: -111 15:18:42 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x401, 0x60000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000400)={@reserved}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x26, 0x6, @thr={&(0x7f0000000200)="d86f74e88809092f106ecccf1ff65be5d2894d757410e3039932e8cddb1100a54774934b591addd4be8acc4715caca2bed7cfe10d8b88e6de40fbf089f1a8000030d511497baf5c78f69f089483b8bd632dc25466b06b515f14709b945f420079faf4199e39ee71ff1c6e3435dc5f42e075be215db568d4fe8d59dc21d18a0163c907398327540f82d955b2e63fa127b1bab3ae1bccb12baf17a28fcb04762fbef683b06f37388ff432fec915b649b5dfcd289555cfdae8d8057adde3227e70d1b7e50ffa5d7caf1d21f5022f28a986a9c39359233ac349a", &(0x7f0000000100)="ea66dcf4b9aa0ef982be4690d93ca6649a14b7bc"}}, &(0x7f0000000180)=0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_settime(r2, 0x1, &(0x7f0000000300)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000340)) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x8, 0x0) 15:18:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:42 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x8dffffff00000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:42 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 428.839899] 9pnet: p9_fd_create_unix (28644): problem connecting socket: éq‰Y’3aK: -111 15:18:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x500000000000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:42 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x500, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x600000) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000500)="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", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:42 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c00, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x400000000000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:42 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) [ 429.469768] 9pnet: p9_fd_create_unix (28692): problem connecting socket: éq‰Y’3aK: -111 15:18:43 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x490, 0x0, 0x118, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x8001}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x50}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8001, 0x5, 0x100000001, 0x1, 0x0, "17b1ba9c3733a728e1159d9d8fbc2e07f36b0ff68714c23b320ca690f514c4b0409466e9f3e5ef09ccef922ce1f8ca2d865b9dadf96271c4ef0671beb86e1079"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e0) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000700)=0x4) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x77359400}, {r1, r2+10000000}}, &(0x7f0000000180)) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x9) 15:18:43 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4001, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3a000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:43 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:43 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x1100, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x8000, 0xfffffffffffffffc, 0x8, 0x4, 0xfffffffffffffffb, 0x4, 0x23, 0x2, r1}, 0x20) 15:18:43 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xedc000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:43 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397010", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xf0, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:43 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\b', 0x1f9) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/214) 15:18:43 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970ff", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:44 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970ff", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:44 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x400000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) r2 = dup2(r0, r0) bind$vsock_dgram(r2, &(0x7f0000000280)={0x28, 0x0, 0x2711, @reserved}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x4, @ipv4={[], [], @rand_addr=0xffffffffffffffc0}, 0x80000001}, {0xa, 0x4e21, 0x2bb, @remote, 0xd49}, r1, 0x2}}, 0x48) openat$cgroup_subtree(r2, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0) fchmodat(r0, &(0x7f0000000200)='./file0\x00', 0x400002c) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r3, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x806, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:44 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="39708c", 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 430.488894] 9pnet: p9_fd_create_unix (28765): problem connecting socket: éq‰Y’3aK: -111 15:18:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xe80, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:44 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397004", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:44 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) socket$rds(0x15, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@mcast1, @mcast2, @remote, 0x6, 0x1f, 0x2, 0x500, 0x1000, 0x80200, r1}) 15:18:44 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xb803000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:44 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:44 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x86ddffff00000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:44 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x80) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.events\x00', 0x2761, 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\b', 0x100b9) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33c) 15:18:44 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:44 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfdfdffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3a00000000000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:44 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\b', 0x2461) 15:18:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) [ 431.690232] 9pnet: p9_fd_create_unix (28859): problem connecting socket: éq‰Y’3aK: -111 15:18:45 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:45 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x4, 0x400000) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000100)) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x9) 15:18:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x100000000000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397001", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:45 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 431.796752] 9pnet: p9_fd_create_unix (28863): problem connecting socket: éq‰Y’3aK: -111 15:18:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x4000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:45 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe, r2}) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) 15:18:45 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:45 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x700, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x2b00, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:45 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) [ 432.703991] 9pnet: p9_fd_create_unix (28932): problem connecting socket: éq‰Y’3aK: -111 15:18:46 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:46 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xe, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:46 executing program 5: openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x80, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000000200)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c00", 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3c00, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:46 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3b, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:46 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:46 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970ff", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)="2f67726f75702e7382619b0ae931786072a1e2860fae587874003c23fb572a1f0294e6f378b41ad54b4d9db86e63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x100) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:46 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 432.966741] 9pnet: p9_fd_create_unix (28959): problem connecting socket: éq‰Y’3aK: -111 15:18:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x6488, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) poll(&(0x7f0000000100)=[{r0}, {r1}], 0x20000000000000fb, 0x0) 15:18:46 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x10000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) getsockname$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) [ 433.653412] 9pnet: p9_fd_create_unix (29010): problem connecting socket: éq‰Y’3aK: -111 15:18:47 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:47 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x800000000000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 15:18:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0x8000000000000000, 0x4000, 0x3ff, 0x2, 0x20}) clock_getres(0x0, &(0x7f0000000040)) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:47 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa000000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:47 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 433.780448] 9pnet: p9_fd_create_unix (29013): problem connecting socket: éq‰Y’3aK: -111 15:18:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x88640000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0x9) 15:18:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 15:18:47 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x6c000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:47 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x88480000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:47 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 15:18:47 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)=r0, 0x4) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000200)=0x1c) recvmmsg(r1, &(0x7f0000000540)=[{{&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f00000003c0)=""/45, 0x2d}, {&(0x7f0000000400)=""/167, 0xa7}], 0x3, &(0x7f0000000500)=""/7, 0x7, 0x923}, 0x80}], 0x1, 0x40, &(0x7f0000000580)={0x77359400}) r2 = openat$cgroup_ro(r1, &(0x7f0000000640)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r2, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:47 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1f000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) [ 434.654659] 9pnet: p9_fd_create_unix (29085): problem connecting socket: éq‰Y’3aK: -111 15:18:48 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="3970ff", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xfeffffff, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}], 0x20000000000000fb, 0x0) 15:18:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x4c4, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 15:18:48 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa00, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:48 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:48 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}], 0x20000000000000fb, 0x0) 15:18:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x30000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x260, 0x31, 0x100, 0x70bd25, 0x25dfdbfd, {0xa}, [@nested={0x168, 0x9, [@typed={0x10, 0x77, @str='threaded\b'}, @typed={0x8, 0x6b, @uid=r1}, @generic="e4f3f2181b103a566650636b351e74b578553977dd1f00aa08757ce6da787b47471c867cb17da277f4b449ec283450c732814f215dd056dc124869140342cb475fedbd364cfe7942b4dc3dfdf69d96d6365a7476ea0181a89fface3ab5f7399159d4b73a65da056957e60a307efdaa6828dcc8d477813dfa0d579eddafa8efe66743178d8099f1fd23d36fe8e501c5232506167bdbdd386283c311a8146e083c5faaf43bdbd25aec5d5a3a4962096baf2636624a3849a9369ccf17541d25ca537744b0d012d312", @generic="8215675bb3b685a44ef41f56e3979d6b1429bae83af9366b61fd3e99b1e7a417a0c980424199ce35edafbaafaf7520143fe165ea5a6f229ce563334840ecacd15f8f96c258c5d35bb513f751cbe34e0d98ca5f15cd9e6da9e30f2623b5c4866a45a5f1eae7831a66e3369e33c94d0f44339ff65ca319e42e0b1cbc51acabde623574b77e"]}, @nested={0xdc, 0x3f, [@typed={0x3c, 0x4b, @binary="dda5c6a85b96f90fb80cf307ffbfef8a74264386f333d5966cfae5b05649b98bd4e5d44a6bfa0e206663bd4307c01108e11d3b971f"}, @typed={0x8, 0x5d, @fd=r0}, @generic="37d05afa0bd90ad5a2197f6d0daeb47a95403ea2f25f106054f1a281fda5f5279f98a7851e913af8a64e934ebd8ca3377f136ad287e1459812417b8b2648e2f930d91b48ef9d8dfc9d3fa20c90d8f93e7b2353d784f8232a75e3aa002a2488880b62ac7cc9efd0d1f4eb289c07beffcb3d6cdfa20e6210c1481d98b13e13e24f1a9854ac682657204f", @typed={0x8, 0x2b, @fd=r0}]}, @typed={0x8, 0x22, @ipv4}]}, 0x260}, 0x1, 0x0, 0x0, 0x40000}, 0x40881) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:48 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:48 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x48, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:48 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 435.017157] 9pnet: p9_fd_create_unix (29118): problem connecting socket: éq‰Y’3aK: -111 15:18:48 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}, {}], 0x20000000000000fb, 0x0) 15:18:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3300, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000080)={{0x6, @remote, 0x4e21, 0x1, 'none\x00', 0x20, 0x3, 0x56}, {@multicast2, 0x4e20, 0x3, 0x100000001, 0xd352, 0x1000}}, 0x44) 15:18:48 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4c00000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:48 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 15:18:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xffffff89, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\b', 0x9) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3, 0xf3f5, 0x254, 0x0, 0x100000001}) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) 15:18:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 15:18:49 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3580, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3f00000000000000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:49 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 435.635758] 9pnet: p9_fd_create_unix (29168): problem connecting socket: éq‰Y’3aK: -111 [ 435.647762] 9pnet: p9_fd_create_unix (29167): problem connecting socket: éq‰Y’3aK: -111 15:18:49 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x7, 0x100) 15:18:49 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) [ 436.012339] 9pnet: p9_fd_create_unix (29198): problem connecting socket: éq‰Y’3aK: -111 15:18:49 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397003", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xfeffffff00000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x97ffffff, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:49 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00', 0xffffffffffffff9c}, 0x10) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) 15:18:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {r0}], 0x20000000000000fb, 0x0) [ 436.121676] 9pnet: p9_fd_create_unix (29203): problem connecting socket: éq‰Y’3aK: -111 15:18:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x3b00000000000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f00000001c0)='threaded\b', 0xfff9) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) 15:18:49 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:49 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {r0}], 0x20000000000000fb, 0x0) 15:18:50 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:50 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x7000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)="397010", 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:50 executing program 4: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{}, {r0}], 0x20000000000000fb, 0x0) 15:18:50 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:50 executing program 5: fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x2, 0x40) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x2761, 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\b', 0xfff9) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd29, 0x25dfdbfc, {0x2, 0x80, 0x10, 0x7, 0xfc, 0x1, 0xff, 0x6, 0x400}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 15:18:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xf5080000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x2000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:50 executing program 4: 15:18:50 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 437.061943] 9pnet: p9_fd_create_unix (29270): problem connecting socket: éq‰Y’3aK: -111 15:18:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x88a8ffff00000000, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:50 executing program 4: 15:18:50 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x101100) vmsplice(r0, &(0x7f00000016c0)=[{&(0x7f0000000200)="e8d03dab934d69a584d63a017675b93b2b646f0ebaa539ece6fbfb770a97c2b7face7190aa95608a1e37eb6e30bcf83dd9ba252e2b3ab18e2c94e6e212872429e9496fb60866a2af1d7982b59693e67c284c8012a88a2c62279d41ded4a99baca96e028e575cc8dd1e22dc691f1348fd053153efd37a3f6344113d6373129d6147f6d0c734ba2d3d94f3504c7a827162f373886e5ef21793eaebe24232f4c1b42e503770a6e25a965f800c5e326b2f975360fac8b1b170c32d0ba64b94650002f8ddbd0eab689e496d69ac81444be767a574d6a8aad3c669bf7449", 0xdb}, {&(0x7f0000000340)="4a6996760c99b7b5014510d20020dc770ec9d2e7482dbf06e8abe5fb5a5ff3737337a178727ee7376c5cd010036551bd011319dffba96d303abfe6df9dcd1c0afc13992f770c9cf798e793fd2fd96a9d4c5e3fd8c23b3d6b8f4dc7873fd475a172e5c72093c9a38308a53a4e21aefe22d60aec969fcc0efb37a5debc2960aa59c1c2b0581888f9bf2296f2d2888b34d82f6267980526c96e6773c92191afa35dc74139d87d757fbabb96e83c03", 0xad}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="fddfb6436a2bc6fbee3480880b78f3980ba837191ad71489642cda272b5c4c48903a15b2f6a48910fbc890070fce035ea223c7697e1959420e7e57554a0fc702240c84c55c0b08429cd79f67ec31dbc08cc10aa23ea40712597624d31895866cae478836880a4f29c2c3c76f1fde6acd2b184450f0f21685a2775037856b98ccb85d2c0a96cdb79f50c6a7413c052869ae206597ec13db1fcef7b1f994c38628e0185813c2cdcc2b61", 0xa9}, {&(0x7f00000014c0)="68e9d9e8ba3af8f4ef9e80417b361c4e338ce172d9d912994caa90ce577e9014bf78820c252a22f58bda2ad8067b2cab8ab1991d98344a733f00e730ad89e6168eb716362d4aa8fd7c4dc964930bf64a93da9e2dbf67d449249a7d9a9fba71486330db954ed9a50ca86407341b10af471c647c2a4c69700393b82028344e6208792ddb87592b605933fa6fe7bdfb557fbdea222d5e9267046aa688ac7d5bab1e7156de28b0662cbb57e52b0cdb4226bac55554254653c87519053d732632ff913356356b433d0bae15a374c59a61e8", 0xcf}, {&(0x7f00000015c0)="26f9dea2095ba613655f37962245bcb70a0126fe4761e361a0b86fcdf669912a273f4c7c3fb7e31b5bcd105a8d5fc15f202d989f874c41b351b54f8beb0340c0139c22f5ca8b3b6cdfc1818bcc4b3c081596283a4cd2e4cb4f7ceef7641548f28e757d6d4f38f59b614d75c9c80b4154b1b504cb50d754a3063e4e2a8fbcddd62435c17e4cccd8d734f46b112a20732536c48231f0e8ef7ebf848b32fe433c85799a11fbc68c8c74261aacf303aecaf1332539c962714a7b98da533967f2d8e5dc88436fcd28541e20272189770fd71bbd9c", 0xd2}], 0x6, 0x5) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000000), &(0x7f0000000080)=0x4) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x5, {0x7, 0x1b, 0xb50, 0xc0890, 0x3, 0xbe, 0xffffffff, 0x1}}, 0x50) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\b', 0x156) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001980)={0x2, 0x9, 0xfffffffffffffffa, 0x5f1}, 0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001780)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000001880)=0xe8) lstat(&(0x7f00000018c0)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000001740)='./file0\x00', r2, r3, 0x1000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x40000002000, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f0000000180)=0x9) 15:18:50 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x40000, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:50 executing program 4: [ 437.659298] ================================================================== [ 437.659654] 9pnet: p9_fd_create_unix (29314): problem connecting socket: éq‰Y’3aK: -111 [ 437.666951] BUG: KASAN: use-after-free in p9_conn_cancel+0x9fc/0xd30 [ 437.666965] Read of size 8 at addr ffff8801d71980e0 by task kworker/0:2/1882 [ 437.666969] [ 437.666982] CPU: 0 PID: 1882 Comm: kworker/0:2 Not tainted 4.18.0+ #190 [ 437.666996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.706719] Workqueue: events p9_poll_workfn [ 437.711126] Call Trace: [ 437.713710] dump_stack+0x1c9/0x2b4 [ 437.717356] ? dump_stack_print_info.cold.2+0x52/0x52 [ 437.722541] ? printk+0xa7/0xcf [ 437.725825] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 437.730584] ? p9_conn_cancel+0x9fc/0xd30 [ 437.734747] print_address_description+0x6c/0x20b [ 437.739612] ? p9_conn_cancel+0x9fc/0xd30 [ 437.743755] kasan_report.cold.7+0x242/0x2fe [ 437.748190] __asan_report_load8_noabort+0x14/0x20 [ 437.753118] p9_conn_cancel+0x9fc/0xd30 [ 437.757110] ? p9_fd_cancelled+0x2f0/0x2f0 [ 437.761360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.766883] ? unix_poll+0x2d2/0x430 [ 437.770583] ? unix_sock_destructor+0x380/0x380 [ 437.775241] ? lock_downgrade+0x8f0/0x8f0 [ 437.779388] ? sock_poll+0x274/0x4b0 [ 437.783104] ? mark_held_locks+0xc9/0x160 [ 437.787265] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 437.791871] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 437.796970] ? kernel_sendpage_locked+0x120/0x120 [ 437.801816] p9_poll_workfn+0x4b2/0x6d0 [ 437.805779] ? p9_read_work+0x1060/0x1060 [ 437.809936] ? graph_lock+0x170/0x170 [ 437.813748] ? lock_acquire+0x1e4/0x540 [ 437.817709] ? process_one_work+0xb9b/0x1ba0 [ 437.822105] ? kasan_check_read+0x11/0x20 [ 437.826243] ? __lock_is_held+0xb5/0x140 [ 437.830331] process_one_work+0xc73/0x1ba0 [ 437.834561] ? trace_hardirqs_on+0x10/0x10 [ 437.838807] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 437.843459] ? __switch_to_asm+0x34/0x70 [ 437.847508] ? __switch_to_asm+0x40/0x70 [ 437.851564] ? __switch_to_asm+0x34/0x70 [ 437.855623] ? __switch_to_asm+0x34/0x70 [ 437.859666] ? __switch_to_asm+0x40/0x70 [ 437.863707] ? __switch_to_asm+0x34/0x70 [ 437.867749] ? __switch_to_asm+0x40/0x70 [ 437.871805] ? __switch_to_asm+0x34/0x70 [ 437.875884] ? __sched_text_start+0x8/0x8 [ 437.880037] ? lock_downgrade+0x8f0/0x8f0 [ 437.884177] ? graph_lock+0x170/0x170 [ 437.887974] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 437.892766] ? lock_acquire+0x1e4/0x540 [ 437.896746] ? worker_thread+0x3dc/0x13c0 [ 437.900882] ? lock_downgrade+0x8f0/0x8f0 [ 437.905057] ? lock_release+0xa30/0xa30 [ 437.909022] ? kasan_check_read+0x11/0x20 [ 437.913156] ? do_raw_spin_unlock+0xa7/0x2f0 [ 437.917560] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 437.922143] ? kasan_check_write+0x14/0x20 [ 437.926399] ? do_raw_spin_lock+0xc1/0x200 [ 437.930657] worker_thread+0x189/0x13c0 [ 437.934638] ? __switch_to_asm+0x34/0x70 [ 437.938710] ? process_one_work+0x1ba0/0x1ba0 [ 437.943209] ? graph_lock+0x170/0x170 [ 437.947015] ? graph_lock+0x170/0x170 [ 437.950815] ? find_held_lock+0x36/0x1c0 [ 437.954886] ? kasan_check_read+0x11/0x20 [ 437.959016] ? do_raw_spin_unlock+0xa7/0x2f0 [ 437.963414] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 437.968499] ? __kthread_parkme+0x58/0x1b0 [ 437.972977] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 437.977978] ? trace_hardirqs_on+0xd/0x10 [ 437.982113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.987634] ? __kthread_parkme+0x106/0x1b0 [ 437.991940] kthread+0x35a/0x420 [ 437.995303] ? process_one_work+0x1ba0/0x1ba0 [ 437.999793] ? kthread_bind+0x40/0x40 [ 438.003596] ret_from_fork+0x3a/0x50 [ 438.007301] [ 438.008929] Allocated by task 29263: [ 438.012639] save_stack+0x43/0xd0 [ 438.016083] kasan_kmalloc+0xc4/0xe0 [ 438.019807] kmem_cache_alloc_trace+0x152/0x780 [ 438.024490] p9_socket_open+0x4e/0x220 [ 438.028436] p9_fd_create_unix+0x2a1/0x370 [ 438.032673] p9_client_create+0x8ed/0x1770 [ 438.036910] v9fs_session_init+0x21a/0x1a80 [ 438.041243] v9fs_mount+0x7c/0x900 [ 438.044797] mount_fs+0xae/0x328 [ 438.048150] vfs_kern_mount.part.34+0xdc/0x4e0 [ 438.052716] do_mount+0x581/0x30e0 [ 438.056239] ksys_mount+0x12d/0x140 [ 438.059866] __x64_sys_mount+0xbe/0x150 [ 438.063851] do_syscall_64+0x1b9/0x820 [ 438.067723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.072891] [ 438.074501] Freed by task 29263: [ 438.077850] save_stack+0x43/0xd0 [ 438.081289] __kasan_slab_free+0x11a/0x170 [ 438.085511] kasan_slab_free+0xe/0x10 [ 438.089315] kfree+0xd9/0x260 [ 438.092408] p9_fd_close+0x416/0x5b0 [ 438.096107] p9_client_create+0xa9a/0x1770 [ 438.100327] v9fs_session_init+0x21a/0x1a80 [ 438.104643] v9fs_mount+0x7c/0x900 [ 438.108164] mount_fs+0xae/0x328 [ 438.111511] vfs_kern_mount.part.34+0xdc/0x4e0 [ 438.116077] do_mount+0x581/0x30e0 [ 438.119597] ksys_mount+0x12d/0x140 [ 438.123206] __x64_sys_mount+0xbe/0x150 [ 438.127163] do_syscall_64+0x1b9/0x820 [ 438.131031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.136199] [ 438.137811] The buggy address belongs to the object at ffff8801d71980c0 [ 438.137811] which belongs to the cache kmalloc-512 of size 512 [ 438.150473] The buggy address is located 32 bytes inside of [ 438.150473] 512-byte region [ffff8801d71980c0, ffff8801d71982c0) [ 438.162266] The buggy address belongs to the page: [ 438.167190] page:ffffea00075c6600 count:1 mapcount:0 mapping:ffff8801dac00940 index:0xffff8801d7198d40 [ 438.176612] flags: 0x2fffc0000000100(slab) [ 438.180827] raw: 02fffc0000000100 ffffea0006be6088 ffffea000630c988 ffff8801dac00940 [ 438.188688] raw: ffff8801d7198d40 ffff8801d71980c0 0000000100000004 0000000000000000 [ 438.196548] page dumped because: kasan: bad access detected [ 438.202237] [ 438.203851] Memory state around the buggy address: [ 438.208759] ffff8801d7197f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 438.216107] ffff8801d7198000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 438.223446] >ffff8801d7198080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 438.230782] ^ [ 438.237282] ffff8801d7198100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.244629] ffff8801d7198180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 438.251963] ================================================================== 15:18:51 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:51 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',groep_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000040c0), 0x1000) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x401, 0x1) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000440)=&(0x7f0000000400)) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) readlink(&(0x7f0000001580)='./file0/file0\x00', &(0x7f0000000480)=""/4096, 0x1000) write$FUSE_DIRENT(r0, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) dup3(r2, r0, 0x0) readlink(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000180)=""/29, 0x1d) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_type(r3, &(0x7f00000001c0)='threaded\b', 0xfff9) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000080)) 15:18:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0xd00, 0x6, "50a09c", 0x8, 0xffffff2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 15:18:51 executing program 4: 15:18:51 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:51 executing program 3: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xffffff97, &(0x7f00000004c0), 0x8800, &(0x7f0000000540)) 15:18:51 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=unix,'}) 15:18:51 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)="e91f7189591e9233614b00", &(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000100)='9p\a', 0x0, &(0x7f0000000140)={'trans=unix,'}) [ 438.259304] Disabling lock debugging due to kernel taint [ 438.265149] Kernel panic - not syncing: panic_on_warn set ... [ 438.265149] [ 438.272544] CPU: 0 PID: 1882 Comm: kworker/0:2 Tainted: G B 4.18.0+ #190 [ 438.280678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.290043] Workqueue: events p9_poll_workfn [ 438.294474] Call Trace: [ 438.297075] dump_stack+0x1c9/0x2b4 [ 438.300725] ? dump_stack_print_info.cold.2+0x52/0x52 [ 438.305917] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 438.310661] panic+0x238/0x4e7 [ 438.313839] ? add_taint.cold.5+0x16/0x16 [ 438.317972] ? do_raw_spin_unlock+0xa7/0x2f0 [ 438.322364] ? p9_conn_cancel+0x9fc/0xd30 [ 438.326509] kasan_end_report+0x47/0x4f [ 438.330465] kasan_report.cold.7+0x76/0x2fe [ 438.334771] __asan_report_load8_noabort+0x14/0x20 [ 438.339706] p9_conn_cancel+0x9fc/0xd30 [ 438.343718] ? p9_fd_cancelled+0x2f0/0x2f0 [ 438.347950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.353478] ? unix_poll+0x2d2/0x430 [ 438.357171] ? unix_sock_destructor+0x380/0x380 [ 438.361822] ? lock_downgrade+0x8f0/0x8f0 [ 438.365957] ? sock_poll+0x274/0x4b0 [ 438.369661] ? mark_held_locks+0xc9/0x160 [ 438.373813] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 438.378393] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 438.383504] ? kernel_sendpage_locked+0x120/0x120 [ 438.388344] p9_poll_workfn+0x4b2/0x6d0 [ 438.392338] ? p9_read_work+0x1060/0x1060 [ 438.396469] ? graph_lock+0x170/0x170 [ 438.400273] ? lock_acquire+0x1e4/0x540 [ 438.404266] ? process_one_work+0xb9b/0x1ba0 [ 438.408687] ? kasan_check_read+0x11/0x20 [ 438.412822] ? __lock_is_held+0xb5/0x140 [ 438.416871] process_one_work+0xc73/0x1ba0 [ 438.421091] ? trace_hardirqs_on+0x10/0x10 [ 438.425322] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 438.429973] ? __switch_to_asm+0x34/0x70 [ 438.434014] ? __switch_to_asm+0x40/0x70 [ 438.438067] ? __switch_to_asm+0x34/0x70 [ 438.442123] ? __switch_to_asm+0x34/0x70 [ 438.446176] ? __switch_to_asm+0x40/0x70 [ 438.450217] ? __switch_to_asm+0x34/0x70 [ 438.454274] ? __switch_to_asm+0x40/0x70 [ 438.458323] ? __switch_to_asm+0x34/0x70 [ 438.462368] ? __sched_text_start+0x8/0x8 [ 438.466523] ? lock_downgrade+0x8f0/0x8f0 [ 438.470655] ? graph_lock+0x170/0x170 [ 438.474441] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 438.479200] ? lock_acquire+0x1e4/0x540 [ 438.483188] ? worker_thread+0x3dc/0x13c0 [ 438.487348] ? lock_downgrade+0x8f0/0x8f0 [ 438.491499] ? lock_release+0xa30/0xa30 [ 438.495469] ? kasan_check_read+0x11/0x20 [ 438.499598] ? do_raw_spin_unlock+0xa7/0x2f0 [ 438.503986] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 438.508549] ? kasan_check_write+0x14/0x20 [ 438.512781] ? do_raw_spin_lock+0xc1/0x200 [ 438.517031] worker_thread+0x189/0x13c0 [ 438.520996] ? __switch_to_asm+0x34/0x70 [ 438.525041] ? process_one_work+0x1ba0/0x1ba0 [ 438.529525] ? graph_lock+0x170/0x170 [ 438.533310] ? graph_lock+0x170/0x170 [ 438.537099] ? find_held_lock+0x36/0x1c0 [ 438.541145] ? kasan_check_read+0x11/0x20 [ 438.545302] ? do_raw_spin_unlock+0xa7/0x2f0 [ 438.549726] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 438.554826] ? __kthread_parkme+0x58/0x1b0 [ 438.559064] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 438.564070] ? trace_hardirqs_on+0xd/0x10 [ 438.568212] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.573907] ? __kthread_parkme+0x106/0x1b0 [ 438.578222] kthread+0x35a/0x420 [ 438.581594] ? process_one_work+0x1ba0/0x1ba0 [ 438.586104] ? kthread_bind+0x40/0x40 [ 438.589889] ret_from_fork+0x3a/0x50 [ 438.593931] Dumping ftrace buffer: [ 438.597460] (ftrace buffer empty) [ 438.601146] Kernel Offset: disabled [ 438.604753] Rebooting in 86400 seconds..