nt(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x50}, 0x18) 03:54:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c8) 03:54:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3145.576564] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:01 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x68000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:01 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x500000000000000}, 0x0) 03:54:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xffffff7f]}}]}, 0x2c}}, 0x0) 03:54:01 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) 03:54:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5000000000000000}, 0x18) [ 3145.634974] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x2c8) 03:54:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xf]}}]}, 0x2c}}, 0x0) 03:54:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x50000000}, 0x18) 03:54:01 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000009000000000000000029f0fd79bdd6e9255b69793ac32d0db68670bbb53e62539411a9761a3924f43b196bfcf127d6181de7"], 0x4}}, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x40, 0x181800) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x15) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000001c0)={0x7, 0x10001}) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000140)=0x7, 0x4) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000200)) 03:54:01 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x1a0ffffffff}, 0x0) [ 3145.957764] 9pnet: Insufficient options for proto=fd [ 3145.964287] 9pnet: Insufficient options for proto=fd [ 3146.008300] ISOFS: Unable to identify CD-ROM format. 03:54:01 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x2c8) 03:54:01 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x450000, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f0000000140), 0x80800) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) 03:54:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x4c00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:01 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x2}, 0x0) 03:54:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4002}, 0x18) 03:54:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xa44000000000000]}}]}, 0x2c}}, 0x0) 03:54:01 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:01 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7]}, 0x2c8) 03:54:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x2}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x1a0]}}]}, 0x2c}}, 0x0) 03:54:02 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa00000000000000}, 0x0) 03:54:02 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000800000000000000000000a000000ff00000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="b24f72ab40df155ce0f7b1780632fe0a80fa8a38b14b84944aea74793cdfc927fb0f4d38ab1ff130a8abe0cec5a323ac982cceb893895e074d98ec08f53ab7e879ec10115b3feb5f185f6a23da97cda5699739ea5cfcbdeaea56802ecf9dae930c9cbf15099f20d817164a440c7bd7e901e4b2f66ef69dad4afd7788795ebca068f8d9a79eb7320c067b605edeb7f4c8b341490694eafffa36a043d46ab6d9d873a3fefe6aada04994c23690423b0371b50e9690e9a93aa93904a330f0eb979334a69cd7b91a75e78f8524bb4871866712c771470b12c476a6d00cc3514a7eb77a0e7d07996169242adcae3ce673c99defd81b855470", @ANYRESOCT=r1, @ANYPTR, @ANYPTR, @ANYPTR, @ANYRES32=r0, @ANYPTR64, @ANYBLOB="55a505bb038fd12421b298e8f3a6d7ad9b057ebd01c597a305d1c4ca1ae34718acd102c602d7fdb23f93d620609e81149e0722367082bbc780e5dc30f62c8802cec09748", @ANYRESHEX=r1], @ANYBLOB="740fd549c9a1ea00ee", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="ba191e405ac73d9590a877af4a82187f8d375bcab6c597a7d81f15e1af979ffbcd5e90bcd51c8fe6d157487fb2d3f1b1fec99a53f71daa5a9b30d682", @ANYPTR, @ANYBLOB="aaa801b10a90b71fecfe91c791253d9fb933387c2f8cf8bbeb5322756d66115ab660a74dd297f930e863909020b47a60d4b46d778fe8df8e2ede22790338882dbbe71f7ced0a27c03b81b61807c2d56e2f393fcf6d2c8af43b49f9f357739f6ac61099d9ce5d8cfdd33b4133e99dcce5adc1538d26d991ba070aa6a04af18eb40ffebe929961641a91dbb418aa9245ed9fe0b64255dee229a7c2f6c3f1f9af8ea37a78e6f356f0a596f83f1d206dcc0f58245b", @ANYPTR64, @ANYRESHEX=r1, @ANYRESDEC=r1], @ANYRESDEC=r1]], 0x4}}, 0x0) 03:54:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x80fe}, 0x18) 03:54:02 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:02 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000]}, 0x2c8) 03:54:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x40030000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x1500]}}]}, 0x2c}}, 0x0) 03:54:02 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x300000000000000}, 0x0) 03:54:02 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:02 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz1', "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"}, 0x1004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000001280)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000002bb00000c42b3647d4ff430c56c792cf2614e011100"], 0x15c}}, 0x0) r2 = syz_open_dev$mice(&(0x7f0000001340)='/dev/input/mice\x00', 0x0, 0x200) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000001200)={{0x2, 0x4e23, @multicast1}, {0x7, @broadcast}, 0x0, {0x2, 0x4e24, @local}}) ioctl$FICLONE(r1, 0x40049409, r1) 03:54:02 executing program 6: socket$inet6(0xa, 0x5, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}, 0x2c8) 03:54:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x218}, 0x18) [ 3147.031476] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3147.038959] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3147.056290] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3147.063669] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x700000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:02 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 03:54:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xf5ffffff]}}]}, 0x2c}}, 0x0) 03:54:02 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3147.235718] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:02 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c8) 03:54:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x300000000000000}, 0x18) 03:54:02 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x4, 0x1, 'client0\x00', 0xffffffff80000004, "2a789dc2ac1cbbc1", "90d8468fcf5e487090b393f7a78ee07bb3172dc82cf8ae4da853ac09e9cedb41", 0x9c}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x80) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 03:54:02 executing program 6: socket$inet6(0xa, 0x5, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3147.287821] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3147.314200] ISOFS: Unable to identify CD-ROM format. [ 3147.448538] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3147.456054] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3147.472133] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3147.479492] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x1a0ffffffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:03 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c8) 03:54:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xf00]}}]}, 0x2c}}, 0x0) 03:54:03 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x6000000}, 0x0) 03:54:03 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f00000001c0)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000000)=0x80) connect$bt_sco(r0, &(0x7f0000000140)={0x1f, {0x8, 0x7fff, 0xff, 0x7fff, 0xffffffff, 0x7}}, 0x8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, r2) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c010000210001000000000000000000008000ffffe0000001fe80100000000000000119ab0500000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r3, 0x500, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) 03:54:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x400000000000000}, 0x18) [ 3147.808121] ISOFS: Unable to identify CD-ROM format. 03:54:03 executing program 6: socket$inet6(0xa, 0x5, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xfffff000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:03 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xb000000}, 0x0) 03:54:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c8) 03:54:03 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x500]}}]}, 0x2c}}, 0x0) 03:54:03 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000080000000000000005893761f00ffffe0000001fe800000000000009f7b070000000a000000ff003c2b2f21d412f8a8890ec2bc7e1027efe32d504efef34ffb8ab6da177de0627bf85dbdbf0285348d1f7ecbab8e0000000076455a5c176cb49b77781671bf", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) 03:54:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4000}, 0x18) [ 3147.982638] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3147.994466] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3148.235311] ISOFS: Unable to identify CD-ROM format. 03:54:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xa0018000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:03 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3148.293547] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:03 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}, 0x2c8) 03:54:03 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa00}, 0x0) 03:54:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x6}, 0x18) 03:54:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x10]}}]}, 0x2c}}, 0x0) 03:54:03 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 3148.351437] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x464c}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:04 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:04 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpid() capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000140)={0x80, 0x6, 0x2, 0x4, 0x1, 0x7}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb03]}, 0x2c8) 03:54:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x14000000000000}, 0x18) 03:54:04 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x5}, 0x0) 03:54:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xa00000000000000]}}]}, 0x2c}}, 0x0) 03:54:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xf00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3148.730894] ISOFS: Unable to identify CD-ROM format. 03:54:04 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:04 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x2c8) 03:54:04 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x441, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000001c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x900000000000000]}}]}, 0x2c}}, 0x0) 03:54:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x34000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:04 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x10}, 0x0) 03:54:04 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4000000000000}, 0x18) [ 3149.076254] ISOFS: Unable to identify CD-ROM format. 03:54:04 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:04 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe202000000000000]}, 0x2c8) 03:54:04 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5523, 0x400000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000140)=""/45) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x68}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:04 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x300000000000000]}}]}, 0x2c}}, 0x0) 03:54:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0xfe800000}, 0x18) 03:54:04 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) [ 3149.418176] ISOFS: Unable to identify CD-ROM format. 03:54:05 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c8) 03:54:05 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x7a00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:05 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e1000000000000000c011100"], 0x15c}}, 0x0) 03:54:05 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x1000000000000000}, 0x0) 03:54:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x7000000}, 0x18) 03:54:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xa00]}}]}, 0x2c}}, 0x0) [ 3149.757550] ISOFS: Unable to identify CD-ROM format. 03:54:05 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:05 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c8) 03:54:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x20000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:05 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x2000, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r3 = getegid() mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x80, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}]}}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x500000000000000}, 0x18) 03:54:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x1400]}}]}, 0x2c}}, 0x0) 03:54:05 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa000000}, 0x0) 03:54:05 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:05 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, 0x2c8) 03:54:05 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80f2ff00000000000000000000000000000100000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x4}, 0x1, 0x0, 0x0, 0x200000}, 0x20000000) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x89a, 0x4000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000200)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x240200, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000140)=0xd48e) 03:54:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5000000000000}, 0x18) 03:54:05 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf000000}, 0x0) [ 3150.348709] ISOFS: Unable to identify CD-ROM format. 03:54:06 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:06 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:06 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00\x00'], 0x15c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 03:54:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, 0x2c8) 03:54:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x1a0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2000}, 0x18) 03:54:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x4800]}}]}, 0x2c}}, 0x0) 03:54:06 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x6}, 0x0) 03:54:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, 0x2c8) 03:54:06 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x4800}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3150.830682] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3150.866464] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:06 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0xc5, 0x20000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 03:54:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x600}, 0x18) 03:54:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x48]}}]}, 0x2c}}, 0x0) [ 3150.978991] ISOFS: Unable to identify CD-ROM format. 03:54:06 executing program 6: socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:06 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x1ea9}, 0x0) 03:54:06 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x9effffff00000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:06 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x541000) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x95d0, 0x1f, 0x6ce800, 0x0, 0x1}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x80001) r2 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000280)={{0x6, 0x0, 0x81, 0x6, 'syz0\x00', 0x1fa80}, 0x3, 0x40, 0x7, r2, 0x8, 0x400, 'syz1\x00', &(0x7f00000001c0)=['cgroup.threads\x00', 'GPL[eth0\x00', 'cgroup.threads\x00', '*$!,loem0wlan1#posix_acl_access\x00', 'keyring.lo%bdevvmnet0vboxnet1\x00', '\x00', '%eth0ppp0eth1#:securitysecurity\\\\em1\x00', '_cgroup\x00'], 0x93, [], [0x3, 0x3, 0x37e, 0x2]}) ioctl$RTC_AIE_OFF(r1, 0x7002) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r3, r1) 03:54:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x2c8) 03:54:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x600000000000000}, 0x18) 03:54:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xb]}}]}, 0x2c}}, 0x0) 03:54:06 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 3151.473043] ISOFS: Unable to identify CD-ROM format. 03:54:07 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:07 executing program 6: socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3151.520437] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3151.527847] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x300000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3151.567940] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3151.575505] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb030000]}, 0x2c8) 03:54:07 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) tee(r0, r1, 0x401, 0xc) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000001000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) ioctl$sock_ifreq(r2, 0x8919, &(0x7f0000000140)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="60d2072084f82a6ddfe2cf426cbc8e977f3f3bd1ae7926b399f00da25776dc67"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x191280, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) 03:54:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x4002000000000000}, 0x18) 03:54:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x8]}}]}, 0x2c}}, 0x0) 03:54:07 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa0010000}, 0x0) 03:54:07 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xa0010000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3151.913255] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3151.920779] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3151.937468] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3151.945129] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c8) 03:54:07 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x75e, 0xfffffffeffffffff, {"a5fdf87513e65d639bd89f0d8bfee1d4"}, 0x3, 0x72, 0x2}}}, 0x90) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280)=0xfffffffffffffffb, &(0x7f00000002c0)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:07 executing program 6: socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x5000000}, 0x18) [ 3152.122876] ISOFS: Unable to identify CD-ROM format. 03:54:07 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x8000000}, 0x0) 03:54:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xf0ffffff00000000]}}]}, 0x2c}}, 0x0) 03:54:07 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x7a000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:07 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}, 0x2c8) 03:54:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x8001a0}, 0x18) 03:54:08 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x80}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={r2, 0x9}, &(0x7f0000000240)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:08 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x3}, 0x0) [ 3152.618764] ISOFS: Unable to identify CD-ROM format. 03:54:08 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x5000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:08 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x8001a0ffffffff]}}]}, 0x2c}}, 0x0) 03:54:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, 0x2c8) 03:54:08 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) openat$cgroup_procs(r0, &(0x7f0000000180)="6267576f75702e7668728421647300", 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000200000c7b1100"], 0x15c}}, 0x0) 03:54:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0xeb000000}, 0x18) 03:54:08 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 03:54:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x300}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}, 0x2c8) 03:54:08 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x14000000]}}]}, 0x2c}}, 0x0) [ 3153.112022] ISOFS: Unable to identify CD-ROM format. 03:54:08 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:08 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x55) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="9f0800000000000000011100"], 0x15c}}, 0x0) 03:54:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0xfffffff5}, 0x18) [ 3153.144288] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3153.175987] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:08 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:54:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x4c}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:08 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x2c8) 03:54:09 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x10000000]}}]}, 0x2c}}, 0x0) 03:54:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2000000}, 0x18) [ 3153.550542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'. [ 3153.578418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor0'. [ 3153.621787] ISOFS: Unable to identify CD-ROM format. 03:54:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000001c00000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) ftruncate(r0, 0x10000) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getsadinfo={0x48, 0x23, 0x404, 0x70bd27, 0x25dfdbfb, 0x0, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd26, 0x8ed0}}, @lifetime_val={0x24, 0x9, {0x6, 0xfff, 0x10000, 0x3}}]}, 0x48}}, 0x4000810) 03:54:09 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}, 0x2c8) 03:54:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xf}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:09 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa91e0000}, 0x0) 03:54:09 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x5]}}]}, 0x2c}}, 0x0) 03:54:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x18020000}, 0x18) 03:54:09 executing program 0: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/131, 0x83}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/214, 0xd6}], 0x4, 0x15) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:09 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:09 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf00}, 0x0) 03:54:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c8) 03:54:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x6800}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:09 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000004c1edf0071f290000eee11ac1000000"], 0x15c}}, 0x0) 03:54:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xf00000000000000]}}]}, 0x2c}}, 0x0) 03:54:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x140000}, 0x18) 03:54:09 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3154.122508] ISOFS: Unable to identify CD-ROM format. 03:54:09 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3154.309866] netlink: 224 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}, 0x2c8) 03:54:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xa0010000]}}]}, 0x2c}}, 0x0) 03:54:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x6c00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3154.371759] netlink: 224 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0xa000000}, 0x18) 03:54:10 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x40, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:10 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x8}, 0x0) 03:54:10 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3154.484705] ISOFS: Unable to identify CD-ROM format. 03:54:10 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9203]}, 0x2c8) 03:54:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x6c00000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:10 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={{0x0, 0x3, 0x6328, 0x0, 0x7fffffff, 0x8}, 0x40, 0x8, 0x2, 0x3d0, 0x5, "9890e7b6fbab498575e7d232401055334a79d0c1af2a32b1d0b6e146859288720d1c7c408eff96697a7b1ac1d4f7cb8644c3b3d65a6babf841cef91b3d4f9bf98a1ceddd7368fc8b02b646e9c9f5d14dee61dd8c997b230beef171ef5fd3f3f9f7dfceebb5aea8bbcb4833271f40b984a37f0a507fd9c8d0fa83575b1e16e2a1"}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0xa440000]}}]}, 0x2c}}, 0x0) 03:54:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x8dffffff}, 0x18) 03:54:10 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:10 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa91e000000000000}, 0x0) [ 3154.806722] ISOFS: Unable to identify CD-ROM format. 03:54:10 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c8) [ 3154.955094] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3154.962543] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3154.985655] netlink: 'syz-executor5': attribute type 3 has an invalid length. 03:54:10 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='limits\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'sit0\x00', 0x2}, 0x18) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="56c37ad946ccc2113b245ee6956b6e2407f669859ddfb9bc86ce5838f3baa3a9a2388386a541e5b9a1e426e44a168ffaa63dd9a48499c26741edf19650aaca52c9b28eb1bb00000000000000000000000000000000"], 0x15c}}, 0x0) 03:54:10 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3154.993200] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x81000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x48000000]}}]}, 0x2c}}, 0x0) 03:54:10 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf000}, 0x0) 03:54:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1a0}, 0x18) 03:54:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c8) [ 3155.263297] ISOFS: Unable to identify CD-ROM format. 03:54:10 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3155.297867] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3155.308634] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:10 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:10 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x900}, 0x0) 03:54:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:10 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f0000002400)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)=""/97, 0x61}], 0x1, &(0x7f00000002c0)=""/4096, 0x1000, 0x2}, 0xfffffffffffffff9}, {{&(0x7f00000012c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000001340)=""/151, 0x97}], 0x1, &(0x7f0000001400)=""/4096, 0x1000, 0x101}, 0x7fff}], 0x2, 0x2100, &(0x7f0000002480)) getuid() getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f00000024c0)=""/234, &(0x7f00000026c0)=0xea) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000029c0)={'syzkaller1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000025c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000002700)=@getsa={0x104, 0x12, 0x4, 0x70bd27, 0x25dfdbfb, {@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1a}}, 0x4d3, 0x0, 0xff}, [@policy={0xac, 0x7, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23, 0x1, 0x4e23, 0x8, 0xa, 0x20, 0xa0, 0x3b, r1, r2}, {0x1, 0x7fffffff, 0x4, 0xfff, 0x4, 0x80000000, 0x7fffffff, 0x7fffffff}, {0x10001, 0x101, 0x6, 0x779a02f0}, 0xca4, 0x0, 0x3, 0x0, 0x2, 0x3}}, @migrate={0x30, 0x11, [{@in6, @in6=@remote, 0x6f, 0x7, 0x0, 0x3507, 0xa, 0x2}]}]}, 0x104}}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x210000) 03:54:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x3f00]}}]}, 0x2c}}, 0x0) 03:54:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3}, 0x18) 03:54:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}, 0x2c8) 03:54:11 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x7400000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9203000000000000]}, 0x2c8) [ 3155.743411] ISOFS: Unable to identify CD-ROM format. 03:54:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x900]}}]}, 0x2c}}, 0x0) 03:54:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3f00000000000000}, 0x18) 03:54:11 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x34000}, 0x0) 03:54:11 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:11 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10002, 0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @rand_addr}, &(0x7f00000001c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xfffffffffffffd7b) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@remote, 0x4e20, 0x2, 0x4e21, 0x3, 0xa, 0x20, 0x80, 0x3b, r2, r3}, {0x8, 0x0, 0x100000000, 0x7, 0x7, 0x8f7, 0x0, 0x6a6d1ee1}, {0xffff, 0x0, 0x0, 0x5}, 0x10001, 0x6e6bb3, 0x3, 0x0, 0x2, 0x2}, {{@in6=@loopback, 0x4d2, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x10}, 0x3503, 0x2, 0x3, 0x11cf, 0x7, 0x2, 0x7fffffff}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:11 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3155.956549] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3155.964107] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x500000000000000]}}]}, 0x2c}}, 0x0) 03:54:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x2c8) 03:54:11 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:11 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe8000000000000000b300004000000000000000000000000a000000df000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x400}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000740)={r2, 0x7, 0x0, 0x0, 0xa64}, &(0x7f0000000240)=0x18) r4 = accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@updpolicy={0x120, 0x19, 0x0, 0x70bd2b, 0x25dfdbff, {{@in6=@mcast2, @in6=@loopback, 0x4e20, 0x9b5, 0x4e21, 0xaa65, 0x2, 0xa0, 0xa0, 0xff, r5, r6}, {0xa0b, 0x9, 0x8, 0x4, 0x6, 0x4, 0x2, 0x2}, {0x5, 0xfffffffffffff000, 0x1, 0x10001}, 0x5, 0x6e6bb0, 0x0, 0x0, 0x1, 0x3}, [@mark={0xc, 0x15, {0x35075a, 0x2}}, @output_mark={0x8, 0x1d, 0x8}, @policy_type={0xc, 0x10, {0x1}}, @lifetime_val={0x24, 0x9, {0x80000001, 0xffffffffffffffb8, 0x4, 0x1}}, @lifetime_val={0x24, 0x9, {0x7ff, 0x4, 0xffff, 0x100000001}}]}, 0x120}}, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000640)={r3, @in6={{0xa, 0x4e21, 0x7, @local, 0x4}}, 0x1, 0x400, 0x8, 0x600000000000000, 0x40}, &(0x7f0000000700)=0x98) 03:54:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0xeb00000000000000}, 0x18) [ 3156.110488] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3156.117929] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3156.118923] ISOFS: Unable to identify CD-ROM format. 03:54:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x6000000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:11 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 03:54:11 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x800000000000000]}}]}, 0x2c}}, 0x0) 03:54:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff03000000000000]}, 0x2c8) 03:54:12 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffff7, 0x8000) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 03:54:12 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3156.467127] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3156.474633] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x14}, 0x18) 03:54:12 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x400300}, 0x0) [ 3156.576344] ISOFS: Unable to identify CD-ROM format. [ 3156.582444] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3156.590139] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x200000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:12 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2c8) 03:54:12 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x3, 0x1000, 0x8000}) 03:54:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xb000000]}}]}, 0x2c}}, 0x0) 03:54:12 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x3f00}, 0x18) 03:54:12 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x8001a0}, 0x0) [ 3156.892437] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3156.900342] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x8001a0ffffffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3156.941561] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3156.948951] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001200000000000c00002db5bf3b73ece300"], 0x15c}}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000000)=0xa14c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="7d764948b9b20318eaa87961d4be7a43", 0x10) ioctl$LOOP_CLR_FD(r1, 0x4c01) 03:54:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, 0x2c8) 03:54:12 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x8000000]}}]}, 0x2c}}, 0x0) 03:54:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x900000000000000}, 0x18) 03:54:12 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3157.159091] ISOFS: Unable to identify CD-ROM format. 03:54:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:12 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xb00000000000000}, 0x0) 03:54:12 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000300)={0x0, 0xffffffffffffffe1, 0x1, 0x8, 0x4, 0x5}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e24, 0x3f, @ipv4={[], [], @remote}, 0x35}}, 0x100, 0x101}, &(0x7f0000000440)=0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000040000000000c011100"], 0x15c}}, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000480)={'sit0\x00', {0x2, 0x4e22, @multicast2}}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) lchown(&(0x7f0000000000)='./file0\x00', r4, r5) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000280)={0x3, 0xffffffffffff8001}) [ 3157.317206] netlink: 256 bytes leftover after parsing attributes in process `syz-executor0'. [ 3157.329830] netlink: 256 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff03]}, 0x2c8) 03:54:12 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xffffff7f]}}]}, 0x2c}}, 0x0) 03:54:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000}, 0x18) 03:54:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x8100}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3157.617897] ISOFS: Unable to identify CD-ROM format. 03:54:13 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa0018000}, 0x0) 03:54:13 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x18, 0x1, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000087e99da23b1367"], 0x15c}}, 0x0) 03:54:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e4]}, 0x2c8) 03:54:13 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:13 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xfffffff0]}}]}, 0x2c}}, 0x0) 03:54:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x6000000}, 0x18) 03:54:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x6}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:13 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 3157.906362] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3157.916807] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000]}, 0x2c8) 03:54:13 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xffffff9e}, 0x0) 03:54:13 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xb]}}]}, 0x2c}}, 0x0) [ 3158.114623] ISOFS: Unable to identify CD-ROM format. 03:54:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0xa}, 0x18) 03:54:13 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x7, &(0x7f0000000780)=[{&(0x7f0000000280)="40608b7653dc9e605db64ba8c09441dba9f9cd8904f2aea836191f310a1fa8359ec678fc5e9fdd98d25ee8fd5c8310108aa2e01805d63d654c7456354ebafd0a97d153954452ed939638635da7094c4a314350ad340a880aec25ab7585f78a51c690da771c03061f9eaf467091dad6c89a779d6c2603795658481883e5c9a07f1e6f8acaacfe63f04a6aee44cb1f4a6ba560d572b9351ba38e6f65a37ff0e4fa0e88056049bff7bff8964932eca8ab75981887b022e988f1b02391331470d31422376c2b7f2f8f0aa870ce2a80e7882dc522768c0d8e074c7044", 0xda, 0x3fc9}, {&(0x7f0000000380)="5a302d165b4806bd45b6f386638bf7d0a622c8afbd68f98d6661debf81289686d358018bffac94ff070c497b585a56aedbce029a0f606d4b5638457eef0566151b77adb9d5", 0x45, 0x3}, {&(0x7f0000000400)="d4594db5bbdc35476b8bf13fcee20fda1226db8820b4c09e9fdfc94981069aefb304c796ab3f3197a9b33737da87996abd78d9a631dc9c6ed3b0d1167539b4493b8430f747cb2f51538f424a40e8d48a8c8495805053c86de2bc24ed32a67343cc3048bc17e09510c5322e45fafa317b27e0f0c8e491c198fc387227143ea5653d1e33c7b6117df89ed7f94f0b01422f94133b549b18c8b88daf188ffae70f620a36222399310350580b515fdd4684b3f6aa54dd8e59198f77bd491ed8628706a39c2cf4965e24f90d15d06f0e68fee93d6de030690f4f18", 0xd8, 0x7}, {&(0x7f0000000500)="18ae57b26a389cfb7e054b20befb5c3171f69b342f55c42b2f271eed461187a48f4929d2984998f5f48fb568cdc314b8a40d112bcdb963da4785a757515d529c65d0ec80d2322646584d6fce8598f451067430148f3de988dd91f45fffe0f76ec97514b74562aa238b44a5ecd0022094e1eae701fc2d56e6a9c724b2783fa7c4f9e5152f64ae8527912eb956125a3beca37edb9d83de0069cd29a7fe968bed04467bac6a309dfcef19cb8521e3e8ad0cc9f62ccef9abe4b9179c964e1e6ae1e6d80bca0cb0a77a9e921f10d5c89b75c3878e817ac0edcf9894f49ac3fa952bfd90ef58567fc797", 0xe7}, {&(0x7f0000000600)="ed9ec84681152ba28c3d5655e4f1a35e025bb714748255f49153529841c85cce0ca7", 0x22}, {&(0x7f0000000640)="95b7cc8a89aebcefe97c44b99fbbbdaabb6252337b9863c7d9ee55bc05cdf9", 0x1f, 0xffffffff}, {&(0x7f0000000680)="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", 0xfe, 0x4}], 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f696e6f64655f63612e6948e0a966e86654efc6a73779dc6368652c73700163655f63616368652c646507b4e89850cd8cadaf9ddc341cd6bc4da36772616465642c005072b187ade7fca945b8d17fe111ee1a925111d56ca37344e286888a8cde23decbba9434ff931a94e467fc83bc39e8bb8506dd03d84c5958ed024b3d0677891c2720da2f1da41840224c9b8693f30d12288d71c4cb58bd55f6f9d6d8242100e61b537224e192d879bc43f53a5a5399f3d712b556e441d954d54fdca9b1b53865242e3b3b1bfcb97c608c7a44144023e181515cafb7a68f9447c9bfef4f06c9d732fc893900925bcf206882f6718b44862bf591acb2d47fa078de5a80441688e121df46f0663803284a4380093360f6520480df0d3350f2f4940370b1b3f461b742809cc3780c2dc154aaabcb47d622db077f747d9c851c720573f0e3421c03af4e9f354855e5bd8137f85cabda9fa338285d139de1506217bb967fea1897d64efad54273654ba527f45e9224619dda9466dd574bf73d6ed96d1d5bb98f72bd2f93a755352c450eeb3af8c158a7764a797059ee"]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c05000027a7235f19cac8dffe742708abb9334ae67ca5723fa8f6708d1a2ac75ab24d79f2e80f0674abad4995be4fc83269e952b8d6fb6d7d53591c5236b019583910e353a94431e0d91707aef82e6afb93693856736bad1e6b505fecc66c13"], 0x15c}}, 0x0) 03:54:13 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xfffffff0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb03000000000000]}, 0x2c8) 03:54:13 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:13 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xb}, 0x0) 03:54:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xffffffffa0010000]}}]}, 0x2c}}, 0x0) 03:54:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10}, 0x18) 03:54:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x4}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3158.448177] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3158.465613] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:14 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:14 executing program 0: syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1, 0x8000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x1, 0x1f, 0x1, 0x8, [], [], [], 0x5, 0x1, 0x75f, 0x9dd5, "3b8d060c5dd6f19ff05a30ac56afd93c"}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0401000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f04f000000000000db38a78bc0403811423a606739b01650c0b4be4993ce04de77fbb0e6fab6d680af8424a44277bf98252e308b59fa2e92a192fb64960696b97e9d24e54385689dc8e8c1671cb103f4e81c8b3dea6ce14724cc1b01d6466c2713ae19bf9c6dbf2394fa20fbc48f99ccbe6347fc5a8ecdfdca060b6d41c4c118d040a59d56f27188cf47135b2e8297ec568dade1a7a1ec6821cecd8eb6a1147604b742b5ebda4eb1fa16bad76f3e5f0091e5d88fdef9de39171e26efdb9aa060d7c1e4b92ba1d0b852cdc1804be5859928452aed22bd126200655821d1a8fa66422abf2d38eb46ecbb0b4579eb980693eee86790"], 0x15c}}, 0x0) mq_timedreceive(r0, &(0x7f0000000480)=""/231, 0xe7, 0x3, 0x0) 03:54:14 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x800000000000000}, 0x0) 03:54:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c8) 03:54:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x100000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2000000000000000}, 0x18) [ 3158.689456] ISOFS: Unable to identify CD-ROM format. 03:54:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xfffffffc]}}]}, 0x2c}}, 0x0) 03:54:14 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:14 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3158.873299] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. [ 3158.912179] netlink: 180 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:14 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = semget(0x1, 0x0, 0x2) semctl$GETZCNT(r0, 0x3, 0xf, &(0x7f00000001c0)=""/74) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:14 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x200000000000000}, 0x0) 03:54:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x2c8) [ 3158.985306] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3158.992705] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0xa0010000}, 0x18) 03:54:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x400000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3159.030892] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3159.038489] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x4000000000000000]}}]}, 0x2c}}, 0x0) 03:54:14 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3159.132600] ISOFS: Unable to identify CD-ROM format. 03:54:14 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:14 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x802, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000140)=0x3) 03:54:14 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x600}, 0x0) 03:54:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392]}, 0x2c8) 03:54:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x17) 03:54:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3159.399104] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3159.406715] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3159.424199] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3159.431578] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x2000000]}}]}, 0x2c}}, 0x0) [ 3159.584757] ISOFS: Unable to identify CD-ROM format. 03:54:15 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:15 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, 0x2c8) 03:54:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x400300}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:15 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0xbeb}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x1}}]}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0100002100010000000000865730150000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000022000c011100"], 0x15c}}, 0x0) 03:54:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1b) 03:54:15 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xffffffffa0018000}, 0x0) 03:54:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf0ffffff]}}]}, 0x2c}}, 0x0) 03:54:15 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, 0x2c8) 03:54:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20ae3018) 03:54:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x48000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:15 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) ioctl$void(r0, 0xc004587f) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x43e80, 0x200000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e24}}) ioctl$KDADDIO(r1, 0x4b34, 0x5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0100000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000a000000ff00000000000000000000000000000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYBLOB="00000000000000000c011100"], 0x4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 03:54:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xb00]}}]}, 0x2c}}, 0x0) [ 3160.119788] ISOFS: Unable to identify CD-ROM format. 03:54:15 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:15 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:15 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 03:54:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x2c8) 03:54:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xe, "3b07f38244f8b349649fd1a0e39d"}, &(0x7f0000000100)=0x32) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xffffffffa0018000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x14]}}]}, 0x2c}}, 0x0) 03:54:15 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0x200) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r1, 0xbe, "33e6d632f403628d7670ff2bdc2c02d8c116b2bde088dd6cfec51122f62784df3e7234b887c9ac0b6fc6c35e786db0f3a64b1ad5961abf38277820c8998f0d1adce91468853fa1fd32ed6f4c765bb2350a8d902263a428f9d9fd5545781096138027d412008e38ee9d4f9d58522b1b6c41612035e968dcc8b6b82b7df8fc9dd76536686746e619980956a9fc5015f23b304620115308769215da288781c2b76a4af430614d90e85a0c14e5a592c0153bea0c3df053bb121acd43816ae68a"}, &(0x7f0000000380)=0xc6) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0x54}}, 0xffffffffffffffff) [ 3160.418429] 9pnet: Insufficient options for proto=fd 03:54:15 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c8) [ 3160.481653] ISOFS: Unable to identify CD-ROM format. 03:54:16 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xffffff9e}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:16 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x9000000}, 0x0) 03:54:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa]}}]}, 0x2c}}, 0x0) 03:54:16 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:16 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x11) connect$vsock_dgram(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, "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", 0x1000}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x8, 0x1, 0xf9}, 0x7, 0x6}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000080ffffe0000001fe80000000000000000000ddbc000000000000000000000400000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) 03:54:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c8) [ 3160.843997] 9pnet: Insufficient options for proto=fd [ 3160.905193] ISOFS: Unable to identify CD-ROM format. 03:54:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x500}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:16 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, 0x2c8) [ 3160.962103] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x600003, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000002c0)=0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@local}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) syz_mount_image$ntfs(&(0x7f0000000340)='ntfs\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x4, &(0x7f0000001540)=[{&(0x7f00000003c0)="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", 0x1000, 0x401}, {&(0x7f00000013c0)="936c1d2ccd50ddd2abd7db262626769facdb90d09898a26111d7f86355bd28448a6ddd7b3d", 0x25, 0x6}, {&(0x7f0000001400)="8bf22c99524e411e85ebe0308eb2985ecbf7d671ea892e9f96b28338a3506a0cfe17d5a6", 0x24, 0x9}, {&(0x7f0000001440)="710ec7efd2bea357b933ea9b19efe5fed1cdfd20d071bf2185e4a8116681bee6ffed45c248f215f4217ad0bb22ddb4ca48d174fb6a389bb91fe0efae9a2cdfdefbbcfdeeeceacd75567ab9dfa53ee19793a115b7f1192bbe7553fff85a14e798fac4983d61e2f7139313da5d6510d7cfb7ca9ff8a22e25421c37d8e4e3f0ac8c2aa049099094bbdd55c194b8e02b8cd6b8a271c8d4ecf7efa1d764eb172fb54fc719e7ee2364eb534b265b8a6f1cfef7fcdf95fceeb4f389aee90ee568e129ed524bfc5cd0e649dce0848abe250016ccb8", 0xd1, 0xa7fe}], 0x2040000, &(0x7f00000015c0)={[{@disable_sparse_no='disable_sparse=no'}, {@errors_recover='errors=recover'}, {@umask={'umask'}}, {@show_sys_files_no='show_sys_files=no'}, {@errors_recover='errors=recover'}]}) socket$can_raw(0x1d, 0x3, 0x1) uselib(&(0x7f0000000300)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000100)={0x2, 0xff, 0x0, 0x6, 0x9, 0x5}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:16 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x500}, 0x0) 03:54:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x10]}}]}, 0x2c}}, 0x0) 03:54:16 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:16 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x41) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x8, 0x40, 0x56, 0x2, 0x0, 0xed8, 0x40800, 0x0, 0x5, 0x18, 0x4, 0x20, 0x9, 0x3ff, 0x7, 0x6, 0x7, 0x200, 0x3f, 0x3, 0x9, 0x0, 0x7f, 0x1, 0x10000, 0x8, 0xbf7, 0x0, 0x1, 0x5, 0x3, 0x8, 0x3, 0x8000, 0x976e, 0xc6, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x4000, 0x7, 0xffff, 0x7, 0xfffffffffffff0e4, 0x7, 0x3}, r2, 0xe, r3, 0x8) [ 3161.058464] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0xf0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}, 0x2c8) 03:54:16 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x3]}}]}, 0x2c}}, 0x0) 03:54:16 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x9effffff}, 0x0) [ 3161.356416] 9pnet: Insufficient options for proto=fd 03:54:16 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00'], 0x15c}}, 0x0) 03:54:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1f}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000880)={@remote, 0x0}, &(0x7f00000008c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000900)={@remote, 0x76, r1}) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3161.407673] ISOFS: Unable to identify CD-ROM format. 03:54:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:16 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, 0x2c8) 03:54:17 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:17 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d98c5b0cb8614fcff9bfb780b73f93a6000000000000000000000000", 0x1c) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005700)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = dup(r1) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0000ff0000000000000001000080ffffffff14a6967fd2bf493174e001ab9b7ee2b37b04a5b2f98bf3c3ee575cb9c791479505fbd2b63574b62231b26e9947d53de9d4304935e048ae1783254626049c5f8807ea013af2b4ab"], 0x1}}, 0x0) recvmmsg(r1, &(0x7f000000b0c0)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)=""/189, 0x200004f0}], 0x1, &(0x7f0000001880)=""/83, 0x53}}], 0x4ef, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0100002100010000000000000000000000000000000001fe8000ecdd9f87882fa7bd000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000fe4781f8902dee07ef07"], 0x15c}}, 0x0) 03:54:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x4000]}}]}, 0x2c}}, 0x0) 03:54:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x2000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:17 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:17 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa91e}, 0x0) 03:54:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff]}, 0x2c8) [ 3161.798415] 9pnet: Insufficient options for proto=fd [ 3161.840024] ISOFS: Unable to identify CD-ROM format. 03:54:17 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:17 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:17 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000001c0)={0x3f, 0x0, {0x3, 0x0, 0x7, 0x2, 0x5}}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000d66e67b20c011100"], 0x15c}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0x8001, 0x30}, 0xc) 03:54:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x900]}}]}, 0x2c}}, 0x0) 03:54:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x60000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}, 0x2c8) 03:54:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x280, 0x0) write$vnet(r1, &(0x7f00000001c0)={0x1, {&(0x7f00000000c0)=""/125, 0x7d, &(0x7f0000000140)=""/116, 0x3, 0x1}}, 0x68) 03:54:17 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:17 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x88100, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000200)=0xd) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140)=0xfffffffffffffffc, &(0x7f00000001c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000f4dff4)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) 03:54:17 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xa}, 0x0) [ 3162.212253] 9pnet: Insufficient options for proto=fd 03:54:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x300]}}]}, 0x2c}}, 0x0) 03:54:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}, 0x2c8) 03:54:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x4c000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3162.284171] ISOFS: Unable to identify CD-ROM format. 03:54:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x80) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, r3, 0x4}, 0x286) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) 03:54:17 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:17 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = memfd_create(&(0x7f0000000000)='cgroup.threads\x00', 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x7fff, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000000000000002000008000013070000000000000000050000820000000800000000051100"]}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x100000000}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000400)={r2, 0x4}, &(0x7f0000000440)=0x8) timer_create(0x3, &(0x7f0000000600)={0x0, 0x31, 0x4, @thr={&(0x7f0000000480)="144e9002db45d9a620577a3262cd36eff12b39148f34f15a8574ffe9292aa13172a3281c2b1b189d2d11992d8fca16d2e4efebbac67643adf07882d7226ed31763a30c618292427268d586d182512c93a289ae49087f69e5ec6703766f5b1a65f97f71802d0025f3ca4ab228c4b9c05d880d8613a9c925b8f9ef7e1b43a791aaab519ec9b24a300c17f5bdf95d0ef3c3d46f53fa54cc9bdd322eca86a84d9734cc9369564589d664806381c2800d1b39e6ebb3ff2ef26c491e", &(0x7f0000000540)="83c67bf9f68c590a8dd0d03aa48e5b1db902e17a2f6f4df777b2248bcbbb0c20756e7056f5649f400489b2b1ed72f6b1ee7a603f1cd07b17736d99558fc35cd7340c3c5641b9b3116cd66b6c1fd5a852e142fd32ec3eaf9de8dde55b079edad63b42ff17e7cbcc66749939d9efb24504c9e7496dd6ed0e203824fd1e5d4865a934f996010001bea46f50d045ca710b88e1d647da55ab8371bdba1c9d85ad584cd0d61c28ffcde7eb0490bb6e92bdc4ebe0f258b8865fe515"}}, &(0x7f0000000640)) r3 = gettid() ptrace$setopts(0x4206, r3, 0xd7, 0x40) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000a40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x188, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x903}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4f4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x14}, 0x40800) getpeername$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000780)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000007c0)={@loopback, 0x6b, r5}) getpeername$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0xfffffffffffffe30) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0xffffffff, 0x0, 0x0, 0x4, 0x4, 0x1e, 0x6, 0xffffffff7fffffff, 0x101, 0x79c6}) 03:54:17 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xffffffffa0010000}, 0x0) 03:54:17 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe202]}, 0x2c8) 03:54:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x600000000000000]}}]}, 0x2c}}, 0x0) 03:54:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x8001a0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3162.628936] nla_parse: 4 callbacks suppressed [ 3162.628949] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3162.656946] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:18 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3162.734026] ISOFS: Unable to identify CD-ROM format. 03:54:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r2, 0xfffffffffffffffa, 0x52, "0e1f9168b98f6700c7f07a362ad615b1b473f7bc4aaf8a885e1c640f21b78a410d796bfcc31a83f46197f83ce4b44e23cce6fb477345f7064052e07efcb7305b5e58641faaab463a7d493dd0b252dd1a01ff"}, 0x5a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x400000003}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000026, &(0x7f0000000040)=0x1, 0xfffffffffffffd0f) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:18 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:18 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c0100402100010000000000000000000000000000000000ffffe000590e7a44990001fe80000000000000f0b9db0f384e1f21a74aff000500003b190000f4168e0e2cf834fa846f2051f2c22e3e24bc3f9d412363325e9b6197b362cdaeb4f3d7e7917a94b41270c93a0b87945f776977394ac0263e660a635341594ead73acfb82aa929ba475b24cc3fd500f15fcd9c54e8e17f6956e464e6e267ff6eb8a1b5ded19f462acb2a6ded7ebfae87dbdac02c71b591b8a7b9e99c6caf1347a56ad145b93418fb29c57a8dcd57422b1058a05f8e5dbf568d5fced7388ced723eabed60b8e1cc681568d2a46a0292edd88a45d188732a32f26d5f5f8e3d7f4a117f225652eea56a686e4417a5db4c72c4a507e66da229ab2688475bbb3105c4916dec6538f51c80e624c2333051336b0ba7af0c6c450", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) 03:54:18 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 03:54:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x2c8) 03:54:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf5ffffff00000000]}}]}, 0x2c}}, 0x0) 03:54:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x700}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:18 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:18 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x2c8) 03:54:18 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = getpgid(0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x8) preadv(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/130, 0xb1}], 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0xb97) read(r3, &(0x7f00000000c0)=""/11, 0xfffffcc7) r4 = syz_open_pts(r3, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000280)) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0080001fe80000000000000000000000000000001000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000400000009000c0911861ce36dbfe469fb012ea655a826c98da3612daf3f42e016ea7d00d4db1a8a592c0000000000200000"], 0x15c}}, 0x0) 03:54:18 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x48}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:18 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xfffff000}, 0x0) 03:54:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x15000000]}}]}, 0x2c}}, 0x0) [ 3163.226507] ISOFS: Unable to identify CD-ROM format. 03:54:18 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) socket$bt_rfcomm(0x1f, 0x3, 0x3) 03:54:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x2000000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:18 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}, 0x2c8) 03:54:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa00]}}]}, 0x2c}}, 0x0) [ 3163.503308] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000002800)={@dev, 0x0}, &(0x7f0000002840)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000002880)={@loopback, r1}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:19 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 3163.573625] ISOFS: Unable to identify CD-ROM format. 03:54:19 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d00000000"], 0x15) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3163.709532] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3163.717022] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2020000]}, 0x2c8) 03:54:19 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3163.752238] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3163.759673] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3163.935896] ISOFS: Unable to identify CD-ROM format. 03:54:19 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000011000000000000000000"], 0x15c}}, 0x0) 03:54:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x6) r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x2, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000200)={0x13, 0x65, 0xffff, 0x96, 0x6, '\r\x00\x00\x00\x00\x00'}, 0x13) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) tee(r0, r0, 0xab6, 0x8) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x3, 0xd0, 0x5a0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x402000, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x6, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0xa4) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000180)=0x8000) 03:54:19 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x1000000}, 0x0) 03:54:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf00]}}]}, 0x2c}}, 0x0) 03:54:19 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x2c8) 03:54:19 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d000000000000000000000000000000"], 0x20) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3164.206552] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:19 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x2c8) 03:54:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x6c000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:19 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 03:54:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa440000]}}]}, 0x2c}}, 0x0) [ 3164.385873] ISOFS: Unable to identify CD-ROM format. [ 3164.405354] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3164.417873] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:19 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f"], 0x25) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:19 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 03:54:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c8) 03:54:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x5}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:20 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a00]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:20 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) socketpair(0x1, 0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000140)=""/18, &(0x7f00000001c0)=0x12) 03:54:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x3f000000]}}]}, 0x2c}}, 0x0) 03:54:20 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 3164.806482] ISOFS: Unable to identify CD-ROM format. 03:54:20 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c"], 0x28) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c8) 03:54:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x7a}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:20 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:20 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7f, 0x80100) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x6, 0x0, 0x3f, 0x1ee1, 'syz0\x00', 0x8}, 0x1, 0x20000203, 0x3f, r1, 0x2, 0x5528, 'syz1\x00', &(0x7f0000000240)=['\'\x00', '\x00'], 0x3, [], [0xd4, 0x7, 0x8, 0x100]}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xc, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7aee"], 0x40, 0x0, &(0x7f0000000400)="548be1b92219607de57f22214af09a08d108bc78196a8fd68d709d5dc9420ce62ad917b86824ba927f921e36772bf31cfd565afd1d8943ba0f10de06bb412a12"}) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="38000000060000000000000000000000050000000000000006000000000000000f00edffffff00006367726f75702e746872656164730000"], 0x38) 03:54:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)="34df7bb1ae4b8d7d5de0ad392a52afc1e3ea2fd641d5c7f320fea2cc55540dac93ce221c63abaa83dca51de0", 0xfffffffffffffd15, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x2, 0x0, @ipv4, 0x4000000000000}, 0xffffffffffffffd0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) getdents64(r1, &(0x7f0000000200)=""/161, 0xa1) fsetxattr(r1, &(0x7f0000000180)=@random={'user.', '/dev/qat_adf_ctl\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x2) socket$inet6(0xa, 0xa, 0x7ff) 03:54:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x9000000]}}]}, 0x2c}}, 0x0) 03:54:20 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x900000000000000}, 0x0) 03:54:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe403]}, 0x2c8) 03:54:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x300000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:20 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:20 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x300}, 0x0) 03:54:20 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x480000, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xa8f) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x20000) write$P9_RMKDIR(r2, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x10, 0x2}}, 0x14) r3 = semget(0x3, 0x1, 0x8) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000240)=""/62) [ 3165.305434] ISOFS: Unable to identify CD-ROM format. 03:54:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x8]}}]}, 0x2c}}, 0x0) 03:54:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c8) 03:54:20 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c65"], 0x29) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3165.518858] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3165.526299] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:21 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:21 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x100, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000240)=""/116, 0x74}, {&(0x7f00000002c0)=""/154, 0x9a}, {&(0x7f0000000380)=""/37, 0x25}, {&(0x7f00000003c0)=""/185, 0xb9}, {&(0x7f0000000480)=""/29, 0x1d}], 0x5, 0x0, 0x0, 0x3}, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0xd8}, 0x1) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000640)=""/209, &(0x7f0000000080)=0xd1) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000021000100000000000000000000000000000000000000ffffe0000001fe80000000a9d97ab40000000000000000000000000000000a000000ff000000cd8a3641b0620f7a5171af90a7776f7b2aad16b1d28df7581e5793f90504e70246a84b501d54e9534445b7108907323971a6cdd9c3fb8ea74e96f7", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="000000000000000004001100"], 0x4}}, 0xfffffffffffffffd) [ 3165.583331] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3165.590867] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x1ff, 0x401) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000580)=0xffffffffffffff50) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000003c0)={{0x8, 0x7, 0xfffffffffffffffa, 0x6, 'syz1\x00', 0x3ff}, 0x5, 0x2, 0x6, r2, 0x7, 0x7, 'syz0\x00', &(0x7f0000000340)=['*%,}^\x00', '/dev/audio#\x00', '\x00', '/dev/audio#\x00', '/dev/audio#\x00', '/dev/audio#\x00', '/dev/audio#\x00'], 0x43, [], [0x8001, 0x6, 0x9, 0x3f]}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3f, 0x4000) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) setreuid(r4, r5) 03:54:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:21 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xb00}, 0x0) 03:54:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x300000000000000]}}]}, 0x2c}}, 0x0) 03:54:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}, 0x2c8) [ 3165.743576] ISOFS: Unable to identify CD-ROM format. 03:54:21 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:21 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3165.881742] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3165.889208] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:21 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r2, r0, 0xa, 0x2}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r6, 0x4008ae89) getsockopt$netlink(r1, 0x10e, 0xf, &(0x7f0000000080)=""/109, &(0x7f0000000140)=0x6d) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0100c80021000100000000000000000000000000000004ebfffffeffe0005d000000000000000000000000000000000000000000000a000000ff00000080497812a12605ffb72a200bdb070cf9a51a560d8308000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001d5b00"], 0x15c}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x800) 03:54:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c8) 03:54:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e20, 0xca4, @empty, 0x10000}, {0xa, 0x4e22, 0x4, @local, 0x2}, 0x40, [0x7, 0x5, 0x4, 0x89, 0x7ff, 0x0, 0x100, 0x40]}, 0x5c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x6, 0x4) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0xed0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, &(0x7f0000000380), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x17, 0x1, 0x806, 'veth1_to_bridge\x00', 'syz_tun\x00', 'ipddp0\x00', 'syz_tun\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0xb1bbcb14838cb999, 0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0x120, 0x170}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x101, 0x10001, 0x202000, 0x0, 0x0, "6c5af4efe4c418596f72a0955c6bd157da44c404b86fc2f9cf575020b9ff5af9f80fcb1453181015ff7ca003f721ba81efe0fc149d46ae4b713cc0b1b2c71494"}}}, @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz1\x00', 0x7}}}}, {{{0x0, 0x4, 0x88ca, 'team0\x00', 'veth0_to_bond\x00', 'sit0\x00', 'ip_vti0\x00', @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x930, 0x930, 0x978, [@among={'among\x00', 0x898, {{0x7, 0x401, 0x2, {[0x6, 0x20, 0x2, 0xff, 0x7, 0x2, 0x7, 0x2, 0x401, 0x97e, 0xffffffff, 0x1, 0x303e, 0x4, 0x6, 0x2, 0x6, 0xd1, 0x400000000000, 0x400, 0x169600000000000, 0xfffffffffffffff7, 0x80000000, 0xffff, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x8, 0x6, 0x7f, 0x8, 0xffffffffffff838f, 0x7, 0x8, 0x0, 0x7, 0x2, 0x8e, 0x3f, 0xd98, 0x8, 0xb244, 0x7, 0x2, 0x5, 0x8000, 0x9, 0x80, 0x6, 0x9, 0x62c, 0x400, 0x0, 0xfffffffffffffff7, 0x3b, 0x3, 0x1, 0x100000, 0x784, 0x7fff, 0x3, 0x5, 0x9, 0x2, 0x9, 0x0, 0x8, 0x0, 0x80000001, 0x7fff, 0xccb3, 0xfff, 0x85, 0x5, 0x0, 0x100000000, 0x37e, 0x401, 0x8a30, 0x4, 0x6, 0x6, 0x80000000, 0x2, 0xd6f3, 0x80000001, 0x5, 0x1, 0x4000000000000, 0x63d6807c, 0x5, 0x77, 0x7fffffff, 0x9, 0xae, 0x1, 0x400, 0x63ee, 0xd1, 0x4, 0x7, 0xff, 0x0, 0xffffffff, 0x2c2, 0x8932, 0x8001, 0x10001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffeff, 0x3ff, 0x8, 0x400c0d03, 0x3ff, 0x4, 0x3, 0x1, 0x7fff, 0x7, 0xbf71, 0x5, 0x4, 0x5, 0x6, 0x2, 0x10000000000, 0x0, 0x2, 0x6, 0x997e, 0x1, 0x0, 0x10001, 0x73d, 0x9, 0xfffffffffffffffe, 0x8, 0xffffffffffffff22, 0x3b5, 0x4, 0x7, 0x5, 0x2, 0x6, 0x9, 0x8, 0x8, 0x10000, 0x66ce58de, 0x101, 0x0, 0x5, 0xffffffffffff58d9, 0x9, 0x21, 0x5, 0x3, 0x0, 0x8, 0x2, 0x81, 0x1, 0x5, 0x0, 0x2, 0x10000, 0xffffffffffff7fff, 0x7, 0x1, 0x4, 0xab, 0xbdb, 0x4, 0x0, 0x6, 0x0, 0x20, 0xeb9, 0x1, 0x200, 0xd88, 0x7, 0x0, 0x0, 0x7, 0x6, 0x6, 0x3, 0x100, 0x6, 0x0, 0x7, 0x4, 0x70, 0x4, 0x200, 0x40, 0x0, 0x7f, 0xf0, 0x80, 0x4, 0x0, 0x1f, 0x3, 0x58, 0x5, 0x8, 0x1000, 0x2, 0xcb, 0x8, 0x3, 0x3, 0x80000000, 0xc01, 0x3, 0x40, 0x9, 0x5, 0x4, 0x1, 0x9, 0x5, 0x25e, 0xeaba, 0x1200, 0xe4f, 0x2, 0x4, 0x6, 0x2, 0xff, 0xfffffffffffffff7, 0x0, 0x5, 0x5, 0x6, 0x800, 0x2, 0x2, 0x12000000, 0x4, 0x80, 0x1dce5f53, 0x2, 0x7, 0x89, 0x20, 0x7fffffff, 0xfffffffffffffffa, 0x8, 0x100000001, 0x1000], 0x4, [{[0x101, 0x5], @broadcast}, {[0x81, 0x1], @rand_addr=0x401}, {[0x401, 0x7], @multicast1}, {[0x1f, 0x9], @multicast1}]}, {[0x4, 0x6, 0x100000000, 0x1, 0xffffffff, 0x9, 0x3ff, 0x2, 0x7ff, 0xa62, 0x0, 0x4, 0x3d, 0x5, 0x2000000000000, 0x401, 0x7, 0x3f0000000, 0x10001, 0x5, 0x6, 0x3, 0x7fff, 0x1, 0x0, 0xe57, 0x1, 0x1, 0x40, 0x0, 0x6d, 0x5, 0x1f, 0x3, 0x0, 0x1, 0x800, 0xffff, 0x5, 0x4, 0xfffffffffffffc01, 0x7, 0x9, 0x2, 0x400, 0x5, 0x5, 0x100000000, 0x4, 0x3, 0xffffffff, 0x45, 0x1000, 0x7ff, 0xc5, 0x7a39, 0x7, 0x400, 0x4, 0x934, 0x100000001, 0x0, 0x2, 0x7, 0x81, 0x7, 0x6, 0x9, 0x1, 0xfffffffffffffff8, 0x5, 0x400, 0x5, 0x100, 0x5, 0x2, 0xa2, 0x50000, 0x5, 0x2, 0x6, 0x2, 0x4, 0x101, 0xc6, 0x400, 0x200, 0x2, 0xdd3c, 0x10000, 0xb65d, 0x9, 0x74039356, 0x1ff, 0x9, 0x3ff00000, 0x2, 0x7, 0x800, 0x9, 0x6, 0x4, 0xc00000000000000, 0x6, 0xdcd, 0x1, 0x78, 0xbf9, 0x2, 0x1ff, 0x0, 0x2, 0x200, 0x9, 0x3ff, 0x1, 0x9, 0x9, 0x1, 0x0, 0x8, 0x1f, 0xfff, 0x0, 0x4, 0x7, 0xffffffffffff8e12, 0x1f, 0x3f, 0x8000, 0xc, 0xc1, 0x4, 0x1, 0x3f, 0x8, 0x1, 0x9, 0x8, 0x3, 0x3, 0x8, 0x81, 0x7, 0x1, 0x4, 0x9, 0x8, 0x93b6, 0x2, 0x1000000000, 0x1f, 0x9, 0x1f, 0x9c0, 0x1, 0x7ff, 0x2, 0x7ff, 0x9a6, 0x41, 0x3, 0xfffffffffffffff9, 0x0, 0x5e1, 0x2, 0xb9, 0x4, 0x7f, 0x8a, 0x7ff6, 0xffffffff, 0x6a0, 0x7, 0x400, 0x22, 0x7, 0x0, 0x69, 0x81, 0x3, 0x10000, 0x6, 0x80000000, 0x0, 0x8, 0x0, 0x8, 0x81, 0x100000000, 0x1, 0x9, 0x0, 0x3, 0x80000000, 0x8163, 0x4, 0x1, 0x7cc, 0x4, 0x7, 0xc3e1, 0x10001, 0x1, 0x7f, 0x7, 0x8001, 0x6, 0x7fffffff, 0x6, 0xfffffffffffffffc, 0x100, 0x8, 0x1f, 0x10001, 0x38, 0x5e8adc78, 0x6, 0x3, 0xfffffffffffffffc, 0x5, 0x1, 0x80000001, 0x8, 0x3, 0x9, 0x7ff, 0xfffffffffffffff7, 0x100, 0x0, 0x0, 0x1, 0x3, 0x3, 0x0, 0x3, 0x5, 0xe, 0x3, 0x58b8, 0x1, 0x6, 0xf4, 0x0, 0x3, 0x0, 0x9, 0x9, 0x100000001, 0xfff, 0x1f, 0x100000001, 0x2, 0x3ff, 0x401, 0x4, 0x6], 0x6, [{[0xbf, 0xffff]}, {[0xfffffffffffffff8, 0x1], @multicast2}, {[0x6, 0x2], @rand_addr=0x380000000000}, {[0x9, 0x8], @broadcast}, {[0x7, 0x9], @multicast2}, {[0x1, 0x4c], @remote}]}}}}]}}, @common=@ERROR={'ERROR\x00', 0x20, {"8061caa8a63d858521a9dce1e5a88f723f9f8fb6c45d63f1f8de895e922d"}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x3, 0x4, 0x0, 'dummy0\x00', 'veth0_to_bridge\x00', 'ipddp0\x00', 'dummy0\x00', @dev={[], 0xc}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0x1d0, 0x208}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x8001}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x10000, 'system_u:object_r:depmod_exec_t:s0\x00'}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}, {{{0x0, 0x4, 0x806, 'tunl0\x00', 'erspan0\x00', 'veth0_to_bond\x00', 'ip6tnl0\x00', @random="5afa9e230124", [0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff], 0xb8, 0x108, 0x150, [@ip={'ip\x00', 0x20, {{@multicast2, @rand_addr=0xd81, 0xff000000, 0xff, 0x3, 0xff, 0x33, 0x8, 0x4e24, 0x4e24, 0x4e22, 0x4e24}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x20, 0x1f}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xffff, 0x49, 0x5}}}}]}]}, 0xf48) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x20, 0x9, 0x10000, 0xff, 0x1800000000000000, 0x10001, 0x9de, 0x3}, &(0x7f0000000200)={0x80000001, 0x0, 0x7, 0x7ff, 0x0, 0x2, 0x6, 0x5}, &(0x7f0000000240)={0x4, 0x6, 0x2, 0x10000, 0x5, 0x1, 0x3, 0x8}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={0x1}, 0x8}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e24, 0x57ee, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x3}, @in6={0xa, 0x4e20, 0x63, @loopback, 0x777}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}], 0x58) rt_sigpending(&(0x7f0000001340), 0x8) 03:54:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x8001a0ffffffff]}}]}, 0x2c}}, 0x0) [ 3165.964354] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3165.971818] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:21 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x9}, 0x0) 03:54:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4c}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3166.225243] ISOFS: Unable to identify CD-ROM format. 03:54:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c8) 03:54:21 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3166.279435] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3166.286904] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000000)=""/2, &(0x7f0000000140)=0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000d68d81ea01cee864293f07541205fdbc4d3abfe00533efd1c0762a462e0559152ced6f911d188313b0bd5e367fa82b9c2ba569d056dd604b463dd3c9cc878c10b1abf29c7f4b91a37399751f80e8bdf688e2af53b700000000000000000000000000000000"], 0x15c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) accept(r1, &(0x7f0000000380)=@can={0x1d, 0x0}, &(0x7f0000000400)=0x80) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000500)=@updsa={0x2cc, 0x1a, 0x414, 0x64ba0000000, 0x25dfdbfc, {{@in, @in=@rand_addr=0x1, 0x4e22, 0x0, 0x4e24, 0x400, 0x2, 0x80, 0x80, 0xab, 0x0, r2}, {@in6=@dev={0xfe, 0x80, [], 0x18}, 0x4d5, 0x3c}, @in6=@ipv4={[], [], @remote}, {0x6, 0x6, 0x59, 0x3c, 0x4, 0xaa, 0x1, 0x80000000}, {0xfffffffffffffffb, 0x3f4, 0x5, 0x8001}, {0x200, 0x8, 0x3f}, 0x70bd28, 0x3506, 0x2, 0x1, 0x2ca3bdbb, 0x2}, [@replay_thresh={0x8, 0xb, 0xffffffffffff804a}, @output_mark={0x8, 0x1d, 0x1}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast2, 0x4e20, 0xffffffffffffff81, 0x4e24, 0x40, 0x2, 0x80, 0x20, 0x0, r3, r4}, {0x0, 0xd166, 0x3, 0x100000001, 0x80, 0x200, 0x1, 0xffff}, {0x80, 0x38, 0x5, 0x1}, 0xb4, 0x5, 0x2, 0x1, 0x1, 0x2}}, @tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d6, 0x2b}, 0xa, @in6=@ipv4={[], [], @rand_addr=0x6e8f710a}, 0x3504, 0x2, 0x3, 0x526d2e74, 0x9, 0x1, 0xfffffffffffff8c2}, {{@in6=@local, 0x4d3, 0x33}, 0xa, @in, 0x3500, 0x3, 0x3, 0x3, 0xbb06c74, 0xce2, 0x9}]}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd25, 0x70bd2c, 0x70bd29, 0x70bd29, 0x3, [0xfffffffffffffffc, 0x80000000, 0x8, 0x2]}}, @tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d4, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x34ff, 0x4, 0x0, 0x2, 0xb9e, 0x7483, 0x4}]}, @user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@loopback, 0x0, 0xa}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40}, 0x840) msgget(0x1, 0x100) 03:54:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf0ffff]}}]}, 0x2c}}, 0x0) 03:54:21 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x28000, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/105) 03:54:21 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x5000000}, 0x0) 03:54:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3166.363294] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3166.370887] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000]}, 0x2c8) 03:54:22 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3166.616236] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3166.623862] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3166.653852] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:22 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x63c9, 0x6}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x5}, &(0x7f00000001c0)=0x8) sendto$inet6(r2, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1000000]}}]}, 0x2c}}, 0x0) [ 3166.700068] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3166.707534] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x8001a0ffffffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3166.748814] ISOFS: Unable to identify CD-ROM format. [ 3166.756037] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:22 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x10000000}, 0x0) 03:54:22 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:22 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e24}, {0x1, @broadcast}, 0x0, {0x2, 0x4e22, @rand_addr=0x100000000}, 'erspan0\x00'}) 03:54:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c8) 03:54:22 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf000]}}]}, 0x2c}}, 0x0) 03:54:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x1c}, 0x3}, 0x1c) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x24dc, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)='Z', 0x1}, {&(0x7f00000001c0)="77252cd41eec07dbecafe5d086befae476c94b1d53a26029505441d4236e5cb0681dd3a9c3dd6c90e59d8c466b8ef60b80be62ab9210176d27b2b8cd8745", 0x3e, 0x8001}], 0x4, &(0x7f0000000240)={[{@sysvgroups='sysvgroups'}, {@mtpt='mtpt'}]}) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r2 = memfd_create(&(0x7f0000000000)='xfs\x00', 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001680)=0x0) r6 = geteuid() getresgid(&(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)=0x0) r8 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001780)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}}}, &(0x7f0000001880)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, &(0x7f0000001900)=0xc) sendmsg$netlink(r2, &(0x7f0000001980)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc, &(0x7f0000001640)=[{&(0x7f00000003c0)={0x98, 0x39, 0x400, 0x70bd27, 0x25dfdbfc, "", [@generic="a601def8f7e9da3048adbb7f702772463e4c8081754309343fd9316e88c5e6e40607c454f9098ab00e7983d97486219435c5a25e079bcfc9a1f151fcddaac7f4d4410ae791cc5dbf49d29e80ffb27d83dd9a2751e657", @nested={0xc, 0x4d, [@typed={0x8, 0x75, @uid=r3}]}, @typed={0xc, 0x74, @u64=0x7e}, @typed={0x4, 0x89}, @typed={0xc, 0x2e, @u64=0x4}, @typed={0x8, 0x14, @ipv4=@local}]}, 0x98}, {&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1014}, {&(0x7f0000001540)=ANY=[@ANYBLOB="e80000002800000026bd7000fedbdf2508005d00", @ANYRES32=r4, @ANYBLOB="08001d00", @ANYRES32=r0, @ANYBLOB="57ec281f5e43ebbf3ca7a9f5e9a11ab83567b54176c94093f417a81a96996a40bec70e929b63b1cdd90aaf686358c4e159e1b18167f2a261242d288d1330d05ac0fd1bf86d540dc90add6abfbca2d1b210fe1aaae11b5e700cec3ccea855653fe81df8bd18183c290e705efa494783ee5f76928ea095b84064a530c974f551cf4f3784cbc67ec532f1eb4484aac09f0f308df9ade814108ee0ff6b0994f7337a812a7878da2c1cc676fd30432c1c459a48bab863822033a2b606f2e40b00"], 0xe8}], 0x3, &(0x7f0000001940)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x40, 0x20000004}, 0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r11, 0x894b, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000019c0)=0x10000) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)) 03:54:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0111006085793395382b9e0983d738262f986a04ccb2f1e342297f89a5186bf5913753b2644bae70165109853d5dde6375c14a0b198aecfbbfdc86f132b28aa73a2ef219fef2251d0000000000"], 0x15c}}, 0x0) 03:54:22 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf0ffff}, 0x0) [ 3167.172373] ISOFS: Unable to identify CD-ROM format. [ 3167.178795] 9pnet: Insufficient options for proto=fd 03:54:22 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:22 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e02]}, 0x2c8) 03:54:22 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) clock_adjtime(0x3, &(0x7f00000001c0)={0x7, 0x6d7, 0x2c6, 0x33, 0x40, 0x2, 0x3, 0x1, 0xffff, 0x4, 0x9, 0x0, 0x840, 0xe90000000000, 0x8, 0x6da, 0xa214, 0x5, 0x283f, 0x4, 0x100, 0xff, 0x6, 0x100000001, 0x1, 0x5}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) 03:54:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x700000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xffffffffa0018000]}}]}, 0x2c}}, 0x0) 03:54:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x83, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4f8e370c45b4530fd606102dd0adea6001125f4c3398cd433df759452bb8acf3f0d5cf13ae5f4dc1a57ae4c3b39c464d2634d61bf27a78c0bcaca8ee6b2a300d234fb9e8ea2a78f72a6b44e5335b4b"], 0x78) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)="829d4407709e18dfabe1e51f5da1c575636836565a3beef867b3abcc2772b1a372ad109ace079decfc50135aab27a2c8f1d2a875428ac3", 0x37, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x80000000}, 0x1c) [ 3167.362936] XFS (loop3): mtpt option not allowed on this system [ 3167.387080] XFS (loop3): mtpt option not allowed on this system 03:54:22 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x3000000}, 0x0) 03:54:22 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3167.588103] 9pnet: Insufficient options for proto=fd 03:54:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000200)={{0x3e, @local, 0x4e23, 0x3, 'lblcr\x00', 0x0, 0x5, 0x27}, {@multicast2, 0x4e20, 0x4, 0x4159, 0x5, 0x401}}, 0x44) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0100002100010000000000000000000000000000ffffe0000001fe800000000000000000000028249f8500000000000000000a000000ff0000000000000000a9fdf7a910cbac6016bf3dd540a150b1e5727897624d68e006c4c3f7c143d0673f870e353915f2d1f205d34af1b04d322be2ea416024fed644bbc0a4858d49548c14ec4739299b523b275b72f03848ac02e004cdd8a1aeec1d61fd2ed1bd3ae8168dc66ccf4d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x1, 0x4) 03:54:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000]}, 0x2c8) 03:54:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1500000000000000]}}]}, 0x2c}}, 0x0) [ 3167.687747] ISOFS: Unable to identify CD-ROM format. 03:54:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x5, &(0x7f00000012c0)=[{&(0x7f0000000100)="f648bfca489a8816bef8e8f00c413da1ff78f8f0576fe38b4453e43131ab677d858d528e005c1016f51db6689ae76a0e", 0x30, 0xeb}, {&(0x7f0000000140)="5b26e0cc7f0e043b1352b380c676fdcd3f8fd0513000d2a4958fa5cffbb7591271a4c347dfb7a9d9a5660683675a57fb97dc6eada51c6d99e1478980e3b85bcf9c0e5a29acb9462cfa2ee8680ec45a0f7f10614947480b151daa3ed7ecce0a283b8af97106d2ef8bac0c85951fc5cc14a04740611e7f8299d2eb4b7666cdc7388dc229029a00de839b264f86d15844a81e8b91a8db4d0cb31425f2c1fff007caf5adf84a169e437f7da9c972a47bab77823ee160e5700cf521e94c08573e38f0570100df7e112cc7bb7a8f6bde753367d63a2257d263cda76f39d92964dcf578729932204efbe7761feef7d3a42d99fdd77f1b3c722c0e0690bffee9b817d49011985648edfea527089dab345f2c0c557940a95984c2dd2d9c9aaf8ecb348b004d1b8259586b4a0925bba581be6f539360096b2ff0962ea490d0b594bb739f0c4ea7b274bed2ed1a8342499bdf2fecf49d37bc0e6ceab19f7225e7945bfe992a232e6fae0aecc2f0d8d04685241203e1432e057132c27f98791837b6deb0fead3906686e6f41ce3b82bd16c36d91390c1ec11d75f7aec717b934e7975a11881d849c0c5beebe79caac6766002d18fa04cab9cbb62a136b50990934960b3e9ac83f6b8234c6b7ccf90f5423fd8af5834060f519e08b5ff74c245c4005cf46ac89c111291bbf850e9acee2ea7c9b11ed90477a361f1c9e0f42224790bfc477550f3f6142ed396d14be436d65dacaecd712f443a868e0276088b19d3001a444e695334def4f9994f3d3755b64f829544b49f9360c8e9a950d49821eacfcf0a2fa98e6453b9cdb5814b331e25eb6f1cc8a952905104c5c29e06f48d595ed0f63a8481a7d033c1c7025c4f126a5ad0b59ccd9b9f37fa0aedd91577f7da0423c7e2474860775e529db9c25ff809b9e1036ab958aa7b40e8bdcdaaf830b3df97cc961d51a78eaca2e3edbc146a19cf65cb521082de6e653a4fad49674eb3e52ce3840368ec32ad189199e175d1e9e535bd7533b0f7fcda1b348519fe55aca89cb522e10028af7b3e06ae2937274e2115e13eeca1453ba0468cb3822bfc1a4ea6ca2dce23e40c54dbd5f1d8cebebb9343a70efd84d21c1275e466336a78f76bd1803dc2f13f52326790cee1b0341080e77d8acbccf56a4c1b2673c630d4f84c8d41fcdbee32c565a8a810c2c3779f1512a8a9fd2170281adc9ea5fa5722fcc17cec55c9b2d7f4efd4b0251e90df30af4191cb82289c3d788fefa9ec15fa1b471e2975919f53c4cd80bf9e6b71325ff5eb19011857ef237667b577f2cf5b4155712b042fa3d3c1c73e079f65ef1cca61d2868bdfe0dd78757b4e0de4de72d36f7f5f6df44379d94f14067ebac67bb716264d119846493355c9409b1182f94d57c045a858c4278ee3ce28284d35dfb1d381a045e4cd220ffef62a8819cc7590b3d23e630736721afa8c3e195e58a26c1d10267a6a79b0af7ef6029b0b6961f82c573d4382e43d05687df2b3f728aca8c01b39b433d242cd5ae86705812784347d75423626dcef9716447c0020a45f7cc1fdac1b015381a4b73f99ac32f73c838b5c87f99df335af0bb1bdea8a213d8099704a6d751dfd6e72f25ab8b03863df5ae39ffb2ec6f7812711df2cd141cc399dec62de0524f01cae76e184268d5bf22f000ac28f8caba8f12bf8f0ab10f546b06239c456bff4d89789dc1e93f3387b9b680d1b1d77c1013a4c8d9a4d0748cdb4150c1cf9938b73e43ced1bf6a2a07fdade189469f8cda785e37302fb098cb33e6b3aff01033f7867a19bd3107de9bf499017bda79c5bcea2e2d3e6ac83d635068f344ef5e594d7454a397770ad0c8789009439e356ac6db8008ff400dd53473de9cc61047ae11710ad030cb25cc55535853e1ac46c81ce0b6186803cb865b55a5eb43ee77c188fdd92f7fe3c1cce9e239c2b7a3ee55fd6708d31627ae1a2dfc7225b858e701f5824e017e144f328996229ae1d5eb4703fd613b13c78e448f4b6c86e5bc8242143ac5d85955db63a18c6dfd93ebc47fa65c55687b457ae1c7114c7aa07e40fa4b6858fc1f347de0db6c39cc803873ea4d4bd47befaaf6323d7cd3d339f33a9b5399129e669b047128febdd8aadbc5d5858f4a3cb488d3902965af3ef20ec592c341f3b6b75c2565ae224596f5a92d4c506a67f3101c23d385b81c02be79e7504c149f0e0b8c51f5735b465ed28926fcee3eb5bb8e44dfc5422bdd6123c802c8a0226f8aba1770a2abb17738225352c09c4d548c54042820ea8d6e5cb22d7e67c80c435e9a04cb259299788c1bb755987131c1bbc5656de78dbbe5a1685e3ff84cedc83183cdbdce9df270475ee79bb7587d627a41f19f1abf8a49bede1ffa171cb183d1942640d28b67a08fe8538b7bb3788185da649ad330c1662fada924deca1955f02caab9421a7cd9cc1480b29beb078437a4c14756ea7270dfa3d11849d27c708006f2313428ecb5d3852562b3aec5b7046b7ab8c70b07c4ebb9fd2bc6a06cfe637f1c5e93b21a665b66ead87f21d60083c1686b79d1b446e2dc61a97bd6c80828dd4f4fab8d3c38eeb396f5f863f0dc79b3db00ded0b5ac072d6bc1dd3b310d877af96fe6c3ef0c66a8c354dd40ff5a9fb96bb03cd59164262832864946166712be5be2c414848fe9362cf33b52f63981c962422f75fa8cbd7b7a10a30cc5d45833d03635601dc4293f9ec905d4cdf6c77291a3f2417b8f3657a595ac29634e934566bdf46e17de2a6b24e716f8d2caecd55fac9b283053e47d5f1414798da801689c3084b569831ed39cfe2246d3ec6c17dbc5e73f8ca29224fc82a81d3908024bf4f4d1ec0c0c52b58f181b4733b884479536c18094739b90076877ed739e115947de5954780558d77e7cd223f5d579a9f9fe25a4ff9507daa7e424e87ad21fb73f4847e60a80c61b4f4bf7c7ab44f7d3d3828d27600f72e2ed324991768e4314b74d29dc8e8e56e3f241466d856ec1104e89994c722efe756d55181e34b511fcded15e5f1a275ad0567fd7b4ae0a772ee22f677c31864d631e7c4050f105450d1a58b68abb585e46a277ffe2c280639d129678613d7fe7f1426669284457b0dfe3334ea4b8b4b289aa6532fa7df0a2976e86a882dc749158ea8caf233b3165f1a1843f35a0bd6e9bd3f886453a486d66d584be3f9a0aec7c12954b0f0e05703ad5a962d9afd40179c0b4db257fb449f3ea0eb35b36cbea71afa635cdca054daa8868c22921245cee1b831bef6ef97875f41a0f1abaa8b301fb5d46ec78e60123623b18a27ecca9888c42cf2b6cb177e1ff9533b956ea249833991d74372c4be90508aa7add34949845a0e10e497afabecc7f5830a17a48540fb9e1b36be8edde6ee13cb3b2ce95e94eed76ef1fb776796858a213a5fd03bb7ad256a0bcd6e7c77e8ebca3b51f39e45916e0312c6ab8210df8296c37c386ca0880b231ef49fb5c0cf859686da427aa461fa76882e4111c901f08e008dfdde410f3ac486290affe79329b2c11c6abbd4b25dea65dbcfac833d0fa3ac15e38e9ac76054b1a937b3d9c0be4dc04c34a8a4518691805d67701dec7ebde69e52ca60f6ddd3e7313f9b0b1de7cca3960360f58c59f0898b6daad572390f37c05a2bc032ffca8976f6115a679cf799ed87b4f001ea319d9e5fddde8497aa54510f0a50a356009336ffc6cd5d0823fc6a89fb3b04ee0512dbb74e120c6883fee78c49c00bc8e54ac5ad4429d26d3d135f951c7d0e1dcd788e592e7dd94853b48baa83ccd72d5f1c23f6fb6c2af3ead936b185307719902e4b3aabb490bb51db327022717a3a856bf707f706f36d5b8fa8da7790c4eed379fb15949e5a644cb966c1a95005e3edc1d93e0f0edef7e230863b03364e7a75a52d9be912de1afccb25f2ac9398c75cfaba2ca1520e95ab69220a4db60ab59c7cb7d308ed3146c215becb58cf0ae40ad70b6b55b342d6ba3931b6fd60c41685b2e16aa67365961593ecbb9209b07e9da39fda77b32965831b0eba176b4897536f105d6379965b96a838a558ee54b2eb21e491fd2864b23297a4689b159e65adfbd7d63e77a892cb80bb1194f5ae61baa567b66fc49e2f0a9634a67e01f1babfc4e25cfc95cac418e79e8fb4d2417cd55bd8a08f422f5360307f242357f9d9d42a339216f4bf5699598b8034bed25e5d02e309cafc3f486925248bf47c8f8b2f1d1ba2e4cefc766763243e2b632ed0159208d8fc72b2159f79a2b556882774e5d94940d4948900224200c1e2a05bb8763313aa13c1fea8564ecec4483df1abda23a64c4d80e4a55927919ebac5b12dc4810c7da3d862d7ddac68397fbab9817c29281d2467a3d0d748370007fcab989caebdd14249ad185721fea88054679ad469733c6da4c2dd01a8fe9d44decb9d590c96d4373427d41bd2ecd159aa64e643388964afe9a712a8c0fa6ed991f3724cef2b72e14c6f753661941c17215f9eeb3613029bd1fdad56caf06076b101cc4436caf3b76422c25df67f538fb6bc831a63bbb67f13e9d9b7c13f8984d6adfa7d1b19fa6f640ce352f3e386bb49acd76128ca211bc764c33740b17e5bf03564d5e4ba5fccb73c3999c70840ab3980fc58a3eb2746c5cb05da2b1426823da5868109c034bd0f8873d958f385f259b9ebd6c17dbf5ea48d508398cee135b2788707d12bad4330ee30250202092f7fb494a7cf96911bfe3cbf91347e018975ae97434567272c035f96015d733a364677114dca4a96f4205499e38d249b3c291bc4959e86249e6c4a7e3633b34c435f84681a00efafb1688ae9f9daae45a0649e7fcd4ea3ef17f2b0615bda87e7dfada879252e59d1f646e27509231d3615c7afed428b108ac5b54780b8557507cbcf58652b64843e7d4dbfc97a96abc831d46997a4ff05b8eed3d62c615c29daaf233c5bf654f148720806c8740e15887c59ab678cc8ef39e5b9f66f697bf73f705dbaf539b841b6e5978b45112856bd12fca6665821447a7976293b46594f477e7c1789a0b4abe7396c6611cd54d93844d4a816feb9cb48bb8dfce685a814c35db53d97941384106c4fb755a349402d7c5e4fda36b0989313ce13dc2933f9c489a0ea84708c964bcba50371e8121f65ea920eed5451645e58f2d8bae8a2416cd93dc4e5e84bdad3a57311a395d7d26e11f48d48e9168e83782440589662041df059e60aa8e56bc846cbd387b992ea8fd47b463527e30fac1ba36f49a6f7cb9d8a7d628446c5c77e3f88925939b6e2c9e6975ca161c238bb629521cbac5777f572a6cabcd03e63b59285f68efd5bcb036c9295894b21c7d294d18d3d2a182a2ca9cbf896adafdb7b0be3574d3a59ec6de0821a0f2bf4bbf91b1859d94b808bd673df7fb0da03d7b39e634fd0fc85e2c42e2c6694a4babf0b4b365fc915a0db9471e1ac094fc8dad70020513427471660c3831a038c5e7350c7a879412cab89fb570d5aa87e11d7ef68eed3edf74d6a7c023f377b8e40c1434b4418ecdadb9811bfa47dd5aec210c302d6435c43b783871f41b4dcc713e92e0483a336b597e0f1ddd69925088fb79a71b4e3d18d04638d839ef13950001c87db9661d4e52cdd10d65b8c840f6279f3cc603d52c6cb9307b6a6320812ccea55ea8a06c89ced0336296aff66b24161fa23ed8f2ba64a9d185a011687fb742d8bb842e7525975439aa1051bcaa794f3ce2977468660374e3ff459a93b11be2aa12043741fa2bf61a82d38e73563a0332946dad1c47ff748bdbaed7724bfdfbcb697649fb12d266081e76a786", 0x1000, 0x6}, {&(0x7f0000001140)="1fec3c73b3957ee2d4938d22ef2c081068fbab02e7696be7e7843bbce0558e852ed8a797368ace80d63a2c9b29c5165821a1a474", 0x34, 0x9}, {&(0x7f0000001180)="8203a27fabfa165e631b413dce667bb7c8f6a0adc50ffccd8f4587ae14c4cd958e04b24557dcbe9567ff5b55d502da0cfd5a112db6895810d1586d8fd3e7e2361b5f65bd83cef1849e6f492b7a2d538e0e573c0d2e6952b25f518287c358b9c2a53fda08fc8fc2d9ca06f4b153aa6b3e88d30c4ea2e6436258daa589d72401bcf7d674c74578bca90f54405280", 0x8d, 0x5}, {&(0x7f0000001240)="10f6198c0ed8e2bd4d8ad56ddeff0d93c6a39c2acadc69589484f89ea5907ac6b95ce78967e2be7ecbb64759a576323854f4c9de38d1ce829cd248ce3b38eb17897f2908f28dbf157d313e6b3e6d8ad9a0ea3e843ca149c8c5718d88da44877c72071323c391af549ec8c67be3da6a1662ab4b", 0x73, 0x8}], 0x20000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001340)={@mcast1, 0x6, 0x2, 0x0, 0xe, 0x7f, 0x2, 0x6}, &(0x7f0000001380)=0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:23 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:23 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}]}}) 03:54:23 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0xf0}, 0x0) 03:54:23 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x200, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000300)={{0x4, 0x4, 0xff, 0x0, 'syz0\x00', 0x3ff}, 0x0, 0x214, 0xfffffffeffffffff, r1, 0x1, 0x9, 'syz0\x00', &(0x7f00000002c0)=['cgroup.threads\x00'], 0xf, [], [0xffffffffffffffff, 0x8, 0x20, 0x1]}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) getcwd(&(0x7f00000001c0)=""/155, 0x9b) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setgid(r2) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92030000]}, 0x2c8) [ 3167.842070] IPVS: set_ctl: invalid protocol: 62 172.20.20.170:20003 [ 3167.850748] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3167.860458] IPVS: set_ctl: invalid protocol: 62 172.20.20.170:20003 [ 3167.861937] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1a0ffffffff]}}]}, 0x2c}}, 0x0) 03:54:23 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x160) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xf3, "7bdfa58533e3d2bb5136c32d324816128ebc3dbcc6834db469f0245c329f137ec3c73796bdf99ef281ac960afcdc254eb73927b59a617ab0d7faeeb87a921339b7eef6ee0bcdb2f26e4309b399ac9cba2b33ef09c9a69a69f834d943cc8c90046cc8b0d95db80af3d8233e04d025082dad230478b58827fa21f4916ff602a214c2ccd11d5a5034eca5227f7f6797634b990000df1547b911dfb4306ac2053b304ca038c7e1d63680d9f4476803d00bc021d8dcb9813961048c53fd331b6b07536b307db432a382ad2117c5ce41286a187bcecaa1c23acbc745eeb8186797ab6c919ce4d9fd17e0ef60dc456caceef58eaf5054"}, &(0x7f0000000200)=0xfb) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x4, 0x5, [0x896, 0xffffffff, 0x5, 0x8, 0xc000]}, 0x12) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:23 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000200)={r3, @local, @loopback}, 0xc) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x37b, &(0x7f0000000000)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) 03:54:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c8) 03:54:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:23 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf0ffffffffffff}, 0x0) [ 3168.249876] ISOFS: Unable to identify CD-ROM format. 03:54:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x6000000]}}]}, 0x2c}}, 0x0) 03:54:23 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4010000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:23 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}]}}) 03:54:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e020000]}, 0x2c8) 03:54:23 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000ffffe0000001fe8000000000000000000000000000000000000000000000dc7fa4ff706abc7f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) 03:54:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:23 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 03:54:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x10000000]}}]}, 0x2c}}, 0x0) 03:54:24 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = msgget(0x3, 0x40) msgctl$IPC_RMID(r1, 0x0) [ 3168.637973] ISOFS: Unable to identify CD-ROM format. 03:54:24 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}]}}) 03:54:24 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 03:54:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}, 0x2c8) [ 3168.821140] validate_nla: 12 callbacks suppressed [ 3168.821150] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3168.833762] net_ratelimit: 12 callbacks suppressed [ 3168.833773] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3168.857471] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x600]}}]}, 0x2c}}, 0x0) 03:54:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x400000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f00000001c0)={0x60, 0x0, 0x6, {{0x2, 0x61, 0xc5d, 0xfff, 0x4, 0x20, 0xffff, 0x80000001}}}, 0x60) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c01000021000100040000000000000000000000000000010000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000a20ff6a25500000a011100"], 0x15c}}, 0x0) [ 3168.896968] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3168.904793] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3168.914004] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:24 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:24 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0xa, &(0x7f00000007c0)=[{&(0x7f0000000100)="b721c07230347a4607a07b0ac7350cd66fa9192aac4e09fc19d69170b09b2ee5d6ae", 0x22, 0x3}, {&(0x7f0000000140)="5eef64977177ddd6f43c503b96321e711567286d84a8afd27f4f6c95cd4e581177888c22c73f5328981e14ad036a52b34f2dea30aad12aee17d788cfec5ce9c02ce74337a6915adb0115f8681c132841d1f177a645aef91a2a2a49b82d1837856ddd08ef1414a599c3e12d94458bf230e93891d66feb3e0c436deba65467170aeedca504a80f283facd3db68b2", 0x8d, 0x587}, {&(0x7f0000000200)="44147a8c3ab60caf6f4e9a25e59a372d0f9214db308a31db31adfcf2a9f2b02e28492c8cf29f77a23008096de31e4fceaac3a6e90908e02c4bcb9f6496c2cab656f0e06ca705fa869db4cce2adc341197c6abb2ae61c31638d6bab2d6386b942656f43aa3db9409a2693f094b536f6e47f01a127e5455f4f1bd0a0ecaca25438fb2a8b5e2d7498c9d231f0d92e600341a14ec400fb02a0ca2a7e5f2fc2b3d762a1ced8701802667dfc65ec071be11fb69edce0861b91828509857a581b3240", 0xbf, 0x76a991c9}, {&(0x7f00000002c0)="b9453db9277fa367040e034e88bdfe3e3fb31a010d68c99ccd94e5d5bf033c8e9445ac0462f4c93c73f9e88f6b25bcff7b5587dda6e3bd57e1508b880bd2744f03ed82146bd461967a945481811e0f7f7a0ebbfec153b9677096a02f2ebe4c473801672326a6e3d2abf74ea4b86eb8ca9b20853baebf1109758aecd8c22048c3f73830007b9bc7cd37e04048ec72a77592437c3302a4e0d6248a50b309dc0a", 0x9f, 0x4}, {&(0x7f0000000380)="595f5e4298c0e29ee89d10ac30a9de2a6a80cba92b3837b1708cddbabcb65574dc6c10ac2ec8202e6a4c680118557f2cb4f963596f85732c371a10321fda398ae8e4391077f29ac5506f7a153b7e77cb7c4d9c748b63b737653c136775dff08daa1d462c319535e105cb5ab5206eaa3ed02e75e6547a991bd6160fb6c83f3dc94cbcf235eba893d82a55f0ddc230dcaf341eb7534a81b87cc70e7c2b6398bf83373d9959f749f4a41ffbb520f464285a1ace7bc1a5dd0daf9a5595ec5816ab12d6f9522b51c43575bab07d3071923e9311e5ef1518e2f4f81f85c2b878", 0xdd}, {&(0x7f0000000480)="b64966548a0be805f86b6b3d803bdfdc48c31bf6559ce1f50fb728166a2fb472eb00badae4e40db8d316d4697f0c82a88ace8b60594018a5191913c72df914437293354017ddbc577c1e5278202a335d", 0x50, 0x2}, {&(0x7f0000000500)="070135e3c619c04530631f8356a1a490c486bb5f8361f3cd4e547cbab4abdb5f77036baaf1b46eb0fb4e3d9c70a81686800db454218145c5a548d18a5e0acdaad7fc4b8e4fcfae7f717c3ae74f7c39e500956ee58af2152bed8acaa603abf95627badde4dd11fb65d2fb98d965133b02d194f7847ecbfff36e32de52411ba18dbeb4fb5dae8ca7fd81d289c4f365caadd99548075a2414db73c6e711278439b14845c3dd76f5325c4d58e8fea74d1ab41e01174055", 0xb5, 0x9}, {&(0x7f00000005c0), 0x0, 0x100000001}, {&(0x7f0000000600)="7a7fd612e1d15a709c459d15651b5c03cbb5e96a239724098b2fe999312b46b93b39fb1063de2da0d97244ce120bb4c69e55c2863f028acd5e6bf76160a1b390ac1fce14e8f76a3d3160c241c22b9944b116c8bea11c55ee70365f7daf67e8b2322e61ba522b91ec3d9d53947870233314891b1eee7ba57a75d32219a3633ac96aaa965eb2d651769aaa8d741a12d815a00e7b83a8e3cbecbf5b7cb354f632b4491f15dbf964fe02bd40c8fc69d13df65b5ca98d49024786fb919d797716390ad6750c751d3a9b63738822216ce874d56907ed5cd6736826035e0f3be1bc905d88452370d0cea9b18fa400af8fa12607f3b9", 0xf2, 0x2}, {&(0x7f0000000700)="6ab7231529314a65b0ffd9a3aa3b6fc1ea37769122b47be056a3daf0e15d92004da9f4376afa08b41a76c8c06376c276cec1a4a44aaf5cb74c79cd0cf652f44582ce6b6354d4c42c8c2839806e90b9d334b2f60249659a1efbeaa009f4c4402e5928b55e22b73a516cc881f872130755a84a1b438b673bfe879cad6d3cfbb65f789df693ad1e893d47dbb7143231ee38afb6eb00d5fbe0591ce3cbc0910fc86a4c69c5", 0xa3, 0x4}], 0x20, &(0x7f0000000b00)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e755b2c654b699b8fd2bc6c089e61e428930972726f72733d72656d6f756e742d726f2c646d21736b3d3030303030303030303030303030307369746976653d79650afd949897a05171032eb8d52f12b5b8732c0024f985ca8e2c58bbd21b662625c17d56ccf86934032438b66dce52ae4f767f97f53b762b75e87a5a4f5e5b984fb43a9e56d64a7e0ae504b58bfc4cad7a097ef226e6be28cfe37bffcc12dc19c10305d8044fd6b0d88fe34ad771b3e657f3b274a2110043100e3e8ba4332a5dd49d53fa56ec8f72392d41ac295a4e3bf3edd0e91f8256ec0481f995db963832fca4a6d9f65d3558149ed1fd82db4e34dc73f63d1b7a7ebb0507560000000000000000"]) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dsp\x00', 0x2000, 0x0) mknodat(r1, &(0x7f00000008c0)='./file0\x00', 0x8009, 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) ioctl$TIOCNOTTY(r1, 0x5422) [ 3169.082502] ISOFS: Unable to identify CD-ROM format. 03:54:24 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}, 0x2c8) [ 3169.208149] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3169.215756] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3169.232830] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:24 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 03:54:24 executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000004000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) [ 3169.276575] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3169.284029] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:24 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xffffff9e]}}]}, 0x2c}}, 0x0) 03:54:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:24 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x200000, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80, 0x80800) fcntl$dupfd(r0, 0x406, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x2c8) [ 3169.520845] ISOFS: Unable to identify CD-ROM format. 03:54:25 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:25 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x15c}}, 0x0) 03:54:25 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 03:54:25 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x7a000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x84800) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000240)="fa1c331b37") sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) prctl$getname(0x10, &(0x7f0000000140)=""/95) 03:54:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x200000000000000]}}]}, 0x2c}}, 0x0) [ 3169.671100] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3169.678586] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3169.698249] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3169.705706] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700]}, 0x2c8) 03:54:25 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3169.940226] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3169.971081] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:25 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1000000000000000}, 0x0) [ 3169.994807] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3170.002236] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:25 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe800000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) 03:54:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) fstatfs(r0, &(0x7f0000001380)=""/4096) r1 = syz_open_dev$usbmon(&(0x7f0000001300)='/dev/usbmon#\x00', 0x3ffc0000, 0x40) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001340)=0xd0e, 0x4) recvmsg(r0, &(0x7f0000001180)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)=""/51, 0x33}], 0x1, &(0x7f0000000180)=""/4096, 0x1000, 0x9}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000002480)=ANY=[@ANYRES32=0x0, @ANYBLOB="40000089d088d19033ff9ba962b13ba8867718f4ec78f82aa622806dcd22a868cdc2559dea83e55ea3bea0e66b16b05e15816f06a060c3961514bfaca5a9ff0000000000000096cd28cb4eb408000000aef55700c20c8313d2010aa0f21faf21c7d05296e90d73fa2951694df829cc8a174646b0820db70328ae1c30c7fd220c1f87d25bb1a49202503492c5c54234fa0b3fa85993421307744bc17a26ab3e4f8023bd6d05b7ae9d2feaf19f339cee465da217ca670f6ae6a82002000000d9d99107970a504658759ad03badd49e9c5f9be84cf9ae6f24f6fa2d81a078e335a2ec563d38279698"], &(0x7f00000011c0)=0x2) 03:54:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x9effffff00000000]}}]}, 0x2c}}, 0x0) 03:54:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}, 0x2c8) 03:54:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3170.072388] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3170.079968] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3170.110163] ISOFS: Unable to identify CD-ROM format. 03:54:25 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:25 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3170.308949] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3170.320945] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:25 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) [ 3170.370888] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3170.378456] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:25 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000008070000000000002005000000000000e002000020050000380600003806000038060000380600003806000006000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x768) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380)={{0x7, 0x5}, 0x0, 0xff, 0x1, {0x4, 0x8c}, 0x4, 0x7}) r4 = socket$inet6(0xa, 0x400002, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfd01, 0x8800, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f0000000080)="00000017", 0x4) sendto$inet6(r4, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) 03:54:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, 0x2c8) 03:54:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x3f00000000000000]}}]}, 0x2c}}, 0x0) 03:54:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3170.416174] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3170.423780] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:25 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3170.510304] ISOFS: Unable to identify CD-ROM format. 03:54:25 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c8) [ 3170.651296] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:26 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3170.935880] ISOFS: Unable to identify CD-ROM format. 03:54:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="750a5583c2fb830dee3cdeb56b1fbd413e4115b56d2c17eabc4ba982e0e50cff52263e3de7b80e6e6b7960baa250fc11d2f02ef5d8710ef53aa7b368d4459c39e498f7ffac449d05366a1561bd0d5e1f1cec1550840bfda76c", 0x59}, {&(0x7f0000000140)="9582a21c0773ec9a78e18f09202f5b5cbd112349510c4b7f759221d2229c0e6daf7b46224f6ae10625e974c263e6289c679f4941da783655d3f90a199a6ee5e445ddadd459ae6fd3666b6a0726bf2504d6005011d53ce0adb908bf1b547a3e8a2f5a07cb08b16b80cf2a3f3b8d16808e8ccc0d6cd0e822c6a5179c27d2e392b91ab12b8feb339f99099b357b5fa801af1c0fa712e6a1f6c5586c1f4bfe313470708d22a6895ba7edbae5b69ef2d324d607870d0b1a6f25686a053102236eb2579172b8bc68f46115fde2964578d480b36bee84ffa046bab4aa56ec3b56ebdc508aca38e26b9efa7e8a85b8d37d5f8f8f35387e45470182995a1e54241ea8cd7f29216ab3089481e83e3ab5f3193e39d3e9e4376d0ef67a9b90cfe25215a4422e5ec7b11668002d134fc7280ae0969637bf19c93f4b1bf5f84c6c99f7d01af2552c8fb63d1aaeef54d23da2e980e55a5cdf6a7ae4a02a270b727e6e92b542efec02f90c7099a89791524c0a0f4fe73f04cc6355130ab00bffc2e232b4864e90a73acb1c8e908e56287e54b4cb12c483c55508f7883103fd06a87482dd9b6962cfe5f6e8381a7eab470bb1e2ba1b39df090e0decbe8fd655555ddedbb1cb73749cb93d2af96257a74cff0234b1542e6a0545009c0ef9748bac7eee70b67597bd8fc0d47373babd18afbb0068a5779cb547f2c38654e2f08b1cdf8a8c0812f5c358fb5be7d8bb5256065c56a162135a8682eb48dfabf249aa37566b529fb065e7bcb3cef037c03535b78248dd50bd8e04fcd0afc4c2e8592f23ebc0d61d458749fe0c04b60323e413f5a490099e2e3a2f531239eed65a07c440d8de3b4a552b03f0de828781588dc5a0ed02878fc1119fadfd25425e7ce5270d23731e2dab5d54ef7f1385a47eebb630e837a5959aafeaf846830cf607c7e42921886e4f39f7a8c9a302dc5137a0d66471137ba89dc06d39cf3608be75fa2b654fcacc36345ac30e6316d8f470fb5624809d1a68c84c020169c7aafbe2841e4d649b2a0795e6e784b670908841980e9448b369d05e7646da9f67e75915b182711cdb4c66d6ab0c26d4156a0fb089dd460196297edc37cccae008670148e0bac00b8d58c5d0c5b218f5a405479f535fa719ecb0ca74301952aa37cd907d7be9df0e6e84343b99de8fc709912f61e2d7b9a8a393547dd4167f378a4afd04a67e6d13f9b52747fbba59757cecf76bdbf0027a8ed155888ffeecd415ef9678d328556fcf549d33043ffe74af3cab5faaf877d44c7dfec3419514084952d1c073e4039c812e76b08c041688fdc027a5f71cb767c472ee35935387331de77d7c5fac49e3dfa531eb8cad7032dca6a2660d8b7db15ada1b1e745e9071b829e3a57bfa1806b351a1b659f33ccc86563b8a38ac9ca119663ccb18ac3c8daef9c18b3f9eb709ca900439c1452bd088a001d8c1f88e22fe95689fb5b41a33c0d4f9e505df3b25dc48f5f251d485080a02c958f02db9c3403facf33bcaf81892b2febb2bffde958aa2256231c0d9271eab874e962aa5e07613fbd0f1e0d1524d5d731fecffb74435aca649402d12da1e63054f5aaddac3b55cc882cd7da6a25428df411512466dcc2e82ba704bb2bac54cafcbad8bab9e4d20112b380010ad387225048fcee337aa6ac3860d40a119be4c76b6d4698893a6205cb1e0e0175076d41b2e6937f495a20fc71a38843209bb9e400b41ff994c6b6e67428a39aa95743b23878e1aaff0cf8785797363dea3f75da7cf5bace250ac49ec50a05139c0d97d5d026e62ce250f68a03473e14f3f6a00316162a30fca84722dc4a7fb1561d94616fb03264858ef35cac263c318310cb544f43b2960d83f441041f5523e4db206e54d763d9155ed47d493dac08168a81af497cac04891fe5a019ca80b5f410e78c139d00746802ddceaa6dc17b4e6bc5c0efdfd32004e6db488dd150b0d1b4120abe60a1bb9681b7b2d8d34e5734aa89bc832a1bc2c321d97a2b2d4c2f6ea8856ca2ab58c991a22825cab09c7c8193f68d308dc487687cbffe7979d8c782c63bc511d34417d8249cd67586b3a55943d6e3ff61e6cb28367f7985719255948f951161334976f69a008a26c8288ae5ad21f9bcd8005effc6ece4bc70e876c27f6c91e1bb35f49647f22f97855b7d937800022541e26c99297fe9e3488fb156c27e87c900dab86ef70b55dba71172df2087bad238781d8a2320b533e20f335d15bef5ac0ef5430132ae1fb6934321fc4a3ed901df913dfabbb2913ed3f174d30626aa5333581c912220294c3e2d4dce8e10f5082325f2a4516957ca05bf74a75bbb64113dd3858dd9662a7d9b29b14171e0a799b14c4def9a7c86f68582cfe05fda757f3327f52b6d543f9d373aee9149510a460555b6d102d1d524d8bdb191577b288c007938cac33724828c4b066968f690cacca0e0532de114f35d612dcaabc1caf550965da7fb1eab208a2cbe01e95a91dc49edf35bc8ab233da6d9236e7cdf7242a9b643d9a6631555808afa02b746c7ff2843bf3ef84dcd4da596d08500b9c2f8c8c13bc6ca15f18d6b8ba05d10b67f3be8fa7f8f15ed8f8e8f41cada22e2b033b3e3672a82ab884c6a1ff972d2f02beb66dd1a4dc5c16329cbb6df2f84101f0ff7fc738ef145b5e86ce8e57b83093cc08d7454b4d854fc73cbef836b52ff70b53a97ab71a7be058df647329562affab7d3c3e119722a6a39c2bf0e9c61e0358efd8a619cc417c5b4a28da95a71ff23e21b37a105011d7dfa2dfd2eff88c564975689cdb9aed18c42f6440c2d67285b085f308e2f960bb505e34d1cba8b73a5016c7837721ae0b9f841a495c8546854f50113598f716539c87cb99b568745fd4d25038f9573fe65d3da135ac754fa0ff007212eb09994ec9f2e480db04e7c589b43402be3cbcec343f14af0146be4b924df83e9624633ab631fc1103ff22227b2756ff1198f900447a71a3777fc2c9f983412e32e0777580924e0e268ef74d1e7115b63624ff568f875495a573f864560f25495acfedb28fe682e4fb7ea0ac24dab35d35bb03e20a3954ecea3e31dc1b92d5811dea25ce1f79d39945844685c09ad16d513b791d10d7ce4bb48cb3ae215102b851d4f554699b61760af811c52674a27c8c3253a69ac176bbbbd107ddd97cd493e2f22f6ab81f27afb57d8db3988dbe4be5785c079502fa48e9eab330d565daa57d1ee91d74f8b1194f5a2c9d7881d064ec6d3b10270f35b5ad4b7819c0292dbd4927759133e918bb4a2328d7600694ffbf1f7be2778ea34b176b6ef37154c339359d4e0c210a52f159be626ea09cb3d2bd480e164259fddc2f98a840e71a078bbc9b4a2ddab10da78a4477e6f395e77ec89912ccce8942ee399bfa7640a3ad08a5ba00d330e8f55ce5b00f27f0e223e1b5fc2e068948a188b507e6946bb481ac4f9393fbcbff56018e186a34185ac9472a48a3a995c0786bc77487053c2d6b7649ae51abb9cb45c043f68ea4aea0193ba7653054db3829b82e3a8cddcdfdb9eec911821be259b9ac71eac9133183f78cad5dd3874a1c935006e07c3831d5ccd0e3081effa4c1f2e30e08ed0b20ae0bf471be9a45679cd347c06e4c6abf2bfbe0b4fe441ab207e225ad3aa2c28e29c60957363f39c19729da92bca8d85d540f76f81fdbcb41ab606ff3cea5be0a39d83a5be3a8ed913c53af769f43b1beb1d24bcad49baa9d0df2b345a4f87d12375300e3fb81a86a7be6b91cdae476e766a8d38762e7dbbfb3091ef32061842b75a56c4562a734134598f7a2a4fba275e921b9061936e4388559a487d82a61bcc1b392444994d8763ca2cd8151e163b85a88fc27a1bd243ce3cf9ef9bec2a57751e3a29b4905e1330d61ea333c5ae4b3d3ea740a9417c03a5d1c2537cfe7b0b8815befaacdf48d553645a4eba3c7e4a606051477d22cf2001eb6d8d54c653dd303421d0b5c252fd6720ca770c2b60e5d23665dc9671203e0c913dd3fd23472df62a8881308a5dfdc29c29ef6b5187c3e62bca8fc87a0f859e946df571f7041661b9ff5ef552770ce3cf44959a7fe7b24e5df555944011de64256a209a23dbc338e15bfb805e5c3bad2c2a0febdbdb8a740f59c27588db491833731dc44b2457d7b6567f302445f6a62ff21896114d3d8eeafda09936fc93e6636f1b505129b3e28bbde01142f783e3562893c3018117cc34d6f2e8f776e8983e32d12f838d5f9a0d850963a6d8cad7ed2083af4350349245a895c9b1d36c9286a469a42634bc6d6b59f70389ba108dbe6d12c1d635264392dab823ec9bf8cab38d4bd55d8e03e704d2f5c1a7cc1b378897e4c5c51a16a3f7a8ccc5d07dffa1c334f9dfe6764af775e0dc3f9bced3c0a824118cbb00170985171999524883896d63488bfc849ff35ee6905cf0fea15ec394dbfd458a11632ec82fd0e54cb32c11f035247b21e2a2fd95113f38a68bab9891711560dfde72e6fcabdfd2097ca9df86fdba1804ce16d494dd267914e4cbb5ec9ed851d0f9a8cf25e86cece860acad1f3ef2f201f0cb1280abdb28100069215ac91f9b7d14d117486b39dbfcd8631e9a72d34ad2b49cfc3306aaf37e1ea6f3dff07f76e1f3ba17460b27e162d40b69dc6299b786078ee91a0eb04cf317b621f0deb96e5d934e790bbb8a61dd326617f6eaa577f1f1417cc72f417163ffc2f79b9269eb9903ac76d75d01a3eb8a58217833d0f02c8f34ee115d6d13f3aec5c06678bf8e31a3899eb68a2dbb9f64b582fb910ff7c6883cb88fb3f8e2379bf7e3bc1d850a46e4f044a663c32c11008ccc50f9925112ba55950f7df233d2b3e3e6890c608560f41918da2b826f76a32cd97c9ea45c9ec608fb682d362ddfdc18d3bee25f31dbfae9e1646d57360ea37939ab5e85ec6842b3981e1b3ae3f9dc2ff142b9aeeab4405eb06824ebecf68435c351e4fcfb5ea6063d02d8c986079a049d1e865ebed556b3e6beb88f864c96521a01944ba3cec9ba0086763f7dd808f3fd726273e6e514f27c99a335acd0e97b254d512fe312302f0c692d0e81f5b0988ebbc9fc268fbe26187fa016b859fc3df5c8bb25e74b231121703af3ea7eb37788a527772124bed4ed73eb0f408096256a3a1aaef44a9f1ee395ba13d7cc1d1322a5cd77352e0a2b0760a39084eaf25f753f817b030e3de9c33a780b8f47588924a126bebc77c6a1fe51c55e6023847728e068f2d6d05879f9f509c75133375b40eaf959a473985b1015018f7eb159397c2c4aeed3c1cf59d071c15e45e75d771e05a8a4100ddb617bc7fef087a715ee20266724c0cd573de3c1976d9278921cd7446755dcd9d19cf2e8e2aac302b1798b9ad89e537cfc2b58c3e531a47b184c3eb8e9f61c9d7788eff8f35317de84a6132c756475d7b027731874cb55bd4a0ad5ee5cecacf7f347676792f8fb5a58cf22f19f14dedb1caa691f2aa394d700f01df6482217eaf54a573ca82c56be7a2d43eb3edf0d38a3a7eefc3428025836b82638e378fc8789182a9f202be11a22351a0d4b3569366f86f226b2150484adf9eb17997d0416aaa4b1104c2bf7099f7a01687216eb4bbca4b34bbee9421ee944ed91aff7248a69f7208412b556b5f8ca56d1fae1103cb050dac41de3b71aa94ce599a14525c8c214003444ed7f467419c807a7f9b6ca536070f9ba22d33b8b0c672c86fc85c4e660181f5406d435956b8965e8c3e492d2dcf5201f007a9f1b85386dea0a6a5e66dd9fb61b1b3057f441f78d4ed65e5f410fa6fb23e75cf3fe85e8cccb5", 0x1000}, {&(0x7f0000001140)="626609fa80461c1d9f31d6ccaeb584b52fe205a30212900955ee5edb9504dea258f035921aea0e02b292b01a241ebf0d19505d0cd6c25f46fb267afa66f25c4222b10419231e108ebd35bf57768c69b3ca6958147ada211a1b2b0e0d3f961c5275c7806a24d7a7ef0c2a3c2a64d70b83727dc24fc14269aba71282f38dfa33b9a20aa289e5aff69d844537", 0x8b}, {&(0x7f0000001200)="09431c3994d8cda97fa7173d91b601449300f2a67b7b18e6492deb96a1e7c7704a44363a2855e784fc424c7df98caeec664718d6c51b246482a4657b2a3ecd01f6dccee3ee05511d6a53a1b90e65682cf9d478cfde2f1f6af9dc1d3d897a1734cbddc39a8475f511450f29dcf0257a0315ed439c0ccd795fbab8e62d22eac4ff18c2d6", 0x83}, {&(0x7f00000012c0)="a22370596ea63f6ca51c410b8321ceff1193cdaf42bb20eda70b647a3cae650d7c74e53531bf87757d3eb986e89686a84fed42084048905c594150ae50d7459ae3", 0x41}, {&(0x7f0000001340)="d879e42f6b94a526415be8e741dfd244098fc7a70d5b27fe8c84ce1c1c5972145d2418ff0d09a1ad8555bad718f08dd187ad504d7b5136e17ecdbef420f965cb65d57a0806a9c52613d2bcadbc3ecacf67914a3b8e328bb59b2666ea169ee73a369277ca3553", 0x66}], 0x6, &(0x7f0000001440)=[{0x30, 0x115, 0x10001, "0f14cf5a1a02e222f9d712f9a393f9c90459cc733e836e55f6477c73d5b3"}, {0x90, 0x105, 0x2, "dd8b70fea66a86b10ce3142b872769e5da88b943e83a766b7971a0fa9e819379a31b681b8cee7196f394b333c875103d00c39863de9dc7fdf80303a98054b04f9d511284d5593474737486ac0b20231c3e09de25993ab004a7ee512c1f6cdda78118012bb7d78030eee925f65239b33e4f9463d182f619160537425aaa"}, {0xc8, 0x10f, 0x5, "06e8f02cdd2eddbe52ae735d2260d7aaaf282ebf6c936f0b3425c74f31cda877c776b7283dc1f070f83a1c84dcf493b0c85d205290c69d2506d0b8a5f182ac754a9c7121d2ed9c2e6b80c3bee2269fa2075fb73769c4ff2da3d6fc9b13ef14eec6119d0e0314bc0c85abdf87099728d931b987630f8f78184723a0c7238b1345e45fc018172fa31bf9f571ba2b91012898d3535f70be62923ac10db68535b770f7275e0641b7585895c880ebc0f2699cd5c195aa1096"}, {0x90, 0x13f, 0xc83b, "bdbc0c60f397beef8aa9518acfbaa791331a2435c317a12921f166196208e974fa77bce49e04a21bb3e83eb82839f4e07204bc3f283585bb22784edeccc48adc80b292279033d35e124d6b698c94eb3bc694a98fe2e84d27eee2b4a80319175a2268cf8f7a5d05d009c7657815078a5384a0f4fdc124fe456d8461ae79ae"}, {0xd0, 0x1, 0x8, "d0729bfea6a00ab887dd9520e3fa25acaba80c3d8d249c171d30a88349633c903ffcf21cdcc109dd06ea77445d84a02e82f7e09a35cb3d345612f208586dc6a17770155c3f7e1ab9bae030a74ca35c367bf93295eb1f9fe9cd936b51236179d5800bf7b82144997a526cda798e53eb33a02f8d09e89405aef58ace54d86aaeb451e8776dfa1d75011aeebc6277e6a4a3a103b63079f4b4952f4b76025eac2e9013c91b90e8acdcac04dd1604aa5535f836cfe7b1b3c9663ab879"}, {0xb8, 0x119, 0x4, "8e1b62dcef0488ec5b05a647e4bf598b8ca8d2f41aec2ee43fe68f3c791a012085aa9a2f5c4d1fa60fab4ceef600199f2b53561fb65522eb16d7293587c82e5739459bc3e7bce9d41a6e30a3c19e782d835f5d67fb3bb781bba5d4d4d96879d0fc2fd13de480da50f1db0407f72530ddcc310117226e5439f034688ca2497060d3f143050fb7e38a05e3103de991e749dcac853a7d9f13cdeb45639633319b59ea4c"}, {0x1010, 0x10b, 0x2, "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"}], 0x13b0, 0x80}, 0x20000000) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1400000000000000]}}]}, 0x2c}}, 0x0) 03:54:26 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 03:54:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x34000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:26 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xc400, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x1f, 0x3f, 0xfffffffffffffffe, 0x3, 0x81}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000002c0)={0xffff, 0x0, 0x6, 0x1, 0x0, 0x20, 0x6, 0x7fffffff, 0x1000000000000e, 0x8}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0xfff) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0xa, [0x6, 0x3ff, 0x3, 0x1, 0x7, 0x9, 0x97, 0xcca1, 0x4, 0x8001]}, &(0x7f0000000280)=0x18) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5ce70000210001000000000000000000000000001c00000000000020937fc800000000000000d4000000000000000a000000ff000000f375cdb9312bc5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c011100"], 0x15c}}, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000300)=0x4) 03:54:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}, 0x2c8) 03:54:26 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:26 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2]}, 0x2c8) 03:54:26 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x2000000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:26 executing program 0: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fallocate(r1, 0x18, 0x7b, 0x8) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0111002b3d59205197dfe5ab382218d9ef9e37be035be29bb46dd0d1dfc49983ce3b878146decc72fae59de7fd64dacb00000000806cd8b508003cc5d290c9758f2a10a931b575b200618b66391f6a3decb50fc104157481657ec1c39c55ba0a08b90fb3b34fd0117ebd4e4b3995b19c1d8aeff4f600bbe06e89c4ef5ccf104676a6f22bf62f6144b3010d83354034415fdf5fdc376f8d7d87393d9b7aee20"], 0x15c}}, 0x0) 03:54:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1a0]}}]}, 0x2c}}, 0x0) [ 3171.374621] ISOFS: Unable to identify CD-ROM format. 03:54:26 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 03:54:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0xfffffffffffffffa, @mcast1, 0x8000000000000003}, 0xe79f0621) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e24, @remote}}, 0x100, 0x7, 0x8acc, "b34e2c633cc27e8dd059155d0f5232bfcfaae55ed7fe1c13712311ee175975911c13e62f3e3d79ec424f227d74f0af31536ab10105bc89705f706b25057c000000000000009e3a84c11805d5904bb044"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:26 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:27 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffa64, 0x80) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'tgr192-generic\x00'}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e02000000000000]}, 0x2c8) 03:54:27 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80040200]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:27 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x2, 0x446201) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x9]}}]}, 0x2c}}, 0x0) 03:54:27 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 3171.719704] ISOFS: Unable to identify CD-ROM format. 03:54:27 executing program 6 (fault-call:8 fault-nth:0): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}, 0x2c8) 03:54:27 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:27 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) clock_getres(0x7, &(0x7f0000000000)) 03:54:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x7a}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x48]}}]}, 0x2c}}, 0x0) 03:54:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x800, 0x0) ioctl$TCSBRK(r1, 0x5409, 0x7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @rand_addr}, &(0x7f00000005c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000600)={@ipv4={[], [], @rand_addr=0x7}, 0x1e, r2}) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:27 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8001a0ffffffff}, 0x0) [ 3172.090267] ISOFS: Unable to identify CD-ROM format. [ 3172.095877] FAULT_INJECTION: forcing a failure. [ 3172.095877] name failslab, interval 1, probability 0, space 0, times 0 [ 3172.107243] CPU: 1 PID: 5261 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3172.114192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3172.123542] Call Trace: [ 3172.126156] dump_stack+0x1c9/0x2b4 [ 3172.129811] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3172.135030] should_fail.cold.4+0xa/0x11 [ 3172.139136] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3172.144275] ? lock_downgrade+0x8f0/0x8f0 [ 3172.148447] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3172.153985] ? proc_fail_nth_write+0x9e/0x210 [ 3172.158498] ? find_held_lock+0x36/0x1c0 [ 3172.162611] ? check_same_owner+0x340/0x340 [ 3172.166959] ? __lock_is_held+0xb5/0x140 [ 3172.171048] ? rcu_note_context_switch+0x730/0x730 [ 3172.175993] __should_failslab+0x124/0x180 [ 3172.180237] should_failslab+0x9/0x14 [ 3172.184049] __kmalloc_track_caller+0x2c4/0x760 [ 3172.188731] ? strncpy_from_user+0x510/0x510 [ 3172.193160] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3172.198751] ? strndup_user+0x77/0xd0 [ 3172.202578] memdup_user+0x2c/0xa0 [ 3172.206137] strndup_user+0x77/0xd0 [ 3172.209781] ksys_mount+0x3c/0x140 [ 3172.213342] __x64_sys_mount+0xbe/0x150 [ 3172.217342] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3172.222386] do_syscall_64+0x1b9/0x820 [ 3172.226317] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3172.231273] ? syscall_return_slowpath+0x31d/0x5e0 [ 3172.236232] ? __switch_to_asm+0x34/0x70 [ 3172.240316] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3172.245712] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3172.250585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3172.255793] RIP: 0033:0x457089 [ 3172.259004] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3172.277933] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:54:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x68000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:27 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3172.285668] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3172.292951] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3172.300234] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3172.307513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3172.314788] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000000 03:54:27 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x7ff, 0x200}) socket$rds(0x15, 0x5, 0x0) 03:54:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c8) 03:54:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1000000000000000]}}]}, 0x2c}}, 0x0) 03:54:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) fcntl$setpipe(r0, 0x407, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:27 executing program 6 (fault-call:8 fault-nth:1): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:27 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xb00000000000000}, 0x0) 03:54:27 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x400000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:28 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9, 0x20000) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = dup2(r2, r3) openat$cgroup_procs(r4, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000001c0)={0x9, 0x5ce, 0x10001, 0x0, 0x8, 0x0, 0x1000, 0x81, 0x401, 0xdf, 0x721, 0x4}) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000104000000000000005a39d12e7b91a603d27168df5e09c8b1c1ea49abf072dd15ffdb7ede909a5f328beded01540030de87b9d0becc01a71d509ab39f22fa3f98ae941fd93b59b61173af743530980010bcfad965972219b83a130d8388bcd3eb"], 0x15c}}, 0x0) 03:54:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c8) 03:54:28 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0ffffffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:28 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 03:54:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x464c0000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3172.815067] FAULT_INJECTION: forcing a failure. [ 3172.815067] name failslab, interval 1, probability 0, space 0, times 0 [ 3172.817372] ISOFS: Unable to identify CD-ROM format. [ 3172.826463] CPU: 0 PID: 5324 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3172.838498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3172.847870] Call Trace: [ 3172.850499] dump_stack+0x1c9/0x2b4 [ 3172.854161] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3172.859443] ? __kernel_text_address+0xd/0x40 [ 3172.863958] ? unwind_get_return_address+0x61/0xa0 [ 3172.868902] should_fail.cold.4+0xa/0x11 [ 3172.872964] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3172.878060] ? save_stack+0xa9/0xd0 [ 3172.881681] ? kasan_kmalloc+0xc4/0xe0 [ 3172.885559] ? __kmalloc_track_caller+0x14a/0x760 [ 3172.890406] ? memdup_user+0x2c/0xa0 [ 3172.894135] ? strndup_user+0x77/0xd0 [ 3172.898323] ? graph_lock+0x170/0x170 [ 3172.902129] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3172.907658] ? proc_fail_nth_write+0x9e/0x210 [ 3172.912179] ? find_held_lock+0x36/0x1c0 [ 3172.916244] ? check_same_owner+0x340/0x340 [ 3172.920553] ? lock_release+0xa30/0xa30 [ 3172.924518] ? check_same_owner+0x340/0x340 [ 3172.928843] ? rcu_note_context_switch+0x730/0x730 [ 3172.933777] ? __check_object_size+0xa3/0x5d7 [ 3172.938268] __should_failslab+0x124/0x180 [ 3172.942508] should_failslab+0x9/0x14 [ 3172.946340] kmem_cache_alloc_trace+0x2cb/0x780 [ 3172.951036] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3172.956599] ? _copy_from_user+0xdf/0x150 [ 3172.960763] copy_mount_options+0x5f/0x380 [ 3172.965016] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3172.970549] ksys_mount+0xd0/0x140 [ 3172.974083] __x64_sys_mount+0xbe/0x150 [ 3172.978049] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3172.983074] do_syscall_64+0x1b9/0x820 [ 3172.986968] ? finish_task_switch+0x1d3/0x870 [ 3172.991489] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3172.996455] ? syscall_return_slowpath+0x31d/0x5e0 [ 3173.001389] ? __switch_to_asm+0x34/0x70 [ 3173.005494] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3173.010891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3173.015742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3173.020929] RIP: 0033:0x457089 [ 3173.024117] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3173.043020] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3173.050736] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3173.058014] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:54:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa00000000000000]}}]}, 0x2c}}, 0x0) 03:54:28 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x800, 0x80) sendto$inet6(r0, &(0x7f0000000480)="52392155995754a5f972394977e1f120b33b2e521b9753b3337c0af8fe4d303ad33a185ec10526b4c46637ee1e00d3d10b582956c9ab86ce532ca2e21a80ed7106fa2f22b7bb1af48d50c1ff0073859dc3cd6bad0dbe1ae935c68dab4b9a079c2b260f86788203ec1918405dff08c3f9de9908c87152254c6259ee433f81869d43d862843290d259d1279d6cc9116aa1ac4830b4419dc7f548f522061c66a5df6872f8d6d9ae5ee4bfc580c8b9e42eaca598f355a812", 0xb6, 0x4000, &(0x7f0000000540)={0xa, 0x4e21, 0x10000, @mcast2, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x742, 0x3, 0x20}}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f00000000c0)={0x20, 0x902, 0x2af}) 03:54:28 executing program 6 (fault-call:8 fault-nth:2): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3173.065293] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3173.072558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3173.079823] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000001 [ 3173.293016] nla_parse: 1 callbacks suppressed [ 3173.293028] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c8) 03:54:28 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:28 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000280)={r0}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0)={0x90e, 0x3, 0x8000}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x30000) accept(r0, &(0x7f00000001c0)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000240)={r3, 0x1, 0x6, @broadcast}, 0x10) 03:54:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x100000000000000]}}]}, 0x2c}}, 0x0) 03:54:28 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 03:54:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x1a0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x8012, r1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3173.480147] ISOFS: Unable to identify CD-ROM format. [ 3173.481522] FAULT_INJECTION: forcing a failure. [ 3173.481522] name failslab, interval 1, probability 0, space 0, times 0 [ 3173.496662] CPU: 1 PID: 5355 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3173.503585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3173.512950] Call Trace: [ 3173.515565] dump_stack+0x1c9/0x2b4 [ 3173.519236] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3173.524473] should_fail.cold.4+0xa/0x11 [ 3173.528567] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3173.533690] ? lock_downgrade+0x8f0/0x8f0 [ 3173.537863] ? kasan_check_read+0x11/0x20 [ 3173.542032] ? rcu_is_watching+0x8c/0x150 [ 3173.546207] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3173.550899] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3173.555609] ? find_held_lock+0x36/0x1c0 [ 3173.559720] ? check_same_owner+0x340/0x340 [ 3173.564057] ? rcu_note_context_switch+0x730/0x730 [ 3173.569002] ? save_stack+0xa9/0xd0 [ 3173.572656] __should_failslab+0x124/0x180 [ 3173.576917] should_failslab+0x9/0x14 [ 3173.580738] kmem_cache_alloc+0x2af/0x760 [ 3173.584923] getname_flags+0xd0/0x5a0 [ 3173.588749] user_path_at_empty+0x2d/0x50 [ 3173.592931] do_mount+0x17a/0x30e0 [ 3173.596502] ? copy_mount_string+0x40/0x40 [ 3173.600884] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3173.605674] ? retint_kernel+0x10/0x10 [ 3173.609593] ? copy_mount_options+0x1a1/0x380 [ 3173.614113] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 3173.618982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3173.624539] ? copy_mount_options+0x285/0x380 [ 3173.629060] ksys_mount+0x12d/0x140 [ 3173.632718] __x64_sys_mount+0xbe/0x150 [ 3173.636734] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3173.641773] do_syscall_64+0x1b9/0x820 [ 3173.645676] ? finish_task_switch+0x1d3/0x870 [ 3173.650192] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3173.655141] ? syscall_return_slowpath+0x31d/0x5e0 [ 3173.660091] ? __switch_to_asm+0x34/0x70 [ 3173.664167] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3173.669558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3173.674436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3173.679641] RIP: 0033:0x457089 [ 3173.682852] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3173.701771] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3173.709515] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3173.716790] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3173.724067] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3173.728542] binder_alloc: binder_alloc_mmap_handler: 5372 20000000-20400000 already mapped failed -16 [ 3173.731343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3173.731354] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000002 03:54:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x40000000]}}]}, 0x2c}}, 0x0) 03:54:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, 0x2c8) 03:54:29 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:29 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=@expire={0x108, 0x18, 0x10, 0x70bd25, 0x25dfdbfd, {{{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in6, 0x4e20, 0x0, 0x4e24, 0x6, 0x2, 0xa0, 0xa0, 0xff, 0x0, r1}, {@in6=@mcast1, 0x4d2}, @in6=@local, {0x63c5, 0xfffffffffffff001, 0x1, 0x40000000000, 0x0, 0xb42, 0x5, 0x7}, {0x1, 0x400, 0x0, 0x8}, {0xa0000000000000, 0x4, 0x15d8}, 0x70bd26, 0x3502, 0x0, 0x6, 0x81, 0x8}, 0x8000}, [@ipv4_hthresh={0x8, 0x3, {0x2, 0x1f}}, @replay_thresh={0x8, 0xb, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 03:54:29 executing program 6 (fault-call:8 fault-nth:3): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:29 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 03:54:29 executing program 3: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x16, 0x420800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom(r0, &(0x7f0000000080)=""/51, 0x33, 0x2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000300)=0x9, 0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0x3000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x1, 0x4, 0x6, 0x800, 0x7daa}) getgid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x88000, 0xe5) bind$bt_rfcomm(r4, &(0x7f0000000200)={0x1f, {0x42, 0xfffffffffffffffd, 0x1, 0x8, 0x10001, 0x5}, 0x5}, 0xa) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x103901) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000140)=0x1) [ 3174.046379] validate_nla: 20 callbacks suppressed [ 3174.046391] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3174.058871] net_ratelimit: 20 callbacks suppressed [ 3174.058881] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x9effffff]}}]}, 0x2c}}, 0x0) 03:54:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c8) [ 3174.176953] FAULT_INJECTION: forcing a failure. [ 3174.176953] name failslab, interval 1, probability 0, space 0, times 0 [ 3174.188248] CPU: 1 PID: 5415 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3174.195210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3174.197663] ISOFS: Unable to identify CD-ROM format. [ 3174.204596] Call Trace: [ 3174.204630] dump_stack+0x1c9/0x2b4 [ 3174.204655] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3174.204684] should_fail.cold.4+0xa/0x11 [ 3174.204704] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3174.204723] ? lock_downgrade+0x8f0/0x8f0 [ 3174.204749] ? kasan_check_read+0x11/0x20 [ 3174.238727] ? rcu_is_watching+0x8c/0x150 [ 3174.240509] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3174.242899] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3174.242926] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3174.242949] ? find_held_lock+0x36/0x1c0 [ 3174.242985] ? check_same_owner+0x340/0x340 03:54:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") syz_emit_ethernet(0xce, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@rr={0x7, 0x6, 0x4, [@loopback]}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd4dbb952b18e839ab77b29d7147a6254f31c1d1bbefebf75b1d2f443783b6928fdbf4e2fe2e77e9c0162cb572b9808ac2d9609e84287524f63db8e4f6b76d4b86b02702fdb9a4461298fc0e5f2ef4b2640b188e6e00eac44e9d95d19b02b59c9cc40e2158ea0ba7d49efbe9691c1b8be7a66c99d4a4d40adc30bc0f9ea6"], 0x15c}}, 0x0) 03:54:29 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20480]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:29 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 03:54:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = accept4(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x80, 0x800) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000200)=0x7, 0x3c9) fsetxattr(r1, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='user\x00', 0x5, 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x1a0ffffffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3174.250300] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3174.254935] ? rcu_note_context_switch+0x730/0x730 [ 3174.254950] ? save_stack+0xa9/0xd0 [ 3174.254971] __should_failslab+0x124/0x180 [ 3174.254991] should_failslab+0x9/0x14 [ 3174.299455] kmem_cache_alloc+0x2af/0x760 [ 3174.303643] ? find_held_lock+0x36/0x1c0 [ 3174.307737] getname_flags+0xd0/0x5a0 [ 3174.311565] user_path_at_empty+0x2d/0x50 [ 3174.315741] do_mount+0x17a/0x30e0 [ 3174.319299] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3174.323744] ? copy_mount_string+0x40/0x40 [ 3174.327994] ? rcu_pm_notify+0xc0/0xc0 [ 3174.331931] ? copy_mount_options+0x5f/0x380 [ 3174.336363] ? rcu_read_lock_sched_held+0x108/0x120 [ 3174.341427] ? kmem_cache_alloc_trace+0x616/0x780 [ 3174.346281] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3174.351828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3174.357382] ? copy_mount_options+0x285/0x380 [ 3174.361895] ksys_mount+0x12d/0x140 [ 3174.365523] __x64_sys_mount+0xbe/0x150 [ 3174.369495] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3174.374525] do_syscall_64+0x1b9/0x820 [ 3174.378420] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3174.383355] ? syscall_return_slowpath+0x31d/0x5e0 [ 3174.388311] ? __switch_to_asm+0x34/0x70 [ 3174.392394] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3174.397797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3174.402663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3174.407879] RIP: 0033:0x457089 [ 3174.411100] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3174.430019] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3174.437753] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3174.445036] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3174.452322] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3174.459602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3174.466880] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000003 03:54:29 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:29 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xffffffff00000000}, 0x0) [ 3174.549035] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3174.556418] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3174.578601] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff030000]}, 0x2c8) 03:54:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x48000000]}}]}, 0x2c}}, 0x0) 03:54:30 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b71e9eca19808be97566000037e417d6ba8a2eedc72b3cf80aedd17a304eb0b08e20b41d68eeea608004b927edce1be052541151810c0da0acbeb51fc4e1d5edcc3728a499941cd70e44d22886e43690da9257e5a7c2c5f7183d21996c07779953b1ccca30258baa1ea18c65065497e9b51d1133f3d95581eca9ac4bc332ae"], 0x15c}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)) 03:54:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4c000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:30 executing program 6 (fault-call:8 fault-nth:4): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x80000) io_setup(0x7, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x20, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f0000000280)) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000180)={0x9, 0xe82, 0xb6, &(0x7f00000000c0)="158f6d2ad4c1f14d5066e86c6046c8d604db17f02d6822e5da89add1df34c421d3247504dd66dd8b4f4d574642567d7e34d182e0568b3fa36fb28f6aa2f4c201ef4202d09aee26d68ae083bc87469503f7e7ecb47b4765a3bc0912bc5c48a48a23f48379f86ff1569fadb05dad06617d5ef3d3664daf458ad90350d286f21fd853ffbb7698ec581d2f17796962e8c1d3cbd15ee969bf1509ad2558b49a023ea667f9dc09e0d4ad8f308aa28bfbfe207a80f796b492b6"}) [ 3174.618519] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3174.625978] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:30 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, 0x2c8) 03:54:30 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1a0}, 0x0) 03:54:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x3000000]}}]}, 0x2c}}, 0x0) [ 3174.919221] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 3174.931819] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. 03:54:30 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) socketpair(0x0, 0x5, 0x5469, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@newspdinfo={0x1c, 0x24, 0xc00, 0x70bd25, 0x25dfdbfb, 0x8001, [@extra_flags={0x8, 0x18, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 03:54:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6c000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3174.972153] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3174.979669] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3174.996318] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3175.003716] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:30 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3175.080183] FAULT_INJECTION: forcing a failure. [ 3175.080183] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3175.092142] CPU: 1 PID: 5475 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3175.099095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3175.099283] ISOFS: Unable to identify CD-ROM format. [ 3175.108469] Call Trace: [ 3175.108503] dump_stack+0x1c9/0x2b4 [ 3175.108524] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3175.108544] ? rcu_is_watching+0x8c/0x150 [ 3175.108561] ? rcu_pm_notify+0xc0/0xc0 [ 3175.108586] should_fail.cold.4+0xa/0x11 [ 3175.137168] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3175.142297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3175.147862] ? graph_lock+0x170/0x170 [ 3175.151698] ? pcpu_balance_workfn+0x1700/0x1700 [ 3175.156480] ? find_held_lock+0x36/0x1c0 [ 3175.160581] ? check_same_owner+0x340/0x340 [ 3175.164931] ? __lockdep_init_map+0x105/0x590 [ 3175.169449] ? rcu_note_context_switch+0x730/0x730 [ 3175.174592] __alloc_pages_nodemask+0x36e/0xdb0 [ 3175.179289] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 3175.184355] ? rcu_pm_notify+0xc0/0xc0 [ 3175.188270] ? find_held_lock+0x36/0x1c0 [ 3175.192354] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3175.197932] alloc_pages_current+0x10c/0x210 [ 3175.202368] __get_free_pages+0xf/0x40 [ 3175.206288] get_zeroed_page+0x11/0x20 [ 3175.210191] mount_fs+0x210/0x328 [ 3175.213661] ? mpi_free.cold.1+0x19/0x19 [ 3175.217742] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3175.222346] ? may_umount+0xb0/0xb0 [ 3175.225990] ? _raw_read_unlock+0x22/0x30 [ 3175.230158] ? __get_fs_type+0x97/0xc0 [ 3175.234073] do_mount+0x581/0x30e0 [ 3175.237636] ? copy_mount_string+0x40/0x40 [ 3175.241903] ? copy_mount_options+0x5f/0x380 [ 3175.246344] ? rcu_read_lock_sched_held+0x108/0x120 [ 3175.251391] ? kmem_cache_alloc_trace+0x616/0x780 [ 3175.256278] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3175.261834] ? _copy_from_user+0xdf/0x150 [ 3175.266013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3175.271579] ? copy_mount_options+0x285/0x380 [ 3175.276109] ksys_mount+0x12d/0x140 [ 3175.279764] __x64_sys_mount+0xbe/0x150 [ 3175.283762] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3175.288833] do_syscall_64+0x1b9/0x820 [ 3175.292749] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3175.297702] ? syscall_return_slowpath+0x31d/0x5e0 [ 3175.302658] ? __switch_to_asm+0x34/0x70 [ 3175.306743] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3175.308089] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3175.312129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3175.312154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3175.312168] RIP: 0033:0x457089 [ 3175.312186] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3175.312195] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3175.312212] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3175.312221] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:54:30 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x3f00]}}]}, 0x2c}}, 0x0) [ 3175.312236] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3175.319557] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3175.324362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3175.324370] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000004 03:54:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, 0x2c8) 03:54:30 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8001a0}, 0x0) [ 3175.441634] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3175.449104] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:30 executing program 6 (fault-call:8 fault-nth:5): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x7000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:30 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x40, 0x0, 0x2}}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0x38b, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0xfffffc82}}, 0x80) 03:54:30 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000500)=""/169) r2 = add_key(&(0x7f00000003c0)='cifs.idmap\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000440)="35a179c7c7e86741b43155fe7e71abbb4b9f86856eea18e692085b2a3067faa72a06d020045e81d0c01c3fc42691f8642cfc5cb79187cc4df50c70c86195e5085b2576821d034890801a6d3ab8e0a7cdea34589aa8f8668844ab404651528dbffeda5359bdc9708ce2210ee8e81c9dcdbb90e191966ff60e6e0a1fc8afc902c07ad9071b1f8c7dec0e5eb2804a915d52267fe3b92e2ff3a7e626c3c06581d1c0a79e60db6a1ddba97cfc09b04602e1bf205450277ee5", 0xb6, 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0xa3, 0xfffffffffffffff9, r2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x80, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0xe}, 0x9}, @in6={0xa, 0x4e24, 0x100000001, @remote, 0xa2}, @in6={0xa, 0x4e24, 0x0, @loopback, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x8000}, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x392}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e20, 0x3, @local, 0x7}}, [0xfffffffffffffff8, 0x7ff, 0xe8, 0x7, 0x7, 0x101, 0xa44, 0x3, 0x0, 0x81, 0x100000001, 0x1, 0x1]}, &(0x7f0000000300)=0x100) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$KDGETLED(r5, 0x4b31, &(0x7f00000000c0)) setsockopt$inet6_tcp_int(r4, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) get_thread_area(&(0x7f00000005c0)={0x3, 0x20000800, 0x2000, 0x4e, 0x3, 0x9, 0x8, 0xffff, 0x7, 0x80000000}) sendto$inet6(r4, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:31 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001002000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3175.709112] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3175.716640] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, 0x2c8) 03:54:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf0]}}]}, 0x2c}}, 0x0) 03:54:31 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 03:54:31 executing program 0: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@migrate={0x54, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xf0ffff}}, [@migrate={0x4}]}, 0x54}}, 0x0) [ 3175.832310] FAULT_INJECTION: forcing a failure. [ 3175.832310] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3175.844341] CPU: 1 PID: 5536 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3175.851291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3175.860650] Call Trace: [ 3175.863252] dump_stack+0x1c9/0x2b4 [ 3175.866918] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3175.871878] ISOFS: Unable to identify CD-ROM format. [ 3175.872133] ? rcu_is_watching+0x8c/0x150 [ 3175.881385] ? rcu_pm_notify+0xc0/0xc0 [ 3175.885297] should_fail.cold.4+0xa/0x11 [ 3175.889352] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3175.894458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3175.900588] ? graph_lock+0x170/0x170 [ 3175.904426] ? pcpu_balance_workfn+0x1700/0x1700 [ 3175.909211] ? find_held_lock+0x36/0x1c0 [ 3175.913309] ? check_same_owner+0x340/0x340 [ 3175.917664] ? __lockdep_init_map+0x105/0x590 [ 3175.922234] ? rcu_note_context_switch+0x730/0x730 [ 3175.927203] __alloc_pages_nodemask+0x36e/0xdb0 [ 3175.931907] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 3175.936968] ? rcu_pm_notify+0xc0/0xc0 [ 3175.940895] ? find_held_lock+0x36/0x1c0 [ 3175.944996] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3175.950559] alloc_pages_current+0x10c/0x210 [ 3175.954995] __get_free_pages+0xf/0x40 [ 3175.958903] get_zeroed_page+0x11/0x20 [ 3175.962816] mount_fs+0x210/0x328 [ 3175.966286] ? mpi_free.cold.1+0x19/0x19 [ 3175.970373] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3175.974986] ? may_umount+0xb0/0xb0 [ 3175.978630] ? _raw_read_unlock+0x22/0x30 03:54:31 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3175.982797] ? __get_fs_type+0x97/0xc0 [ 3175.986710] do_mount+0x581/0x30e0 [ 3175.990277] ? copy_mount_string+0x40/0x40 [ 3175.994536] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3175.999321] ? retint_kernel+0x10/0x10 [ 3176.003241] ? copy_mount_options+0x213/0x380 [ 3176.007767] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3176.013329] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3176.018892] ? copy_mount_options+0x285/0x380 [ 3176.023441] ksys_mount+0x12d/0x140 [ 3176.027101] __x64_sys_mount+0xbe/0x150 [ 3176.031100] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3176.036143] do_syscall_64+0x1b9/0x820 [ 3176.040036] ? finish_task_switch+0x1d3/0x870 [ 3176.044528] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3176.049480] ? syscall_return_slowpath+0x31d/0x5e0 [ 3176.054442] ? __switch_to_asm+0x34/0x70 [ 3176.058518] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3176.063903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3176.068775] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3176.073978] RIP: 0033:0x457089 03:54:31 executing program 0: r0 = socket(0x50000000010, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f0000000300)) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='bdev\x00', 0x100000, &(0x7f0000444000)) accept(r0, &(0x7f0000000440)=@ipx, &(0x7f0000000040)=0x80) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) acct(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f00000001c0)='mslos\x00', 0x5010, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) mount$bpf(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='bpf\x00', 0x0, &(0x7f0000000440)=ANY=[]) ioctl(r1, 0x8912, &(0x7f0000000180)="025c2f0a00145f8f764070") r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x10080, 0x0) timerfd_settime(r2, 0x1, &(0x7f00000004c0)={{0x77359400}}, &(0x7f0000000500)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r3 = syz_open_procfs(0x0, &(0x7f0000000200)="6d6f756e74696e666f003965190c8e5e07a43321ae9bdcf60f29cfa4b1094a59ba5ac4e466288247d3ee98682e6234adb230e19f849d1bb0cb5787fe5bf3d57b196d54369de6ba72") syz_mount_image$jfs(&(0x7f0000002ac0)='jfs\x00', &(0x7f0000002b00)='./file0\x00', 0x0, 0x0, &(0x7f0000002c80), 0x20000, &(0x7f0000002d00)) sendfile(r0, r3, &(0x7f0000000140), 0x80000002) 03:54:31 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa00000000000000}, 0x0) [ 3176.077188] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3176.096104] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3176.103837] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3176.111118] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3176.118414] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3176.125705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 03:54:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x90) close(r2) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3176.132984] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000005 03:54:31 executing program 6 (fault-call:8 fault-nth:6): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:31 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x5]}}]}, 0x2c}}, 0x0) 03:54:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb]}, 0x2c8) [ 3176.379079] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3176.386686] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3176.398106] devpts: called with bogus options 03:54:31 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 03:54:31 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3176.529850] FAULT_INJECTION: forcing a failure. [ 3176.529850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3176.541787] CPU: 0 PID: 5594 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3176.548746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3176.558132] Call Trace: [ 3176.560750] dump_stack+0x1c9/0x2b4 [ 3176.564429] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3176.569643] ? rcu_is_watching+0x8c/0x150 [ 3176.573813] ? rcu_pm_notify+0xc0/0xc0 03:54:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x900000000000000]}}]}, 0x2c}}, 0x0) 03:54:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4c00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe403000000000000]}, 0x2c8) [ 3176.577725] should_fail.cold.4+0xa/0x11 [ 3176.581808] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3176.586942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3176.588689] ISOFS: Unable to identify CD-ROM format. [ 3176.592512] ? graph_lock+0x170/0x170 [ 3176.592548] ? pcpu_balance_workfn+0x1700/0x1700 [ 3176.592574] ? find_held_lock+0x36/0x1c0 [ 3176.610292] ? check_same_owner+0x340/0x340 [ 3176.614616] ? __lockdep_init_map+0x105/0x590 [ 3176.619119] ? rcu_note_context_switch+0x730/0x730 [ 3176.624079] __alloc_pages_nodemask+0x36e/0xdb0 [ 3176.628771] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 3176.633799] ? rcu_pm_notify+0xc0/0xc0 [ 3176.637715] ? find_held_lock+0x36/0x1c0 [ 3176.641780] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3176.647314] alloc_pages_current+0x10c/0x210 [ 3176.651746] __get_free_pages+0xf/0x40 [ 3176.655639] get_zeroed_page+0x11/0x20 [ 3176.659517] mount_fs+0x210/0x328 [ 3176.662962] ? mpi_free.cold.1+0x19/0x19 [ 3176.667023] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3176.671617] ? may_umount+0xb0/0xb0 [ 3176.675251] ? _raw_read_unlock+0x22/0x30 [ 3176.679420] ? __get_fs_type+0x97/0xc0 [ 3176.683322] do_mount+0x581/0x30e0 [ 3176.686862] ? copy_mount_string+0x40/0x40 [ 3176.691105] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3176.695872] ? retint_kernel+0x10/0x10 [ 3176.699757] ? copy_mount_options+0x213/0x380 [ 3176.704250] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 3176.709093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3176.714635] ? copy_mount_options+0x285/0x380 [ 3176.719157] ksys_mount+0x12d/0x140 [ 3176.722794] __x64_sys_mount+0xbe/0x150 [ 3176.726764] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3176.731770] do_syscall_64+0x1b9/0x820 [ 3176.735661] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3176.740597] ? syscall_return_slowpath+0x31d/0x5e0 [ 3176.745522] ? __switch_to_asm+0x34/0x70 [ 3176.749601] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3176.755003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3176.759856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3176.765056] RIP: 0033:0x457089 [ 3176.768298] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3176.787198] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3176.794920] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3176.802235] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3176.809514] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3176.816795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3176.824059] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000006 03:54:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008804}, 0x40) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:32 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendmmsg(r0, &(0x7f00000067c0)=[{{&(0x7f0000000200)=@generic={0x1, "588b5f2ad3566ddcf8ed592b739fe2b760fdd430691d1dd69fad8041f43341ec7085fe72fb14ef022f1f6042150c376be861af1095c8be77702d372c89c062199368053bc54091d340d56aaec3b823187a0bdde8c373143cf77b4b5585ce4083133475e77499a7830fb0bf3e74111df6994fdedd498451e46ac5d6f19af2"}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000280)="09ce75aa13fd9fe1681ed2a955aebe77642850ae2e722a4939ba6505640b09a94add84aacffaf42ba5af049a5de7e8fa604526d6c331e2355d39ab99bc4152f659bea92463e6dad5c48a823b0d76", 0x4e}, {&(0x7f0000001080)="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", 0x1000}, {&(0x7f0000000300)="aa8aeeef812793c33191bf063d95098ef45a6863d37d7f1b23e326df6823e3faee91395581deedf41193f4acd82766d658a67e226c2259ceb76f8b1cbc37de60a6346173fd0d15ddefdeba0354f036b9eefdcc30269fe5332143a80ed5345c0c5744c876e8a166b8672c9e668eeeee36f73fb4d341cf3a95a33ff98ad3a231e663eccfa7331459936c3b76babbfafa2b0b3c6fd3bcc94b328eec41e49c2ebdbbcbf7e4308508af45bd0aeea29f52d3e5cf8598ece596b89e9db149d8561c25228e2b11a9e16e3c643bb584f03b64affb55b60b823f85daa576e4a34ab43bab093535dbfbe5e75ffba8ba7e9d163fbc95aaadb537f61d", 0xf6}, {&(0x7f0000000140)="1d2806fa5d050250a57726352770b4426bcce0acd61aba6c8025d58e68f5ec5ce335862372d622a257b67131", 0x2c}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000400)="aa0bdc758f5624da5661f96e452558fc3b6aafb54e35bba1941d3d5712d09df3add2cf7ca7abb8e4651e236f4b7092a79cee573d13352f6d09669d33", 0x3c}, {&(0x7f0000000440)="5820fb0597a799da8286da2173781fc6376ba6289b56a38e301e91e52034e6f0f055f3c704f3e8ba", 0x28}, {&(0x7f0000000480)="3d5a6cc530fe34ed065c08f800c5bffdf888b8", 0x13}], 0x8, &(0x7f0000000540)=[{0x18, 0x113, 0x2, "c52f"}, {0x70, 0x0, 0x60000, "829474d32c72d553c66e500507b3e3ad7b772f4bcde344a26228fe520eaeeaff066846fa2250847ce044d3fc6a012314c72c9a24d994eb19b7026c585c15cee85d38ff13608d4f63ae6a96e1cdb86535a8113ec0b90859e25fb0b1572a0e22ae"}], 0x88, 0x1}, 0xffffffffffffff82}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x3, 0x4, 0x8, 0x1}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)="88853b66299f19fe8051267653e0b52131bd908e3543b87ac01e9b55c5cbc80dcae47ab995267dfa53f826ee45303bc62e3d487a4a66a4645ad969d04fab64d3530422bb9db88d4755dedd52a578859e3ba963c59187d924389b924818378716e9a86e2191180fae036dffdd6f2b289b1cee5b5b41", 0x75}, {&(0x7f0000000700)="448278ffd30ecb6033d013902e955985ad97b1308daf70175941ad3fba98ab4a6f46ededc61a50b3f551d0ddc80dee9d059faea9f62708044be8f85587cac8efc251788dacbc985dd47d3641497d5edd61b84171e8ca25173962d466c85f18a7135b546669d1a0db7fa82d5eeb7718a674d45000fdc9979e8911cee7af51a75df43796d89d518bb9870e4b5e721a8ad965efd4a40da011bd39d34738ee1d740fe85c35e02645b7ec6ed0fe3cc2f2b4be0b05dd45dc2691077318a65a090fb9", 0xbf}, {&(0x7f00000007c0)="5b4c666c149d2c7730def297af0508398197307ca0ec9e12a52280c967569df366794d28c33820228d93e676fac0f4e28bd6cec1717157831c815008fc139fe9d076e61fa4a696cec3b844ffea72a7502aa2ade5c4ff2054fbd50678e9716dc2070477608ce45e1eb64aa6408057a942f8fedd925ed8b1e697f4c480cad31db60ad06105adbe7918f4487aeafb9df46298a53ffbfdc29f11b82bb1b979c92cc0a65aa399e61d33c52461dbce0f593bf898d735ab3dce0bdda2bdf58a859bf13b5fed07026922f4b458f92b1fae6508ea449b45", 0xd3}, {&(0x7f00000008c0)="325872ed44f470b0db44e2bfd13355bef73ccb5b819b69701c849b078ffc3308dfc88549ec8215c05b5a3c8b0dea6f9ffa2b79", 0x33}, {&(0x7f0000003080)="bbfaf236d93455abdd877e77cd69cb1e63bf86ba72da914e7639eca1622797e089aa6981551d448df0a009795951e01e221cbab23bb401262b948c3a7e2268963be62f790ef2e1f7652b4fdf6cc50c0c328e658fd6022a9473fc9128d274581d91a33177b9c2a1e5571dd9128399c7190f37c7597ce1dd8a46f5c9e6ee9b8e05155598d98121230aaed031d659960650a4bc73bae277da97794dc65ef67024485a4713ff76c472d6e8530afe767573641c737a59c981e6859e4ffbf0c45cae7f85037923a191e908e32f0b6d6edcadae80f5e79e285963d14801da9107d6a82e8e71cf8d3cfc2330b9fe7ad5319ea0c14afa821830e0f06df9ced4e35f70b3a8d8f92d67cf2e8c8b0ab4073e843d47a3410da24f2b11cb2e492e1338fedcb42a907e4a5f2061ae355b164baada356fcfcfa71e7869b15325b33558f5e7294f1de014d078be41924703522593ad97c9c39f4a9f304d693f476379c97b579da4fea3e2946ec9579a5b1013e9303a7797d9e7f8facf6a203bef0d1a56f934102cad900af8bc3c08b8ac4cb86721690a1ddf0e126837c2529709295276c8a51c4e4b4f8e2f1a0b0c19887d3d4ce7b2f1462ac143b880c17ec9e9377437681c2cc019a49dcb239bc17fc317fd27add65b51720050d697d9ac624a0e91ed8586632428987c93dc00c0fea2cd45c37aa2bf0259e7073afc4ee257c7caa01bae9b56007b905954bd11c8b82519369cdfc1022da9325e951fa22f1c948d73d7fbf2dd3672c2f073aa396fad10717c616cabeb20a89a41598e41df33e28a1a0e877536b70a393fc4a31370405059bb15217a3116d232a16f2bb5494e7cb7a34c500d692a84be91817964a3151ccfe2f097e423bc08be2a9c07485aa61095fdb54c57d2582083507a4fecafad2b8f1693af4b152e4eca4bbc33713d2ee340d8f2e544d1a058c53d8b772aa449fd357931e38eb12981dab51e051d35a08c850e651e5c0b0ed8cef3bb7242626320071086ba01e346cf516bf64805784cc6b9e1e31648656167c7982958b8fdb7101a4068461b8cb3c8e40c377553db5877f094a3b9ebc7085ca1fb06b1c0c0b9401ad49e92230eba1cef0ab21d3ef74d56741426603c6f82b3acac8137b08b3800c399e045d79f8bb768aa8f9b049d41f5124b0d6843531aae1a6acf958b6510ede105f0402615f80205bc58f48303de3a1e2d9f74912ed9eecc60083f5941d55830bee1d18d540c6b9160e0ad8b30d15e4be31bef74994d4c86088abc68f7900226e0a78f82c6a127c8a1c9e3003fd46061e80b7bd99b320f629ac37b7403843235666b9f7d0d943fa2656dd8e06aebad77fff4898032b0cd636e23e75db790b1a06f3fa096f3e4f6d1c8c225927e52703b5d0abbcb2d91d7d949283350bd25987e20034d2065456f7930d0ecaa5007e06291080d636ad80357132742826d64d6b43c7c56ab31f1caa0597bc82f8aaaf0b5523cbbbfe4285fbabb2e4edebeba65539cc2fdbc8de1820382435be412d64791b11e66a8fcc72433fc868f5c023f0f3bd6c6b02846ad02b655661d78e32cda8dfdb38b972691885b597969bd3b29f770bb0c6176bfd70c4c617faa6f76d563cb07b9d4aec4c7ce5c050a1a1c384142dbac50c6db9441e88edf97cb9c9cd91b1c35681dc539d1db678c45dd54418f2d1c770986acef6d65b1d2c578c5c27f3cd582b77908a79152d124ded27cf587bb8f6896d9ac3d3a6ef7ff756c4204c725af55bb9772ef1468474b18afd43faae187cf0d55d1f97c5b22967d99717fa065707006471ec1bd0aac04a7fb91f44d3c5a947496bf8debb2b87619447723fae9e51a5bd862ba0ac0bd5bcbbe2b93abb2013b0d3d9f05b479cbb00333c62a84734736b20a631df4a81a2ddafb589b23f087faf839f35cc5ac316a72da6bb47a2fa4df90b17730a34efdbd0627de312347ae2c8fd79a514381930e76b8600b929d0c971c48d0f97383b8cd993036a77699fcab4d91743a7c3078eca00fb75e2e538ee8159319f5435c525d752331ac89bb200c758f32be3bd697bf81c8e1337bae5abceb9bb485dd39c5b9121fba9a1ab0fab75445cd141323b3b2d16a024d54d39eaa570a72fa89c07781bcde63d206ee0657e53d5d1416dc09102f18efa99f0cca934be7f00309dff6e512f19cf5b2d6ccdc0f8454b301607019dd87667ca1c53b4e1df5c86f5a4e21dc5e77fb08d59a5824baf2cb47b0db8880815e3c7d04e70f0bf7d86b30dc8dc3f3e454f0ecc203944a83d370a88c6dd8eb1a854b5f7c86828f085ca3cc5f1dc058adf447cf8b2e6c20353ce369fa43a8788536b18922d899eae74ebbc2b1fd3cc15c54761a70e53ace94d8d6b17b7705fb287d430cee084a1a12f68d3c5fb02cff7cfc11f76d692a55993dd9c7f8fab1b97bee065d8717b8d4980cb5c446972f11293e040a2bec69671d625b8b91299b446481958ffde6b8b48b030995e37028becdeda243902f7fee71339fb4e318a00e4d597b3ded23246f74ab772fef7e694fee845a7fd6bc83d419f7d65e68bab1bc5ed7b41c3287598355182be606d2854feb597ded38312dd228ca3203de514e9648a07bc32e85f014bb2ce1e0aff826a12f569de75f8bb61d60c8d2e78cff24408c55d4915232739a92a2942eb338727fe6ab79999bd61af726c7e98f7e1893d99c251842b97049c8f998f6ed29b89f7436b1c95c3b2314a7288754703b7cae40f5237ffb8eb81cedd9f8f5ca5a96a4e0f6811866fd75024354055253e8901b9fdae7b18c271149bb06116d7c15f6b7b7e05a1f2aa4354447ac325ef945daa6a6c9894997a8378386afed5bce0f4af734759b280c29fa920545003e86c55c5cc9cd854cd0961e1894828a29e311367616317e0604f80e309afea769b306873eea18cfb7d62d31786e6fce7db4982e74c3dc1872cfcd2c3fadc8232d3f09b98556b9eda7d1c0d6dc85dd9bc4bcc355d30a75ac7281b234dcd5521941f8bcb90856ba1eff3df3291e020451ccdcc783e53732294b86681e0f831ee656968e235250074c281b5ed72538ecef3743dd9ff4f150982deedd129403bac4dfa7c9b23821d2732ecd434a2e0c8093b831fefe6f9295e50f41fe2202a0c049a081383381bf6542e094ec7f050a9ff8d1b170a9e8c89422b73dbb94327ff7ea7a68c0be6f3ced91e342033e202c9568f510f6829c03fb40a4ba7ce206185e869fd645144520b2b8a817147315a4fbd33c9d36f25bd8c5de7cb93ac174b1d15c5221ddc2eff20438db8d1cb0e3c8a7b46cb04b359867291cd9e2c2979895d1cb590fde3373d94572a870b585e0cab1d2b810b0327852445b31370140c54db87c4fa8d564632064f0e960a5d6a45180c94831762608f6da149dd6f976fe38fadbaf35977840430ee6457d0dc1a1649c4acc5d6913723eaa853a604c8ba94d021ff215952c363c92cc5b5c73cd2650309ca58e9fef5367786f5a8d59fa688fd5527b4430223ffce86977627472bd9543557753baabb3686adfdc7c6a07762cd2888750c9038285edac6470ad045d2b17edd8a4216032a5edb7ee1e6518e548b3e9d8318ca5c291277a3c337299cfe0105451f96ceaf53ca1ca1ea58d16b76aaa4e26252e519235c0776aa4cb837c7bc23fd96717947acf4c246280c260f78ffb06adb28af1dc62f073b3811a461d47822d9a6859d568e8746e7ed16b488b26cbef587e6c0cfb45d8902cc85619d547d8e16060de4b7a959f6af5e26ed571a2f9ea7c4eb8b51120c692ebcb0771e56d06779047640b3c1c5c81b612a94d6f6a87c98ad617ee6a2b2b5157fb37281186e8c7dcb66b6837abe9044e0e9150a3796971946247a8460d8677ad4eb778fc6ce1a12f42c81559712533efdf8083f5dc7b99ec06760cfbbbb593fa3a548f3f631b09cc65f0bdf5d31d1b9a4182420717eff695a156598104191c853269942465dc6b1ad630fc38587737bc3a55753a9029b0d6892deea95b7f815f0b25932156627cff96ce171a265777b42639fd0274653da8992686d16861306665bee38d8df8f016a43427f5d7a3952d3064215e7cce2104df7d9ff61ba01c85924580ec87fa078d8f71c8e5c124544a6689cbcaa7a42a033d23ce3e7ecd7bf71192529d1856669ac784511c3a3d9f75ae639f07b63860876e7bd7e4828f04f26c988a18203c40d93a098f41ae865c89583bfc76c9033870b21bce889b9bd365f3e535a22342b2a20b88509f2122244ea6c4b5b0f74891d7c6bb085968586bb0fda121e8912648f7551ae84aa640eff447c6fedd42830e1f619226fa87a079770e0ea99237b495853491aac1f97474aade2cd224f9b858b04bf96ff820c1ee9930ac130a7de6a1049035e056143a5bfeca129cbff3dfeaccc99a519c08d2bce8622a96281a623de1c9fa582cbf1f4f4fcc7ea32c4077d021a249f7b81d51dfc89fca34016ed01f1b71ca72db97e5bfc113a9fcea96d5212dbbe103fea5398ff915ea06468de67d921bd29d9d8ba32ffbba728ae1981e031825b960b40dadf1218ff481e789e4d2c8e144e4bf58f00dd65db423b1e31094be464605d4193fb224e07111444eab63994efe9564270590b5d3c856d79b0ebf015bc0997065b30df05518aa23b66ed8d93bd1f825b5ea0e7e5a4a108b6f5ab01f0e44841476f797eb2b70d785c50a60c58ac9c9d1e48cee87085eb122fca848f7ccdcd7b8487121c26256293e059be79b786053e01e53b0cd19b4a2ef8617d2a87a9d319b0ba7359552595100dafdab50bd879025ba246dfd6ba431ae1810f7de38237c5d46dca482b961a20809ab92a7519f824f2f540d1a1e1505c52a1fa6a9495f74ce5b1944cae7a6cb534d13d5b8fcd3fb29551deeb53213ed7aabca8f17b8a2a305ffbb0a95b99dff18d98834a84c4caf3858a2db2286b153fdb5abe8b246803aff607576a01bdda1abaceb9d242f0e2cc6f86e8919aeab3cb8e878aea1bc1c3c1431a2fda24825656e2e01a88786acddd4ae0428bc53f51f615c16f6465412b67ab4badc7b16e56231c8af34ea289d85339bd381f02627e6a188fd7a12e05952646db7f1e16d3e00d565af4b537f1c7cf8da6cc0c887180720879773ad5681babc398a04ae6e3b9c3316cf0e27c263e8d7dcfb9b7c5c50379483e91c0ce2e38217c5349b7b0b15376962ad952c70e3e476d1ba8683af8b859cc0615bdda0c098a2101eee3ec6311f82abcc2337de29b58808b6180fdc8365be3237e09e524d7004fc110550dfc83b07dde9ac581110cf63254f0ad6135dca3f8faaaad7f14405cc89376a7becbab2c2ced4c7597db95cd2e51f36894918c83880cd185905320cd20087689f03b5f1ca9e660ac9735abac7b7619eb714d207fe8c321ace40e661eb829f26b8b1d4dca9452fdfd78b39d20e6bc1913a303a9646415d6e7a312e719f724ef86262376c344cec96c91075bd7a6afd6cc5a9c3159ce324b0a614198de1ace85d15e0313cbd8f5f70ae7f4ea670a648085ff87fc70c8ec7ee1d6c47785ecf74e6c7ec34d5fc9ee4aea6d6abb566a4b3bca4dabd373412aaa46209479b2ce7f37de8d9d8ca8b38a8fcd43ef3a1b7f6c1ec08f26821a69a7d749ed40fc5c1303e4c6a682e8340bbde879d26e3732a28690f71f511765417d5c7e57b8e6e153fc9d1c437b666d3eb2151fb767393352197518990f280dde2747d10b8f187b7ec2ae91e2f156b154b5685152c015c62efee3d9ab2f02f9d952d7dc26c1760ba82c1f6585514ebe187c0da661aef1f", 0x1000}, {&(0x7f0000000900)="5dc1ac6904d292542de22558c6393383e162ad18d1e64231de819d895ef46a0efc67a70d9fef55acfa8d53e54d8aee1d679fb5eb0f31439e8cab3653f2ed3be6d4a5b00aff9298d486a6c4c135c95b2a83c31f445bb08fbbc3b217baf17b133250640defd3d55efa18f78eff2810221e959529e2db939de35dfe247f85407699a8bb0401e0f95122ab565355f8", 0x8d}, {&(0x7f00000009c0)="41fb6f5b448e9c3875a9a53702bce6a1bcccbaa8bb9fc20729d8ea6a80a8fa385fc4e51a862d7ad801ad0137c8600440d0c54c804fbd52273546fff2bb0e16a4530fd518bab0742ba905ab5c3a6e79906e0439c6a195d39e4d2bf5d8629c055874f53f1c63eef70d8641868fd33b7a85098d980ab51f547a8c3198cbab20bca8f0f8d9ae671bc6a0671c865fdeb5981e52ba6aacc5e00966104a3786d09630f5f2769b6b5cff698ebbb7c401ada0144150bb1eb488f30ebd75b85bec1db4dd70da0c8c5685e7a9d7c7b45d31fe9444341dbcbdf35adba1f2ec2a", 0xda}], 0x7, &(0x7f0000004080)=[{0xf8, 0x13b, 0x5, "0804bca37a1f8b5b3eecf87777c29303133d0d66ec5ff6bd9b353d9e89b09259d5a2fc6856224a5a68da0b9a2bff63c6117e7a1bb516a393a7dc919c61ebd87ec115350f9fec1b69bfd8be618c83a6100a7f638dec334dae265919498bcf321b3de65dc50c663f17c781dc560fa91ea4806b0030aaceba6fa2f424d58f7cd5c81bbbd6c72ec28366342dda420fe24e27021d4250b94fdb52d0c01cf33f9cde2d0e3f3f55dd3f428169a0e7f9a814e52d3f50666c84483cd89ac131f654bd965f64872cf820e32f114e5c8c9cfebc397930180e5b9703461374c973d4967e4f1f76dc"}, {0x68, 0x1, 0x1, "79fd04aad9b6f837c7c8157f69d6c4401dd3d16ec8c8423a969feac9d2c06535b0b41cd8e4c8558eabc0e2bf40464e1e3c15036dca57052b484dc104a7c89bc7d5730f57571b0b6b5793d9e66a9ec48b9b56efb17b8103fa"}, {0x100, 0x107, 0x9, "967ae3677dea26572d3581454c9a6b5b44ea82cb8f90bfda2694ef52b007536b6b362685703596370707d69a5b561e14ccb94f55a73c52a2ed7689622a42b72cff67673f49c4b60e26f2a79eec61a8b344bde386ef622282217f9c5ca18d134329869bd0e91d56e4a8ec145a3c1a1513a2aec04168aecaf6da8982027a2f95cf4380b26fc2008d856d15224b743c5499224043c84d6c929365259c51c9941dee61c7161bca9698e55e63a74b211121f8e01a8b09b86b91551982802b2fb6cea72e1d09f4985e722f881585352ebfcfc36c6be1d9926869d0fb7c0173c83a5ddcb2ce5f5ae70be29b235a4e5b2cb0449e"}, {0xd8, 0x117, 0xd0, "ad95e8f079b941f5de82d43b275ceb6b3a8da077b890c0314412e21dd8ee95089df7ac391d528b87eda5dd1bfe90fb286c9eec5a52623f7567f14a14308061d4225807b89009303fbcde1818d7e628557fd356fa425b6776aac33437ebcdee0553f00eb66f2ec2b6bbd69e135ba1d9b746e3634ae804dcdb197125bdc05340ad68de74c495f824f69f05254c1948cd2b98c7bb47f07c57794f7e637b706745e68fbd4ce340776c11e6885d8a3ff4255b09eb7524a1e511ec090bca0dc647cb5a1f"}, {0x78, 0x100, 0x36, "c47c6d7cc5579213b726d391ba5ccd80a5e511f2a0c301d44290753c3b0ff35a02edd53624794d69c01344b6842a42a3470123818d7617b6f4b96d9e0597394ff649f6d7fc4334d2ba4b79a62a8f36f0140c2440f9e64e8236f8d70f4f8128e68ba2459b"}, {0x1010, 0x118, 0x100000000, "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"}], 0x13c0, 0x40004}}, {{&(0x7f0000000b40)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000005440)="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", 0x1000}, {&(0x7f0000000bc0)="46ee2a3653cee93297164a355e0a08ec0a932519c1a8a1c7bd001eb495cdc6ab8fc7ee0f14b932610ade82e597493cfe08c83df4d87824c210fe527e09d26b20bb3cb1b22095466bc345caaca6c0d7c9ee7bbdc042a32d84bd31da62e9add7b65d83d58fec63564b36d6c81c862e468211916f55e83c2c96272b00d4034d52dc1bf543139a59b48e797da22de55433d31af4c8c157fb79f0c129dd1906230b78e8dadd50bdd5ccc3", 0xa8}], 0x2, 0x0, 0x0, 0x4000000}, 0x1ff}, {{&(0x7f0000000cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x2, 0x1, {0xa, 0x4e21, 0xfff, @local, 0x401}}}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000d40)="ecc473c60ef5f3bd80f63e820ddf09e93dcc9a21b5d7323873fc9f2ce9304354ca86bd9710defd711026574d2527e168367b10b33fac28c954d64cb151930f4dc4f7b93e410570293700391312c619fe402b022c5d286244991be0582c05", 0x5e}, {&(0x7f0000000dc0)="cfd6c3f1166127ba4abcbdc1d34c7361626c8d7ab064", 0x16}, {&(0x7f0000000e00)="09f66a8f5f206a2b393a7d246893d73b9252d148ef5103fc48de0498b153c7fe418198ea2b3cf20e843428ff394dc1a579ec08", 0x33}, {&(0x7f0000000e40)="eebb99d864d6696c9b7ee32d7327e13ebc42fd46b404d1fa29cbd1785b6e4fc5ec7cacbeedc9e3f6c8854ea841ce19544a428defbbff37cb40b798cab988ee7075aba7e61d4e3fc472ca558fae28c5bbd1a02df5f293e2e85d329d18f3ff68f7fb227e47769b9698c3c5154e2b863fd57aa789e5f52c4c72ba859b18c98e03dade9a14e432d26185abcfe2f71b7fe7ecc02caa08b72f64823f2fd83e210c4bd2049ad7c54ad9ecd500", 0xa9}, {&(0x7f0000000f00)="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", 0xfb}], 0x5, 0x0, 0x0, 0x8040}, 0x7f}, {{&(0x7f00000064c0)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f0000006780)=[{&(0x7f0000006540)="624dc6c5bc4175da6e019fd134037084f11f8444ea7327e9ff33f758860b1bf60a6d22092cf56f0185c1608b4e6d1661548629a2799a372a5e9184046e54a776a7c4910953bf13913f2ae1e762eb9131ba308ce2759d0830c5029e1d7772085da09792ea97e0e7ad607d3d3c3890088e0e2301379cf6fb93e394d40044214f3f258aa7e72d663931235089f824dc60f49ffc0edd1af521fcbe0c81bc89a78a4463029ef8cc2c17a2fcd3119765b5a65fb49145f3f0c9d6b4dde206f44296", 0xbe}, {&(0x7f0000007bc0)="7986d26fd9c112d20a763dc7978d5405bc4dd9439181bf36bc6e7478e56f32b15b3ee764316e32275b228a198402a6d1c6c0e1ef19739110d4c8c5b87aa569def5aafd36cfa9aba7dd0c7e782a4ec606474842f2112efbfa7686cb2ed50ee20a98d65156a56f1ff6cbf74e774073cc47a01324516eae359edac3e36cd72172b1381ad1038f4e9a09260a88c38323ceb76fd25f1ca6fbf4a1357232fc26a388e62e4183ef2b612b2b01c63b84118c143e03991049ad709b55389e1959c08a97cac0f85d5b68562b5416aeee16e1a1cbd2a52cb108d25d62caf82a5a4784e780c1aabe7f95842300d9de1ec21f7772e5c06bc01fcd7bdc588aeace7c427f89988f276e09d45aac72d7360cde38f17dbf7e6b5c1b875643e620da6bb1edeb991dcbde71689517cc9a52ca702e71146f395cea7da1a7df5687d8c5cba60103a1b9f062b5dfb09b017ffbbb5abb9507a17231c49ba0c9801c6579a3d78ab781ec7d24248ca1f97190529eb4667dcaebdbc13ad4aec8fb160275b2d2bcb6954c710c9836fc49af854ce6e46f92d592da9398d538d452e2ec7017585c18f5000fe3e2310535981b5d1bd662a3d54466ff97277906b3866d63524a2b5ef81fc1902c821fac26a23c3e1c722116982a68c7d7ebec50ea9bd7f59f818ae69ab25c6b89177397363504c8e5efa2f4d911bd3216183bf136a1f4328d53c6dc7c3b3a9180d08657feaab7ad638ab907280bb4d38817a7b329a6a6ca5540566b0b0c235a40bde509124349ee907509716364d6ca4b8dbdc7ec4e828b39c9585f4b2db7189fb49d5e89756ed3f7f983abd7630cb6aa016e82a8a8d07a71b55cddc14efd2c4444ebb7960b7a8b92ee70f0e09e2144d5f23a71fed0327a30c70f0c28de633a1d8d1c78bb12fa6a4929d0d45cd63a97f242d35817eb6223175cbaad344a503743728d80360b228c9718f564da901f4ed6e92a794828a94959154ce96f031974e1a1c050570a2bdd82491622ac6f5f345c732332d07711eb73ba4ce4fa0501893988230622ed2a2590a9a7946e5e368039418746f653dbffbd87241426d53861bbfd477c7526cc555eb8548c17014dc7a5bfd31f6747572849b8c3582182cb3f6b52d79f10840ffdf6aa56045a22eec425136211ba1b16a6515a6d34ccaae8bd4b0d387b4682d2a58b12a776226ba52afe5f1f5d7e56f14b2c81e352271ae3954f3928dd8b7c037cec49ec68bcf9407bebc3af47d31e61be71b3c8dca2ce8aba62a1d1abd994e7ff158392803a9af3d3747a789a1a62f151f122ef9c7b5ddadc51e3a58838c78764a212171568ca52f1aa74362921008c3ef211bcccee91110cccfa0eb61b41993a9cf7cab26739eef5361c766e1853212e52341bd3d942bbd141f4aa1f7b80fd5dd15829deb98cdf94210fc0f85905d99b3de805bf896f6e19626a46bcde11b1f6d5202af9598cd5cf893403fb02e2891fa089164dacd991794ac56bf9c2a386739a6acf5b828949a22a57a3c13ae879af7e8091f1b7b78d77dc99aa9846bee4fb95f34f474589ddffd686fe6e1d3bb45ff951ef24b25cfc25fa85b71d07360455d6e5890c5ddcee6bacf6ed5183324758bd42b4f774df538138d1ccc28b1c0cf1347b252b407899d5481f69befa5b1f21c86de2ddadf1b3928711d9010f8835e94a75cec600871384ddc0654e310842f91afef0d96466f69635952ccc359c8b1f2c63029d6a10d5e7fe066b0c864ebcc902ab04f391ca730b825394318013bd6a57230977a914d9ae14144dc10bdea315ba8b065d290ac42307ae90f7037c9171b3324ddf4fa9bd44038ce38fe4885a0a0c220999fc7201b77149855b052ebf0c68b7acc3bd0b0deeed6df73b71d38efa2de64fca618412832a4e5ec6af640d095826150050ed37c6b863dfa0eb22bea182ba08761d7eeb98fc1e027495e99113184dde06250024a2e4cda41f655f5e4e0e993eab8e291b59be8396fdd5922f3e0313470e1962a479959ae287dea1c35d4ca1aff1d62935e4e3809baf40cd01ab3370e40448531bb1f2a76e585801d4626a2ec7f6e1e31c63be069df0cb34852e420667acd3a4e2e259e5dcffeb975afdd2f53fa46bf4cb3788cfb244a06e4dd14d942c3e8d859de786faedae937264af8d46bf84d484f02b91b99d858993424528d2a16e287bfb6e983dd8b1f78fba84826fff3c7061b58a3f1143ffd17ec2f702d7d570d3ea6837d3e8b79eae265c1240838b850578dd4fe2988d73bc6f31605257c5095741193393eb46b8cb88ff4bf25de59f6fbe079a31ff20bdb29d1994c1adb36103f24e74cdff1905561f09319d2e9b8adfb67a6e674fc767c3ebd3f9b9ddf5c034d7cb46b06144d0e54e41adbf9405fec6a7da801240332945c29d59519ce9f57ab3280c6ae1efb8ebf52dfafd2394976145781536a9c4768e5d56aa48f43a25d2cf4fc859ab572123138c4271f7fedc8b27261ab326a7681cf7898f78f721801c05ca1357f18daca0c08f153e2f72d930401725f85ffcfd37c95bae245b0dbf0be808ceebf608ce8ecb8c5c4418ab05d51e123103c50a0d4d83aee7e7840c694d4648b491ab1ec94d8d48c4a206ca673b47f6ea8a681938b16c91b43549fb3599df27f164305998515f84ebec58b5ef131b6420e223e349345dfab37d3f3d35482d030a27158f04460da725b6ca47b0d304aac0bd525a1f34162b71e949f15896eda467db5f8b393a52e500e009a75645475bf6950f27f335f3589ad3d49455ecfd6d93e4f1e11f4b0463201359120673664c242a6d5685a27c084548db2aba9785e85de3dbc82ad6edab6444869fc84fee280d4befa92db352519056b906173f30a0bcb596ad850adf55d53127e9f7a951e9ad94f2a1ce7aa16bc3852333bb2d4cf20acc67b754fe0c2cc6dcec51efa3274bc7d489e7d30214f9cf63abc47faab7006c16e0c4f5a5a88081dd2728785e187ed18443f0bf389a5e9559cf4458ecd92e7de57717adaa151b1efaf4cecfb98a0ab8ab01b6e22c94a4acbd8dc7dd6b0f89fd5dbbd4dad9efe17c237c7cad97feb7421b6a1460820804a9fc8c3b1a9a3c3b7da875f0094691286cf574cff6d0733d87ff68d247a86bb23858a612fe975e7aeee2dbc7f37c343e4af7b9730314f3989f9204af93bc649824cdc6ba15f9c2da19244473aca4abaea573e3660a7011f350adab428b15a9e665423947d39f1a34d96e90c08f7cf5ff10245cb8ccbf19b0b2fce9c0f347a738a7721a1d63abd25e538f84aa8dc3a79c68e619ba9500a56229b391de46b155b674ba161223bef2f0a5722caa0ae68f566bc6618750a6d1d2b492bd49e0ed2e37f979fea8457d292cd5c312f0907fc7b09dc4cba9759804fe27dce1744e7706c4407908b4d9b8c258f6aeb3d045adb8f1e9c469929dfc7d408dc267c9225d87d7c90130e6c9f4dfb348ee393361edcacda7afc7f376619127c6e6c2ada175d7455db6f0a969d5f765a1b8590124a72c579e910d95261afc7e5d11c525fb5076e8bc8935eebc3017fdbfb42208f5a0648a4fef14768e1aa382986b7e64a7c3cf1d97ef653bfdf71579cfb039e47dddfbaac76eea8f8c1bfa11cae89683f582d48fd3e4b9b2a4ca2cac94a4de080bf7abc74b00842190caf7f788c0e5094d09cbece44410d3521ae90346047cbbb4335dbafafa5adf6112e7ff3b951b5a5e5c381fad24cd79c780468d884b404353c04204682162f5529666d7c0c765e06a32ea8b35c1f886d6c28b0eca8f9436735aa3cca12ccbf7580103892d7f9687d359a788549589e83d55fdea576e875c6ecade08b4f02aa845e172b1388cdef86bfc4b5f2776f41fe04f900e0c3dfd6f58b790f6405284c063f3e0b010a36e3b2eb84cd9152b59eb0035a4fadc18e5a0feea31f30b3906e385bbe85a1929c9828bfea40d87dc2b2f11ca56212b0d5c87aa39ec3c120cbe5b0c70359d793882818de98f33026d81e927ea96e8f4a5b089002ac11e878c58bcc69862cc3f985471c56f90d09512bb9a1a53a4101bcd3492adf8b87160c7aa1b44640e3ab0f14707d15e1ac2fd34412e7f7c47c16ecb56aad6545c484409dc9938e031f98a710b338bfaf9e976833ec5a124f4ba674472f2a412cf53724f7b8d877b24b4c15c6edae7c9111787b83fefb64af1a9fb5a29a06d62af134eb61dda8f0e27b17c15b768499c02d781b2986f266e0d47744a7d6f7833ace924f21f6ab8e44eb8ebeeb24ce65e7cd17049065e78254cd65ec374b3e9e6a9359d7ebef6e77e7631bc44e108fe86c2faf53b20cfd7656f3148535d2b6f56cc4bbd4ecfa290a3f11c08edbbfefd827f49f203b6273104d5d755d33aa728ba402ec51002a7042369f3fab9cbabd977127ea8bd7b15edde96218061a14a1229fae0c0a98949b4bed53c7c9a31db567d154f60c503a7125adddeeae9d6c4e5cc08e131e7c4ce497a8e11a9054f4b2daae32f2dfdbc8163658dc69e687a162b36c245eafaa4cf90981b7d7b4c4dbffb70feb3978323cea7707f6ab93e17220d44830c12e197a0019e4a2d3f17b488fda6825d371b30e45bd69bb0fdbd580a288ca16af8e3a8ea068d46ce0fda2be7a262bee2aa1c78f52c43f319477f2526a78a2b1efd3b405f607cae7956f44a470d916efeca2767fb4be468cda044a14fd2dc8e76eb1fe465b04917a7bd274bc827bbb6f3c2b26eb0f121b2fe5a055c14b68e78bf9c77c3191b12b4e67bc40f685f749355591efb03dda81d460cdf5aca960b6a1eb7aea001d1d638af4a4ae32d49b73681bcebd99a140ae0014ad922db1542b9285c1f210f1848f857176c6a64ad75000a4eb2d1ebb9df6382b7598f5076efc96bbc86b98219c532cc5ef3d94086bb065757a594be2234a9374aafdffbb8b4e15e7b419e6832b6aa2f5c0046e98027078141540f171d485fb9f995c28adc59eec66714b569c48ccf252208f0e305217617ed37a9490ffb47ad1282cccff971b5303126a9ff7150f7b575b5590cefb8a2b3d63d2af7aa5226aad48095b8aabda4bdb5e701f6097396e5e257acebecd5b41029848f0ad4be918cf23a97c3fcd4a5dae5e11c269440d99ded0d514372325fe809a3d53c3e67e913a9ef78f84f09a931d41714e38153dada8beee7585058056059d77d776740078102a77553831503f4d08c8d693e0626e8ee06d71f5d948cac2b12475213ee1f4d2a5113931eeea3c61b515ad50f22d35d3b820568c7896e7128379ca761afe6b22e003dec69819bc601e0ef497df87126d17c8b3578cd0342247ee9b0c21094941933c52bb68909396905225991ab5909bf49e1f035c0891cc3239518ce52526e8e9d1f1b19c7666012920639e22b78c3fa6042c83ff8254db355f45070f0bbb0f38dd8675173c5b4946edd2b95f57f65c18808925e2c1adcd9e5cc5ccda42493a23b62d5788d40acf4d16f95971a8ca1661d223926bbb64ff65ed648698759211d1233f8ce9e515d24490236b8ede03f08f437858abe0874583b1260c7e9217a1e2c3eba34dfcff07f3d3d2ec17ee7c5a94e709c0f3a09c5a63e3c7f8bf00481ed4b1a8dadd6542823ef2c6265c7d49b1239ba7307b143fde41654377d2c69df3d964c9c7432a7261fc8386d7d9a5f31fd122d86a3a00258b2da7b03535df9bbfff357a07832f66061458e01f9bb67ab01849772a1b79457ec3af0db38f42d10634e9957e0fe2b45a37da6aede001fb16167dda6d7201ebe06a750286e8c62c372d95cfa7c2157a18f51bd27071b2018b1397659", 0x1000}, {&(0x7f0000006600)="f40608a485fa74f5ae79fb8312e4ec4df281f08e4e90e99dca469c931e67f6eea52de49d1b7e90dfc89f2432ed1cabdcece775a05e4899613dced7771f22b17051289a4f41ac88df97b4bf9dade1422f7bbd5b5a321cd35ece", 0x59}, {&(0x7f0000006680)="cb172a8fe8eff8740e4811ec530bd9ff40126c71b415efa6c264d1bf658df28e3f8e8cc00cbf5dcbf92b6bc94edb7d8b8b32097db0e21714f9f9d58a5707f4cd25ee9cf5799201fe9d40a0ad851c62d87265b19ca694d2e43f44b9097a46e7c1d613b53504df2173a898a1ef190992fd1518b561447dafa84610fffe0b51699369b761e04e6f547c3f24075ec4b34db29f54462773e6209ff5f0ce20dfb23340fe0fd5c880637b20780280389cb03a4b76652ce298935d0b2afd17a6cefe6ec3dc7448a47569b6a485a61de33c0b58e3bbae", 0xd2}], 0x4, &(0x7f0000008bc0)=[{0x1010, 0x103, 0x7fffffff, "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"}, {0x1010, 0x3a, 0x8001, "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"}, {0x100, 0x88, 0xffffffffffff8001, "935ec0cf5aa906cbf42266da0799719e5d592341d10d106637d253bd170a4695e780132033720ef5c53f415d8fccfa446b8515a69f26a63e192440e00894018742025dc8caeb49fe267e4058d565fb2fa353870bef6054e3dcfac8e800922e62ec533b88a190f3f06dd93e4abf552e2e435d23eed37fb78acad268e8659f27cf1eb59c713738ee82ab17046f376ed0a2ceffd600b92a4d506e53d275ee8ffe8e8060f01c7901b74952570504608b8e883b2fc97e25f904e01213c807d741dfddb0f98e8c5205e07ecf0f4cb7989916124c0c4e8ba662a1f9dbcea723ad53d4c3739f1c8a610cee3911aac5b678effe"}, {0x100, 0x111, 0x3, "6cb1edec9780d6ceb38728d70fae4e4a3c385f1bab50e78189c8d883bf5321f3fe862a2d73839edf1ffceabbe049e6b692bdf445e2e4ab8b91388d6387d4c740e15839f07348a8c32bee57305d7004b6b2bcd58ff17a267c0513ab276155c9058088179d16be2e65270857c65b41fb82a3d6c9543979d23300f16cb63f8622520cc7ec0dd580fd0b8b881c9e78b2f741bed8789240aec125a03dc86476016833edd40cfd588685417d4065039be26d8ca32fa2d8684b4ccc1f60eaf7881555154e60041727ee5aa9a9382968f81d6722ba6ac14716f977db76ec6fa74c5f7c99653795a7773e6476ccda38452de2"}, {0xc0, 0x10c, 0x3, "23d51e44bef76e5f5b67689258673b28ed237f24bc02573fd4d6f9231e13c3a54f51bf120d722bf8a913639eccce5559c0fb343b0583f5bca503928bd9a65961168e957eca2f28f77dc90552859b2ee3f9adaf9fb9149bf7fb7f84d50be11a432dde59726d25a02ba231076d95bf5469badbc6e306d06820be28e6631f36875c8cbf4b4928d46ba83355f694e05f7f0fb9b414129f294e7ce7924d257cd9cfc56991a12fbbc41ff11166ffb981264135"}, {0xa0, 0x6, 0x7, "b22e2de16353b62894054c5564efc549866b17a36b96ae39205be98c887c06c3ef8caac36d561d9e06cc26fce7b0a831f4225326e63ec99590125da6df3ae227b169a6cd1547e13375a3dbf1707b332d9e32f52115ba7e3084c63bbdbfaeb8b1b36c6df2e4f6c4631dedfe4ab5073752e89f00fb60f3a05649e04c651252aac8b8601a3766e468a6cc49c0e26724"}, {0xe8, 0x113, 0x1f, "1d6209288ebbcb75993df06724024ab3bb8964ac6d706d8bb8e9f6b50731821b73eb68da902219e5a7d5f283b449a25af15b1f445313d6a2d5667c88aa062a72ba213af04a3c76c50b0ba0f142779a73f08f5e40cb3e99c48293f057e8d18d2bc9d5a4ce3c8eaafb4dbd3b17d22568e919c58017cacb449f92b9dd31eccba797607269204fc0511d3dcaae2b8c122813aacf128bdb997f436b62a827226b9eafdff2660a6db493d5a86369d35976d4a7476ed0fcbd67ff549b895e73dba676d4dd07d65d400b5d6d62879d906fbdc4d215c40611b78494"}], 0x2468, 0x4044}, 0x3f}], 0x5, 0x40040) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000006900)='/dev/mixer\x00', 0x101400, 0x0) clock_gettime(0x0, &(0x7f0000006940)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000006b40)=[{0x8, 0x2, 0x7ff, 0x5, @tick=0xffffffffffffff9b, {0xfffffffffffffffa, 0x101}, {0x4, 0x9}, @time=@tick=0x40}, {0xffffffffffffff2b, 0x8000, 0x1578000, 0x6, @time={r2, r3+30000000}, {0x8, 0x2}, {0x4, 0x5}, @ext={0xd7, &(0x7f0000006980)="1fb307b07149ca56f72e576b06ab3bd14dff65079901fad8f6d00ad7ed667be902cbfc1e79297b14a0133f93c760b4301fd02cf67ec23d2c3b768f926160b058734f08d4f34a56de30bea0f05866c3efdbd50aac8a67daecc694a8d620fe2a9eca530ac31e63c0310b6699268e4275e476f41b9ca8f879fc4540d9d9b393bc7bf2ebfedda53ac2433ca8104e1d1410d0cd55be6d5e29a05e66d2a7b59d78a61b1dd857fed0d75cf7fe69f8540d810cc8472da70d23b72eb729c607e82d36dfadca19cb01a44e6fd7950cd94578005ecbeb76d187511a03"}}, {0x5, 0xc95, 0x40, 0x5, @tick=0x1, {0x3, 0x449}, {0x100000000, 0x8}, @note={0x2f00, 0x1, 0x80, 0x1, 0x83c}}, {0x100, 0x1, 0x9, 0x400, @time={0x77359400}, {0xda4a, 0x6}, {0x8001, 0x2}, @raw8={"1ce30af99345be94f46eea28"}}, {0x2, 0x541, 0x1, 0x7ff, @time, {0x2, 0x963b}, {0x200, 0x8}, @ext={0x5d, &(0x7f0000006a80)="4da704c8a561f21c9a77588bc9a4a576b82741b7a07406ae4177b25adfa56fb862b672ac7ed2cbdb71cfb24e8c6a35a9b4459e9275f28a3f8a0df9e5bb748f09b8389ceaa3663fb235ca0222e675c0c344e8ca09a29cf2b4e266dc2367"}}, {0x81, 0x9, 0x66ff, 0x1, @time={0x77359400}, {}, {0x200, 0x7ff}, @raw32={[0x3f, 0x7, 0x3]}}, {0xa8f, 0x8f, 0x5bf03b20, 0x0, @time, {0x2, 0x10001}, {0x0, 0x53}, @ext={0x24, &(0x7f0000006b00)="a55342f6321312626599f0fa65426d50302c48be358213e0b7478f69d4cc3a3a7a861270"}}], 0x150) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) clock_nanosleep(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) r5 = accept$alg(r4, 0x0, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) sendmmsg(r5, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x80}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x0, &(0x7f0000000000)}}], 0x2, 0x0) 03:54:32 executing program 6 (fault-call:8 fault-nth:7): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:32 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 03:54:32 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, 0x2c8) 03:54:32 executing program 0: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ftruncate(r0, 0x1) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) read(r0, &(0x7f0000000000)=""/48, 0xfffffffffffffe24) pipe2(&(0x7f0000000040), 0x4004) [ 3177.256269] FAULT_INJECTION: forcing a failure. [ 3177.256269] name failslab, interval 1, probability 0, space 0, times 0 [ 3177.267922] CPU: 0 PID: 5628 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3177.274876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3177.284254] Call Trace: [ 3177.286872] dump_stack+0x1c9/0x2b4 [ 3177.287355] ISOFS: Unable to identify CD-ROM format. [ 3177.290529] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3177.290553] ? __kernel_text_address+0xd/0x40 [ 3177.290573] ? unwind_get_return_address+0x61/0xa0 [ 3177.290597] should_fail.cold.4+0xa/0x11 [ 3177.314378] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3177.319537] ? save_stack+0x43/0xd0 [ 3177.323163] ? kasan_kmalloc+0xc4/0xe0 [ 3177.327093] ? __kmalloc_track_caller+0x14a/0x760 [ 3177.331933] ? kstrdup+0x39/0x70 [ 3177.335295] ? v9fs_session_init+0xdd/0x1a80 [ 3177.339702] ? v9fs_mount+0x7c/0x900 [ 3177.343446] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3177.348220] ? do_mount+0x581/0x30e0 [ 3177.351943] ? ksys_mount+0x12d/0x140 [ 3177.355752] ? __x64_sys_mount+0xbe/0x150 [ 3177.359904] ? do_syscall_64+0x1b9/0x820 [ 3177.363991] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3177.369369] ? find_held_lock+0x36/0x1c0 [ 3177.373462] ? check_same_owner+0x340/0x340 [ 3177.377800] ? unwind_get_return_address+0x61/0xa0 [ 3177.382745] ? rcu_note_context_switch+0x730/0x730 [ 3177.387699] __should_failslab+0x124/0x180 [ 3177.391955] should_failslab+0x9/0x14 [ 3177.395776] __kmalloc_track_caller+0x2c4/0x760 [ 3177.400456] ? save_stack+0xa9/0xd0 [ 3177.404097] ? save_stack+0x43/0xd0 [ 3177.407746] ? kasan_kmalloc+0xc4/0xe0 [ 3177.411652] ? kmem_cache_alloc_trace+0x152/0x780 [ 3177.416511] ? v9fs_session_init+0x115/0x1a80 [ 3177.421008] kstrdup+0x39/0x70 [ 3177.424215] v9fs_session_init+0x115/0x1a80 [ 3177.428565] ? find_held_lock+0x36/0x1c0 [ 3177.432654] ? v9fs_show_options+0x7e0/0x7e0 [ 3177.437096] ? kasan_check_read+0x11/0x20 [ 3177.441248] ? rcu_is_watching+0x8c/0x150 [ 3177.445420] ? rcu_pm_notify+0xc0/0xc0 [ 3177.449340] ? v9fs_mount+0x61/0x900 [ 3177.453074] ? rcu_read_lock_sched_held+0x108/0x120 [ 3177.458121] ? kmem_cache_alloc_trace+0x616/0x780 [ 3177.463004] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3177.468575] v9fs_mount+0x7c/0x900 [ 3177.472146] mount_fs+0xae/0x328 [ 3177.475536] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3177.480138] ? may_umount+0xb0/0xb0 [ 3177.483771] ? _raw_read_unlock+0x22/0x30 [ 3177.487949] ? __get_fs_type+0x97/0xc0 [ 3177.491855] do_mount+0x581/0x30e0 [ 3177.495465] ? copy_mount_string+0x40/0x40 [ 3177.499727] ? copy_mount_options+0x5f/0x380 [ 3177.504166] ? rcu_read_lock_sched_held+0x108/0x120 [ 3177.509190] ? kmem_cache_alloc_trace+0x616/0x780 [ 3177.514045] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3177.519587] ? _copy_from_user+0xdf/0x150 [ 3177.523756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3177.529313] ? copy_mount_options+0x285/0x380 [ 3177.533830] ksys_mount+0x12d/0x140 [ 3177.537470] __x64_sys_mount+0xbe/0x150 [ 3177.541442] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3177.546466] do_syscall_64+0x1b9/0x820 [ 3177.550347] ? finish_task_switch+0x1d3/0x870 [ 3177.554854] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3177.559778] ? syscall_return_slowpath+0x31d/0x5e0 [ 3177.564718] ? __switch_to_asm+0x34/0x70 [ 3177.568773] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3177.574158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3177.578995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3177.584187] RIP: 0033:0x457089 [ 3177.587380] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:54:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf5ffffff]}}]}, 0x2c}}, 0x0) 03:54:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x208100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3177.606314] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3177.614047] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3177.621319] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3177.628582] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3177.635875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3177.643172] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000007 03:54:33 executing program 6 (fault-call:8 fault-nth:8): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:33 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xfffffffffffff000}, 0x0) 03:54:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7000000]}, 0x2c8) 03:54:33 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0xfffffffffffffffc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr}, 0x6) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000067080000000000000000000000000000000040000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000007f8d01e4c232a73f5f9d6f56d2798106d943f5f5f952320e3d6afab6c4"], 0x90) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x400000010000065}) close(r3) dup3(r1, r2, 0x0) 03:54:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x7400000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = accept4(r0, &(0x7f00000000c0)=@nl, &(0x7f0000000040)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x8f7}}, 0x80, 0x0, 0x100000000, 0x5, 0x3a}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={r2, 0x4}, &(0x7f0000000280)=0x8) 03:54:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x4800]}}]}, 0x2c}}, 0x0) 03:54:33 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa91e000000000000}, 0x0) [ 3178.141203] ISOFS: Unable to identify CD-ROM format. [ 3178.148266] FAULT_INJECTION: forcing a failure. [ 3178.148266] name failslab, interval 1, probability 0, space 0, times 0 [ 3178.159614] CPU: 0 PID: 5665 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3178.166578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3178.175945] Call Trace: [ 3178.178574] dump_stack+0x1c9/0x2b4 [ 3178.182206] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3178.187423] ? __kernel_text_address+0xd/0x40 [ 3178.191923] ? unwind_get_return_address+0x61/0xa0 [ 3178.196860] should_fail.cold.4+0xa/0x11 [ 3178.200924] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3178.206027] ? save_stack+0x43/0xd0 [ 3178.209658] ? kasan_kmalloc+0xc4/0xe0 [ 3178.213560] ? __kmalloc_track_caller+0x14a/0x760 [ 3178.218399] ? kstrdup+0x39/0x70 [ 3178.221770] ? v9fs_session_init+0xdd/0x1a80 [ 3178.226209] ? v9fs_mount+0x7c/0x900 [ 3178.229936] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3178.234684] ? do_mount+0x581/0x30e0 [ 3178.238388] ? ksys_mount+0x12d/0x140 [ 3178.242189] ? __x64_sys_mount+0xbe/0x150 [ 3178.246332] ? do_syscall_64+0x1b9/0x820 [ 3178.250386] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3178.255761] ? find_held_lock+0x36/0x1c0 [ 3178.259857] ? check_same_owner+0x340/0x340 [ 3178.264192] ? unwind_get_return_address+0x61/0xa0 [ 3178.269149] ? rcu_note_context_switch+0x730/0x730 [ 3178.274107] __should_failslab+0x124/0x180 [ 3178.278368] should_failslab+0x9/0x14 [ 3178.282186] __kmalloc_track_caller+0x2c4/0x760 [ 3178.286862] ? save_stack+0xa9/0xd0 [ 3178.290505] ? save_stack+0x43/0xd0 [ 3178.294121] ? kasan_kmalloc+0xc4/0xe0 [ 3178.298016] ? kmem_cache_alloc_trace+0x152/0x780 [ 3178.302865] ? v9fs_session_init+0x115/0x1a80 [ 3178.307381] kstrdup+0x39/0x70 [ 3178.310579] v9fs_session_init+0x115/0x1a80 [ 3178.315159] ? find_held_lock+0x36/0x1c0 [ 3178.319226] ? v9fs_show_options+0x7e0/0x7e0 [ 3178.323666] ? kasan_check_read+0x11/0x20 [ 3178.327837] ? rcu_is_watching+0x8c/0x150 [ 3178.331977] ? rcu_pm_notify+0xc0/0xc0 [ 3178.335875] ? v9fs_mount+0x61/0x900 [ 3178.339625] ? rcu_read_lock_sched_held+0x108/0x120 [ 3178.344650] ? kmem_cache_alloc_trace+0x616/0x780 [ 3178.349488] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3178.355019] v9fs_mount+0x7c/0x900 [ 3178.358556] mount_fs+0xae/0x328 [ 3178.361918] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3178.366508] ? may_umount+0xb0/0xb0 [ 3178.370142] ? _raw_read_unlock+0x22/0x30 [ 3178.374278] ? __get_fs_type+0x97/0xc0 [ 3178.378170] do_mount+0x581/0x30e0 [ 3178.381719] ? copy_mount_string+0x40/0x40 [ 3178.385950] ? copy_mount_options+0x5f/0x380 [ 3178.390359] ? rcu_read_lock_sched_held+0x108/0x120 [ 3178.395371] ? kmem_cache_alloc_trace+0x616/0x780 [ 3178.400242] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3178.405800] ? _copy_from_user+0xdf/0x150 [ 3178.410205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3178.415744] ? copy_mount_options+0x285/0x380 [ 3178.420229] ksys_mount+0x12d/0x140 [ 3178.423856] __x64_sys_mount+0xbe/0x150 [ 3178.427817] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3178.432826] do_syscall_64+0x1b9/0x820 [ 3178.436705] ? syscall_return_slowpath+0x12f/0x5e0 [ 3178.441642] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3178.446582] ? syscall_return_slowpath+0x31d/0x5e0 [ 3178.451512] ? __switch_to_asm+0x34/0x70 [ 3178.455572] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3178.460938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3178.465780] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3178.470975] RIP: 0033:0x457089 [ 3178.474173] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3178.493078] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3178.500790] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3178.508058] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3178.515499] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3178.522769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3178.530036] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000008 03:54:33 executing program 6 (fault-call:8 fault-nth:9): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:34 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c8) 03:54:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xa0018000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$getsig(0x4202, r2, 0x50000000000000, &(0x7f0000000040)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xfffffffffffffffd, 0xef, @remote, 0x5}, 0x1c) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7f, 0x400000) ioctl$TUNSETLINK(r3, 0x400454cd, 0x322) write$FUSE_STATFS(r3, &(0x7f0000000100)={0x60, 0x0, 0x5, {{0x7fffffff, 0x9, 0xbd, 0x8bf, 0xfffffffffffffffd, 0x2, 0xe033, 0xc000000000000000}}}, 0x60) setsockopt$inet6_tcp_int(r0, 0x6, 0x300000080000001e, &(0x7f00000000c0)=0x400003, 0xfffffffffffffff6) r4 = dup2(r0, r1) ioctl$KVM_SMI(r4, 0xaeb7) prctl$setmm(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) 03:54:34 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40030000000000}, 0x0) 03:54:34 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, 0x2c8) [ 3179.019697] FAULT_INJECTION: forcing a failure. [ 3179.019697] name failslab, interval 1, probability 0, space 0, times 0 [ 3179.031106] CPU: 0 PID: 5708 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3179.038090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3179.041393] ISOFS: Unable to identify CD-ROM format. [ 3179.047458] Call Trace: [ 3179.047487] dump_stack+0x1c9/0x2b4 [ 3179.047515] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3179.047549] should_fail.cold.4+0xa/0x11 [ 3179.068075] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3179.073184] ? find_held_lock+0x36/0x1c0 [ 3179.077275] ? check_same_owner+0x340/0x340 [ 3179.081611] ? __kernel_text_address+0xd/0x40 [ 3179.086098] ? rcu_note_context_switch+0x730/0x730 [ 3179.091031] __should_failslab+0x124/0x180 [ 3179.095284] should_failslab+0x9/0x14 [ 3179.099091] kmem_cache_alloc_trace+0x2cb/0x780 [ 3179.103765] ? save_stack+0xa9/0xd0 [ 3179.107392] p9_client_create+0x114/0x1770 [ 3179.111623] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3179.116391] ? do_mount+0x581/0x30e0 [ 3179.120121] ? __x64_sys_mount+0xbe/0x150 [ 3179.124271] ? do_syscall_64+0x1b9/0x820 [ 3179.128374] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3179.133744] ? p9_client_read+0xc60/0xc60 [ 3179.137882] ? find_held_lock+0x36/0x1c0 [ 3179.141947] ? __lockdep_init_map+0x105/0x590 [ 3179.146453] ? lockdep_init_map+0x9/0x10 [ 3179.150532] ? kasan_check_write+0x14/0x20 [ 3179.154773] ? __init_rwsem+0x1cc/0x2a0 [ 3179.158749] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3179.163781] ? rcu_read_lock_sched_held+0x108/0x120 [ 3179.168803] ? __kmalloc_track_caller+0x5f5/0x760 [ 3179.173649] ? save_stack+0xa9/0xd0 [ 3179.177274] ? save_stack+0x43/0xd0 [ 3179.180890] ? kasan_kmalloc+0xc4/0xe0 [ 3179.184782] ? kmem_cache_alloc_trace+0x152/0x780 [ 3179.189652] ? memcpy+0x45/0x50 [ 3179.192930] v9fs_session_init+0x21a/0x1a80 [ 3179.197259] ? find_held_lock+0x36/0x1c0 [ 3179.201318] ? v9fs_show_options+0x7e0/0x7e0 [ 3179.205718] ? kasan_check_read+0x11/0x20 [ 3179.209858] ? rcu_is_watching+0x8c/0x150 [ 3179.214010] ? rcu_pm_notify+0xc0/0xc0 [ 3179.217915] ? v9fs_mount+0x61/0x900 [ 3179.221656] ? rcu_read_lock_sched_held+0x108/0x120 [ 3179.226687] ? kmem_cache_alloc_trace+0x616/0x780 [ 3179.231525] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3179.237152] v9fs_mount+0x7c/0x900 [ 3179.240688] mount_fs+0xae/0x328 [ 3179.244049] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3179.248623] ? may_umount+0xb0/0xb0 [ 3179.252248] ? _raw_read_unlock+0x22/0x30 [ 3179.256422] ? __get_fs_type+0x97/0xc0 [ 3179.260326] do_mount+0x581/0x30e0 [ 3179.263911] ? copy_mount_string+0x40/0x40 [ 3179.268179] ? copy_mount_options+0x5f/0x380 [ 3179.272598] ? rcu_read_lock_sched_held+0x108/0x120 [ 3179.277653] ? kmem_cache_alloc_trace+0x616/0x780 [ 3179.282514] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3179.288081] ? _copy_from_user+0xdf/0x150 [ 3179.292233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3179.297779] ? copy_mount_options+0x285/0x380 [ 3179.302272] ksys_mount+0x12d/0x140 [ 3179.305898] __x64_sys_mount+0xbe/0x150 [ 3179.309877] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3179.314909] do_syscall_64+0x1b9/0x820 [ 3179.318809] ? syscall_slow_exit_work+0x500/0x500 [ 3179.323652] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3179.328577] ? syscall_return_slowpath+0x31d/0x5e0 [ 3179.333507] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3179.338869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3179.343721] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3179.348917] RIP: 0033:0x457089 [ 3179.352104] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3179.371001] RSP: 002b:00007f1288e3ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3179.378717] RAX: ffffffffffffffda RBX: 00007f1288e3b6d4 RCX: 0000000000457089 [ 3179.385982] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3179.393253] RBP: 00000000009301e0 R08: 0000000020000cc0 R09: 0000000000000000 [ 3179.400535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3179.407833] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000009 [ 3179.572932] FAULT_FLAG_ALLOW_RETRY missing 30 [ 3179.577595] CPU: 1 PID: 5679 Comm: syz-executor0 Not tainted 4.18.0+ #192 [ 3179.584541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3179.593909] Call Trace: [ 3179.596545] dump_stack+0x1c9/0x2b4 [ 3179.600212] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3179.605432] ? kasan_check_write+0x14/0x20 [ 3179.609680] ? do_raw_spin_lock+0xc1/0x200 [ 3179.613945] handle_userfault.cold.33+0x43/0x52 [ 3179.618662] ? userfaultfd_ioctl+0x5420/0x5420 [ 3179.623268] ? trace_hardirqs_on+0x10/0x10 [ 3179.627531] ? trace_hardirqs_on+0x10/0x10 [ 3179.631805] ? print_usage_bug+0xc0/0xc0 [ 3179.635922] ? print_usage_bug+0xc0/0xc0 [ 3179.640806] ? userfaultfd_ctx_put+0x810/0x810 [ 3179.645427] ? __sanitizer_cov_trace_const_cmp2+0x1/0x20 [ 3179.650926] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 3179.656338] ? __lock_acquire+0x7fc/0x5020 [ 3179.660606] ? perf_event_update_userpage+0xd30/0xd30 [ 3179.665839] ? graph_lock+0x170/0x170 [ 3179.669692] ? find_held_lock+0x36/0x1c0 [ 3179.673796] ? lock_downgrade+0x8f0/0x8f0 [ 3179.677970] ? finish_task_switch+0x18a/0x870 [ 3179.682502] ? kasan_check_read+0x11/0x20 [ 3179.686678] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3179.691109] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3179.695720] ? kasan_check_write+0x14/0x20 [ 3179.699985] ? do_raw_spin_lock+0xc1/0x200 [ 3179.704257] __handle_mm_fault+0x38ae/0x4360 [ 3179.708733] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 3179.713601] ? graph_lock+0x170/0x170 [ 3179.717446] ? lock_downgrade+0x8f0/0x8f0 [ 3179.721633] ? kasan_check_read+0x11/0x20 [ 3179.725814] ? rcu_is_watching+0x8c/0x150 [ 3179.729994] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3179.734686] ? handle_mm_fault+0x8c4/0xc80 [ 3179.738959] handle_mm_fault+0x53e/0xc80 [ 3179.743052] ? __handle_mm_fault+0x4360/0x4360 [ 3179.747666] ? find_vma+0x34/0x190 [ 3179.751236] __do_page_fault+0x620/0xe50 [ 3179.755332] ? mm_fault_error+0x380/0x380 [ 3179.759506] ? __kmalloc+0x14e/0x760 [ 3179.763278] ? graph_lock+0x170/0x170 [ 3179.767093] ? udpv6_setsockopt+0x62/0xa0 [ 3179.771259] ? sock_common_setsockopt+0x9a/0xe0 [ 3179.775957] do_page_fault+0xf6/0x8c0 [ 3179.779775] ? vmalloc_sync_all+0x30/0x30 [ 3179.783960] ? find_held_lock+0x36/0x1c0 [ 3179.788233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3179.793109] page_fault+0x1e/0x30 [ 3179.796585] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 3179.802223] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f 03:54:35 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa0018000}, 0x0) 03:54:35 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3179.821143] RSP: 0018:ffff8801931b7698 EFLAGS: 00010206 [ 3179.826542] RAX: ffffed00328b8e85 RBX: 0000000000000006 RCX: 0000000000000006 [ 3179.833828] RDX: 0000000000000006 RSI: 0000000020013ff4 RDI: ffff8801945c7420 [ 3179.841114] RBP: ffff8801931b76d0 R08: ffffed00328b8e85 R09: ffffed00328b8e84 [ 3179.848405] R10: ffffed00328b8e84 R11: ffff8801945c7425 R12: 0000000020013ffa [ 3179.855693] R13: 0000000020013ff4 R14: ffff8801945c7420 R15: 00007ffffffff000 [ 3179.863003] ? _copy_from_user+0x10d/0x150 [ 3179.867264] ip_options_get_from_user+0x8d/0xf0 [ 3179.871950] do_ip_setsockopt.isra.13+0x1ba6/0x3e70 [ 3179.876965] ? ip_ra_control+0x640/0x640 [ 3179.881043] ? graph_lock+0x170/0x170 [ 3179.884876] ? sock_alloc_file+0x4c/0x180 [ 3179.889020] ? __sys_socket+0x172/0x260 [ 3179.893029] ? find_held_lock+0x36/0x1c0 [ 3179.897116] ? lock_downgrade+0x8f0/0x8f0 [ 3179.901279] ? rcu_is_watching+0x8c/0x150 [ 3179.905436] ? kasan_check_read+0x11/0x20 [ 3179.909602] ? rcu_is_watching+0x8c/0x150 [ 3179.913856] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3179.918545] ? __fget+0x4d5/0x740 [ 3179.922023] ? ksys_dup3+0x690/0x690 [ 3179.925756] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3179.930451] ? __fget+0x4d5/0x740 [ 3179.933934] ? ksys_dup3+0x690/0x690 [ 3179.937660] ? __fget_light+0x2f7/0x440 [ 3179.941632] ip_setsockopt+0x4c/0x140 [ 3179.945440] udp_setsockopt+0x62/0xa0 [ 3179.949267] ipv6_setsockopt+0x149/0x170 [ 3179.953337] udpv6_setsockopt+0x62/0xa0 [ 3179.957319] sock_common_setsockopt+0x9a/0xe0 [ 3179.961839] __sys_setsockopt+0x1c5/0x3b0 [ 3179.966011] ? kernel_accept+0x310/0x310 [ 3179.970095] ? do_futex+0x27d0/0x27d0 [ 3179.973931] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3179.979497] ? fput+0x130/0x1a0 [ 3179.982805] __x64_sys_setsockopt+0xbe/0x150 [ 3179.987239] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3179.992281] do_syscall_64+0x1b9/0x820 [ 3179.996220] ? finish_task_switch+0x1d3/0x870 [ 3180.000742] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3180.005697] ? syscall_return_slowpath+0x31d/0x5e0 [ 3180.010652] ? __switch_to_asm+0x34/0x70 [ 3180.014737] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3180.020130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3180.025008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3180.030214] RIP: 0033:0x457089 [ 3180.033422] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3180.052345] RSP: 002b:00007f7211f56c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3180.060078] RAX: ffffffffffffffda RBX: 00007f7211f576d4 RCX: 0000000000457089 [ 3180.067372] RDX: 2000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 03:54:35 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 3180.074658] RBP: 00000000009300a0 R08: 0000000000000006 R09: 0000000000000000 [ 3180.081939] R10: 0000000020013ff4 R11: 0000000000000246 R12: 00000000ffffffff [ 3180.089204] R13: 00000000004d4d90 R14: 00000000004c91cf R15: 0000000000000000 [ 3180.124123] validate_nla: 6 callbacks suppressed [ 3180.124134] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3180.136709] net_ratelimit: 6 callbacks suppressed [ 3180.136719] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="bf00009aff85ec006cc100000000000f0f9a20e97168f8b84080df060095"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) r0 = getpid() ptrace$getenv(0x4201, r0, 0x8, &(0x7f0000000180)) socketpair$inet6(0xa, 0x800, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x2, @mcast1, 0x8}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @local}], 0x4c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x10000001, 0x1, 0x7, 0x1, 0xf0}}) 03:54:35 executing program 6 (fault-call:8 fault-nth:10): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:35 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x500]}}]}, 0x2c}}, 0x0) 03:54:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x2c8) [ 3180.174274] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3180.181681] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:35 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 03:54:35 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0xc0000000, 0x3f, 0x8000, 0xfff, 0x100000001}, {0xc000000f, 0x800, 0x8000, 0x64d, 0x2}, {0xc0000003, 0x3ff, 0x5, 0x4e0, 0x3}, {0xc0000003, 0x80000001, 0x3, 0x80000000, 0x9}]}) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3180.511351] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3180.518822] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3180.535519] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3180.542958] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb03000000000000]}, 0x2c8) [ 3180.610048] FAULT_INJECTION: forcing a failure. [ 3180.610048] name failslab, interval 1, probability 0, space 0, times 0 [ 3180.621346] CPU: 1 PID: 5776 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3180.628289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3180.637656] Call Trace: [ 3180.640270] dump_stack+0x1c9/0x2b4 [ 3180.643934] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3180.649152] ? kernel_text_address+0x79/0xf0 [ 3180.653587] ? __kernel_text_address+0xd/0x40 03:54:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf0ffffffffffff]}}]}, 0x2c}}, 0x0) [ 3180.658112] should_fail.cold.4+0xa/0x11 [ 3180.662197] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3180.667330] ? save_stack+0xa9/0xd0 [ 3180.670980] ? save_stack+0x43/0xd0 [ 3180.674628] ? kasan_kmalloc+0xc4/0xe0 [ 3180.678545] ? kmem_cache_alloc_trace+0x152/0x780 [ 3180.683426] ? v9fs_session_init+0x21a/0x1a80 [ 3180.687952] ? v9fs_mount+0x7c/0x900 [ 3180.691688] ? mount_fs+0xae/0x328 [ 3180.695251] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3180.700030] ? do_mount+0x581/0x30e0 [ 3180.703758] ? ksys_mount+0x12d/0x140 03:54:36 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000480)={@remote, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "0eeeed", 0x44, 0x0, 0x0, @empty, @dev, {[], @gre}}}}}, &(0x7f0000000080)) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x800) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x48}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x4, 0x800c, 0x9, 0x4, r2}, 0x10) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000180)=@can={0x1d, 0x0}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/50, 0x32}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r3}, 0x48) [ 3180.707573] ? __x64_sys_mount+0xbe/0x150 [ 3180.711740] ? do_syscall_64+0x1b9/0x820 [ 3180.715835] ? find_held_lock+0x36/0x1c0 [ 3180.719955] ? check_same_owner+0x340/0x340 [ 3180.724296] ? kasan_check_read+0x11/0x20 [ 3180.728471] ? rcu_is_watching+0x8c/0x150 [ 3180.732644] ? rcu_note_context_switch+0x730/0x730 [ 3180.737595] ? rcu_pm_notify+0xc0/0xc0 [ 3180.741515] __should_failslab+0x124/0x180 [ 3180.745779] should_failslab+0x9/0x14 [ 3180.749609] kmem_cache_alloc_trace+0x2cb/0x780 [ 3180.754301] ? kmem_cache_alloc_trace+0x616/0x780 [ 3180.759167] ? __lockdep_init_map+0x105/0x590 [ 3180.763696] p9_idpool_create+0x42/0x190 [ 3180.767784] p9_client_create+0x286/0x1770 [ 3180.772045] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3180.776823] ? do_mount+0x581/0x30e0 [ 3180.780554] ? __x64_sys_mount+0xbe/0x150 [ 3180.784724] ? do_syscall_64+0x1b9/0x820 [ 3180.788814] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3180.794225] ? p9_client_read+0xc60/0xc60 [ 3180.798394] ? find_held_lock+0x36/0x1c0 [ 3180.802510] ? __lockdep_init_map+0x105/0x590 [ 3180.807031] ? kasan_check_write+0x14/0x20 [ 3180.807200] ISOFS: Unable to identify CD-ROM format. [ 3180.811280] ? __init_rwsem+0x1cc/0x2a0 [ 3180.811299] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3180.811322] ? rcu_read_lock_sched_held+0x108/0x120 [ 3180.811341] ? __kmalloc_track_caller+0x5f5/0x760 [ 3180.811361] ? save_stack+0xa9/0xd0 [ 3180.839031] ? save_stack+0x43/0xd0 [ 3180.842676] ? kasan_kmalloc+0xc4/0xe0 [ 3180.846585] ? kmem_cache_alloc_trace+0x152/0x780 [ 3180.851465] ? memcpy+0x45/0x50 [ 3180.854782] v9fs_session_init+0x21a/0x1a80 [ 3180.859134] ? find_held_lock+0x36/0x1c0 [ 3180.863229] ? v9fs_show_options+0x7e0/0x7e0 [ 3180.867663] ? kasan_check_read+0x11/0x20 [ 3180.871831] ? rcu_is_watching+0x8c/0x150 [ 3180.875999] ? rcu_pm_notify+0xc0/0xc0 [ 3180.878122] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3180.879923] ? v9fs_mount+0x61/0x900 [ 3180.879955] ? rcu_read_lock_sched_held+0x108/0x120 [ 3180.879975] ? kmem_cache_alloc_trace+0x616/0x780 [ 3180.880000] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3180.887305] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3180.890994] v9fs_mount+0x7c/0x900 [ 3180.891018] mount_fs+0xae/0x328 [ 3180.891042] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3180.933762] ? may_umount+0xb0/0xb0 [ 3180.937422] ? _raw_read_unlock+0x22/0x30 [ 3180.941593] ? __get_fs_type+0x97/0xc0 [ 3180.945501] do_mount+0x581/0x30e0 [ 3180.949067] ? copy_mount_string+0x40/0x40 [ 3180.953329] ? copy_mount_options+0x5f/0x380 03:54:36 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xb}, 0x0) [ 3180.957761] ? rcu_read_lock_sched_held+0x108/0x120 [ 3180.962800] ? kmem_cache_alloc_trace+0x616/0x780 [ 3180.967668] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3180.973227] ? _copy_from_user+0xdf/0x150 [ 3180.977415] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3180.982970] ? copy_mount_options+0x285/0x380 [ 3180.987488] ksys_mount+0x12d/0x140 [ 3180.991135] __x64_sys_mount+0xbe/0x150 [ 3180.995125] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3180.996433] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3181.000163] do_syscall_64+0x1b9/0x820 [ 3181.000184] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3181.000203] ? syscall_return_slowpath+0x31d/0x5e0 [ 3181.000221] ? __switch_to_asm+0x34/0x70 [ 3181.000238] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3181.000259] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3181.000282] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3181.000295] RIP: 0033:0x457089 [ 3181.000315] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3181.007638] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3181.011472] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3181.011488] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3181.011496] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3181.011505] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 03:54:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf]}}]}, 0x2c}}, 0x0) 03:54:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3181.011514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3181.011522] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000a 03:54:36 executing program 6 (fault-call:8 fault-nth:11): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:36 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0xffffffffffffff1b) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb030000]}, 0x2c8) 03:54:36 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xffffffffa0018000}, 0x0) [ 3181.454882] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3181.462349] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:36 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x2]}}]}, 0x2c}}, 0x0) 03:54:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3181.496236] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3181.503715] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}, 0x2c8) 03:54:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x800) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0x0, 0x3, 0x100000001, 0x3, 0x2041}, 0x9, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x4, 0x80, 0x1}) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3181.591454] FAULT_INJECTION: forcing a failure. [ 3181.591454] name failslab, interval 1, probability 0, space 0, times 0 [ 3181.602728] CPU: 1 PID: 5830 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3181.609284] ISOFS: Unable to identify CD-ROM format. [ 3181.609665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3181.609673] Call Trace: [ 3181.609699] dump_stack+0x1c9/0x2b4 [ 3181.609727] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3181.635529] ? radix_tree_clear_tags+0xc0/0xc0 [ 3181.640105] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3181.645642] should_fail.cold.4+0xa/0x11 [ 3181.649697] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3181.654821] ? save_stack+0xa9/0xd0 [ 3181.658467] ? save_stack+0x43/0xd0 [ 3181.662125] ? __radix_tree_replace+0x1fc/0x360 [ 3181.666815] ? find_held_lock+0x36/0x1c0 [ 3181.670930] ? check_same_owner+0x340/0x340 [ 3181.675271] ? rcu_note_context_switch+0x730/0x730 [ 3181.680225] __should_failslab+0x124/0x180 [ 3181.684478] should_failslab+0x9/0x14 [ 3181.688299] __kmalloc_track_caller+0x2c4/0x760 [ 3181.692984] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3181.698103] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3181.703140] ? p9_client_create+0x48f/0x1770 [ 3181.707567] kstrdup+0x39/0x70 [ 3181.710773] p9_client_create+0x48f/0x1770 [ 3181.715026] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3181.719795] ? __x64_sys_mount+0xbe/0x150 [ 3181.723964] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3181.729355] ? p9_client_read+0xc60/0xc60 [ 3181.733517] ? find_held_lock+0x36/0x1c0 [ 3181.737618] ? __lockdep_init_map+0x105/0x590 [ 3181.742140] ? kasan_check_write+0x14/0x20 [ 3181.746395] ? __init_rwsem+0x1cc/0x2a0 [ 3181.750409] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3181.755447] ? rcu_read_lock_sched_held+0x108/0x120 [ 3181.760484] ? __kmalloc_track_caller+0x5f5/0x760 [ 3181.765340] ? save_stack+0xa9/0xd0 [ 3181.768984] ? save_stack+0x43/0xd0 [ 3181.772624] ? kasan_kmalloc+0xc4/0xe0 [ 3181.776524] ? kmem_cache_alloc_trace+0x152/0x780 [ 3181.781387] ? memcpy+0x45/0x50 [ 3181.784688] v9fs_session_init+0x21a/0x1a80 [ 3181.789257] ? find_held_lock+0x36/0x1c0 [ 3181.793347] ? v9fs_show_options+0x7e0/0x7e0 [ 3181.797777] ? kasan_check_read+0x11/0x20 [ 3181.799609] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3181.801951] ? rcu_is_watching+0x8c/0x150 [ 3181.801970] ? rcu_pm_notify+0xc0/0xc0 [ 3181.801998] ? v9fs_mount+0x61/0x900 [ 3181.802017] ? rcu_read_lock_sched_held+0x108/0x120 [ 3181.802037] ? kmem_cache_alloc_trace+0x616/0x780 [ 3181.802060] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3181.802081] v9fs_mount+0x7c/0x900 [ 3181.809441] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3181.813532] mount_fs+0xae/0x328 [ 3181.813557] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3181.813578] ? may_umount+0xb0/0xb0 [ 3181.866490] ? _raw_read_unlock+0x22/0x30 [ 3181.870661] ? __get_fs_type+0x97/0xc0 [ 3181.874634] do_mount+0x581/0x30e0 [ 3181.878192] ? copy_mount_string+0x40/0x40 [ 3181.882453] ? copy_mount_options+0x5f/0x380 [ 3181.886876] ? rcu_read_lock_sched_held+0x108/0x120 03:54:37 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3181.891930] ? kmem_cache_alloc_trace+0x616/0x780 [ 3181.897256] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3181.902817] ? _copy_from_user+0xdf/0x150 [ 3181.906992] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3181.912545] ? copy_mount_options+0x285/0x380 [ 3181.917063] ksys_mount+0x12d/0x140 [ 3181.920707] __x64_sys_mount+0xbe/0x150 [ 3181.921602] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3181.924689] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3181.924713] do_syscall_64+0x1b9/0x820 [ 3181.924729] ? finish_task_switch+0x1d3/0x870 [ 3181.924748] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3181.924768] ? syscall_return_slowpath+0x31d/0x5e0 [ 3181.924785] ? __switch_to_asm+0x34/0x70 [ 3181.924802] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3181.924824] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3181.924846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3181.924858] RIP: 0033:0x457089 03:54:37 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x800000000000000}, 0x0) [ 3181.924874] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3181.924883] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3181.924923] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3181.924933] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3181.924942] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3181.924951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3181.924960] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000b [ 3182.042533] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x600000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xb020000000000022, &(0x7f0000000040)=0x5, 0x4) sendmsg(r0, &(0x7f0000001d00)={&(0x7f0000000340)=@in6={0xa, 0x4e20, 0x8, @local, 0x9}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000003c0)="2be5c815bf400485a50a656a73b4f2040b01653b7e58904b7145e13a110fb152704fe9072e071f2537fcad50cae7234b60874e6c9db13a2e1cb3c38fa9caa9d5c2eea813fdd0d67f679aaaa02efbd6d05a1331bb17470f1b3e6f4005e38b875d5b6280fe9aa48b9735e93ea01147c40d48b7aecf3999ecf12c14d47ef0dd08ccb4b1187c", 0x84}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="a011402b898a7d95667f7b929cc65147117b9e397f7e727fce9d39a50c91eb2e9cce16b9c40c6a", 0x27}, {&(0x7f00000014c0)="08d5f2bf5048bca11e2dbf3cfcfef9bc30f3c63adbde4c3cbd5078e0addd0ce83112ad04ecfe911100a70710d3c0bd7c85b645b5f0d8604ef95c8df6bd81b765304714e1fcc133ab4e64bda8715310bd8c2e5c320b0de336dc3904c65beb37cc7424f465cd87ee5bc7b5bf8c78d5deb18ff9edf1196ff4985036d9f55b5d32d2704128dcdb2b3fac7c33f7185b40a725b8f8236b28152a45b0334283245ea72b5fb95b1150bca30f080776525b71f4323bd6f9c89293c190d2fe18a5bdc010061dfa8db2878b2c", 0xc7}, {&(0x7f00000015c0)="a266bd946dc08348568660127b83771dc619ed6e6777cf4bdb8ca6c38b75e06595680104dcd01ccfdf00741de6da9c5333cd875c025c75e26258c885ec8002cdd33306af9c0a46bedb846fb4928289ebd0e598ec20dc9b503b3c4e7ba8b569365029a9c78582259ad9f28703319417cf410f8bf440188e7f5c21baa017e014a09acf17dd43f4456df4a22d259ca98fb1ab8f58fa3a6821988f68074fe4048b04e530398fccbc7e25fd3258f287ddae1abdf176b3d4cb6d29baf561b923c2884d722125c2d6319f761e4a5da29a1eb9f3e1d0943fa1bb1cb082", 0xd9}], 0x5, &(0x7f0000001740)=[{0x108, 0x11e, 0x62, "4c3aa9652f3d7e159267866f7610d9c191d7c6e28b1e11333a853fa2c07b17acbaf31dd4cf9ea1f511426c5d9d5b12f8b0457e2370014caddf88914f2efa9c157a5af06373e1add1a4ce34895fee55e97f0ccef967878bdbeb3d86398d5b13a7cea2cedffaaa482122ecce188fc420e6fbffe40e3e77fdae7fb2585cff5dbee6a249c6aa61dab3265dec01a12d76b8d94b420fb609c18dfd730fb5c72469b2a6ceb3af2b595edc82380afd1b60b3f375e23dc7bc70e88c57f3f799145fc944e59c21c2db7cc6de179cb4ed91d3021e568499de5521cec436715050236e70e63a1a71bbe5da68dfa77a3c62e68bff471fd5466d"}, {0xd0, 0x10c, 0xd55, "94fe40ae553fd7a476671d4bb671e2a8025e24bcb654f343f6805c682a48b52928fcbb807a6e650cf580ca9d5743ec677050cce7f9e29c36fa658108832822f6f6b166f325ab540be84bab404b59b98962f8dac53d1fc6d7090a822881e8aa0fdecd110c444cecf15a81c63fe39fd4777c7045b73fb6e2a634259ef0d79b6a721caa272be664264efd34e8a521495b83af5b1363df90f779bbe1a2a1939fb3e7964383901d905ae9f2181fedee9f27d180825e5f0d788d7fc9"}, {0x18, 0x0, 0x95, "d4ad338e47d450ae"}, {0xc0, 0x11f, 0x6f1, "c2044effd0ad452910fd1b2e1156b4f245229bbfa95689b825e3c864f718ae0a837c5171f7d7b31304996596be7a2f793e21fb56ca7499753e3d4f90c2bf509b708b1f606cb175be224d0b3e779a1ee14250a0058314cb273ff161a55b522161279a9db9e77d0fd43006e0e831deabba94fdad9734ce349534979362ee923658dacf864d46801b5ce913bf71f26aeb23407ed12b931bfddeec9d92f14c4c0fe6ad50f94e03d180b0e988e1e8"}, {0xf8, 0x11f, 0x10001, "233dc135835e2c021bd0f78a12ac82e0fdca0e6c09cde0227f733295bc42f5b07a2da78130645b97599dbfb56484dc7a67109eb753608ceb46320e95e83761b0b9edb84ceb509a637c3d3c355193fb5272e0f2aa361303c6f516f8cfdfb0ca5a6bb490757e2d98da0a0a7d2e08218f2167003a617774eb8556a1f8f9a1ba28723a400e90dad6e9e79d76b8ccc3d72de6e48d14d1e1db7084db215bf83cbfc7235203fe88bc8c02eb0e1312461537cfc30ddb634977f9e604f332c4353bc074e7718d00f96ba124fe521aea07164095c1134eecacce127dcda2e946a49f3ce76eadea6591a68bc6"}, {0x58, 0x100, 0x4, "183308c84987f3b484da04d90c7ed89afc81d1202dd1d504496c79de73250545c1e87ae0fb5a6837854351df35228b50f20a0e5a59fa2762e9bf56d26934bf66f6"}, {0xe8, 0x1ff, 0x5, "a187a192f603dda25ec0d3eb5357f16ce7bdc31ccc4844640c7c051ed1dce938293ed602fe82041f061be6e30598f6b0314db8cbc20902fef6717ad9730326744a28c270d5e89405bbbfd505e7e594a6123b7760ce72299c25b06cf97c08b85f404c4b91501920e1ac1eca053158136bd11dd7444920247b365975c739f60f792fe771175fdf9be8f0beb706375d9ad17eef17ebcc21f5c26c9898c8582856a7035511aebe78cc2e7f2e42610b94b0ddb4828d8f2cb632ab0fdb7785f846837e605562795ba366036e71c3590a0bb9f4b0b745b715cfce"}, {0xa8, 0x0, 0x100000000, "7c1ac3496648a1e853e12d649fa715f53b164a8d2c858e425fc7acf4655a800b75dddfbd56b2da6a01e632fd3d086d2e33156bbcf095408aef59a6eefa3d530afb84514fa77167284cfca9e4886c192708e46f074fe541858f1978c2daec61ac7a5f4cf36d5e954f0e3a8fd78803eeb1386128294820f102f2e39acf1df657cb2830adb9c3c400a2eea82ecd9bb3b1b22d3d3b862d23a8a2"}], 0x590, 0x40}, 0x800) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000001d80)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={{0x9, 0x8000, 0x1, 0x100, 0x8, 0x100000000}, 0xa5a, 0xfffffffffffffff9, 0x9, 0x7, 0x7, "e5c90ba893383fc6e741af40e386fd7a5e82dad58f421f88e86936686ba6bd1adcf92dfc74af4728a3359112f81e011f333383ab83db306a5b6816706b8419041d83b3a68e3954cfeaba5b3bd77321d871c7dee6df13f5024996899675b4dffa4afb8f37b37bda05adc94de19d2322cf82c8eb4aff795d0a0695c13e6c0ff05f"}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0x13001) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000280)=""/92, &(0x7f0000000300)=0x5c) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000180)=@req={0x28, &(0x7f0000000140)={'dummy0\x00', @ifru_data=&(0x7f0000000100)="0b09b4793a3acdfeaf99c5bcb24db3b62d3011b774ddab27341acaad9fe5e3fc"}}) get_thread_area(&(0x7f0000001d40)={0x1a8c, 0x1000, 0xffffffffffffffff, 0xcf, 0x800, 0x5, 0x6, 0x52, 0x200, 0x7}) 03:54:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0010000]}, 0x2c8) 03:54:37 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000040)={0x3}, 0x8, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xd7, 0x1, "3c499474f4a37e071808ba8ce80d89335f3da1a85c293bc003554e215114344cc8c6ed14f8b5fe383fa3d59d715afdaa66dd210d8472818c75e2aa1915aef3b1cc43ea3785626059a811f38ed43e2db39a91b66d7ce73ded2647cdeedfb3099ca475594d32494cc6348d0017e91c3c1187f9d5692229ba3250318ceccd6385b04077f0e69a0171185cfa17261e3f8ad8ec1a3f1f98e61b4f8ce0b516ee5e06eefffc64bbce72e7367f52a29dc4e7d37898c3bf643719d4c78c03fe107cb110dae68fb44f22004030012c5303110ad1"}, &(0x7f0000000200), 0x1000) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 03:54:37 executing program 6 (fault-call:8 fault-nth:12): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xb00000000000000]}}]}, 0x2c}}, 0x0) 03:54:37 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf00000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3182.431353] FAULT_INJECTION: forcing a failure. [ 3182.431353] name failslab, interval 1, probability 0, space 0, times 0 [ 3182.442902] CPU: 1 PID: 5884 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3182.449855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3182.459230] Call Trace: [ 3182.461848] dump_stack+0x1c9/0x2b4 [ 3182.465510] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3182.470716] ? __kernel_text_address+0xd/0x40 [ 3182.475241] should_fail.cold.4+0xa/0x11 03:54:37 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf0ffffff00000000}, 0x0) 03:54:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xfcffffff00000000]}}]}, 0x2c}}, 0x0) 03:54:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000040022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe403000000000000]}, 0x2c8) [ 3182.479340] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3182.484478] ? save_stack+0x43/0xd0 [ 3182.488231] ? kasan_kmalloc+0xc4/0xe0 [ 3182.492151] ? __kmalloc_track_caller+0x14a/0x760 [ 3182.497014] ? kstrdup+0x39/0x70 [ 3182.500429] ? p9_client_create+0x48f/0x1770 [ 3182.503554] ISOFS: Unable to identify CD-ROM format. [ 3182.504860] ? v9fs_session_init+0x21a/0x1a80 [ 3182.504881] ? mount_fs+0xae/0x328 [ 3182.504903] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3182.504931] ? do_mount+0x581/0x30e0 [ 3182.504949] ? ksys_mount+0x12d/0x140 03:54:37 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3182.504964] ? __x64_sys_mount+0xbe/0x150 [ 3182.504988] ? do_syscall_64+0x1b9/0x820 [ 3182.538567] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3182.543968] ? find_held_lock+0x36/0x1c0 [ 3182.548073] ? check_same_owner+0x340/0x340 [ 3182.552432] ? rcu_note_context_switch+0x730/0x730 [ 3182.557391] __should_failslab+0x124/0x180 [ 3182.561644] should_failslab+0x9/0x14 [ 3182.565440] __kmalloc+0x2c8/0x760 [ 3182.568996] ? match_wildcard+0x3c0/0x3c0 [ 3182.573147] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3182.578156] ? match_strdup+0x5e/0xa0 [ 3182.581965] match_strdup+0x5e/0xa0 [ 3182.585616] p9_client_create+0x6c7/0x1770 [ 3182.589859] ? p9_client_read+0xc60/0xc60 [ 3182.594001] ? find_held_lock+0x36/0x1c0 [ 3182.598091] ? __lockdep_init_map+0x105/0x590 [ 3182.602622] ? kasan_check_write+0x14/0x20 [ 3182.606875] ? __init_rwsem+0x1cc/0x2a0 [ 3182.610880] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3182.615935] ? rcu_read_lock_sched_held+0x108/0x120 [ 3182.620976] ? __kmalloc_track_caller+0x5f5/0x760 [ 3182.625845] ? save_stack+0xa9/0xd0 [ 3182.629496] ? save_stack+0x43/0xd0 [ 3182.633139] ? kasan_kmalloc+0xc4/0xe0 [ 3182.637044] ? kmem_cache_alloc_trace+0x152/0x780 [ 3182.641902] ? memcpy+0x45/0x50 [ 3182.645211] v9fs_session_init+0x21a/0x1a80 [ 3182.649557] ? find_held_lock+0x36/0x1c0 [ 3182.653652] ? v9fs_show_options+0x7e0/0x7e0 [ 3182.658095] ? kasan_check_read+0x11/0x20 [ 3182.662271] ? rcu_is_watching+0x8c/0x150 [ 3182.666443] ? rcu_pm_notify+0xc0/0xc0 [ 3182.670368] ? v9fs_mount+0x61/0x900 [ 3182.674111] ? rcu_read_lock_sched_held+0x108/0x120 [ 3182.679153] ? kmem_cache_alloc_trace+0x616/0x780 [ 3182.684028] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3182.689608] v9fs_mount+0x7c/0x900 [ 3182.693179] mount_fs+0xae/0x328 [ 3182.696582] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3182.701188] ? may_umount+0xb0/0xb0 [ 3182.704833] ? _raw_read_unlock+0x22/0x30 [ 3182.708998] ? __get_fs_type+0x97/0xc0 [ 3182.712926] do_mount+0x581/0x30e0 [ 3182.716497] ? copy_mount_string+0x40/0x40 [ 3182.720750] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3182.725527] ? retint_kernel+0x10/0x10 [ 3182.729446] ? copy_mount_options+0x1f0/0x380 [ 3182.733966] ? copy_mount_options+0x1fa/0x380 [ 3182.738475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3182.744031] ? copy_mount_options+0x285/0x380 [ 3182.748545] ksys_mount+0x12d/0x140 [ 3182.752194] __x64_sys_mount+0xbe/0x150 [ 3182.756184] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3182.761222] do_syscall_64+0x1b9/0x820 [ 3182.765134] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3182.770088] ? syscall_return_slowpath+0x31d/0x5e0 [ 3182.775043] ? __switch_to_asm+0x34/0x70 [ 3182.779129] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3182.784535] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3182.789500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3182.794715] RIP: 0033:0x457089 [ 3182.797941] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3182.816865] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3182.824618] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 03:54:38 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3182.831908] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3182.839212] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3182.846509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3182.853807] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000c 03:54:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xffffffff00000000]}}]}, 0x2c}}, 0x0) 03:54:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x8100000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:38 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x100000000000000}, 0x0) 03:54:38 executing program 6 (fault-call:8 fault-nth:13): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:38 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000240)=0x63a) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000100)) r2 = accept(r0, &(0x7f0000000040)=@ipx, &(0x7f0000000280)=0x80) accept4$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, [], 0xc}, @in6, 0x4e24, 0x5, 0x4e23, 0x0, 0xa, 0x80, 0x0, 0x1d, r3, r4}, {0x100000001, 0x5, 0x100000001, 0x1, 0x817, 0xfff, 0xffffffff874cda8a, 0x3}, {0x401, 0x81, 0x83b9, 0x1}, 0x316, 0x6e6bb8, 0x1, 0x1, 0x2}, {{@in6=@ipv4={[], [], @rand_addr=0x92c}, 0x4d2, 0x32}, 0xa, @in=@broadcast, 0x3505, 0x3, 0x2, 0x6, 0xf0, 0x100000001, 0x3}}, 0xe8) 03:54:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7000000]}, 0x2c8) 03:54:38 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x3000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10100, 0x0) accept$packet(r0, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001b00)=0x14) ioctl$sock_ifreq(r2, 0x893f, &(0x7f0000000280)={'syzkaller1\x00', @ifru_mtu=0x80000001}) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x7, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x80000000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x85c, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x15, &(0x7f0000000240)=""/21, 0x41000, 0x1, [], r4}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x6) ioctl$KDDELIO(r3, 0x4b35, 0xffffffffffffffff) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f00000000c0)) 03:54:38 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x8001a0]}}]}, 0x2c}}, 0x0) [ 3183.276605] FAULT_INJECTION: forcing a failure. [ 3183.276605] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.288128] CPU: 0 PID: 5943 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3183.295079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3183.304454] Call Trace: [ 3183.307080] dump_stack+0x1c9/0x2b4 [ 3183.310748] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3183.315981] should_fail.cold.4+0xa/0x11 [ 3183.320084] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:54:38 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0xffffffffffff8001, 0x0, 0xffc}) socket(0x10, 0x83000000003, 0x0) write(r0, &(0x7f0000000080)="220000001e001d2e9263fffc01fd13f06ece030000000000000072d90700285100071400d7f43faaabf23c57d793f2de54dd9b118af874197780d63cec5dd55bf65b8d8b9294ba1842690467b4e1e2d5909912778ceb87fd11c5909d3489f5fe1429975dff01466832424e43", 0x6c) 03:54:38 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}, 0x2c8) [ 3183.325221] ? __save_stack_trace+0x8d/0xf0 [ 3183.329588] ? save_stack+0xa9/0xd0 [ 3183.333254] ? find_held_lock+0x36/0x1c0 [ 3183.334728] ISOFS: Unable to identify CD-ROM format. [ 3183.337372] ? check_same_owner+0x340/0x340 [ 3183.337392] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3183.337433] ? rcu_note_context_switch+0x730/0x730 [ 3183.337462] __should_failslab+0x124/0x180 [ 3183.361179] should_failslab+0x9/0x14 [ 3183.365029] kmem_cache_alloc_trace+0x2cb/0x780 [ 3183.369733] ? kfree+0x111/0x260 03:54:38 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 3183.373121] ? p9_client_create+0x7f9/0x1770 [ 3183.377541] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3183.382575] p9_idpool_create+0x42/0x190 [ 3183.386652] p9_client_create+0x852/0x1770 [ 3183.390898] ? p9_client_read+0xc60/0xc60 [ 3183.395042] ? find_held_lock+0x36/0x1c0 [ 3183.399114] ? __lockdep_init_map+0x105/0x590 [ 3183.403622] ? kasan_check_write+0x14/0x20 [ 3183.407876] ? __init_rwsem+0x1cc/0x2a0 [ 3183.411849] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3183.416874] ? rcu_read_lock_sched_held+0x108/0x120 [ 3183.421904] ? __kmalloc_track_caller+0x5f5/0x760 [ 3183.426744] ? save_stack+0xa9/0xd0 [ 3183.430361] ? save_stack+0x43/0xd0 [ 3183.433981] ? kasan_kmalloc+0xc4/0xe0 [ 3183.437861] ? kmem_cache_alloc_trace+0x152/0x780 [ 3183.442694] ? memcpy+0x45/0x50 [ 3183.445966] v9fs_session_init+0x21a/0x1a80 [ 3183.450284] ? find_held_lock+0x36/0x1c0 [ 3183.454358] ? v9fs_show_options+0x7e0/0x7e0 [ 3183.458781] ? kasan_check_read+0x11/0x20 [ 3183.462945] ? rcu_is_watching+0x8c/0x150 [ 3183.467100] ? rcu_pm_notify+0xc0/0xc0 [ 3183.470985] ? v9fs_mount+0x61/0x900 [ 3183.474693] ? rcu_read_lock_sched_held+0x108/0x120 [ 3183.479704] ? kmem_cache_alloc_trace+0x616/0x780 [ 3183.484549] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3183.490151] v9fs_mount+0x7c/0x900 [ 3183.493700] mount_fs+0xae/0x328 [ 3183.497061] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3183.501645] ? may_umount+0xb0/0xb0 [ 3183.505264] ? _raw_read_unlock+0x22/0x30 [ 3183.509401] ? __get_fs_type+0x97/0xc0 [ 3183.513292] do_mount+0x581/0x30e0 [ 3183.516833] ? copy_mount_string+0x40/0x40 [ 3183.521075] ? copy_mount_options+0x5f/0x380 [ 3183.525497] ? rcu_read_lock_sched_held+0x108/0x120 [ 3183.530523] ? kmem_cache_alloc_trace+0x616/0x780 [ 3183.535563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3183.541140] ? _copy_from_user+0xdf/0x150 [ 3183.545298] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3183.550824] ? copy_mount_options+0x285/0x380 [ 3183.555311] ksys_mount+0x12d/0x140 [ 3183.558935] __x64_sys_mount+0xbe/0x150 [ 3183.562903] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3183.567916] do_syscall_64+0x1b9/0x820 [ 3183.571801] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3183.576743] ? syscall_return_slowpath+0x31d/0x5e0 [ 3183.581925] ? __switch_to_asm+0x34/0x70 [ 3183.585978] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3183.591338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3183.596186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3183.601369] RIP: 0033:0x457089 [ 3183.604551] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:54:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @remote, 0x3}, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:38 executing program 6 (fault-call:8 fault-nth:14): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3183.623445] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3183.631147] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3183.638405] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3183.645670] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3183.652946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3183.660201] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000d 03:54:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x700}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x2c8) 03:54:39 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 03:54:39 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0xfffffffffffffeea) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x2d4) write$binfmt_aout(r0, &(0x7f00000002c0)={{0x1cf, 0x1, 0x3ff, 0xbe, 0x81, 0x3, 0x13b, 0x5}, "300c3d5f67d3549384d3d8b4b225dc13287d502ab0ab8a9de3c571195fd0b913f3", [[], [], [], [], [], [], [], [], []]}, 0x941) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4040, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x3, 0x9, 0x6}) 03:54:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1500]}}]}, 0x2c}}, 0x0) 03:54:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000140)={0x1, 0x14, [0x0, 0x80, 0x3, 0x0, 0x1]}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000180)={0xc9d, 0x6ab9, 0x4, 0x0, 0x0, 0x7e81}) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="a65fbb8d0bbf68fce529184b1df30d1167a643dd8b5c11164c3c5d555daad6a5e193c0db1258a5dc2d36aa5509a3520c57da9c29cea871f3fa6d045bbefe129a210c2cb3bb29b84f10793381471ccac5d4045e9569d269977aaaf02899ff2fb6bfcb964bf8ce", 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x3f8) [ 3184.106559] FAULT_INJECTION: forcing a failure. [ 3184.106559] name failslab, interval 1, probability 0, space 0, times 0 [ 3184.114593] ISOFS: Unable to identify CD-ROM format. [ 3184.118310] CPU: 0 PID: 5979 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3184.130328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3184.139668] Call Trace: [ 3184.142246] dump_stack+0x1c9/0x2b4 [ 3184.145875] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3184.151074] should_fail.cold.4+0xa/0x11 [ 3184.155157] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3184.160252] ? lock_downgrade+0x8f0/0x8f0 [ 3184.164445] ? kasan_check_read+0x11/0x20 [ 3184.168587] ? rcu_is_watching+0x8c/0x150 [ 3184.172729] ? find_held_lock+0x36/0x1c0 [ 3184.176796] ? check_same_owner+0x340/0x340 [ 3184.181108] ? rcu_note_context_switch+0x730/0x730 [ 3184.186062] __should_failslab+0x124/0x180 [ 3184.190311] should_failslab+0x9/0x14 [ 3184.194121] __kmalloc_track_caller+0x2c4/0x760 [ 3184.198804] ? v9fs_session_init+0x21a/0x1a80 [ 3184.203339] ? v9fs_mount+0x7c/0x900 [ 3184.207048] ? mount_fs+0xae/0x328 [ 3184.210597] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3184.215349] ? do_mount+0x581/0x30e0 [ 3184.219053] ? ksys_mount+0x12d/0x140 [ 3184.222843] ? __x64_sys_mount+0xbe/0x150 [ 3184.226979] ? do_syscall_64+0x1b9/0x820 [ 3184.231038] ? parse_opts+0x176/0x500 [ 3184.234830] kstrdup+0x39/0x70 [ 3184.238016] parse_opts+0x176/0x500 [ 3184.241649] ? p9_fd_poll+0x2b0/0x2b0 [ 3184.245445] ? kasan_check_read+0x11/0x20 [ 3184.249588] ? rcu_is_watching+0x8c/0x150 [ 3184.253734] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3184.258838] ? rcu_pm_notify+0xc0/0xc0 [ 3184.262744] p9_fd_create+0x8b/0x3f0 [ 3184.266453] ? p9_fd_show_options+0x1c0/0x1c0 [ 3184.270945] ? lockdep_init_map+0x9/0x10 [ 3184.275011] ? __raw_spin_lock_init+0x2d/0x100 [ 3184.279621] p9_client_create+0x8ed/0x1770 [ 3184.283854] ? p9_client_read+0xc60/0xc60 [ 3184.287999] ? find_held_lock+0x36/0x1c0 [ 3184.292095] ? __lockdep_init_map+0x105/0x590 [ 3184.296583] ? kasan_check_write+0x14/0x20 [ 3184.300820] ? __init_rwsem+0x1cc/0x2a0 [ 3184.304810] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3184.309838] ? rcu_read_lock_sched_held+0x108/0x120 [ 3184.314849] ? __kmalloc_track_caller+0x5f5/0x760 [ 3184.319686] ? save_stack+0xa9/0xd0 [ 3184.323309] ? save_stack+0x43/0xd0 [ 3184.326940] ? kasan_kmalloc+0xc4/0xe0 [ 3184.330817] ? kmem_cache_alloc_trace+0x152/0x780 [ 3184.335659] ? memcpy+0x45/0x50 [ 3184.338946] v9fs_session_init+0x21a/0x1a80 [ 3184.343260] ? find_held_lock+0x36/0x1c0 [ 3184.347367] ? v9fs_show_options+0x7e0/0x7e0 [ 3184.351784] ? kasan_check_read+0x11/0x20 [ 3184.355921] ? rcu_is_watching+0x8c/0x150 [ 3184.360061] ? rcu_pm_notify+0xc0/0xc0 [ 3184.363946] ? v9fs_mount+0x61/0x900 [ 3184.367651] ? rcu_read_lock_sched_held+0x108/0x120 [ 3184.372671] ? kmem_cache_alloc_trace+0x616/0x780 [ 3184.377519] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3184.383050] v9fs_mount+0x7c/0x900 [ 3184.386619] mount_fs+0xae/0x328 [ 3184.390012] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3184.394618] ? may_umount+0xb0/0xb0 [ 3184.398234] ? _raw_read_unlock+0x22/0x30 [ 3184.402385] ? __get_fs_type+0x97/0xc0 [ 3184.406298] do_mount+0x581/0x30e0 [ 3184.409847] ? copy_mount_string+0x40/0x40 [ 3184.414078] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3184.418841] ? retint_kernel+0x10/0x10 [ 3184.422723] ? copy_mount_options+0x1f0/0x380 [ 3184.427208] ? copy_mount_options+0x1fa/0x380 [ 3184.431721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3184.437248] ? copy_mount_options+0x285/0x380 [ 3184.441742] ksys_mount+0x12d/0x140 [ 3184.445359] __x64_sys_mount+0xbe/0x150 [ 3184.449357] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3184.454380] do_syscall_64+0x1b9/0x820 [ 3184.458290] ? finish_task_switch+0x1d3/0x870 [ 3184.462834] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3184.467768] ? syscall_return_slowpath+0x31d/0x5e0 [ 3184.472696] ? __switch_to_asm+0x34/0x70 [ 3184.476751] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3184.482108] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3184.486957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3184.492152] RIP: 0033:0x457089 [ 3184.495346] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3184.514252] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3184.521964] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3184.529227] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3184.536490] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3184.543754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3184.551014] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000e 03:54:39 executing program 6 (fault-call:8 fault-nth:15): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3184.558902] 9pnet: Insufficient options for proto=fd 03:54:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:40 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92030000]}, 0x2c8) 03:54:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0x9, 0x5}) 03:54:40 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 03:54:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x440a]}}]}, 0x2c}}, 0x0) 03:54:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0xffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x80, 0x0) write$P9_RMKDIR(r1, &(0x7f00000001c0)={0x14, 0x49, 0x2, {0x1, 0x3, 0x8}}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/bnep\x00') ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000140)={'veth1\x00'}) write$P9_RMKDIR(r2, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x50, 0x2, 0x4002}}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0xfffffffffffffc3a, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x74}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3185.014754] FAULT_INJECTION: forcing a failure. [ 3185.014754] name failslab, interval 1, probability 0, space 0, times 0 [ 3185.026100] CPU: 0 PID: 6016 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3185.033047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3185.042429] Call Trace: [ 3185.045047] dump_stack+0x1c9/0x2b4 [ 3185.048700] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3185.053920] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 3185.058623] should_fail.cold.4+0xa/0x11 [ 3185.062700] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3185.067795] ? __kernel_text_address+0xd/0x40 [ 3185.072296] ? unwind_get_return_address+0x61/0xa0 [ 3185.077238] ? find_held_lock+0x36/0x1c0 [ 3185.081334] ? check_same_owner+0x340/0x340 [ 3185.085667] ? rcu_note_context_switch+0x730/0x730 [ 3185.090610] __should_failslab+0x124/0x180 [ 3185.094853] should_failslab+0x9/0x14 [ 3185.098665] __kmalloc+0x2c8/0x760 [ 3185.102204] ? rcu_pm_notify+0xc0/0xc0 [ 3185.106092] ? match_number.isra.0+0xbf/0x280 [ 3185.110583] match_number.isra.0+0xbf/0x280 [ 3185.114910] ? match_strdup+0xa0/0xa0 [ 3185.118718] ? match_wildcard+0x3c0/0x3c0 [ 3185.122879] ? do_syscall_64+0x1b9/0x820 [ 3185.126952] match_int+0x23/0x30 [ 3185.130329] parse_opts+0x32c/0x500 [ 3185.133953] ? p9_fd_poll+0x2b0/0x2b0 [ 3185.137768] ? kasan_check_read+0x11/0x20 [ 3185.141926] ? rcu_is_watching+0x8c/0x150 [ 3185.146080] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3185.151227] p9_fd_create+0x8b/0x3f0 [ 3185.154945] ? p9_fd_show_options+0x1c0/0x1c0 [ 3185.159445] ? lockdep_init_map+0x9/0x10 [ 3185.163499] ? __raw_spin_lock_init+0x2d/0x100 [ 3185.168097] p9_client_create+0x8ed/0x1770 [ 3185.172346] ? p9_client_read+0xc60/0xc60 [ 3185.176487] ? find_held_lock+0x36/0x1c0 [ 3185.180581] ? __lockdep_init_map+0x105/0x590 [ 3185.185082] ? kasan_check_write+0x14/0x20 [ 3185.189319] ? __init_rwsem+0x1cc/0x2a0 [ 3185.193300] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3185.198318] ? rcu_read_lock_sched_held+0x108/0x120 [ 3185.203335] ? __kmalloc_track_caller+0x5f5/0x760 [ 3185.208170] ? save_stack+0xa9/0xd0 [ 3185.211797] ? save_stack+0x43/0xd0 [ 3185.215436] ? kasan_kmalloc+0xc4/0xe0 [ 3185.219313] ? kmem_cache_alloc_trace+0x152/0x780 [ 3185.224153] ? memcpy+0x45/0x50 [ 3185.227447] v9fs_session_init+0x21a/0x1a80 [ 3185.231764] ? find_held_lock+0x36/0x1c0 [ 3185.235834] ? v9fs_show_options+0x7e0/0x7e0 [ 3185.240249] ? kasan_check_read+0x11/0x20 [ 3185.244410] ? rcu_is_watching+0x8c/0x150 [ 3185.248555] ? rcu_pm_notify+0xc0/0xc0 [ 3185.252443] ? v9fs_mount+0x61/0x900 [ 3185.256149] ? rcu_read_lock_sched_held+0x108/0x120 [ 3185.261182] ? kmem_cache_alloc_trace+0x616/0x780 [ 3185.266042] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3185.271602] v9fs_mount+0x7c/0x900 [ 3185.275145] mount_fs+0xae/0x328 [ 3185.278505] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3185.283080] ? may_umount+0xb0/0xb0 [ 3185.286794] ? _raw_read_unlock+0x22/0x30 [ 3185.290947] ? __get_fs_type+0x97/0xc0 [ 3185.294831] do_mount+0x581/0x30e0 [ 3185.298377] ? copy_mount_string+0x40/0x40 [ 3185.302642] ? copy_mount_options+0x5f/0x380 [ 3185.307047] ? rcu_read_lock_sched_held+0x108/0x120 [ 3185.312067] ? kmem_cache_alloc_trace+0x616/0x780 [ 3185.316922] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3185.322474] ? _copy_from_user+0xdf/0x150 [ 3185.326617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3185.332145] ? copy_mount_options+0x285/0x380 [ 3185.336640] ksys_mount+0x12d/0x140 [ 3185.340282] __x64_sys_mount+0xbe/0x150 [ 3185.344257] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3185.349274] do_syscall_64+0x1b9/0x820 [ 3185.353160] ? finish_task_switch+0x1d3/0x870 [ 3185.357646] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3185.362568] ? syscall_return_slowpath+0x31d/0x5e0 [ 3185.367488] ? __switch_to_asm+0x34/0x70 [ 3185.371538] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3185.376907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3185.381749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3185.386938] RIP: 0033:0x457089 [ 3185.390124] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3185.409015] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3185.416721] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3185.423993] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3185.431250] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3185.438523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3185.445795] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000f [ 3185.466863] 9pnet: Insufficient options for proto=fd [ 3185.478182] ISOFS: Unable to identify CD-ROM format. 03:54:40 executing program 6 (fault-call:8 fault-nth:16): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}, 0x2c8) 03:54:40 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:40 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='\x00', r2) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, r1, 0x5, 0x3}, 0x14) keyctl$instantiate(0xc, r2, &(0x7f0000000240)="0013ffb41c9f34f554b60e550e2da7b32a6a5e25e979d1a28fcc204e816e132bde14442c35fe24ad59061e0963699e15af1e00dfd838b75858935ed1636ce68883ba537afc74a040090a621a0fa0f73d800aeca6daf916e35ae97b315393bea4ef4057ddd3fe6a1c9af994cead5744f16a8f68cace5a2a9d083cbc8731e202607dd0661bf7b624ea289941eeb41793d3c6fbe20329364a2e47fa3e565a7d61ac289e8823e4450c5873ca07ac71180755c1c3", 0xb2, 0xfffffffffffffffd) 03:54:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xfffffff5]}}]}, 0x2c}}, 0x0) 03:54:40 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 03:54:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') ioctl$TCSBRKP(r1, 0x5425, 0x1) [ 3185.661498] validate_nla: 12 callbacks suppressed [ 3185.666947] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3185.674345] net_ratelimit: 12 callbacks suppressed [ 3185.674356] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3185.696006] netlink: 'syz-executor5': attribute type 3 has an invalid length. 03:54:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6c}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3185.703358] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3185.991012] FAULT_INJECTION: forcing a failure. [ 3185.991012] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.002548] CPU: 1 PID: 6070 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3186.009499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3186.018865] Call Trace: [ 3186.021494] dump_stack+0x1c9/0x2b4 [ 3186.025157] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3186.030386] should_fail.cold.4+0xa/0x11 [ 3186.034486] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3186.039615] ? lock_downgrade+0x8f0/0x8f0 [ 3186.043796] ? kasan_check_read+0x11/0x20 [ 3186.047960] ? rcu_is_watching+0x8c/0x150 [ 3186.052139] ? find_held_lock+0x36/0x1c0 [ 3186.056245] ? check_same_owner+0x340/0x340 [ 3186.060584] ? rcu_note_context_switch+0x730/0x730 [ 3186.065539] __should_failslab+0x124/0x180 [ 3186.069797] should_failslab+0x9/0x14 [ 3186.073623] __kmalloc_track_caller+0x2c4/0x760 [ 3186.078313] ? v9fs_session_init+0x21a/0x1a80 [ 3186.082833] ? v9fs_mount+0x7c/0x900 [ 3186.086576] ? mount_fs+0xae/0x328 [ 3186.090148] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3186.094939] ? do_mount+0x581/0x30e0 [ 3186.098673] ? ksys_mount+0x12d/0x140 [ 3186.102504] ? __x64_sys_mount+0xbe/0x150 [ 3186.106668] ? do_syscall_64+0x1b9/0x820 [ 3186.110758] ? parse_opts+0x176/0x500 [ 3186.114587] kstrdup+0x39/0x70 [ 3186.117810] parse_opts+0x176/0x500 [ 3186.119643] ISOFS: Unable to identify CD-ROM format. [ 3186.121466] ? p9_fd_poll+0x2b0/0x2b0 [ 3186.121497] ? kasan_check_read+0x11/0x20 [ 3186.121515] ? rcu_is_watching+0x8c/0x150 03:54:41 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x6]}}]}, 0x2c}}, 0x0) 03:54:41 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xffffffffa0010000}, 0x0) 03:54:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000]}, 0x2c8) 03:54:41 executing program 0: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x858, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) personality(0x105000004) io_setup(0x2, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ada75af1f02acc7edbcd7a071fb35331ce39c5a00000000") getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000100)=""/1, &(0x7f0000000140)=0x1) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) getpeername$netlink(r3, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2a) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5-generic)\x00'}, 0x58) mq_open(&(0x7f0000000200)='\x00', 0x842, 0x51, &(0x7f00000002c0)={0x101, 0x6, 0x6, 0x81, 0x1586, 0x101, 0x0, 0x5}) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = accept4(r5, 0x0, &(0x7f0000000380), 0x0) accept4$alg(r6, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000300)=0x100000001, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000003c0)) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000340)={0x100000001, 0x6000000000000000, 0x5}) setrlimit(0xc, &(0x7f0000000080)={0x6, 0x29}) mq_open(&(0x7f0000000240)='posix_acl_access:eth0user{\x00', 0x40, 0x1, &(0x7f0000000280)={0x100000001, 0x8, 0x8, 0x9, 0x1, 0x3, 0x2, 0x6}) [ 3186.121532] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3186.121551] ? rcu_pm_notify+0xc0/0xc0 [ 3186.121589] p9_fd_create+0x8b/0x3f0 [ 3186.130094] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3186.130492] ? p9_fd_show_options+0x1c0/0x1c0 [ 3186.130515] ? lockdep_init_map+0x9/0x10 [ 3186.130531] ? __raw_spin_lock_init+0x2d/0x100 [ 3186.130553] p9_client_create+0x8ed/0x1770 [ 3186.134963] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x464c}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3186.138860] ? p9_client_read+0xc60/0xc60 [ 3186.138878] ? find_held_lock+0x36/0x1c0 [ 3186.138922] ? __lockdep_init_map+0x105/0x590 [ 3186.161008] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3186.163397] ? kasan_check_write+0x14/0x20 [ 3186.163428] ? __init_rwsem+0x1cc/0x2a0 [ 3186.163446] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3186.163467] ? rcu_read_lock_sched_held+0x108/0x120 [ 3186.163486] ? __kmalloc_track_caller+0x5f5/0x760 [ 3186.163499] ? save_stack+0xa9/0xd0 [ 3186.163519] ? save_stack+0x43/0xd0 03:54:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x200419cf, &(0x7f0000ae3000)={0xa, 0x0, 0x9, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x210000) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, [], 0xf}, 0x7}, @in={0x2, 0x4e22, @rand_addr=0xffffffffffffff00}, @in={0x2, 0x4e23, @multicast2}], 0x3c) [ 3186.168032] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3186.172347] ? kasan_kmalloc+0xc4/0xe0 [ 3186.172363] ? kmem_cache_alloc_trace+0x152/0x780 [ 3186.172381] ? memcpy+0x45/0x50 [ 3186.172412] v9fs_session_init+0x21a/0x1a80 [ 3186.172440] ? find_held_lock+0x36/0x1c0 [ 3186.276925] ? v9fs_show_options+0x7e0/0x7e0 [ 3186.281365] ? kasan_check_read+0x11/0x20 [ 3186.285546] ? rcu_is_watching+0x8c/0x150 [ 3186.289712] ? rcu_pm_notify+0xc0/0xc0 [ 3186.293641] ? v9fs_mount+0x61/0x900 [ 3186.297377] ? rcu_read_lock_sched_held+0x108/0x120 [ 3186.302439] ? kmem_cache_alloc_trace+0x616/0x780 [ 3186.307310] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3186.312880] v9fs_mount+0x7c/0x900 [ 3186.316459] mount_fs+0xae/0x328 [ 3186.319854] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3186.324463] ? may_umount+0xb0/0xb0 [ 3186.328103] ? _raw_read_unlock+0x22/0x30 [ 3186.332273] ? __get_fs_type+0x97/0xc0 [ 3186.336190] do_mount+0x581/0x30e0 [ 3186.339750] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3186.344187] ? copy_mount_string+0x40/0x40 [ 3186.348454] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3186.353235] ? retint_kernel+0x10/0x10 [ 3186.357150] ? copy_mount_options+0x1f0/0x380 [ 3186.361665] ? copy_mount_options+0x1fa/0x380 [ 3186.366182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3186.371741] ? copy_mount_options+0x285/0x380 [ 3186.376258] ksys_mount+0x12d/0x140 [ 3186.379900] __x64_sys_mount+0xbe/0x150 [ 3186.383897] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3186.388947] do_syscall_64+0x1b9/0x820 [ 3186.392854] ? finish_task_switch+0x1d3/0x870 [ 3186.397372] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3186.402339] ? syscall_return_slowpath+0x31d/0x5e0 [ 3186.407285] ? __switch_to_asm+0x34/0x70 [ 3186.411368] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3186.416769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3186.421635] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3186.426839] RIP: 0033:0x457089 [ 3186.430100] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3186.449022] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3186.456758] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3186.464040] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3186.471323] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3186.478606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3186.485885] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000010 [ 3186.493283] 9pnet: Insufficient options for proto=fd [ 3186.506362] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3186.513780] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:41 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3186.599845] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3186.607239] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:41 executing program 6 (fault-call:8 fault-nth:17): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}, 0x2c8) 03:54:41 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xb00}, 0x0) 03:54:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0xfffffffffffffffd, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x35a) 03:54:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf00000000000000]}}]}, 0x2c}}, 0x0) 03:54:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x68}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc02c5341, &(0x7f0000000080)={{}, 0x800000, 0xfffffffffffffffd}) r2 = memfd_create(&(0x7f0000000880)='/dev/audio#\x00', 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000040)=0x2) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0x20000d004) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000300)={0x0, 0x0, @ioapic}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="4e2518bc5a5a8591262c74a363c9a0e8dec3f3dd42f166c437fdb19add99ace8b5d251422cf0762312aecb644a7c2f2269b5f9a0b972ce0b29b84c214275988916cc67ec1d3ce0870e3a7024b66a6693f2a248cd52acf5255ea75c63024540b59f72cc00d373f7451af064a0da4de94beef425a954fa7d94eaf6d515"], &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @loopback}}, [0x2, 0x99ed, 0x6, 0x6, 0xffffffffffffff70, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7, 0x656, 0x7, 0x0, 0x5]}, &(0x7f0000000600)=0x100) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:54:42 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010020]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}, 0x2c8) [ 3186.922329] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3186.929999] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup(r0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa0010000]}}]}, 0x2c}}, 0x0) 03:54:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x400300}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3186.964648] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3186.972162] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:42 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 03:54:42 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)) 03:54:42 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3187.108446] ISOFS: Unable to identify CD-ROM format. [ 3187.119751] FAULT_INJECTION: forcing a failure. [ 3187.119751] name failslab, interval 1, probability 0, space 0, times 0 [ 3187.131210] CPU: 0 PID: 6136 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3187.138150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3187.147496] Call Trace: [ 3187.150104] dump_stack+0x1c9/0x2b4 [ 3187.153738] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3187.158925] should_fail.cold.4+0xa/0x11 [ 3187.162992] ? __kernel_text_address+0xd/0x40 [ 3187.167498] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3187.172595] ? __save_stack_trace+0x8d/0xf0 [ 3187.176919] ? save_stack+0xa9/0xd0 [ 3187.180548] ? save_stack+0x43/0xd0 [ 3187.184194] ? __kasan_slab_free+0x11a/0x170 [ 3187.188616] ? find_held_lock+0x36/0x1c0 [ 3187.192681] ? check_same_owner+0x340/0x340 [ 3187.196995] ? rcu_note_context_switch+0x730/0x730 [ 3187.201930] __should_failslab+0x124/0x180 [ 3187.206162] should_failslab+0x9/0x14 [ 3187.209974] __kmalloc+0x2c8/0x760 [ 3187.213505] ? kfree+0x111/0x260 [ 3187.216866] ? match_number.isra.0+0x19b/0x280 [ 3187.221475] ? match_number.isra.0+0xbf/0x280 [ 3187.226000] match_number.isra.0+0xbf/0x280 [ 3187.230411] ? match_strdup+0xa0/0xa0 [ 3187.234219] ? match_wildcard+0x3c0/0x3c0 [ 3187.238359] ? do_syscall_64+0x1b9/0x820 [ 3187.242444] match_int+0x23/0x30 [ 3187.245825] parse_opts+0x32c/0x500 [ 3187.249456] ? p9_fd_poll+0x2b0/0x2b0 [ 3187.253253] ? kasan_check_read+0x11/0x20 [ 3187.257393] ? rcu_is_watching+0x8c/0x150 [ 3187.261547] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3187.266667] p9_fd_create+0x8b/0x3f0 [ 3187.270374] ? p9_fd_show_options+0x1c0/0x1c0 [ 3187.274885] ? lockdep_init_map+0x9/0x10 [ 3187.278964] ? __raw_spin_lock_init+0x2d/0x100 [ 3187.283553] p9_client_create+0x8ed/0x1770 [ 3187.287782] ? p9_client_read+0xc60/0xc60 [ 3187.291942] ? find_held_lock+0x36/0x1c0 [ 3187.296018] ? __lockdep_init_map+0x105/0x590 [ 3187.300527] ? kasan_check_write+0x14/0x20 [ 3187.304773] ? __init_rwsem+0x1cc/0x2a0 [ 3187.308738] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3187.313758] ? rcu_read_lock_sched_held+0x108/0x120 [ 3187.318764] ? __kmalloc_track_caller+0x5f5/0x760 [ 3187.323591] ? save_stack+0xa9/0xd0 [ 3187.327206] ? save_stack+0x43/0xd0 [ 3187.330876] ? kasan_kmalloc+0xc4/0xe0 [ 3187.334753] ? kmem_cache_alloc_trace+0x152/0x780 [ 3187.339584] ? memcpy+0x45/0x50 [ 3187.342854] v9fs_session_init+0x21a/0x1a80 [ 3187.347173] ? __sched_text_start+0x8/0x8 [ 3187.351312] ? find_held_lock+0x36/0x1c0 [ 3187.355368] ? v9fs_show_options+0x7e0/0x7e0 [ 3187.359766] ? kasan_check_read+0x11/0x20 [ 3187.363911] ? rcu_is_watching+0x8c/0x150 [ 3187.368058] ? rcu_pm_notify+0xc0/0xc0 [ 3187.371954] ? v9fs_mount+0x61/0x900 [ 3187.375657] ? rcu_read_lock_sched_held+0x108/0x120 [ 3187.380674] ? kmem_cache_alloc_trace+0x616/0x780 [ 3187.385525] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3187.391055] v9fs_mount+0x7c/0x900 [ 3187.394586] mount_fs+0xae/0x328 [ 3187.397957] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3187.402538] ? may_umount+0xb0/0xb0 [ 3187.406154] ? _raw_read_unlock+0x22/0x30 [ 3187.410288] ? __get_fs_type+0x97/0xc0 [ 3187.414170] do_mount+0x581/0x30e0 [ 3187.417708] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3187.422175] ? copy_mount_string+0x40/0x40 [ 3187.426428] ? copy_mount_options+0x5f/0x380 [ 3187.430827] ? rcu_read_lock_sched_held+0x108/0x120 [ 3187.435843] ? kmem_cache_alloc_trace+0x616/0x780 [ 3187.440696] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3187.446226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3187.451752] ? copy_mount_options+0x285/0x380 [ 3187.456240] ksys_mount+0x12d/0x140 [ 3187.459855] __x64_sys_mount+0xbe/0x150 [ 3187.463829] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3187.468852] do_syscall_64+0x1b9/0x820 [ 3187.472727] ? finish_task_switch+0x1d3/0x870 [ 3187.477218] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3187.482153] ? syscall_return_slowpath+0x31d/0x5e0 [ 3187.487068] ? __switch_to_asm+0x34/0x70 [ 3187.491135] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3187.496493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3187.501327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3187.506504] RIP: 0033:0x457089 [ 3187.509682] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3187.528568] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3187.536280] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3187.543536] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3187.550793] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 03:54:42 executing program 6 (fault-call:8 fault-nth:18): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3187.558048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3187.565301] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000011 [ 3187.572864] 9pnet: Insufficient options for proto=fd 03:54:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29e]}, 0x2c8) 03:54:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x400200) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xa0010000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3187.795825] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3187.803366] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3187.820434] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3187.828034] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:43 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1a0ffffffff}, 0x0) 03:54:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa44]}}]}, 0x2c}}, 0x0) 03:54:43 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:43 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000540)='.', &(0x7f0000000040)='gfs2meta\x00', 0x0, 0x0) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x9) [ 3188.088869] FAULT_INJECTION: forcing a failure. [ 3188.088869] name failslab, interval 1, probability 0, space 0, times 0 [ 3188.100267] CPU: 1 PID: 6174 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3188.107211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3188.116577] Call Trace: [ 3188.119191] dump_stack+0x1c9/0x2b4 [ 3188.122853] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3188.128081] should_fail.cold.4+0xa/0x11 [ 3188.132164] ? __kernel_text_address+0xd/0x40 [ 3188.136699] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3188.141831] ? __save_stack_trace+0x8d/0xf0 [ 3188.146189] ? save_stack+0xa9/0xd0 [ 3188.149843] ? save_stack+0x43/0xd0 [ 3188.153506] ? __kasan_slab_free+0x11a/0x170 [ 3188.157965] ? find_held_lock+0x36/0x1c0 [ 3188.162080] ? check_same_owner+0x340/0x340 [ 3188.164242] ISOFS: Unable to identify CD-ROM format. [ 3188.166438] ? rcu_note_context_switch+0x730/0x730 [ 3188.166466] __should_failslab+0x124/0x180 [ 3188.166488] should_failslab+0x9/0x14 [ 3188.166508] __kmalloc+0x2c8/0x760 [ 3188.166522] ? kfree+0x111/0x260 [ 3188.166545] ? match_number.isra.0+0x19b/0x280 [ 3188.196029] ? match_number.isra.0+0xbf/0x280 [ 3188.200518] match_number.isra.0+0xbf/0x280 [ 3188.204840] ? match_strdup+0xa0/0xa0 [ 3188.208645] ? match_wildcard+0x3c0/0x3c0 [ 3188.212810] ? do_syscall_64+0x1b9/0x820 [ 3188.216891] match_int+0x23/0x30 [ 3188.220286] parse_opts+0x32c/0x500 [ 3188.223948] ? p9_fd_poll+0x2b0/0x2b0 [ 3188.227778] ? kasan_check_read+0x11/0x20 [ 3188.231953] ? rcu_is_watching+0x8c/0x150 [ 3188.236113] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3188.241251] p9_fd_create+0x8b/0x3f0 [ 3188.244982] ? p9_fd_show_options+0x1c0/0x1c0 [ 3188.249530] ? lockdep_init_map+0x9/0x10 [ 3188.253607] ? __raw_spin_lock_init+0x2d/0x100 [ 3188.258302] p9_client_create+0x8ed/0x1770 [ 3188.262574] ? p9_client_read+0xc60/0xc60 [ 3188.266732] ? find_held_lock+0x36/0x1c0 [ 3188.270832] ? __lockdep_init_map+0x105/0x590 [ 3188.275350] ? kasan_check_write+0x14/0x20 [ 3188.279600] ? __init_rwsem+0x1cc/0x2a0 [ 3188.283596] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3188.288634] ? rcu_read_lock_sched_held+0x108/0x120 [ 3188.293669] ? __kmalloc_track_caller+0x5f5/0x760 [ 3188.295902] gfs2: path_lookup on ./file0/file0 returned error -2 [ 3188.298527] ? save_stack+0xa9/0xd0 [ 3188.298543] ? save_stack+0x43/0xd0 [ 3188.298555] ? kasan_kmalloc+0xc4/0xe0 [ 3188.298572] ? kmem_cache_alloc_trace+0x152/0x780 [ 3188.298588] ? memcpy+0x45/0x50 [ 3188.298610] v9fs_session_init+0x21a/0x1a80 [ 3188.298630] ? find_held_lock+0x36/0x1c0 [ 3188.298658] ? v9fs_show_options+0x7e0/0x7e0 [ 3188.298679] ? kasan_check_read+0x11/0x20 [ 3188.298700] ? rcu_is_watching+0x8c/0x150 [ 3188.345157] ? rcu_pm_notify+0xc0/0xc0 [ 3188.347515] gfs2: path_lookup on ./file0/file0 returned error -2 [ 3188.349067] ? v9fs_mount+0x61/0x900 [ 3188.349087] ? rcu_read_lock_sched_held+0x108/0x120 [ 3188.349107] ? kmem_cache_alloc_trace+0x616/0x780 [ 3188.349131] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3188.349154] v9fs_mount+0x7c/0x900 [ 3188.349175] mount_fs+0xae/0x328 [ 3188.349200] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3188.349219] ? may_umount+0xb0/0xb0 03:54:43 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r2 = accept$alg(r0, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="1f9641469791ad03cb2cea07a323c80914cd70e9e6a00b77", 0x18}, {&(0x7f0000000040)="ab62fdd5d5c2107249dc9f196e1d3fbb900f2f0f7cff9447964964e1c67392bb9fe0c549fcbd8769f2429e1085a8b2610bab857cd11bc7fe1880f2d66432b1a9af2795e61791cf1ccb13cba939d8871f83d48cd1551330ab614dcf62c775a9e3cc", 0x61}, {&(0x7f0000000180)="cdbc0010d1aac7d4900a7e4e4459c3dec99a6e6a191c043b9946b7b141e4f5b08a5b44f92a0c81d8c7578db88ee00e6d2de888d91c0d0a73bdea7c3ce0bc5fc1718f427cdd668f6734b4f45944a4281389bca08b8e6f6a2377c79f961195a0455d88f0db144cd346ef03ffd49c47ae26bdc9c2241a947403f8cd1b85ad39bb854a9f9e38a5d8cefd28a5090b11628b0cfbe05c5d7964922482f3ff7149177bd030c3877b223e11cb1a76c615e4168e61b51340200228596a7b4353371ede65c249d13bcb1598d1f54848be85fa5d", 0xce}, {&(0x7f00000002c0)="51d8474fb499b98b531f00b72af6a0594562fbffa27acf8741119c8da0b00e863efff094a0af0c43869d685a10cf946e92a47025b2a462cb7623ea51b34062df9aad0d6fd55ca13ae57954e266158f1203e256c8c49fad2b680ee91a7ae2cdd3747e3887eb91d1b8d679f26b513ac9c3407f2bb5", 0x74}, {&(0x7f0000000340)="301d21894fc6b810dec8766b30fbeeab72b92080d636cedc2e3ee0f1a8bec76ef7795de7eb5500782993e7a5564287097131ed4b66011addfc4d988aca969711d98ff45d6ef6d39685a97a7048f332226db8f3fdbbb3852452b6b8e8978076ea9c180f0e1cd2860723ec93490a4831af86c95d7c9853069c318d9b947e8ab96c17040d6030df8cd3e7a019e06d49b6c85d79", 0x92}, {&(0x7f0000000400)="09f5913de3329369f7de90fb304a3856eb2da23299c4214e76c8708c607092b835fd3902aee35b011063de7c4e25b2", 0x2f}, {&(0x7f0000001340)="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", 0x1000}], 0x7) recvfrom(r2, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0xfcdc) 03:54:43 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa0010000}, 0x0) 03:54:43 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3188.349239] ? _raw_read_unlock+0x22/0x30 [ 3188.393739] ? __get_fs_type+0x97/0xc0 [ 3188.397652] do_mount+0x581/0x30e0 [ 3188.401209] ? interrupt_entry+0xb1/0xf0 [ 3188.405290] ? copy_mount_string+0x40/0x40 [ 3188.409552] ? retint_kernel+0x10/0x10 [ 3188.413455] ? copy_mount_options+0x1e3/0x380 [ 3188.417966] ? write_comp_data+0x6d/0x70 [ 3188.422050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3188.427607] ? copy_mount_options+0x285/0x380 [ 3188.432124] ksys_mount+0x12d/0x140 [ 3188.435768] __x64_sys_mount+0xbe/0x150 03:54:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7f, 0x200101) ioctl$TCSBRKP(r1, 0x5425, 0x920e) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f00000000c0)={0x5e}) [ 3188.439754] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3188.444796] do_syscall_64+0x1b9/0x820 [ 3188.448699] ? finish_task_switch+0x1d3/0x870 [ 3188.453213] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3188.458161] ? syscall_return_slowpath+0x31d/0x5e0 [ 3188.463110] ? __switch_to_asm+0x34/0x70 [ 3188.467185] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3188.472557] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3188.477440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3188.482642] RIP: 0033:0x457089 [ 3188.485827] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3188.504729] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3188.512453] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3188.519737] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3188.527014] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3188.534295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3188.541579] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000012 [ 3188.549126] 9pnet: Insufficient options for proto=fd 03:54:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa44000000000000]}}]}, 0x2c}}, 0x0) 03:54:43 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6800000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x392]}, 0x2c8) 03:54:43 executing program 6 (fault-call:8 fault-nth:19): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:43 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 03:54:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x40000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x1}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000200)=0x84) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000240)={'veth0\x00', {0x2, 0x4e21}}) 03:54:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl(r0, 0x5, &(0x7f00000001c0)="9946429395021d45e761e7f9ba514761159c5ab1759001db578ae15bc60626e1c6c7e70c5d0a2884f451b5ca16827e2e4d9edf96c1b6c012f42b1938e74ea93b3cc3687c408ac9e0d293d9f9ff6db51c9ea6435fedfb856a4ad3f2096bb257d4cfd8046012757765825c077c706cf1852eb34b3702aa4729f6ab2c12c0556beb8eb1096a855fbb7ece4be59407d6b2576f257eff1db3b29f88c0a7e4d41c614355c40f24ea709a89ad16db8d9c9c0406f45a19d94b424ce86ff7fe3c32958418aa7ddecd5f847d641425d39be08571b2a5b8422d26cd7189cd180c5fac04015af90cc21b748e36c900f1a4b7f651d5f3") r1 = socket$inet6(0xa, 0x7, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x400, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0xfffffffffffffe4c, 0x47, 0x1}, 0x7) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) 03:54:44 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x500000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, 0x2c8) 03:54:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xfffff000]}}]}, 0x2c}}, 0x0) [ 3188.951365] binder: 6235:6239 ioctl 5 200001c0 returned -22 [ 3188.981233] FAULT_INJECTION: forcing a failure. [ 3188.981233] name failslab, interval 1, probability 0, space 0, times 0 [ 3188.992604] CPU: 0 PID: 6244 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3188.999548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3189.008905] Call Trace: [ 3189.011522] dump_stack+0x1c9/0x2b4 [ 3189.015178] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3189.020394] ? __kernel_text_address+0xd/0x40 [ 3189.024939] ? unwind_get_return_address+0x61/0xa0 [ 3189.029900] should_fail.cold.4+0xa/0x11 [ 3189.033995] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3189.039122] ? save_stack+0xa9/0xd0 [ 3189.039360] ISOFS: Unable to identify CD-ROM format. [ 3189.042764] ? save_stack+0x43/0xd0 [ 3189.042781] ? kasan_kmalloc+0xc4/0xe0 [ 3189.042802] ? kmem_cache_alloc_trace+0x152/0x780 [ 3189.042822] ? p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 3189.042840] ? p9_client_rpc+0x1bd/0x1400 [ 3189.042861] ? p9_client_create+0xdb0/0x1770 [ 3189.042882] ? v9fs_mount+0x7c/0x900 [ 3189.042902] ? mount_fs+0xae/0x328 [ 3189.050494] binder: 6235:6239 ioctl 40046205 0 returned -22 [ 3189.051646] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3189.051662] ? do_mount+0x581/0x30e0 [ 3189.051674] ? ksys_mount+0x12d/0x140 03:54:44 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 03:54:44 executing program 0: syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x2, 0x99b, 0x7}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000003100000829bd7000fbdbdf2500ff020038000300010000007065646974000000000010001d0000004a98080003003299000000000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20044890) sendmsg$nl_generic(r1, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f0000000080)={0x14, 0x18, 0x902, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) syz_open_procfs$namespace(r2, &(0x7f00000002c0)='ns/net\x00') [ 3189.051687] ? __x64_sys_mount+0xbe/0x150 [ 3189.051706] ? graph_lock+0x170/0x170 [ 3189.051722] ? graph_lock+0x170/0x170 [ 3189.051742] ? lock_downgrade+0x8f0/0x8f0 [ 3189.059106] binder: 6235:6239 ioctl 5 200001c0 returned -22 [ 3189.060468] ? lock_downgrade+0x8f0/0x8f0 [ 3189.060510] ? check_same_owner+0x340/0x340 [ 3189.060529] ? rcu_note_context_switch+0x730/0x730 [ 3189.060552] __should_failslab+0x124/0x180 [ 3189.060573] should_failslab+0x9/0x14 [ 3189.105202] binder: 6235:6250 ioctl 40046205 0 returned -22 [ 3189.107650] kmem_cache_alloc_trace+0x2cb/0x780 [ 3189.107667] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3189.107685] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3189.107710] p9_client_prepare_req.part.9+0x82a/0xcd0 [ 3189.107735] ? p9_free_req.isra.8+0x140/0x140 [ 3189.172916] ? p9_pollwait+0x83/0x230 [ 3189.176723] ? p9_conn_create+0x730/0x730 [ 3189.180876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3189.186419] p9_client_rpc+0x1bd/0x1400 [ 3189.190384] ? p9_fd_poll+0x1e0/0x2b0 [ 3189.194186] ? p9_conn_create+0x55b/0x730 [ 3189.198326] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3189.203683] ? ksys_dup3+0x690/0x690 [ 3189.207383] ? kasan_check_read+0x11/0x20 [ 3189.211538] ? rcu_is_watching+0x8c/0x150 [ 3189.215699] ? rcu_pm_notify+0xc0/0xc0 [ 3189.219584] ? rcu_read_lock_sched_held+0x108/0x120 [ 3189.224599] ? p9_fd_show_options+0x1c0/0x1c0 [ 3189.229085] ? lockdep_init_map+0x9/0x10 [ 3189.233141] p9_client_create+0xdb0/0x1770 [ 3189.237396] ? p9_client_read+0xc60/0xc60 [ 3189.241572] ? find_held_lock+0x36/0x1c0 [ 3189.245635] ? __lockdep_init_map+0x105/0x590 [ 3189.250126] ? kasan_check_write+0x14/0x20 [ 3189.254363] ? __init_rwsem+0x1cc/0x2a0 [ 3189.258360] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3189.263394] ? rcu_read_lock_sched_held+0x108/0x120 [ 3189.268492] ? __kmalloc_track_caller+0x5f5/0x760 [ 3189.273345] ? save_stack+0xa9/0xd0 [ 3189.276963] ? save_stack+0x43/0xd0 [ 3189.280584] ? kasan_kmalloc+0xc4/0xe0 [ 3189.284481] ? kmem_cache_alloc_trace+0x152/0x780 [ 3189.289323] ? memcpy+0x45/0x50 [ 3189.292607] v9fs_session_init+0x21a/0x1a80 [ 3189.296938] ? find_held_lock+0x36/0x1c0 [ 3189.301000] ? v9fs_show_options+0x7e0/0x7e0 [ 3189.305440] ? kasan_check_read+0x11/0x20 [ 3189.309605] ? rcu_is_watching+0x8c/0x150 [ 3189.313741] ? rcu_pm_notify+0xc0/0xc0 [ 3189.317624] ? v9fs_mount+0x61/0x900 [ 3189.321339] ? rcu_read_lock_sched_held+0x108/0x120 [ 3189.326370] ? kmem_cache_alloc_trace+0x616/0x780 [ 3189.331203] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3189.336731] v9fs_mount+0x7c/0x900 [ 3189.340265] mount_fs+0xae/0x328 [ 3189.343800] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3189.348393] ? may_umount+0xb0/0xb0 [ 3189.352036] ? _raw_read_unlock+0x22/0x30 [ 3189.356175] ? __get_fs_type+0x97/0xc0 [ 3189.360084] do_mount+0x581/0x30e0 [ 3189.363624] ? copy_mount_string+0x40/0x40 [ 3189.367852] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3189.372604] ? retint_kernel+0x10/0x10 [ 3189.376485] ? copy_mount_options+0x1e3/0x380 [ 3189.380980] ? __sanitizer_cov_trace_const_cmp8+0x13/0x20 [ 3189.386519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3189.392056] ? copy_mount_options+0x285/0x380 [ 3189.396556] ksys_mount+0x12d/0x140 [ 3189.400186] __x64_sys_mount+0xbe/0x150 [ 3189.404148] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3189.409165] do_syscall_64+0x1b9/0x820 [ 3189.413041] ? finish_task_switch+0x1d3/0x870 [ 3189.417528] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3189.422455] ? syscall_return_slowpath+0x31d/0x5e0 [ 3189.427379] ? __switch_to_asm+0x34/0x70 [ 3189.431450] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3189.436822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3189.441676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3189.446864] RIP: 0033:0x457089 [ 3189.450047] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3189.468938] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3189.476641] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3189.483949] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3189.491205] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 03:54:44 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2642c0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) listen(r0, 0x0) 03:54:44 executing program 6 (fault-call:8 fault-nth:20): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3189.498461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3189.505726] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000013 [ 3189.513452] 9pnet: Couldn't grow tag array 03:54:44 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x2c8) 03:54:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x14000000]}}]}, 0x2c}}, 0x0) 03:54:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000340)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0x5) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x7ff, 0x1, 0x3, 0x5, 0xe8, 0x6, 0x2c75, 0x7, r2}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8000000210001000000000000000000000000000000000001ac141400c9489cc80000000000000000000000000000000000000000000000000000000000000000000000f786912fbe44af44b1c15e415288d064f2f7606ffe22c39997853f8ddea85fcc7bc5f0e36cd73323a853acbb3c2169a72e481438c7e83507a0802a871f9d2c75e071f96c5c78f2a2ede83be30f9df9cb4b89dd1bd71b2b75614fd0d6e06d36e8eebd48ddf42c9bbc5f68b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002c001300ac1414bb00000000000000000000000000000000000000000000ffffac14140000000000000000005c00110000000000000000000000000000000000fe800000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaff020000000000000000000000000001000000000000000000000000"], 0xd8}}, 0x0) 03:54:45 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3189.929008] FAULT_INJECTION: forcing a failure. [ 3189.929008] name failslab, interval 1, probability 0, space 0, times 0 [ 3189.940310] CPU: 1 PID: 6287 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3189.947247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3189.956639] Call Trace: [ 3189.959253] dump_stack+0x1c9/0x2b4 [ 3189.962922] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3189.968140] ? kernel_text_address+0x79/0xf0 [ 3189.972585] should_fail.cold.4+0xa/0x11 03:54:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 03:54:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x7a00000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:45 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x9effffff00000000}, 0x0) [ 3189.976681] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3189.979548] ISOFS: Unable to identify CD-ROM format. [ 3189.981811] ? save_stack+0xa9/0xd0 [ 3189.981831] ? save_stack+0x43/0xd0 [ 3189.981854] ? kmem_cache_alloc_trace+0x152/0x780 [ 3189.981874] ? p9_client_prepare_req.part.9+0x82a/0xcd0 [ 3189.981895] ? p9_client_rpc+0x1bd/0x1400 [ 3190.008592] ? p9_client_create+0xdb0/0x1770 [ 3190.013022] ? v9fs_session_init+0x21a/0x1a80 [ 3190.017529] ? v9fs_mount+0x7c/0x900 [ 3190.021244] ? mount_fs+0xae/0x328 [ 3190.024804] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3190.029563] ? do_mount+0x581/0x30e0 [ 3190.033418] ? ksys_mount+0x12d/0x140 [ 3190.037222] ? __x64_sys_mount+0xbe/0x150 [ 3190.041389] ? do_syscall_64+0x1b9/0x820 [ 3190.045465] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3190.050838] ? graph_lock+0x170/0x170 [ 3190.054654] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3190.059468] ? check_same_owner+0x340/0x340 [ 3190.063800] ? kasan_check_read+0x11/0x20 [ 3190.067959] ? rcu_note_context_switch+0x730/0x730 [ 3190.072897] __should_failslab+0x124/0x180 [ 3190.077157] should_failslab+0x9/0x14 [ 3190.080965] __kmalloc+0x2c8/0x760 [ 3190.084510] ? __init_waitqueue_head+0x9e/0x150 [ 3190.089196] ? init_wait_entry+0x1c0/0x1c0 [ 3190.093445] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3190.098568] ? p9_fcall_alloc+0x1e/0x90 [ 3190.102569] p9_fcall_alloc+0x1e/0x90 [ 3190.106392] p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 3190.111622] ? p9_free_req.isra.8+0x140/0x140 [ 3190.116146] ? p9_pollwait+0x83/0x230 [ 3190.119966] ? p9_conn_create+0x730/0x730 [ 3190.124134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3190.129690] p9_client_rpc+0x1bd/0x1400 [ 3190.133680] ? p9_fd_poll+0x1e0/0x2b0 [ 3190.137502] ? p9_conn_create+0x55b/0x730 [ 3190.141678] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3190.147065] ? ksys_dup3+0x690/0x690 [ 3190.150795] ? kasan_check_read+0x11/0x20 [ 3190.154963] ? rcu_is_watching+0x8c/0x150 [ 3190.159128] ? rcu_pm_notify+0xc0/0xc0 [ 3190.163044] ? rcu_read_lock_sched_held+0x108/0x120 [ 3190.168098] ? p9_fd_show_options+0x1c0/0x1c0 [ 3190.172612] ? lockdep_init_map+0x9/0x10 [ 3190.176702] p9_client_create+0xdb0/0x1770 [ 3190.180969] ? p9_client_read+0xc60/0xc60 [ 3190.185130] ? find_held_lock+0x36/0x1c0 [ 3190.189234] ? __lockdep_init_map+0x105/0x590 [ 3190.193755] ? kasan_check_write+0x14/0x20 [ 3190.198011] ? __init_rwsem+0x1cc/0x2a0 [ 3190.202009] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3190.207053] ? rcu_read_lock_sched_held+0x108/0x120 [ 3190.212089] ? __kmalloc_track_caller+0x5f5/0x760 [ 3190.216956] ? save_stack+0xa9/0xd0 [ 3190.220607] ? save_stack+0x43/0xd0 [ 3190.224249] ? kasan_kmalloc+0xc4/0xe0 [ 3190.228159] ? kmem_cache_alloc_trace+0x152/0x780 [ 3190.233019] ? memcpy+0x45/0x50 [ 3190.236321] v9fs_session_init+0x21a/0x1a80 [ 3190.240664] ? find_held_lock+0x36/0x1c0 [ 3190.244756] ? v9fs_show_options+0x7e0/0x7e0 [ 3190.249189] ? kasan_check_read+0x11/0x20 [ 3190.253364] ? rcu_is_watching+0x8c/0x150 [ 3190.257554] ? rcu_pm_notify+0xc0/0xc0 [ 3190.261470] ? v9fs_mount+0x61/0x900 [ 3190.265204] ? rcu_read_lock_sched_held+0x108/0x120 [ 3190.270244] ? kmem_cache_alloc_trace+0x616/0x780 [ 3190.275117] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 03:54:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x5000000]}}]}, 0x2c}}, 0x0) [ 3190.280676] v9fs_mount+0x7c/0x900 [ 3190.284246] mount_fs+0xae/0x328 [ 3190.287641] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3190.292282] ? may_umount+0xb0/0xb0 [ 3190.295931] ? _raw_read_unlock+0x22/0x30 [ 3190.300096] ? __get_fs_type+0x97/0xc0 [ 3190.304011] do_mount+0x581/0x30e0 [ 3190.307572] ? copy_mount_string+0x40/0x40 [ 3190.311833] ? copy_mount_options+0x5f/0x380 [ 3190.316261] ? rcu_read_lock_sched_held+0x108/0x120 [ 3190.321300] ? kmem_cache_alloc_trace+0x616/0x780 03:54:45 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3190.326172] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3190.331895] ? _copy_from_user+0xdf/0x150 [ 3190.336071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3190.341633] ? copy_mount_options+0x285/0x380 [ 3190.346160] ksys_mount+0x12d/0x140 [ 3190.349803] __x64_sys_mount+0xbe/0x150 [ 3190.353795] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3190.358836] do_syscall_64+0x1b9/0x820 [ 3190.362742] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3190.367692] ? syscall_return_slowpath+0x31d/0x5e0 [ 3190.372646] ? __switch_to_asm+0x34/0x70 [ 3190.376735] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3190.382125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3190.386995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3190.392202] RIP: 0033:0x457089 [ 3190.395441] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3190.414364] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3190.422100] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 03:54:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x464c000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000080)={0x58be3b2b}) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000020022, &(0x7f0000000140)=0x10001, 0xa3) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x200000, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000000c0)=""/51, &(0x7f0000000100)=0x33) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x100000000, 0x4) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000240)=""/198) 03:54:45 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x62) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_eee={0xff0f0000}}) close(r2) close(r1) [ 3190.429391] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3190.436693] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3190.443982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3190.451269] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000014 03:54:45 executing program 6 (fault-call:8 fault-nth:21): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000]}, 0x2c8) [ 3190.509734] 9pnet: Couldn't grow tag array 03:54:45 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x500000000000000}, 0x0) 03:54:45 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xfcffffff]}}]}, 0x2c}}, 0x0) 03:54:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xffffffffa0018000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x80000003e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00008df000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f00004abf1b)="ae", 0x1) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000000540)="17", 0x1}], 0x1, 0x0) readv(r1, &(0x7f0000c9e000)=[{&(0x7f0000c25f19)=""/231, 0xe7}], 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x401) 03:54:46 executing program 0: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)={0xffffffffffffffff}) getsockname(r0, &(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000300)=0x80) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@remote, @in=@multicast2, 0x4e24, 0x7ff, 0x4e22, 0xfffffffffffffff9, 0xa, 0x20, 0xa0, 0x87, r2, r3}, {0xfcff, 0x6, 0x9, 0x7ff, 0xa0d, 0x87b, 0x3, 0x7d8}, {0x400, 0x4, 0x7ff, 0x9}, 0x8, 0x6e6bbe, 0x2, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d2, 0x3c}, 0xa, @in6=@remote, 0x3500, 0x4, 0x3, 0x7, 0x4, 0x9, 0x7}}, 0xe8) ioctl$KDSKBLED(r0, 0x4b65, 0xba6) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="85000000220000e70739b59eb11f4a140edaf2edd0c13235000000040000000000000000001000670570be8a1b324270b43b5bfbe554d944cf8f0c1c"], &(0x7f00000001c0)="73797a6b616c6c65720001be826e8f833152f795b4d9f4bc3ea582523aed371b084fccfc3d2ef2cbe65d30642ca8dcd0f8479be52e66937908f1d8112489e8099d9d4edb806d81189c0fbb6818d028546c35d3363d54db0db780f54977ae6359d617c1d233d8e18abfc75f9a76cd8e1f77583bc02f07a33de6f304e95db82fd4da55ebd25162df6f88e7d1bb0654ffb31e008967", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0xe, 0x18, &(0x7f0000000100)="0aac1a0494632d47af63884088ca", &(0x7f0000000340)=""/24, 0x1a0}, 0x28) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000280)=0x2) [ 3190.836162] FAULT_INJECTION: forcing a failure. [ 3190.836162] name failslab, interval 1, probability 0, space 0, times 0 [ 3190.847566] CPU: 1 PID: 6351 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3190.854514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3190.863886] Call Trace: [ 3190.866515] dump_stack+0x1c9/0x2b4 [ 3190.870171] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3190.875389] ? __kernel_text_address+0xd/0x40 [ 3190.879936] ? unwind_get_return_address+0x61/0xa0 [ 3190.884896] should_fail.cold.4+0xa/0x11 [ 3190.888997] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3190.894163] ? save_stack+0xa9/0xd0 [ 3190.898353] ? save_stack+0x43/0xd0 [ 3190.901994] ? kasan_kmalloc+0xc4/0xe0 [ 3190.905900] ? __kmalloc+0x14e/0x760 [ 3190.909635] ? p9_fcall_alloc+0x1e/0x90 [ 3190.913625] ? p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 3190.919008] ? p9_client_rpc+0x1bd/0x1400 [ 3190.923177] ? v9fs_session_init+0x21a/0x1a80 [ 3190.927692] ? v9fs_mount+0x7c/0x900 [ 3190.931442] ? mount_fs+0xae/0x328 [ 3190.935004] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3190.939776] ? do_mount+0x581/0x30e0 [ 3190.943501] ? ksys_mount+0x12d/0x140 [ 3190.946971] validate_nla: 8 callbacks suppressed [ 3190.946981] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3190.947320] ? __x64_sys_mount+0xbe/0x150 [ 3190.952244] net_ratelimit: 8 callbacks suppressed [ 3190.952255] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3190.959355] ? do_syscall_64+0x1b9/0x820 [ 3190.959371] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3190.959388] ? __x64_sys_mount+0xbe/0x150 [ 3190.959418] ? do_syscall_64+0x1b9/0x820 [ 3191.000869] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3191.006277] ? graph_lock+0x170/0x170 [ 3191.010085] ? lock_downgrade+0x8f0/0x8f0 [ 3191.014235] ? lock_downgrade+0x8f0/0x8f0 [ 3191.018417] ? check_same_owner+0x340/0x340 [ 3191.022749] ? rcu_note_context_switch+0x730/0x730 [ 3191.027690] __should_failslab+0x124/0x180 [ 3191.031941] should_failslab+0x9/0x14 [ 3191.035749] __kmalloc+0x2c8/0x760 [ 3191.039385] ? __init_waitqueue_head+0x9e/0x150 [ 3191.044071] ? init_wait_entry+0x1c0/0x1c0 [ 3191.048307] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3191.053587] ? p9_fcall_alloc+0x1e/0x90 [ 3191.057580] p9_fcall_alloc+0x1e/0x90 [ 3191.061387] p9_client_prepare_req.part.9+0x754/0xcd0 [ 3191.066603] ? p9_free_req.isra.8+0x140/0x140 [ 3191.071108] ? p9_pollwait+0x83/0x230 [ 3191.074920] ? p9_conn_create+0x730/0x730 [ 3191.079085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3191.084637] p9_client_rpc+0x1bd/0x1400 [ 3191.088613] ? p9_fd_poll+0x1e0/0x2b0 [ 3191.092430] ? p9_conn_create+0x55b/0x730 [ 3191.096592] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3191.101965] ? ksys_dup3+0x690/0x690 [ 3191.105679] ? kasan_check_read+0x11/0x20 [ 3191.109838] ? rcu_is_watching+0x8c/0x150 [ 3191.113990] ? rcu_pm_notify+0xc0/0xc0 [ 3191.117893] ? rcu_read_lock_sched_held+0x108/0x120 [ 3191.122944] ? p9_fd_show_options+0x1c0/0x1c0 [ 3191.127451] ? lockdep_init_map+0x9/0x10 [ 3191.131524] p9_client_create+0xdb0/0x1770 [ 3191.135773] ? p9_client_read+0xc60/0xc60 [ 3191.139930] ? find_held_lock+0x36/0x1c0 [ 3191.144022] ? __lockdep_init_map+0x105/0x590 [ 3191.148534] ? kasan_check_write+0x14/0x20 [ 3191.152781] ? __init_rwsem+0x1cc/0x2a0 [ 3191.156806] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3191.161852] ? rcu_read_lock_sched_held+0x108/0x120 [ 3191.166869] ? __kmalloc_track_caller+0x5f5/0x760 [ 3191.171731] ? save_stack+0xa9/0xd0 [ 3191.175360] ? save_stack+0x43/0xd0 [ 3191.178988] ? kasan_kmalloc+0xc4/0xe0 [ 3191.182879] ? kmem_cache_alloc_trace+0x152/0x780 [ 3191.187724] ? memcpy+0x45/0x50 [ 3191.191010] v9fs_session_init+0x21a/0x1a80 [ 3191.195355] ? find_held_lock+0x36/0x1c0 [ 3191.199442] ? v9fs_show_options+0x7e0/0x7e0 [ 3191.203864] ? kasan_check_read+0x11/0x20 [ 3191.208019] ? rcu_is_watching+0x8c/0x150 [ 3191.212168] ? rcu_pm_notify+0xc0/0xc0 [ 3191.216071] ? v9fs_mount+0x61/0x900 [ 3191.219792] ? rcu_read_lock_sched_held+0x108/0x120 [ 3191.224816] ? kmem_cache_alloc_trace+0x616/0x780 [ 3191.229670] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3191.235225] v9fs_mount+0x7c/0x900 [ 3191.238778] mount_fs+0xae/0x328 [ 3191.242155] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3191.246749] ? may_umount+0xb0/0xb0 [ 3191.250380] ? _raw_read_unlock+0x22/0x30 [ 3191.254543] ? __get_fs_type+0x97/0xc0 [ 3191.258448] do_mount+0x581/0x30e0 [ 3191.262000] ? copy_mount_string+0x40/0x40 [ 3191.266255] ? copy_mount_options+0x5f/0x380 [ 3191.270671] ? rcu_read_lock_sched_held+0x108/0x120 [ 3191.275694] ? kmem_cache_alloc_trace+0x616/0x780 [ 3191.280547] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3191.286087] ? _copy_from_user+0xdf/0x150 [ 3191.290244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3191.295789] ? copy_mount_options+0x285/0x380 [ 3191.300291] ksys_mount+0x12d/0x140 [ 3191.303933] __x64_sys_mount+0xbe/0x150 [ 3191.307919] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3191.312946] do_syscall_64+0x1b9/0x820 [ 3191.316839] ? finish_task_switch+0x1d3/0x870 [ 3191.321340] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3191.326276] ? syscall_return_slowpath+0x31d/0x5e0 [ 3191.331210] ? __switch_to_asm+0x34/0x70 [ 3191.335273] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3191.340647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3191.345515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3191.350707] RIP: 0033:0x457089 [ 3191.353911] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3191.372820] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3191.380530] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 03:54:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, 0x2c8) 03:54:46 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xfffffffffffff000]}}]}, 0x2c}}, 0x0) [ 3191.387799] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3191.395068] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3191.402335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3191.409604] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000015 [ 3191.417147] 9pnet: Couldn't grow tag array 03:54:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x80000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="03114bc7"], 0x4) fdatasync(r1) 03:54:46 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa91e0000}, 0x0) 03:54:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:46 executing program 6 (fault-call:8 fault-nth:22): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3191.490165] ISOFS: Unable to identify CD-ROM format. [ 3191.497261] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3191.504818] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x2c8) 03:54:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x400) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000000c0)=""/3, &(0x7f0000000100)=0x3) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:46 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000ba2e68f80e4d7c0c218b787d6574391ab766f254905d40d1d606e01ff94c79e21adb529071669e3d9ac9fbacb2b4afdc93cdb4c47437150ef8f648c687a925a0030bf0652b0d15fa390460ee07fb57c561df1556aeb98ede8d14806b3811cfda4c66d5586b65c1bdee3fbd4238b5c27f161434b77e21177c511ab5395ba51e56401685a39f52004a1973d75c86d8791eb0c14305370adbcc743daacab3ba0d74eb9933b5d4773415fcd50433f6c96b1f9d966f2797b4723bad1648781113eddcae00aaaab856256bcba3bc"]) 03:54:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf0ffffff00000000]}}]}, 0x2c}}, 0x0) [ 3191.840051] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3191.847622] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, 0x2c8) [ 3191.913997] FAULT_INJECTION: forcing a failure. [ 3191.913997] name failslab, interval 1, probability 0, space 0, times 0 [ 3191.925330] CPU: 1 PID: 6399 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3191.932268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3191.941629] Call Trace: [ 3191.944243] dump_stack+0x1c9/0x2b4 [ 3191.947774] ISOFS: Unable to identify CD-ROM format. [ 3191.947897] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3191.958175] ? kasan_check_read+0x11/0x20 [ 3191.962361] should_fail.cold.4+0xa/0x11 [ 3191.966426] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3191.971447] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3191.976538] ? kasan_check_write+0x14/0x20 [ 3191.980775] ? finish_task_switch+0x2ca/0x870 [ 3191.985285] ? pdu_read+0x90/0xd0 [ 3191.988759] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 3191.994305] ? p9pdu_readf+0xb78/0x2170 [ 3191.998293] ? __switch_to_asm+0x40/0x70 [ 3192.002355] ? __switch_to_asm+0x34/0x70 [ 3192.006415] ? __switch_to_asm+0x34/0x70 [ 3192.010469] ? p9pdu_writef+0xe0/0xe0 [ 3192.014271] ? __schedule+0x884/0x1ec0 [ 3192.018166] ? check_same_owner+0x340/0x340 [ 3192.022496] ? rcu_note_context_switch+0x730/0x730 [ 3192.027446] __should_failslab+0x124/0x180 [ 3192.031689] should_failslab+0x9/0x14 [ 3192.035506] __kmalloc+0x2c8/0x760 [ 3192.039051] ? memcpy+0x45/0x50 [ 3192.042337] ? p9pdu_readf+0x526/0x2170 [ 3192.046318] p9pdu_readf+0x526/0x2170 [ 3192.050128] ? p9pdu_writef+0xe0/0xe0 [ 3192.053927] ? ksys_dup3+0x690/0x690 [ 3192.057636] ? kasan_check_read+0x11/0x20 [ 3192.061798] ? rcu_is_watching+0x8c/0x150 [ 3192.065959] ? rcu_pm_notify+0xc0/0xc0 [ 3192.069875] ? rcu_read_lock_sched_held+0x108/0x120 [ 3192.074927] ? p9_fd_show_options+0x1c0/0x1c0 [ 3192.079466] p9_client_create+0xe87/0x1770 [ 3192.083731] ? p9_client_read+0xc60/0xc60 [ 3192.087898] ? find_held_lock+0x36/0x1c0 [ 3192.092002] ? __lockdep_init_map+0x105/0x590 [ 3192.096493] ? kasan_check_write+0x14/0x20 [ 3192.100721] ? __init_rwsem+0x1cc/0x2a0 [ 3192.104704] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 3192.109716] ? rcu_read_lock_sched_held+0x108/0x120 03:54:47 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 03:54:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280)=0x2, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x3, 0x2c, [], 0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=""/44}, &(0x7f0000000200)=0x78) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3192.114729] ? __kmalloc_track_caller+0x5f5/0x760 [ 3192.119561] ? save_stack+0xa9/0xd0 [ 3192.123185] ? save_stack+0x43/0xd0 [ 3192.126814] ? kasan_kmalloc+0xc4/0xe0 [ 3192.130705] ? kmem_cache_alloc_trace+0x152/0x780 [ 3192.135565] ? memcpy+0x45/0x50 [ 3192.138871] v9fs_session_init+0x21a/0x1a80 [ 3192.143211] ? find_held_lock+0x36/0x1c0 [ 3192.147288] ? v9fs_show_options+0x7e0/0x7e0 [ 3192.151716] ? kasan_check_read+0x11/0x20 [ 3192.155882] ? rcu_is_watching+0x8c/0x150 [ 3192.160021] ? rcu_pm_notify+0xc0/0xc0 [ 3192.163904] ? v9fs_mount+0x61/0x900 [ 3192.167626] ? rcu_read_lock_sched_held+0x108/0x120 [ 3192.172661] ? kmem_cache_alloc_trace+0x616/0x780 [ 3192.177510] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3192.183042] v9fs_mount+0x7c/0x900 [ 3192.186577] mount_fs+0xae/0x328 [ 3192.189975] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3192.194592] ? may_umount+0xb0/0xb0 [ 3192.198237] ? _raw_read_unlock+0x22/0x30 [ 3192.202398] ? __get_fs_type+0x97/0xc0 [ 3192.206322] do_mount+0x581/0x30e0 [ 3192.209896] ? interrupt_entry+0xb1/0xf0 [ 3192.214006] ? copy_mount_string+0x40/0x40 [ 3192.218262] ? retint_kernel+0x10/0x10 [ 3192.222180] ? copy_mount_options+0x1e3/0x380 [ 3192.226693] ? write_comp_data+0x1/0x70 [ 3192.230690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3192.236259] ? copy_mount_options+0x285/0x380 [ 3192.240776] ksys_mount+0x12d/0x140 [ 3192.244447] __x64_sys_mount+0xbe/0x150 [ 3192.248450] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3192.253485] do_syscall_64+0x1b9/0x820 [ 3192.257395] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3192.262361] ? syscall_return_slowpath+0x31d/0x5e0 [ 3192.267315] ? __switch_to_asm+0x34/0x70 [ 3192.271389] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3192.276788] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3192.281651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3192.286855] RIP: 0033:0x457089 [ 3192.290064] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:54:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4c00000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3192.308972] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3192.316689] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3192.323957] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3192.331225] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3192.338494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3192.345761] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000016 03:54:47 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:47 executing program 3: r0 = add_key(&(0x7f0000001340)='encrypted\x00', &(0x7f0000001380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000013c0)="09729414d24a263333acdb6ea70441b4b918bbb4426f52e6de47f122b07fe33646cbbf58f44cf0cf8bca3a2c559a2c74b48e02ebb5e0aef4502eff0d07f9ac3bd4f7871caae494390c06e809af6e36dbaadc1fab70678a2284bda561051cef5438d21a56", 0x64, 0xfffffffffffffffa) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000001200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001240)="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", 0xfe, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x3fd, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000010c0)={0x0, 0x0, @ioapic={0x3000, 0x1400, 0x101, 0x4, 0x0, [{0x7f, 0xb0b, 0x0, [], 0xd1}, {0x8001, 0xb40000, 0xfa9, [], 0x8}, {0x9, 0x0, 0x3, [], 0x89}, {0x3, 0x200, 0x2, [], 0x100}, {0x81, 0x100, 0x7, [], 0xfffffffffffffffd}, {0x100000001, 0x401, 0x1, [], 0x10001}, {0x0, 0xff, 0x6, [], 0x5}, {0x74, 0x7, 0x200, [], 0x2}, {0x65, 0x1, 0x80, [], 0x8}, {0x968, 0x8, 0x81, [], 0x80}, {0x2, 0x11, 0x9f0f, [], 0x83}, {0x1, 0x0, 0x20, [], 0x8000}, {0xffffffff7fffffff, 0x8, 0x7456, [], 0x200}, {0x0, 0x0, 0x973d, [], 0x100000001}, {0x8, 0x6, 0x9, [], 0x10001}, {0x8, 0x200, 0xa25, [], 0x1}, {0x0, 0x7, 0x6, [], 0x8}, {0x5, 0x8, 0x3ff}, {0x5, 0x8001, 0x1f, [], 0x9}, {0x5, 0x8, 0x7, [], 0xa0}, {0x4, 0x2, 0x83c, [], 0x5e52}, {0x9, 0xd2, 0xb62, [], 0x5}, {0x7f, 0x100000000, 0x1, [], 0x80000001}, {0x5, 0x2, 0x4, [], 0x155c}]}}) bind$inet6(r1, &(0x7f00000011c0)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f00000000c0)="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", 0x1000) sendto$inet6(r1, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x2c8) 03:54:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xffffff7f00000000]}}]}, 0x2c}}, 0x0) 03:54:47 executing program 6 (fault-call:8 fault-nth:23): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:47 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa}, 0x0) [ 3192.551357] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3192.558859] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:47 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x40010, r0, 0x0) r1 = dup(r0) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x10c, 0x1) 03:54:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3192.607331] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3192.614814] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, 0x2c8) 03:54:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x13) 03:54:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa000000]}}]}, 0x2c}}, 0x0) 03:54:48 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3192.889850] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3192.898343] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3192.919283] netlink: 'syz-executor5': attribute type 3 has an invalid length. 03:54:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3192.926680] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3192.947125] FAULT_INJECTION: forcing a failure. [ 3192.947125] name failslab, interval 1, probability 0, space 0, times 0 [ 3192.958510] CPU: 0 PID: 6463 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3192.965449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3192.974800] Call Trace: [ 3192.977381] dump_stack+0x1c9/0x2b4 [ 3192.981015] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3192.986213] ? debug_check_no_obj_freed+0x30b/0x595 [ 3192.991224] should_fail.cold.4+0xa/0x11 [ 3192.995281] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3193.000371] ? kfree+0x111/0x260 [ 3193.003730] ? p9_client_create+0xfea/0x1770 [ 3193.008131] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3193.013141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3193.018668] ? p9_free_req.isra.8+0x95/0x140 [ 3193.023089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3193.028628] ? find_held_lock+0x36/0x1c0 [ 3193.032725] ? check_same_owner+0x340/0x340 [ 3193.037048] ? rcu_note_context_switch+0x730/0x730 [ 3193.041987] ? kasan_check_write+0x14/0x20 [ 3193.046217] __should_failslab+0x124/0x180 [ 3193.050447] should_failslab+0x9/0x14 [ 3193.054238] __kmalloc_track_caller+0x2c4/0x760 [ 3193.058895] ? save_stack+0xa9/0xd0 [ 3193.062522] ? save_stack+0x43/0xd0 [ 3193.066137] ? kasan_kmalloc+0xc4/0xe0 [ 3193.070029] ? kmem_cache_alloc_trace+0x152/0x780 [ 3193.074870] ? v9fs_session_init+0x501/0x1a80 [ 3193.079362] kstrdup+0x39/0x70 [ 3193.082561] v9fs_session_init+0x501/0x1a80 [ 3193.086882] ? v9fs_show_options+0x7e0/0x7e0 [ 3193.091283] ? kasan_check_read+0x11/0x20 [ 3193.095437] ? rcu_is_watching+0x8c/0x150 [ 3193.099579] ? rcu_pm_notify+0xc0/0xc0 [ 3193.103476] ? v9fs_mount+0x61/0x900 [ 3193.107179] ? rcu_read_lock_sched_held+0x108/0x120 [ 3193.112182] ? kmem_cache_alloc_trace+0x616/0x780 [ 3193.117017] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3193.122549] v9fs_mount+0x7c/0x900 [ 3193.126082] mount_fs+0xae/0x328 [ 3193.129443] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3193.134041] ? may_umount+0xb0/0xb0 [ 3193.137662] ? _raw_read_unlock+0x22/0x30 [ 3193.141796] ? __get_fs_type+0x97/0xc0 [ 3193.145677] do_mount+0x581/0x30e0 [ 3193.149211] ? copy_mount_string+0x40/0x40 [ 3193.153442] ? copy_mount_options+0x5f/0x380 [ 3193.157842] ? rcu_read_lock_sched_held+0x108/0x120 [ 3193.162880] ? kmem_cache_alloc_trace+0x616/0x780 [ 3193.167719] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3193.173244] ? _copy_from_user+0xdf/0x150 [ 3193.177381] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3193.182918] ? copy_mount_options+0x285/0x380 [ 3193.187444] ksys_mount+0x12d/0x140 [ 3193.191060] __x64_sys_mount+0xbe/0x150 [ 3193.195021] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3193.200036] do_syscall_64+0x1b9/0x820 [ 3193.203915] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3193.208838] ? syscall_return_slowpath+0x31d/0x5e0 [ 3193.213759] ? __switch_to_asm+0x34/0x70 [ 3193.217807] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3193.223159] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3193.227994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3193.233168] RIP: 0033:0x457089 [ 3193.236361] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3193.255264] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3193.262958] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3193.270214] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3193.277467] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 03:54:48 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @scatter, &(0x7f0000000180), &(0x7f0000000300)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101c00, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000200)) 03:54:48 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) [ 3193.284723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3193.291977] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000017 03:54:48 executing program 6 (fault-call:8 fault-nth:24): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:48 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x2c8) 03:54:48 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xf000000]}}]}, 0x2c}}, 0x0) 03:54:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x318) [ 3193.637943] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3193.645381] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x74000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3193.686522] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3193.693997] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:48 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x5}, 0x0) [ 3193.811565] FAULT_INJECTION: forcing a failure. [ 3193.811565] name failslab, interval 1, probability 0, space 0, times 0 [ 3193.822848] CPU: 1 PID: 6496 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3193.829783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3193.829787] ISOFS: Unable to identify CD-ROM format. [ 3193.844222] Call Trace: [ 3193.846822] dump_stack+0x1c9/0x2b4 [ 3193.850491] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3193.855707] ? __kernel_text_address+0xd/0x40 [ 3193.860230] ? unwind_get_return_address+0x61/0xa0 [ 3193.865171] should_fail.cold.4+0xa/0x11 [ 3193.869246] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3193.874378] ? save_stack+0x43/0xd0 [ 3193.878037] ? kasan_kmalloc+0xc4/0xe0 [ 3193.881956] ? __kmalloc_track_caller+0x14a/0x760 [ 3193.886817] ? kstrdup+0x39/0x70 [ 3193.890209] ? v9fs_session_init+0x501/0x1a80 [ 3193.894724] ? v9fs_mount+0x7c/0x900 [ 3193.898963] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3193.903735] ? do_mount+0x581/0x30e0 [ 3193.907461] ? ksys_mount+0x12d/0x140 [ 3193.911387] ? __x64_sys_mount+0xbe/0x150 [ 3193.915570] ? do_syscall_64+0x1b9/0x820 [ 3193.919651] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3193.925043] ? find_held_lock+0x36/0x1c0 [ 3193.929162] ? check_same_owner+0x340/0x340 [ 3193.933541] ? rcu_note_context_switch+0x730/0x730 [ 3193.938503] __should_failslab+0x124/0x180 [ 3193.942766] should_failslab+0x9/0x14 [ 3193.946590] __kmalloc+0x2c8/0x760 [ 3193.950169] ? match_strdup+0x5e/0xa0 [ 3193.954001] match_strdup+0x5e/0xa0 [ 3193.957654] v9fs_session_init+0x797/0x1a80 03:54:49 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3193.962052] ? v9fs_show_options+0x7e0/0x7e0 [ 3193.966492] ? rcu_is_watching+0x8c/0x150 [ 3193.970663] ? rcu_pm_notify+0xc0/0xc0 [ 3193.974582] ? v9fs_mount+0x61/0x900 [ 3193.978324] ? rcu_read_lock_sched_held+0x108/0x120 [ 3193.983375] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3193.983934] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3193.988958] v9fs_mount+0x7c/0x900 [ 3193.988987] mount_fs+0xae/0x328 [ 3193.989013] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3193.989033] ? may_umount+0xb0/0xb0 03:54:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3193.989054] ? _raw_read_unlock+0x22/0x30 [ 3193.996369] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3193.999952] ? __get_fs_type+0x97/0xc0 [ 3193.999976] do_mount+0x581/0x30e0 [ 3194.000000] ? copy_mount_string+0x40/0x40 [ 3194.042193] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3194.046983] ? retint_kernel+0x10/0x10 [ 3194.050907] ? copy_mount_options+0x20e/0x380 [ 3194.055448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3194.061008] ? copy_mount_options+0x285/0x380 [ 3194.065533] ksys_mount+0x12d/0x140 [ 3194.069182] __x64_sys_mount+0xbe/0x150 [ 3194.073194] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3194.078242] do_syscall_64+0x1b9/0x820 [ 3194.082153] ? finish_task_switch+0x1d3/0x870 [ 3194.086673] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3194.091619] ? syscall_return_slowpath+0x31d/0x5e0 [ 3194.096565] ? __switch_to_asm+0x34/0x70 [ 3194.100643] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3194.106030] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:54:49 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 03:54:49 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3194.110898] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3194.116117] RIP: 0033:0x457089 [ 3194.119321] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3194.138233] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3194.145964] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3194.153244] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3194.160522] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3194.167808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3194.175087] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000018 03:54:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x1400]}}]}, 0x2c}}, 0x0) 03:54:49 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000080)=""/61) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000000040)) 03:54:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x2c8) [ 3194.244670] kernel msg: ebtables bug: please report to author: Wrong len argument [ 3194.277856] kernel msg: ebtables bug: please report to author: Wrong len argument 03:54:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:49 executing program 6 (fault-call:8 fault-nth:25): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/114, &(0x7f0000000040)=0x72) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x253, 0x40) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x10) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:49 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:49 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 03:54:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x15]}}]}, 0x2c}}, 0x0) 03:54:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x2c8) [ 3194.592993] XFS (loop0): Mounting V4 Filesystem [ 3194.609157] IPVS: length: 114 != 24 [ 3194.618351] IPVS: length: 114 != 24 [ 3194.625071] XFS (loop0): totally zeroed log 03:54:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3194.639385] XFS (loop0): Metadata corruption detected at xfs_agi_verify+0x188/0x5a0, xfs_agi block 0x2 [ 3194.649176] XFS (loop0): Unmount and run xfs_repair [ 3194.654275] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 3194.661021] 00000000ffba5413: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.670166] 0000000066267080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.679172] 00000000e932bd9d: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.688098] 00000000f3f57623: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.697026] 00000000af9f5332: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.705969] 00000000c3531264: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.714982] 00000000eed86fa2: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.723903] 00000000d9361e7c: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 3194.734240] XFS (loop0): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 03:54:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) prctl$intptr(0x21, 0x1) [ 3194.743716] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 3194.752378] XFS (loop0): Failed to read root inode 0x80, error 117 03:54:50 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x2c03, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x40100, 0x100) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)) [ 3194.861429] FAULT_INJECTION: forcing a failure. [ 3194.861429] name failslab, interval 1, probability 0, space 0, times 0 [ 3194.872839] CPU: 0 PID: 6579 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3194.879776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3194.889135] Call Trace: [ 3194.891734] dump_stack+0x1c9/0x2b4 [ 3194.895379] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3194.900855] ? find_held_lock+0x36/0x1c0 [ 3194.904910] should_fail.cold.4+0xa/0x11 [ 3194.908968] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3194.914061] ? find_held_lock+0x36/0x1c0 [ 3194.918118] ? lock_downgrade+0x8f0/0x8f0 [ 3194.922263] ? find_held_lock+0x36/0x1c0 [ 3194.926327] ? check_same_owner+0x340/0x340 [ 3194.930656] ? __save_stack_trace+0x8d/0xf0 [ 3194.934975] ? rcu_note_context_switch+0x730/0x730 [ 3194.940015] __should_failslab+0x124/0x180 [ 3194.944243] should_failslab+0x9/0x14 [ 3194.948038] kmem_cache_alloc_trace+0x2cb/0x780 [ 3194.952696] ? save_stack+0x43/0xd0 [ 3194.956314] ? __kasan_slab_free+0x11a/0x170 [ 3194.960723] ? kasan_slab_free+0xe/0x10 [ 3194.964691] ? kfree+0xd9/0x260 [ 3194.967960] ? v9fs_session_init+0xd5b/0x1a80 [ 3194.972445] ? v9fs_mount+0x7c/0x900 [ 3194.976146] ? mount_fs+0xae/0x328 [ 3194.979683] p9_fid_create+0x98/0x4c0 [ 3194.983475] ? kasan_check_read+0x11/0x20 [ 3194.987612] ? p9_client_destroy+0x610/0x610 [ 3194.992035] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3194.996609] ? kasan_check_write+0x14/0x20 [ 3195.000839] p9_client_attach+0xbc/0x860 [ 3195.004913] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3195.010014] ? debug_check_no_obj_freed+0x30b/0x595 [ 3195.015051] ? p9_client_walk+0xab0/0xab0 [ 3195.019206] ? trace_hardirqs_off+0xd/0x10 [ 3195.023439] ? quarantine_put+0x10d/0x1b0 [ 3195.027574] ? kfree+0x111/0x260 [ 3195.030950] ? v9fs_session_init+0xd5b/0x1a80 [ 3195.035468] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3195.040475] v9fs_session_init+0xf62/0x1a80 [ 3195.044784] ? v9fs_session_init+0xf62/0x1a80 [ 3195.049273] ? v9fs_show_options+0x7e0/0x7e0 [ 3195.053696] ? rcu_is_watching+0x8c/0x150 [ 3195.057831] ? rcu_pm_notify+0xc0/0xc0 [ 3195.061710] ? v9fs_mount+0x61/0x900 [ 3195.065422] ? rcu_read_lock_sched_held+0x108/0x120 [ 3195.070444] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3195.075973] v9fs_mount+0x7c/0x900 [ 3195.079507] mount_fs+0xae/0x328 [ 3195.082865] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3195.087466] ? may_umount+0xb0/0xb0 [ 3195.091080] ? _raw_read_unlock+0x22/0x30 [ 3195.095214] ? __get_fs_type+0x97/0xc0 [ 3195.099092] do_mount+0x581/0x30e0 [ 3195.102627] ? copy_mount_string+0x40/0x40 [ 3195.106853] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3195.111600] ? retint_kernel+0x10/0x10 [ 3195.115481] ? copy_mount_options+0x1f0/0x380 [ 3195.119966] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 3195.124812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3195.130341] ? copy_mount_options+0x285/0x380 [ 3195.134842] ksys_mount+0x12d/0x140 [ 3195.138456] __x64_sys_mount+0xbe/0x150 [ 3195.142434] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3195.147447] do_syscall_64+0x1b9/0x820 [ 3195.151326] ? finish_task_switch+0x1d3/0x870 [ 3195.155836] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3195.160754] ? syscall_return_slowpath+0x31d/0x5e0 [ 3195.165685] ? __switch_to_asm+0x34/0x70 [ 3195.169769] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3195.175121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3195.179977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3195.185164] RIP: 0033:0x457089 [ 3195.188354] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:54:50 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:50 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 3195.207240] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3195.214931] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3195.222182] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3195.229450] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3195.236702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3195.243957] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000019 [ 3195.285322] ISOFS: Unable to identify CD-ROM format. 03:54:50 executing program 6 (fault-call:8 fault-nth:26): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x4800000000000000]}}]}, 0x2c}}, 0x0) 03:54:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}, 0x2c8) 03:54:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4c46}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:50 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000000c0)=0x9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x80}}, 0x13, 0x44c, 0x6, 0x1a9ad097}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0x6, @ipv4, 0xd932}}}, 0x84) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f326635000800000f300f2325363e0f01cb66b9800000c00f326635002000000f30018c448b2e0f0171860fc72cba4200ed67f26cd0bf9f30", 0x3f}], 0x1, 0x0, &(0x7f0000000300), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(r1, 0x9) ptrace$setregs(0xf, r3, 0x9, &(0x7f0000000280)="67497b4de6f2a720a114c8fd16b86e13bfadd04951a9778586d67286561e6fc6cf528a3799a2f5eee49d7ed1d1e96e7eca7d3a1ecf55b72afd63421cd92ef2484ccafabb826fc39116bf61f7ab82592c9234381e740b17ec33825187b4ec2d550e159844dc8c2554ee828e9266cb01f8e9872a47367ba2") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000080)={{0x2, 0x4e20}, {0x6, @link_local}, 0x2, {0x2, 0x4e23, @rand_addr=0x2}, 'vcan0\x00'}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000840)={[0x0, 0x0, 0xe6]}) ioctl$KVM_NMI(r4, 0xae9a) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x41}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:54:50 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa91e}, 0x0) 03:54:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0xa0018000]}}]}, 0x2c}}, 0x0) 03:54:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:50 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}, 0x2c8) [ 3195.672443] FAULT_INJECTION: forcing a failure. [ 3195.672443] name failslab, interval 1, probability 0, space 0, times 0 [ 3195.684109] CPU: 1 PID: 6622 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3195.691049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3195.695475] ISOFS: Unable to identify CD-ROM format. [ 3195.700416] Call Trace: [ 3195.700451] dump_stack+0x1c9/0x2b4 [ 3195.700478] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3195.700506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3195.722513] should_fail.cold.4+0xa/0x11 [ 3195.726591] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3195.731708] ? trace_hardirqs_on+0x10/0x10 [ 3195.735956] ? __lock_acquire+0x7fc/0x5020 [ 3195.740301] ? graph_lock+0x170/0x170 [ 3195.744125] ? __lock_is_held+0xb5/0x140 [ 3195.748208] ? trace_hardirqs_on+0x10/0x10 [ 3195.752467] __should_failslab+0x124/0x180 [ 3195.756724] should_failslab+0x9/0x14 [ 3195.760545] kmem_cache_alloc+0x47/0x760 [ 3195.764616] ? print_usage_bug+0xc0/0xc0 [ 3195.768695] ? graph_lock+0x170/0x170 [ 3195.772512] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3195.778053] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 3195.783444] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 3195.789725] radix_tree_extend+0x295/0x650 [ 3195.793989] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 3195.799897] ? __lock_acquire+0x7fc/0x5020 [ 3195.804167] idr_get_free+0x9ad/0x10c0 [ 3195.808081] ? radix_tree_clear_tags+0xc0/0xc0 [ 3195.812687] ? __lock_acquire+0x7fc/0x5020 [ 3195.816949] ? graph_lock+0x170/0x170 [ 3195.820778] ? graph_lock+0x170/0x170 [ 3195.824593] ? trace_hardirqs_on+0x10/0x10 [ 3195.828850] ? print_usage_bug+0xc0/0xc0 [ 3195.832944] ? find_held_lock+0x36/0x1c0 [ 3195.837036] idr_alloc_u32+0x201/0x3f0 [ 3195.840954] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 3195.845817] ? p9_idpool_get+0x23/0x70 [ 3195.849732] idr_alloc+0x111/0x1b0 [ 3195.853299] ? idr_alloc_u32+0x3f0/0x3f0 [ 3195.857379] ? do_raw_spin_lock+0xc1/0x200 [ 3195.861661] p9_idpool_get+0x3d/0x70 [ 3195.865396] p9_client_prepare_req.part.9+0xe4/0xcd0 [ 3195.870540] ? p9_free_req.isra.8+0x140/0x140 [ 3195.875056] ? __radix_tree_replace+0x1fc/0x360 [ 3195.879750] ? graph_lock+0x170/0x170 [ 3195.883575] ? graph_lock+0x170/0x170 [ 3195.887389] ? node_tag_clear+0xc0/0x1c0 [ 3195.891834] p9_client_rpc+0x1bd/0x1400 [ 3195.896351] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3195.901746] ? find_held_lock+0x36/0x1c0 [ 3195.905858] ? lock_downgrade+0x8f0/0x8f0 [ 3195.910031] ? kasan_check_read+0x11/0x20 [ 3195.914194] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3195.918618] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3195.923217] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3195.928335] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3195.933361] ? trace_hardirqs_on+0xd/0x10 [ 3195.937523] ? check_memory_region+0x131/0x1b0 [ 3195.942110] ? p9_client_destroy+0x610/0x610 [ 3195.946534] p9_client_attach+0x19f/0x860 [ 3195.950686] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3195.955812] ? debug_check_no_obj_freed+0x30b/0x595 [ 3195.960857] ? p9_client_walk+0xab0/0xab0 [ 3195.965025] ? trace_hardirqs_off+0xd/0x10 [ 3195.969296] ? quarantine_put+0x10d/0x1b0 [ 3195.973464] ? kfree+0x111/0x260 [ 3195.976837] ? v9fs_session_init+0xd5b/0x1a80 [ 3195.981331] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3195.986356] v9fs_session_init+0xf62/0x1a80 [ 3195.990682] ? v9fs_session_init+0xf62/0x1a80 [ 3195.995195] ? v9fs_show_options+0x7e0/0x7e0 [ 3195.999624] ? rcu_is_watching+0x8c/0x150 [ 3196.003777] ? rcu_pm_notify+0xc0/0xc0 [ 3196.007677] ? v9fs_mount+0x61/0x900 [ 3196.011410] ? rcu_read_lock_sched_held+0x108/0x120 [ 3196.016469] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3196.022028] v9fs_mount+0x7c/0x900 [ 3196.025580] mount_fs+0xae/0x328 [ 3196.028960] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3196.033549] ? may_umount+0xb0/0xb0 [ 3196.037185] ? _raw_read_unlock+0x22/0x30 [ 3196.041336] ? __get_fs_type+0x97/0xc0 [ 3196.045233] do_mount+0x581/0x30e0 [ 3196.048789] ? copy_mount_string+0x40/0x40 [ 3196.053043] ? copy_mount_options+0x5f/0x380 [ 3196.057458] ? rcu_read_lock_sched_held+0x108/0x120 [ 3196.062487] ? kmem_cache_alloc_trace+0x616/0x780 [ 3196.067338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3196.072963] ? _copy_from_user+0xdf/0x150 [ 3196.077124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.082664] ? copy_mount_options+0x285/0x380 [ 3196.087166] ksys_mount+0x12d/0x140 [ 3196.090800] __x64_sys_mount+0xbe/0x150 [ 3196.094774] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3196.099798] do_syscall_64+0x1b9/0x820 [ 3196.103705] ? finish_task_switch+0x1d3/0x870 [ 3196.108205] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3196.113143] ? syscall_return_slowpath+0x31d/0x5e0 [ 3196.118093] ? __switch_to_asm+0x34/0x70 [ 3196.122161] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3196.127540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3196.132391] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3196.137866] RIP: 0033:0x457089 [ 3196.141086] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3196.160012] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3196.167727] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3196.175001] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3196.182268] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3196.189535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3196.196806] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001a 03:54:51 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x5]}}]}, 0x2c}}, 0x0) [ 3196.307394] validate_nla: 9 callbacks suppressed [ 3196.307423] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3196.319630] net_ratelimit: 9 callbacks suppressed [ 3196.319640] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3196.346094] netlink: 'syz-executor5': attribute type 3 has an invalid length. 03:54:51 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x2000) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400c1}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}, 0x2c8) 03:54:51 executing program 6 (fault-call:8 fault-nth:27): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:51 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x1ea9}, 0x0) [ 3196.353694] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000}) ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000040)) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f00000004c0), 0x10) accept$nfc_llcp(r3, &(0x7f0000000180), &(0x7f0000000200)=0x60) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 03:54:51 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xfcffffff]}}]}, 0x2c}}, 0x0) [ 3196.655090] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3196.662517] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = memfd_create(&(0x7f0000000040)='-wlan1', 0x3) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x14) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r2) 03:54:51 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xffffff7f00000000}, 0x0) [ 3196.735943] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3196.741316] FAULT_INJECTION: forcing a failure. [ 3196.741316] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.743455] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3196.754628] CPU: 0 PID: 6683 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3196.754652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:54:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x2c8) 03:54:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x90, 0xffffffffffffffff}}, 0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000500)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000}) ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000040)) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f00000004c0), 0x10) accept$nfc_llcp(r3, &(0x7f0000000180), &(0x7f0000000200)=0x60) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 03:54:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3196.785767] Call Trace: [ 3196.788376] dump_stack+0x1c9/0x2b4 [ 3196.792043] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3196.797267] ? __kernel_text_address+0xd/0x40 [ 3196.801773] ? unwind_get_return_address+0x61/0xa0 [ 3196.806738] should_fail.cold.4+0xa/0x11 [ 3196.810845] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3196.815982] ? save_stack+0x43/0xd0 [ 3196.819625] ? kasan_kmalloc+0xc4/0xe0 [ 3196.823542] ? __kmalloc_track_caller+0x14a/0x760 [ 3196.824529] ISOFS: Unable to identify CD-ROM format. [ 3196.828395] ? kstrdup+0x39/0x70 [ 3196.828427] ? v9fs_session_init+0x501/0x1a80 [ 3196.828455] ? v9fs_mount+0x7c/0x900 [ 3196.828474] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3196.828489] ? do_mount+0x581/0x30e0 [ 3196.828506] ? ksys_mount+0x12d/0x140 [ 3196.857346] ? __x64_sys_mount+0xbe/0x150 [ 3196.861488] ? do_syscall_64+0x1b9/0x820 [ 3196.865563] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3196.870940] ? find_held_lock+0x36/0x1c0 [ 3196.875003] ? check_same_owner+0x340/0x340 [ 3196.879317] ? rcu_note_context_switch+0x730/0x730 [ 3196.884240] __should_failslab+0x124/0x180 [ 3196.888472] should_failslab+0x9/0x14 [ 3196.892263] __kmalloc+0x2c8/0x760 [ 3196.896097] ? match_strdup+0x5e/0xa0 [ 3196.899887] match_strdup+0x5e/0xa0 [ 3196.903519] v9fs_session_init+0x797/0x1a80 [ 3196.907896] ? v9fs_show_options+0x7e0/0x7e0 [ 3196.912323] ? rcu_is_watching+0x8c/0x150 [ 3196.916468] ? rcu_pm_notify+0xc0/0xc0 [ 3196.920349] ? v9fs_mount+0x61/0x900 [ 3196.924066] ? rcu_read_lock_sched_held+0x108/0x120 [ 3196.929111] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3196.934644] v9fs_mount+0x7c/0x900 [ 3196.938191] mount_fs+0xae/0x328 [ 3196.941561] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3196.946263] ? may_umount+0xb0/0xb0 [ 3196.949888] ? _raw_read_unlock+0x22/0x30 [ 3196.954027] ? __get_fs_type+0x97/0xc0 [ 3196.957910] do_mount+0x581/0x30e0 [ 3196.961453] ? copy_mount_string+0x40/0x40 [ 3196.965680] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3196.970459] ? retint_kernel+0x10/0x10 [ 3196.974351] ? copy_mount_options+0x1e3/0x380 [ 3196.978838] ? copy_mount_options+0x1f0/0x380 [ 3196.983327] ? __sanitizer_cov_trace_pc+0x26/0x50 [ 3196.988159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3196.993702] ? copy_mount_options+0x285/0x380 [ 3196.998189] ksys_mount+0x12d/0x140 [ 3197.001806] __x64_sys_mount+0xbe/0x150 [ 3197.005772] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3197.010791] do_syscall_64+0x1b9/0x820 [ 3197.014675] ? finish_task_switch+0x1d3/0x870 [ 3197.019164] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3197.024083] ? syscall_return_slowpath+0x31d/0x5e0 [ 3197.029003] ? __switch_to_asm+0x34/0x70 [ 3197.033056] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3197.038435] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3197.043273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3197.048462] RIP: 0033:0x457089 [ 3197.051647] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3197.070534] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3197.078240] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 03:54:52 executing program 6 (fault-call:8 fault-nth:28): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3197.085496] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3197.092752] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3197.100008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3197.107262] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001b 03:54:52 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x9000000]}}]}, 0x2c}}, 0x0) 03:54:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0xffffffffffffff2b) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000026, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0xfffffffffffffffd, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) 03:54:52 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x600000000000000}, 0x0) [ 3197.443766] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3197.451284] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x2c8) 03:54:52 executing program 0: r0 = socket$inet6(0xa, 0x1080000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000750600000f0000006706000002000000070600000ee60000bf050000000000001f650000000000006707000002000000070700004c000000e4340818b1d16a571f75000000000000bf54000000000000070400000400da59d2015a28701c0000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$inet6_int(r0, 0x29, 0xff, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = pkey_alloc(0x0, 0x2000000003ff) pkey_free(r1) r2 = semget$private(0x0, 0x1, 0x81) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000140)=""/3) 03:54:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x7400}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3197.512229] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3197.519656] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3197.552187] FAULT_INJECTION: forcing a failure. [ 3197.552187] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.563566] CPU: 0 PID: 6715 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3197.570514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3197.570635] ISOFS: Unable to identify CD-ROM format. [ 3197.579896] Call Trace: [ 3197.579926] dump_stack+0x1c9/0x2b4 [ 3197.579951] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3197.579978] ? find_held_lock+0x36/0x1c0 [ 3197.600498] should_fail.cold.4+0xa/0x11 [ 3197.604554] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3197.609646] ? find_held_lock+0x36/0x1c0 [ 3197.613700] ? lock_downgrade+0x8f0/0x8f0 [ 3197.617852] ? find_held_lock+0x36/0x1c0 [ 3197.621942] ? check_same_owner+0x340/0x340 [ 3197.626270] ? __save_stack_trace+0x8d/0xf0 [ 3197.630583] ? rcu_note_context_switch+0x730/0x730 [ 3197.635512] __should_failslab+0x124/0x180 [ 3197.639743] should_failslab+0x9/0x14 [ 3197.643548] kmem_cache_alloc_trace+0x2cb/0x780 [ 3197.648234] ? save_stack+0x43/0xd0 [ 3197.651884] ? __kasan_slab_free+0x11a/0x170 [ 3197.656294] ? kasan_slab_free+0xe/0x10 [ 3197.660264] ? kfree+0xd9/0x260 [ 3197.663537] ? v9fs_session_init+0xd5b/0x1a80 [ 3197.668020] ? v9fs_mount+0x7c/0x900 [ 3197.671738] ? mount_fs+0xae/0x328 [ 3197.675280] p9_fid_create+0x98/0x4c0 [ 3197.679082] ? kasan_check_read+0x11/0x20 [ 3197.683227] ? p9_client_destroy+0x610/0x610 [ 3197.687657] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3197.692241] ? kasan_check_write+0x14/0x20 [ 3197.696477] p9_client_attach+0xbc/0x860 [ 3197.700539] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3197.705661] ? debug_check_no_obj_freed+0x30b/0x595 [ 3197.710689] ? p9_client_walk+0xab0/0xab0 [ 3197.714849] ? trace_hardirqs_off+0xd/0x10 [ 3197.719071] ? quarantine_put+0x10d/0x1b0 [ 3197.723204] ? kfree+0x111/0x260 [ 3197.726558] ? v9fs_session_init+0xd5b/0x1a80 [ 3197.731045] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3197.736063] v9fs_session_init+0xf62/0x1a80 [ 3197.740379] ? v9fs_session_init+0xf62/0x1a80 [ 3197.744890] ? v9fs_show_options+0x7e0/0x7e0 [ 3197.749303] ? rcu_is_watching+0x8c/0x150 [ 3197.753457] ? rcu_pm_notify+0xc0/0xc0 [ 3197.757342] ? v9fs_mount+0x61/0x900 [ 3197.761065] ? rcu_read_lock_sched_held+0x108/0x120 [ 3197.766080] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3197.771621] v9fs_mount+0x7c/0x900 [ 3197.775161] mount_fs+0xae/0x328 [ 3197.778522] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3197.783093] ? may_umount+0xb0/0xb0 [ 3197.786713] ? _raw_read_unlock+0x22/0x30 [ 3197.790849] ? __get_fs_type+0x97/0xc0 [ 3197.794731] do_mount+0x581/0x30e0 [ 3197.798280] ? copy_mount_string+0x40/0x40 [ 3197.802520] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3197.807282] ? retint_kernel+0x10/0x10 [ 3197.811232] ? copy_mount_options+0x1a1/0x380 [ 3197.815747] ? copy_mount_options+0x1b2/0x380 [ 3197.820258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3197.825841] ? copy_mount_options+0x285/0x380 [ 3197.830353] ksys_mount+0x12d/0x140 [ 3197.833990] __x64_sys_mount+0xbe/0x150 [ 3197.837962] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3197.842968] do_syscall_64+0x1b9/0x820 [ 3197.846852] ? finish_task_switch+0x1d3/0x870 [ 3197.851342] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3197.856265] ? syscall_return_slowpath+0x31d/0x5e0 [ 3197.861193] ? __switch_to_asm+0x34/0x70 [ 3197.865242] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3197.870596] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3197.875445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3197.880626] RIP: 0033:0x457089 [ 3197.883817] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3197.902716] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:54:53 executing program 6 (fault-call:8 fault-nth:29): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:53 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3197.910435] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3197.917696] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3197.924948] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3197.932220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3197.939599] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001c 03:54:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x3]}}]}, 0x2c}}, 0x0) 03:54:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}, 0x2c8) 03:54:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa0100, 0x0) getsockname$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x3020000000000022, &(0x7f0000000080)=0x1, 0xffffffffffffff3f) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:53 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x900000000000000}, 0x0) [ 3198.235983] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3198.243393] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3198.273456] netlink: 'syz-executor5': attribute type 3 has an invalid length. 03:54:53 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000d55000), 0xc, &(0x7f00008b7ff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000001010000000000ffffffff02000000100002000c0001000500020000000000"], 0x24}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 03:54:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6800}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:53 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3198.280841] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3198.396700] FAULT_INJECTION: forcing a failure. [ 3198.396700] name failslab, interval 1, probability 0, space 0, times 0 [ 3198.407941] CPU: 0 PID: 6752 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3198.414877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3198.424238] Call Trace: [ 3198.426857] dump_stack+0x1c9/0x2b4 [ 3198.430529] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3198.433620] ISOFS: Unable to identify CD-ROM format. [ 3198.435746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3198.435775] should_fail.cold.4+0xa/0x11 [ 3198.435800] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3198.435844] ? trace_hardirqs_on+0x10/0x10 [ 3198.459791] ? __lock_acquire+0x7fc/0x5020 [ 3198.464024] ? graph_lock+0x170/0x170 [ 3198.467824] ? __lock_is_held+0xb5/0x140 [ 3198.471904] ? trace_hardirqs_on+0x10/0x10 [ 3198.476171] __should_failslab+0x124/0x180 [ 3198.480428] should_failslab+0x9/0x14 [ 3198.484224] kmem_cache_alloc+0x47/0x760 [ 3198.488274] ? print_usage_bug+0xc0/0xc0 [ 3198.492327] ? graph_lock+0x170/0x170 [ 3198.496119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3198.501643] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 3198.507000] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 3198.512702] radix_tree_extend+0x295/0x650 [ 3198.516931] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 3198.522864] ? __lock_acquire+0x7fc/0x5020 [ 3198.527095] idr_get_free+0x9ad/0x10c0 [ 3198.530983] ? radix_tree_clear_tags+0xc0/0xc0 [ 3198.535556] ? __lock_acquire+0x7fc/0x5020 [ 3198.539794] ? graph_lock+0x170/0x170 [ 3198.543593] ? graph_lock+0x170/0x170 [ 3198.547390] ? trace_hardirqs_on+0x10/0x10 [ 3198.551643] ? print_usage_bug+0xc0/0xc0 [ 3198.555696] ? find_held_lock+0x36/0x1c0 [ 3198.559766] idr_alloc_u32+0x201/0x3f0 [ 3198.563664] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 3198.568502] ? p9_idpool_get+0x23/0x70 [ 3198.572387] idr_alloc+0x111/0x1b0 [ 3198.575936] ? idr_alloc_u32+0x3f0/0x3f0 [ 3198.579986] ? do_raw_spin_lock+0xc1/0x200 [ 3198.584216] p9_idpool_get+0x3d/0x70 [ 3198.587925] p9_client_prepare_req.part.9+0xe4/0xcd0 [ 3198.593035] ? p9_free_req.isra.8+0x140/0x140 [ 3198.597536] ? __radix_tree_replace+0x1fc/0x360 [ 3198.602194] ? graph_lock+0x170/0x170 [ 3198.605994] ? graph_lock+0x170/0x170 [ 3198.609813] ? node_tag_clear+0xc0/0x1c0 [ 3198.613866] p9_client_rpc+0x1bd/0x1400 [ 3198.617840] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3198.623192] ? find_held_lock+0x36/0x1c0 [ 3198.627259] ? lock_downgrade+0x8f0/0x8f0 [ 3198.631411] ? kasan_check_read+0x11/0x20 [ 3198.635565] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3198.639963] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3198.644538] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3198.649632] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3198.654645] ? trace_hardirqs_on+0xd/0x10 [ 3198.658800] ? check_memory_region+0x131/0x1b0 [ 3198.663372] ? p9_client_destroy+0x610/0x610 [ 3198.667772] p9_client_attach+0x19f/0x860 [ 3198.671910] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3198.677021] ? debug_check_no_obj_freed+0x30b/0x595 [ 3198.682043] ? p9_client_walk+0xab0/0xab0 [ 3198.686199] ? trace_hardirqs_off+0xd/0x10 [ 3198.690444] ? quarantine_put+0x10d/0x1b0 [ 3198.694582] ? kfree+0x111/0x260 [ 3198.697941] ? v9fs_session_init+0xd5b/0x1a80 [ 3198.702434] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3198.707458] v9fs_session_init+0xf62/0x1a80 [ 3198.711780] ? v9fs_session_init+0xf62/0x1a80 [ 3198.716280] ? v9fs_show_options+0x7e0/0x7e0 [ 3198.720678] ? rcu_is_watching+0x8c/0x150 [ 3198.724830] ? rcu_pm_notify+0xc0/0xc0 [ 3198.728711] ? v9fs_mount+0x61/0x900 [ 3198.732435] ? rcu_read_lock_sched_held+0x108/0x120 [ 3198.737455] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3198.742982] v9fs_mount+0x7c/0x900 [ 3198.746513] mount_fs+0xae/0x328 [ 3198.749874] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3198.754450] ? may_umount+0xb0/0xb0 [ 3198.758066] ? _raw_read_unlock+0x22/0x30 [ 3198.762201] ? __get_fs_type+0x97/0xc0 [ 3198.766177] do_mount+0x581/0x30e0 [ 3198.769712] ? copy_mount_string+0x40/0x40 [ 3198.773957] ? copy_mount_options+0x5f/0x380 [ 3198.778397] ? rcu_read_lock_sched_held+0x108/0x120 [ 3198.783469] ? kmem_cache_alloc_trace+0x616/0x780 [ 3198.788339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3198.793886] ? copy_mount_options+0x285/0x380 [ 3198.798412] ksys_mount+0x12d/0x140 [ 3198.802053] __x64_sys_mount+0xbe/0x150 [ 3198.806059] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3198.811068] do_syscall_64+0x1b9/0x820 [ 3198.814945] ? finish_task_switch+0x1d3/0x870 [ 3198.819442] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3198.824374] ? syscall_return_slowpath+0x31d/0x5e0 [ 3198.829322] ? __switch_to_asm+0x34/0x70 [ 3198.833372] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3198.838728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3198.843565] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3198.848744] RIP: 0033:0x457089 [ 3198.851926] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3198.870819] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3198.878517] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3198.885773] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:54:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xf00000000000000]}}]}, 0x2c}}, 0x0) 03:54:54 executing program 6 (fault-call:8 fault-nth:30): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3198.893045] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3198.900300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3198.907553] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001d 03:54:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa700]}, 0x2c8) 03:54:54 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 03:54:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)=']securitysystem+trustedeth0\x00', r0}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x800}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20}}, [0x100000001, 0x4, 0x5, 0x3, 0x4ee7421b, 0x101, 0x4, 0x5, 0x6, 0x1, 0x100000001, 0x3, 0x3, 0x9, 0xe6]}, &(0x7f0000000280)=0x100) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000002c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:54 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@ipv4={[], [], @multicast1}, r2}, 0x14) r3 = socket$inet6(0xa, 0x3, 0x8001000000002c) connect$inet6(r3, &(0x7f00000000c0), 0x1c) sendmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xffef}], 0x1, &(0x7f0000000200)}, 0x0) 03:54:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3199.127471] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3199.134852] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3199.152321] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3199.159975] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:54 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x500000000000000]}}]}, 0x2c}}, 0x0) 03:54:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e4]}, 0x2c8) [ 3199.478020] FAULT_INJECTION: forcing a failure. [ 3199.478020] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.489275] CPU: 1 PID: 6793 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3199.496212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3199.505564] Call Trace: [ 3199.508277] dump_stack+0x1c9/0x2b4 [ 3199.511944] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3199.517166] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3199.521384] ISOFS: Unable to identify CD-ROM format. [ 3199.522729] should_fail.cold.4+0xa/0x11 [ 3199.522756] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3199.522805] ? trace_hardirqs_on+0x10/0x10 [ 3199.522828] ? __lock_acquire+0x7fc/0x5020 [ 3199.522854] ? graph_lock+0x170/0x170 [ 3199.522878] ? __lock_is_held+0xb5/0x140 [ 3199.553382] ? trace_hardirqs_on+0x10/0x10 [ 3199.557624] __should_failslab+0x124/0x180 [ 3199.561852] should_failslab+0x9/0x14 [ 3199.565647] kmem_cache_alloc+0x47/0x760 [ 3199.569709] ? print_usage_bug+0xc0/0xc0 [ 3199.573775] ? graph_lock+0x170/0x170 [ 3199.577568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3199.583112] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 3199.588488] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 3199.594217] radix_tree_extend+0x295/0x650 [ 3199.598454] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 3199.604356] ? __lock_acquire+0x7fc/0x5020 [ 3199.608584] idr_get_free+0x9ad/0x10c0 [ 3199.612483] ? radix_tree_clear_tags+0xc0/0xc0 [ 3199.617101] ? __lock_acquire+0x7fc/0x5020 [ 3199.621346] ? graph_lock+0x170/0x170 [ 3199.625156] ? graph_lock+0x170/0x170 [ 3199.628960] ? trace_hardirqs_on+0x10/0x10 [ 3199.633187] ? print_usage_bug+0xc0/0xc0 [ 3199.637252] ? find_held_lock+0x36/0x1c0 [ 3199.641324] idr_alloc_u32+0x201/0x3f0 [ 3199.645262] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 3199.650125] ? p9_idpool_get+0x23/0x70 [ 3199.654021] idr_alloc+0x111/0x1b0 [ 3199.657574] ? idr_alloc_u32+0x3f0/0x3f0 [ 3199.661643] ? do_raw_spin_lock+0xc1/0x200 [ 3199.665894] p9_idpool_get+0x3d/0x70 [ 3199.669617] p9_client_prepare_req.part.9+0xe4/0xcd0 [ 3199.674714] ? p9_free_req.isra.8+0x140/0x140 [ 3199.679210] ? __radix_tree_replace+0x1fc/0x360 [ 3199.683891] ? graph_lock+0x170/0x170 [ 3199.687732] ? graph_lock+0x170/0x170 [ 3199.691534] ? node_tag_clear+0xc0/0x1c0 [ 3199.695612] p9_client_rpc+0x1bd/0x1400 [ 3199.699599] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3199.704959] ? find_held_lock+0x36/0x1c0 [ 3199.709011] ? lock_downgrade+0x8f0/0x8f0 [ 3199.713200] ? kasan_check_read+0x11/0x20 [ 3199.717342] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3199.721741] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3199.726313] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3199.731418] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3199.736449] ? trace_hardirqs_on+0xd/0x10 [ 3199.740593] ? check_memory_region+0x131/0x1b0 [ 3199.745194] ? p9_client_destroy+0x610/0x610 [ 3199.749602] p9_client_attach+0x19f/0x860 [ 3199.753749] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3199.758865] ? debug_check_no_obj_freed+0x30b/0x595 [ 3199.763895] ? p9_client_walk+0xab0/0xab0 [ 3199.768060] ? trace_hardirqs_off+0xd/0x10 [ 3199.772299] ? quarantine_put+0x10d/0x1b0 [ 3199.776453] ? kfree+0x111/0x260 [ 3199.779808] ? v9fs_session_init+0xd5b/0x1a80 [ 3199.784308] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3199.789825] v9fs_session_init+0xf62/0x1a80 [ 3199.794152] ? v9fs_session_init+0xf62/0x1a80 [ 3199.798664] ? v9fs_show_options+0x7e0/0x7e0 [ 3199.803080] ? rcu_is_watching+0x8c/0x150 [ 3199.807240] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3199.812255] ? rcu_pm_notify+0xc0/0xc0 [ 3199.816138] ? v9fs_mount+0x61/0x900 [ 3199.819842] ? rcu_read_lock_sched_held+0x108/0x120 [ 3199.824852] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3199.830387] v9fs_mount+0x7c/0x900 [ 3199.833933] mount_fs+0xae/0x328 [ 3199.837296] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3199.841889] ? may_umount+0xb0/0xb0 [ 3199.845503] ? _raw_read_unlock+0x22/0x30 [ 3199.849640] ? __get_fs_type+0x97/0xc0 [ 3199.853524] do_mount+0x581/0x30e0 [ 3199.857072] ? copy_mount_string+0x40/0x40 [ 3199.861309] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3199.866067] ? retint_kernel+0x10/0x10 [ 3199.869955] ? copy_mount_options+0x1f0/0x380 [ 3199.874452] ? copy_mount_options+0x202/0x380 [ 3199.878964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3199.884507] ? copy_mount_options+0x285/0x380 [ 3199.889007] ksys_mount+0x12d/0x140 [ 3199.892628] __x64_sys_mount+0xbe/0x150 [ 3199.896604] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3199.901623] do_syscall_64+0x1b9/0x820 [ 3199.905509] ? finish_task_switch+0x1d3/0x870 [ 3199.910022] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3199.914961] ? syscall_return_slowpath+0x31d/0x5e0 [ 3199.919888] ? __switch_to_asm+0x34/0x70 [ 3199.923978] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3199.929331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3199.934176] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3199.939354] RIP: 0033:0x457089 [ 3199.942538] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3199.961450] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3199.969174] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3199.976439] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3199.983713] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3199.991003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3199.998271] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001e 03:54:55 executing program 6 (fault-call:8 fault-nth:31): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:55 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x300000000000000}, 0x0) 03:54:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='systemeth1$$\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23}}, [0x5, 0x8, 0x1ff, 0x8, 0xef, 0x2, 0x40, 0x4, 0xfffffffffffff2fd, 0x6, 0x1de, 0x7, 0x6, 0x10000, 0x40]}, &(0x7f0000000200)=0x100) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={r2, 0x7}, &(0x7f0000000280)=0x8) 03:54:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:55 executing program 0: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x80001, 0x40bfa5) ioctl(r2, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") open$dir(&(0x7f0000000040)='./file0\x00', 0x2, 0x80) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa}) close(r2) 03:54:55 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xf5ffffff]}}]}, 0x2c}}, 0x0) 03:54:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2020000]}, 0x2c8) 03:54:55 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf00000000000000}, 0x0) [ 3200.479211] FAULT_INJECTION: forcing a failure. [ 3200.479211] name failslab, interval 1, probability 0, space 0, times 0 [ 3200.490465] CPU: 1 PID: 6844 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3200.497417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3200.506789] Call Trace: [ 3200.509422] dump_stack+0x1c9/0x2b4 [ 3200.513080] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3200.518317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3200.523884] should_fail.cold.4+0xa/0x11 03:54:55 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x3f00]}}]}, 0x2c}}, 0x0) 03:54:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x800, 0x4) [ 3200.527987] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3200.533142] ? trace_hardirqs_on+0x10/0x10 [ 3200.537430] ? graph_lock+0x170/0x170 [ 3200.541265] ? graph_lock+0x170/0x170 [ 3200.545094] ? __lock_is_held+0xb5/0x140 [ 3200.549185] ? __update_load_avg_blocked_se+0x730/0x730 [ 3200.554582] ? __update_load_avg_se+0xb80/0xb80 [ 3200.559274] ? graph_lock+0x170/0x170 [ 3200.563092] __should_failslab+0x124/0x180 [ 3200.567335] should_failslab+0x9/0x14 [ 3200.571162] kmem_cache_alloc+0x47/0x760 [ 3200.575248] ? print_usage_bug+0xc0/0xc0 [ 3200.579334] ? attach_entity_load_avg+0x860/0x860 [ 3200.584204] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 3200.589960] radix_tree_extend+0x295/0x650 [ 3200.594241] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 3200.600156] ? __lock_acquire+0x7fc/0x5020 [ 3200.604434] idr_get_free+0x9ad/0x10c0 [ 3200.608368] ? radix_tree_clear_tags+0xc0/0xc0 [ 3200.612994] ? __lock_acquire+0x7fc/0x5020 [ 3200.617258] ? graph_lock+0x170/0x170 [ 3200.621093] ? graph_lock+0x170/0x170 [ 3200.624929] ? trace_hardirqs_on+0x10/0x10 [ 3200.629190] ? print_usage_bug+0xc0/0xc0 [ 3200.632949] ISOFS: Unable to identify CD-ROM format. [ 3200.633280] ? find_held_lock+0x36/0x1c0 [ 3200.633314] idr_alloc_u32+0x201/0x3f0 [ 3200.646366] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 3200.651230] ? p9_idpool_get+0x23/0x70 [ 3200.655116] idr_alloc+0x111/0x1b0 [ 3200.658664] ? idr_alloc_u32+0x3f0/0x3f0 [ 3200.662733] ? do_raw_spin_lock+0xc1/0x200 [ 3200.666980] p9_idpool_get+0x3d/0x70 [ 3200.670714] p9_client_prepare_req.part.9+0xe4/0xcd0 [ 3200.675828] ? p9_free_req.isra.8+0x140/0x140 [ 3200.680321] ? __radix_tree_replace+0x1fc/0x360 [ 3200.684982] ? graph_lock+0x170/0x170 [ 3200.688805] ? graph_lock+0x170/0x170 [ 3200.692608] ? node_tag_clear+0xc0/0x1c0 [ 3200.696664] p9_client_rpc+0x1bd/0x1400 [ 3200.700650] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3200.706030] ? find_held_lock+0x36/0x1c0 [ 3200.710149] ? lock_downgrade+0x8f0/0x8f0 [ 3200.714341] ? kasan_check_read+0x11/0x20 [ 3200.718503] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3200.722984] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3200.727607] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3200.732726] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3200.737758] ? trace_hardirqs_on+0xd/0x10 [ 3200.741936] ? check_memory_region+0x131/0x1b0 [ 3200.746536] ? p9_client_destroy+0x610/0x610 [ 3200.750972] p9_client_attach+0x19f/0x860 [ 3200.755140] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3200.760263] ? debug_check_no_obj_freed+0x30b/0x595 [ 3200.765302] ? p9_client_walk+0xab0/0xab0 [ 3200.769483] ? trace_hardirqs_off+0xd/0x10 [ 3200.773734] ? quarantine_put+0x10d/0x1b0 03:54:55 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3200.777900] ? kfree+0x111/0x260 [ 3200.781292] ? v9fs_session_init+0xd5b/0x1a80 [ 3200.785806] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3200.790846] v9fs_session_init+0xf62/0x1a80 [ 3200.795187] ? v9fs_session_init+0xf62/0x1a80 [ 3200.799721] ? v9fs_show_options+0x7e0/0x7e0 [ 3200.804152] ? rcu_is_watching+0x8c/0x150 [ 3200.808319] ? rcu_pm_notify+0xc0/0xc0 [ 3200.812226] ? v9fs_mount+0x61/0x900 [ 3200.816132] ? rcu_read_lock_sched_held+0x108/0x120 [ 3200.821178] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3200.826853] v9fs_mount+0x7c/0x900 03:54:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x9]}}]}, 0x2c}}, 0x0) [ 3200.830433] mount_fs+0xae/0x328 [ 3200.833827] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3200.838430] ? may_umount+0xb0/0xb0 [ 3200.842057] ? _raw_read_unlock+0x22/0x30 [ 3200.846195] ? __get_fs_type+0x97/0xc0 [ 3200.850076] do_mount+0x581/0x30e0 [ 3200.853712] ? copy_mount_string+0x40/0x40 [ 3200.857954] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 3200.862719] ? retint_kernel+0x10/0x10 [ 3200.866632] ? copy_mount_options+0x1f0/0x380 [ 3200.871151] ? __sanitizer_cov_trace_pc+0x3b/0x50 03:54:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x77a2, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3200.876012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3200.881563] ? copy_mount_options+0x285/0x380 [ 3200.886082] ksys_mount+0x12d/0x140 [ 3200.889726] __x64_sys_mount+0xbe/0x150 [ 3200.893711] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3200.899225] do_syscall_64+0x1b9/0x820 [ 3200.903131] ? finish_task_switch+0x1d3/0x870 [ 3200.907633] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3200.912555] ? syscall_return_slowpath+0x31d/0x5e0 [ 3200.917474] ? __switch_to_asm+0x34/0x70 [ 3200.921546] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe 03:54:56 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3200.926906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3200.931750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3200.936935] RIP: 0033:0x457089 [ 3200.940131] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3200.959045] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3200.966775] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3200.974051] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3200.981330] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3200.988634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3200.995913] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001f 03:54:56 executing program 6 (fault-call:8 fault-nth:32): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x7a00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x1d, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000), &(0x7f0000000140), 0x1}, 0x20) 03:54:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}, 0x2c8) 03:54:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x800000000000000]}}]}, 0x2c}}, 0x0) 03:54:56 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r0 = syz_open_dev$admmidi(&(0x7f0000000540)='/dev/admmidi#\x00', 0x1, 0x222001) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x100000000000001, 0x2ec) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="941ec090b00e7656c2ebd1d9f82333e4fcc1f2a82b6b56dbb64b2bd543faeb53baf3f4ed637edd5a3430c20400e57605f0747e84dcf46f9bfcc15d6b3b2cd28bd1e6a82445e75931284fbdb7f096232776f8317ab8cda551", 0x100000139, 0x200618cf, &(0x7f0000ae3000)={0xa, 0x2, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="47013ba65d8ed6f8b2871c603752729be98df37e63e6adc7aa3d86404f7127441d69f24dbcf511e5c4e8bc984e9a0f38d5d9bb7479de53b0eb1437b304acd9115bdc6a96510b4524dca1b30ad7fd308d15daf13989ba26cb7851d10f084a42b88da6918c5dc23fde132bc06f926eb5f9c39aee", 0x73, 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="17e9aff8f0444d1a746322a3318d5e024cda04973bc69d7b80a58536f61bbd33d768f1040155e536029405757516f7a15732bfeb578680d8e527f51170e9cd01429a2e00b4270f8f7c3e4c09a38f92c4c047914a556381ee", 0x58, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000380)={r1, r2, r3}, &(0x7f00000003c0)=""/249, 0xf9, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000500)={'teql0\x00', @ifru_hwaddr=@random="019f5c54a88f"}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0xb010, 0x9, 0x1, 0x10000}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r4, 0x6}, &(0x7f0000000680)=0x8) fchmodat(r0, &(0x7f00000006c0)='./file0\x00', 0x333b3f8a9ab728e2) 03:54:56 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 03:54:56 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6c00}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:54:56 executing program 0: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x40000) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0x7f, 0x7, 0x1, 0xd50, 0x81, 0x4009, 0x3, 0x90000000, 0x2, 0x20}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x7ff) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000200)=0x68) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100), 0xffffffffffffcd0) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x5437, 0x0) 03:54:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9203]}, 0x2c8) 03:54:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x48000000]}}]}, 0x2c}}, 0x0) [ 3201.501606] FAULT_INJECTION: forcing a failure. [ 3201.501606] name failslab, interval 1, probability 0, space 0, times 0 [ 3201.512982] CPU: 1 PID: 6905 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3201.519923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3201.529287] Call Trace: [ 3201.531867] dump_stack+0x1c9/0x2b4 [ 3201.535522] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3201.540718] ? replace_slot+0x153/0x500 [ 3201.544693] should_fail.cold.4+0xa/0x11 03:54:56 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) signalfd4(r0, &(0x7f0000000040)={0x7}, 0x8, 0x80800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) [ 3201.548753] ? plist_requeue+0x650/0x650 [ 3201.552857] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3201.558012] ? graph_lock+0x170/0x170 [ 3201.561850] ? graph_lock+0x170/0x170 [ 3201.565684] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3201.571274] ? node_tag_clear+0xc0/0x1c0 [ 3201.575369] ? find_held_lock+0x36/0x1c0 [ 3201.576975] ISOFS: Unable to identify CD-ROM format. [ 3201.579473] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 3201.579500] ? check_same_owner+0x340/0x340 [ 3201.579524] ? rcu_note_context_switch+0x730/0x730 [ 3201.579554] __should_failslab+0x124/0x180 [ 3201.579576] should_failslab+0x9/0x14 [ 3201.606775] kmem_cache_alloc_trace+0x2cb/0x780 [ 3201.611461] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3201.616504] ? trace_hardirqs_on+0xd/0x10 [ 3201.620690] p9_client_prepare_req.part.9+0x82a/0xcd0 [ 3201.625895] ? p9_free_req.isra.8+0x140/0x140 [ 3201.630400] ? __radix_tree_replace+0x1fc/0x360 [ 3201.635090] ? graph_lock+0x170/0x170 [ 3201.638914] ? graph_lock+0x170/0x170 [ 3201.642734] ? node_tag_clear+0xc0/0x1c0 [ 3201.646817] p9_client_rpc+0x1bd/0x1400 03:54:56 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 3201.650817] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3201.656193] ? find_held_lock+0x36/0x1c0 [ 3201.660279] ? lock_downgrade+0x8f0/0x8f0 [ 3201.664462] ? kasan_check_read+0x11/0x20 [ 3201.668623] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3201.673048] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3201.677647] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3201.682770] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3201.687792] ? trace_hardirqs_on+0xd/0x10 [ 3201.691943] ? check_memory_region+0x131/0x1b0 [ 3201.696531] ? p9_client_destroy+0x610/0x610 [ 3201.700970] p9_client_attach+0x19f/0x860 [ 3201.705136] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3201.710261] ? debug_check_no_obj_freed+0x30b/0x595 [ 3201.715296] ? p9_client_walk+0xab0/0xab0 [ 3201.719466] ? trace_hardirqs_off+0xd/0x10 [ 3201.723715] ? quarantine_put+0x10d/0x1b0 [ 3201.727879] ? kfree+0x111/0x260 [ 3201.731267] ? v9fs_session_init+0xd5b/0x1a80 [ 3201.735778] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3201.740814] v9fs_session_init+0xf62/0x1a80 [ 3201.745149] ? v9fs_session_init+0xf62/0x1a80 03:54:56 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x8001a0}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3201.749691] ? v9fs_show_options+0x7e0/0x7e0 [ 3201.754174] ? rcu_is_watching+0x8c/0x150 [ 3201.758354] ? rcu_pm_notify+0xc0/0xc0 [ 3201.762276] ? v9fs_mount+0x61/0x900 [ 3201.766020] ? rcu_read_lock_sched_held+0x108/0x120 [ 3201.771072] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3201.776725] v9fs_mount+0x7c/0x900 [ 3201.780294] mount_fs+0xae/0x328 [ 3201.783690] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3201.788573] ? may_umount+0xb0/0xb0 [ 3201.792220] ? _raw_read_unlock+0x22/0x30 [ 3201.796389] ? __get_fs_type+0x97/0xc0 [ 3201.800316] do_mount+0x581/0x30e0 [ 3201.803876] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3201.808320] ? copy_mount_string+0x40/0x40 [ 3201.812582] ? copy_mount_options+0x5f/0x380 [ 3201.817011] ? rcu_read_lock_sched_held+0x108/0x120 [ 3201.822044] ? kmem_cache_alloc_trace+0x616/0x780 [ 3201.827006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3201.832566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3201.838123] ? copy_mount_options+0x285/0x380 [ 3201.842637] ksys_mount+0x12d/0x140 [ 3201.846281] __x64_sys_mount+0xbe/0x150 [ 3201.850266] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3201.855304] do_syscall_64+0x1b9/0x820 [ 3201.859210] ? finish_task_switch+0x1d3/0x870 [ 3201.863728] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3201.868680] ? syscall_return_slowpath+0x31d/0x5e0 [ 3201.873631] ? __switch_to_asm+0x34/0x70 [ 3201.877712] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3201.883102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3201.887970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3201.893177] RIP: 0033:0x457089 [ 3201.896873] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3201.915845] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3201.923571] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3201.930850] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3201.938141] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3201.945771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3201.953049] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000020 [ 3201.960652] 9pnet: Couldn't grow tag array [ 3202.034266] validate_nla: 8 callbacks suppressed [ 3202.034277] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3202.046498] net_ratelimit: 6 callbacks suppressed [ 3202.046513] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3202.069648] netlink: 'syz-executor5': attribute type 3 has an invalid length. 03:54:57 executing program 6 (fault-call:8 fault-nth:33): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:54:57 executing program 0: syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x846fc) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xa6, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0xa6) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'trans=fd,'}}, {@cachetag={'cachetag', 0x3d, 'md5sum'}}]}}) 03:54:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x6000000]}}]}, 0x2c}}, 0x0) 03:54:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c8) 03:54:57 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:57 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:54:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3202.077014] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3202.227390] 9pnet: Insufficient options for proto=fd [ 3202.234167] 9pnet: Insufficient options for proto=fd [ 3202.240795] 9pnet: Insufficient options for proto=fd [ 3202.246667] 9pnet: Insufficient options for proto=fd 03:54:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xa000000]}}]}, 0x2c}}, 0x0) 03:54:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000d6000)='/dev/sequencer2\x00', 0x10000000c0082, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e22, @broadcast}}) pwrite64(r2, &(0x7f0000000040)="94000bfff3d60260", 0x8, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xa) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) 03:54:57 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3202.383311] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3202.390911] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:57 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x2c8) 03:54:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x1, 0x2, 0x5, 0xfffffffffffffffb, 0x1}) creat(&(0x7f00000000c0)='./file0\x00', 0x84) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:54:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6c00000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3202.433554] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3202.441193] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:57 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 3202.506469] ISOFS: Unable to identify CD-ROM format. [ 3202.515732] FAULT_INJECTION: forcing a failure. [ 3202.515732] name failslab, interval 1, probability 0, space 0, times 0 [ 3202.527067] CPU: 0 PID: 6970 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3202.534021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3202.543389] Call Trace: [ 3202.546017] dump_stack+0x1c9/0x2b4 [ 3202.549670] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3202.554882] ? __kernel_text_address+0xd/0x40 [ 3202.559387] ? unwind_get_return_address+0x61/0xa0 [ 3202.564338] should_fail.cold.4+0xa/0x11 [ 3202.568394] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3202.573523] ? save_stack+0xa9/0xd0 [ 3202.577161] ? save_stack+0x43/0xd0 [ 3202.580777] ? kasan_kmalloc+0xc4/0xe0 [ 3202.584664] ? __kmalloc+0x14e/0x760 [ 3202.588379] ? p9_fcall_alloc+0x1e/0x90 [ 3202.592376] ? p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 3202.597741] ? p9_client_rpc+0x1bd/0x1400 [ 3202.601882] ? v9fs_session_init+0xf62/0x1a80 [ 3202.606370] ? v9fs_mount+0x7c/0x900 [ 3202.610073] ? mount_fs+0xae/0x328 [ 3202.613603] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3202.618358] ? do_mount+0x581/0x30e0 [ 3202.622065] ? ksys_mount+0x12d/0x140 [ 3202.625853] ? __x64_sys_mount+0xbe/0x150 [ 3202.630000] ? do_syscall_64+0x1b9/0x820 [ 3202.634056] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3202.639448] ? lock_downgrade+0x8f0/0x8f0 [ 3202.643615] ? check_same_owner+0x340/0x340 [ 3202.647940] ? rcu_note_context_switch+0x730/0x730 [ 3202.652871] __should_failslab+0x124/0x180 [ 3202.657100] should_failslab+0x9/0x14 [ 3202.660893] __kmalloc+0x2c8/0x760 [ 3202.664440] ? __init_waitqueue_head+0x9e/0x150 [ 3202.669113] ? init_wait_entry+0x1c0/0x1c0 [ 3202.673354] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3202.678363] ? p9_fcall_alloc+0x1e/0x90 [ 3202.682330] p9_fcall_alloc+0x1e/0x90 [ 3202.686130] p9_client_prepare_req.part.9+0x754/0xcd0 [ 3202.691316] ? p9_free_req.isra.8+0x140/0x140 [ 3202.695805] ? __radix_tree_replace+0x1fc/0x360 [ 3202.700469] ? graph_lock+0x170/0x170 [ 3202.704260] ? graph_lock+0x170/0x170 [ 3202.708058] ? node_tag_clear+0xc0/0x1c0 [ 3202.712127] p9_client_rpc+0x1bd/0x1400 [ 3202.716129] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3202.721485] ? find_held_lock+0x36/0x1c0 [ 3202.725540] ? lock_downgrade+0x8f0/0x8f0 [ 3202.729681] ? kasan_check_read+0x11/0x20 [ 3202.733821] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3202.738219] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3202.742820] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3202.747927] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3202.752948] ? trace_hardirqs_on+0xd/0x10 [ 3202.757092] ? check_memory_region+0x131/0x1b0 [ 3202.761667] ? p9_client_destroy+0x610/0x610 [ 3202.766079] p9_client_attach+0x19f/0x860 [ 3202.770220] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3202.775318] ? debug_check_no_obj_freed+0x30b/0x595 [ 3202.780330] ? p9_client_walk+0xab0/0xab0 [ 3202.784475] ? trace_hardirqs_off+0xd/0x10 [ 3202.788839] ? quarantine_put+0x10d/0x1b0 [ 3202.792994] ? kfree+0x111/0x260 [ 3202.796351] ? v9fs_session_init+0xd5b/0x1a80 [ 3202.800842] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3202.805864] v9fs_session_init+0xf62/0x1a80 [ 3202.810180] ? v9fs_session_init+0xf62/0x1a80 [ 3202.814673] ? v9fs_show_options+0x7e0/0x7e0 [ 3202.819091] ? rcu_is_watching+0x8c/0x150 [ 3202.823347] ? rcu_pm_notify+0xc0/0xc0 [ 3202.827230] ? v9fs_mount+0x61/0x900 [ 3202.830938] ? rcu_read_lock_sched_held+0x108/0x120 [ 3202.835963] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3202.841507] v9fs_mount+0x7c/0x900 [ 3202.845062] mount_fs+0xae/0x328 [ 3202.848441] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3202.853027] ? may_umount+0xb0/0xb0 [ 3202.856648] ? _raw_read_unlock+0x22/0x30 [ 3202.860788] ? __get_fs_type+0x97/0xc0 [ 3202.864672] do_mount+0x581/0x30e0 [ 3202.868226] ? copy_mount_string+0x40/0x40 [ 3202.872482] ? copy_mount_options+0x5f/0x380 [ 3202.876917] ? rcu_read_lock_sched_held+0x108/0x120 [ 3202.881940] ? kmem_cache_alloc_trace+0x616/0x780 [ 3202.886797] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3202.892339] ? _copy_from_user+0xdf/0x150 [ 3202.896848] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3202.902377] ? copy_mount_options+0x285/0x380 [ 3202.906915] ksys_mount+0x12d/0x140 [ 3202.910540] __x64_sys_mount+0xbe/0x150 [ 3202.914516] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3202.919525] do_syscall_64+0x1b9/0x820 [ 3202.923412] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3202.928350] ? syscall_return_slowpath+0x31d/0x5e0 [ 3202.933283] ? __switch_to_asm+0x34/0x70 [ 3202.937351] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3202.942710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3202.947549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3202.952729] RIP: 0033:0x457089 [ 3202.955913] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3202.974810] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3202.982608] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3202.989865] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3202.997124] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 03:54:58 executing program 6 (fault-call:8 fault-nth:34): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3203.004382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3203.011645] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000021 [ 3203.019060] 9pnet: Couldn't grow tag array 03:54:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xffffff7f]}}]}, 0x2c}}, 0x0) 03:54:58 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:58 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1}, 0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000140)={'bpq0\x00', {0x2, 0x4e22, @remote}}) signalfd(r2, &(0x7f00000001c0)={0x10000}, 0x8) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) 03:54:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}, 0x2c8) [ 3203.319813] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3203.327204] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3203.348321] netlink: 'syz-executor5': attribute type 3 has an invalid length. 03:54:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x40030000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3203.355950] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:58 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x200000000000000}, 0x0) 03:54:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xffff, 0x62040) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xffffffff80000000, 0x200, 0xffffffffffffffff, 0x7, r2}, 0x10) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000000c0)={0x80000001, 0x1, 0x0, [{0x4e, 0x2, 0x9, 0x5, 0x7, 0x1, 0xf7}]}) write$P9_ROPEN(r1, &(0x7f0000000300)={0x18, 0x71, 0x1, {{0x21, 0x0, 0x3}, 0x49}}, 0x18) sendto$inet6(r0, &(0x7f0000000200)="753fcee8847d4ee9e19f9eb371b44c30994f3c96d526098686ee32d33d1f46377b3a69c685123d406c1c0b70f821839dcce2eda23a5c194541e967bb7280b1e764a424448deccc3f48eb98a557d4d392a6cea73be11bc2a31da693f7326d6ed1d84139dd36000000000000c8892a92ad46c27bb63ce596d6ce9f11a09c0971fce3549bd2365e28f4fa7dbd03959205eed25407", 0x93, 0x200418cf, &(0x7f00000002c0)={0xa, 0x0, 0x1c, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) [ 3203.462756] FAULT_INJECTION: forcing a failure. [ 3203.462756] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3203.474611] CPU: 1 PID: 7002 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3203.479103] ISOFS: Unable to identify CD-ROM format. [ 3203.481551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3203.481559] Call Trace: [ 3203.481587] dump_stack+0x1c9/0x2b4 [ 3203.481613] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3203.507424] ? graph_lock+0x170/0x170 [ 3203.511227] should_fail.cold.4+0xa/0x11 [ 3203.515282] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3203.520378] ? find_held_lock+0x36/0x1c0 [ 3203.524459] ? lock_downgrade+0x8f0/0x8f0 [ 3203.528602] ? finish_task_switch+0x18a/0x870 [ 3203.533090] ? kasan_check_read+0x11/0x20 [ 3203.537226] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3203.541625] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3203.546202] ? compat_start_thread+0x80/0x80 [ 3203.550604] ? _raw_spin_unlock_irq+0x27/0x70 [ 3203.555103] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3203.560115] ? trace_hardirqs_on+0xd/0x10 [ 3203.564258] ? _raw_spin_unlock_irq+0x27/0x70 [ 3203.568744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3203.574271] ? should_fail+0x246/0xd86 [ 3203.578152] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3203.583259] ? __switch_to_asm+0x40/0x70 [ 3203.587331] ? __switch_to_asm+0x34/0x70 [ 3203.591389] ? __switch_to_asm+0x40/0x70 [ 3203.595460] __alloc_pages_nodemask+0x36e/0xdb0 [ 3203.600117] ? __switch_to_asm+0x34/0x70 [ 3203.604174] ? __switch_to_asm+0x40/0x70 [ 3203.608230] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 3203.613236] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3203.617991] ? __sched_text_start+0x8/0x8 [ 3203.622135] ? lock_downgrade+0x8f0/0x8f0 [ 3203.626284] ? check_same_owner+0x340/0x340 [ 3203.630600] ? retint_kernel+0x10/0x10 [ 3203.634482] cache_grow_begin+0x91/0x710 [ 3203.638544] __kmalloc+0x688/0x760 [ 3203.642077] ? p9_fcall_alloc+0x1e/0x90 [ 3203.646060] p9_fcall_alloc+0x1e/0x90 [ 3203.649859] p9_client_prepare_req.part.9+0x754/0xcd0 [ 3203.655049] ? p9_free_req.isra.8+0x140/0x140 [ 3203.659539] ? __radix_tree_replace+0x1fc/0x360 [ 3203.664198] ? graph_lock+0x170/0x170 [ 3203.668000] ? graph_lock+0x170/0x170 [ 3203.671792] ? node_tag_clear+0xc0/0x1c0 [ 3203.675847] p9_client_rpc+0x1bd/0x1400 [ 3203.679814] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3203.685164] ? find_held_lock+0x36/0x1c0 [ 3203.689222] ? lock_downgrade+0x8f0/0x8f0 [ 3203.693365] ? kasan_check_read+0x11/0x20 [ 3203.697512] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3203.701925] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3203.706503] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3203.711594] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3203.716602] ? trace_hardirqs_on+0xd/0x10 [ 3203.720744] ? check_memory_region+0x131/0x1b0 [ 3203.725321] ? p9_client_destroy+0x610/0x610 [ 3203.729763] p9_client_attach+0x19f/0x860 [ 3203.733933] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3203.739147] ? debug_check_no_obj_freed+0x30b/0x595 [ 3203.744197] ? p9_client_walk+0xab0/0xab0 [ 3203.748345] ? trace_hardirqs_off+0xd/0x10 [ 3203.752577] ? quarantine_put+0x10d/0x1b0 [ 3203.756731] ? kfree+0x111/0x260 [ 3203.760102] ? v9fs_session_init+0xd5b/0x1a80 [ 3203.764588] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3203.769599] v9fs_session_init+0xf62/0x1a80 [ 3203.774022] ? v9fs_session_init+0xf62/0x1a80 [ 3203.778522] ? v9fs_show_options+0x7e0/0x7e0 [ 3203.782942] ? rcu_is_watching+0x8c/0x150 [ 3203.787094] ? rcu_pm_notify+0xc0/0xc0 [ 3203.790979] ? v9fs_mount+0x61/0x900 [ 3203.795085] ? rcu_read_lock_sched_held+0x108/0x120 [ 3203.800111] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3203.805645] v9fs_mount+0x7c/0x900 [ 3203.809197] mount_fs+0xae/0x328 [ 3203.812593] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3203.817194] ? may_umount+0xb0/0xb0 [ 3203.820828] ? _raw_read_unlock+0x22/0x30 [ 3203.824965] ? __get_fs_type+0x97/0xc0 [ 3203.828844] do_mount+0x581/0x30e0 [ 3203.832388] ? copy_mount_string+0x40/0x40 [ 3203.836626] ? copy_mount_options+0x5f/0x380 [ 3203.841025] ? rcu_read_lock_sched_held+0x108/0x120 [ 3203.846032] ? kmem_cache_alloc_trace+0x616/0x780 [ 3203.850870] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3203.856398] ? _copy_from_user+0xdf/0x150 [ 3203.860554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3203.866100] ? copy_mount_options+0x285/0x380 [ 3203.870595] ksys_mount+0x12d/0x140 [ 3203.874213] __x64_sys_mount+0xbe/0x150 [ 3203.878179] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3203.883192] do_syscall_64+0x1b9/0x820 [ 3203.887070] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3203.892009] ? syscall_return_slowpath+0x31d/0x5e0 [ 3203.896945] ? __switch_to_asm+0x34/0x70 [ 3203.900995] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3203.906352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3203.911184] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3203.916359] RIP: 0033:0x457089 [ 3203.919542] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3203.938436] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3203.946130] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3203.953395] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:54:59 executing program 6 (fault-call:8 fault-nth:35): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 3203.960660] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3203.967912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3203.975226] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000022 03:54:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xffffff9e]}}]}, 0x2c}}, 0x0) 03:54:59 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:54:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x4800000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3204.158985] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3204.166589] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3204.185117] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3204.192544] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:54:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe403]}, 0x2c8) 03:54:59 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x84, 0x1}}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000040), 0xe) listen(r1, 0x0) poll(&(0x7f0000000080)=[{r1, 0x4020}, {r1, 0x40}, {r1, 0x4}, {r1, 0x10}, {r0, 0x100}, {r0, 0x8040}, {r1, 0x8102}], 0x7, 0xe09f) 03:54:59 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 03:54:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x80000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000001c0)) sendto$inet6(r0, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x10000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000140)={0x9, 0x19b, 0x6d, @random="3e69bc741a60", 'ifb0\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x800, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)=0xb05e) [ 3204.400833] FAULT_INJECTION: forcing a failure. [ 3204.400833] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.412477] CPU: 0 PID: 7041 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3204.419468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3204.428848] Call Trace: [ 3204.431477] dump_stack+0x1c9/0x2b4 [ 3204.435139] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3204.436235] ISOFS: Unable to identify CD-ROM format. [ 3204.440360] ? __kernel_text_address+0xd/0x40 [ 3204.440380] ? unwind_get_return_address+0x61/0xa0 [ 3204.440426] should_fail.cold.4+0xa/0x11 [ 3204.440454] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3204.440480] ? save_stack+0xa9/0xd0 [ 3204.467754] ? save_stack+0x43/0xd0 [ 3204.471381] ? kasan_kmalloc+0xc4/0xe0 [ 3204.475312] ? __kmalloc+0x14e/0x760 [ 3204.479029] ? p9_fcall_alloc+0x1e/0x90 [ 3204.482995] ? p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 3204.488358] ? p9_client_rpc+0x1bd/0x1400 [ 3204.492517] ? v9fs_session_init+0xf62/0x1a80 [ 3204.497018] ? v9fs_mount+0x7c/0x900 [ 3204.500739] ? mount_fs+0xae/0x328 [ 3204.504273] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3204.509017] ? do_mount+0x581/0x30e0 [ 3204.512979] ? ksys_mount+0x12d/0x140 [ 3204.516779] ? __x64_sys_mount+0xbe/0x150 [ 3204.520924] ? do_syscall_64+0x1b9/0x820 [ 3204.524977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3204.530351] ? lock_downgrade+0x8f0/0x8f0 [ 3204.534523] ? check_same_owner+0x340/0x340 [ 3204.538852] ? rcu_note_context_switch+0x730/0x730 [ 3204.543808] __should_failslab+0x124/0x180 [ 3204.548060] should_failslab+0x9/0x14 [ 3204.551912] __kmalloc+0x2c8/0x760 [ 3204.555457] ? __init_waitqueue_head+0x9e/0x150 [ 3204.560131] ? init_wait_entry+0x1c0/0x1c0 [ 3204.564354] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3204.569364] ? p9_fcall_alloc+0x1e/0x90 [ 3204.573350] p9_fcall_alloc+0x1e/0x90 [ 3204.577157] p9_client_prepare_req.part.9+0x754/0xcd0 [ 3204.582355] ? p9_free_req.isra.8+0x140/0x140 [ 3204.586871] ? __radix_tree_replace+0x1fc/0x360 [ 3204.591548] ? graph_lock+0x170/0x170 [ 3204.595350] ? graph_lock+0x170/0x170 [ 3204.599160] ? node_tag_clear+0xc0/0x1c0 [ 3204.603243] p9_client_rpc+0x1bd/0x1400 [ 3204.607226] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 3204.612587] ? find_held_lock+0x36/0x1c0 [ 3204.616664] ? lock_downgrade+0x8f0/0x8f0 [ 3204.620812] ? kasan_check_read+0x11/0x20 [ 3204.624964] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3204.629385] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3204.633991] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3204.639111] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3204.644146] ? trace_hardirqs_on+0xd/0x10 [ 3204.648335] ? check_memory_region+0x131/0x1b0 [ 3204.652936] ? p9_client_destroy+0x610/0x610 [ 3204.657368] p9_client_attach+0x19f/0x860 [ 3204.661541] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3204.666677] ? debug_check_no_obj_freed+0x30b/0x595 [ 3204.671703] ? p9_client_walk+0xab0/0xab0 [ 3204.675867] ? trace_hardirqs_off+0xd/0x10 [ 3204.680096] ? quarantine_put+0x10d/0x1b0 [ 3204.684254] ? kfree+0x111/0x260 [ 3204.687660] ? v9fs_session_init+0xd5b/0x1a80 [ 3204.692182] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3204.697225] v9fs_session_init+0xf62/0x1a80 [ 3204.701577] ? v9fs_session_init+0xf62/0x1a80 [ 3204.706086] ? v9fs_show_options+0x7e0/0x7e0 [ 3204.710506] ? rcu_is_watching+0x8c/0x150 [ 3204.714658] ? rcu_pm_notify+0xc0/0xc0 [ 3204.718579] ? v9fs_mount+0x61/0x900 [ 3204.722330] ? rcu_read_lock_sched_held+0x108/0x120 [ 3204.727475] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3204.733037] v9fs_mount+0x7c/0x900 [ 3204.736682] mount_fs+0xae/0x328 [ 3204.740056] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3204.744660] ? may_umount+0xb0/0xb0 [ 3204.748303] ? _raw_read_unlock+0x22/0x30 [ 3204.752480] ? __get_fs_type+0x97/0xc0 [ 3204.756383] do_mount+0x581/0x30e0 [ 3204.759938] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3204.764352] ? copy_mount_string+0x40/0x40 [ 3204.768606] ? copy_mount_options+0x5f/0x380 [ 3204.773029] ? rcu_read_lock_sched_held+0x108/0x120 [ 3204.778065] ? kmem_cache_alloc_trace+0x616/0x780 [ 3204.782926] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3204.788491] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3204.794051] ? copy_mount_options+0x285/0x380 [ 3204.798573] ksys_mount+0x12d/0x140 [ 3204.802207] __x64_sys_mount+0xbe/0x150 [ 3204.806177] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3204.811238] do_syscall_64+0x1b9/0x820 [ 3204.815139] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3204.820076] ? syscall_return_slowpath+0x31d/0x5e0 [ 3204.825012] ? __switch_to_asm+0x34/0x70 [ 3204.829125] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3204.834507] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3204.839371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3204.844597] RIP: 0033:0x457089 [ 3204.847809] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3204.866732] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3204.874462] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3204.881732] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3204.889013] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 03:55:00 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0010000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3204.896834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3204.904114] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000023 [ 3204.911669] 9pnet: Couldn't grow tag array 03:55:00 executing program 6 (fault-call:8 fault-nth:36): r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:55:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}, 0x2c8) [ 3204.994434] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3205.001837] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:55:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x6000000000000003, 0x6) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'teql0\x00', {0x2, 0x4e23, @remote}}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) pipe2$9p(&(0x7f0000000040), 0x80000) eventfd2(0x9, 0x1) 03:55:00 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:55:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0xa00000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0xfffffff0]}}]}, 0x2c}}, 0x0) 03:55:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x6000000000000000}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 3205.056846] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 3205.064250] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 03:55:00 executing program 3: socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000180)={0x11, 0xd, r1, 0x1, 0x4, 0x6, @random="b26b2bb8b0dc"}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x3000000000000022, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000002540)}, 0x0) sendto$inet6(r2, &(0x7f0000000080), 0x9b, 0x200418cf, &(0x7f0000ae3000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x18) 03:55:00 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) 03:55:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x9, 0x7, 0x20000000008, 0x3, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}, 0x2c8) [ 3205.443663] FAULT_INJECTION: forcing a failure. [ 3205.443663] name failslab, interval 1, probability 0, space 0, times 0 [ 3205.455185] CPU: 0 PID: 7089 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3205.462149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3205.471506] Call Trace: [ 3205.474116] dump_stack+0x1c9/0x2b4 [ 3205.477763] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3205.482977] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3205.488012] ? trace_hardirqs_on+0xd/0x10 03:55:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000016000)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 03:55:00 executing program 7: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0]}, {[], @tcp={{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x41, [0x0, 0x4d3]}) [ 3205.492190] should_fail.cold.4+0xa/0x11 [ 3205.496277] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 3205.501414] ? __switch_to_asm+0x40/0x70 [ 3205.505498] ? __switch_to_asm+0x34/0x70 [ 3205.509580] ? __switch_to_asm+0x40/0x70 [ 3205.513663] ? __switch_to_asm+0x34/0x70 [ 3205.517740] ? __switch_to_asm+0x40/0x70 [ 3205.521815] ? __switch_to_asm+0x34/0x70 [ 3205.522035] ISOFS: Unable to identify CD-ROM format. [ 3205.525891] ? __switch_to_asm+0x34/0x70 [ 3205.525907] ? __switch_to_asm+0x40/0x70 [ 3205.525924] ? __switch_to_asm+0x40/0x70 03:55:00 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x10c}]}, 0x15c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 03:55:00 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) sendto$llc(r1, &(0x7f0000000140)="434582c1b873b3b08499052458201d6b2e6c09a5ce9d845b61dff85418292801cdfb2fe2d274de8574719fd804cb69b090bcd08ca29e0c625856a27c1523afc9e85ced8ee26ae88dc9e96f58b59dc6d59f0f09d68cf28b245053292071d039b83681a8b95c77f4411e98b54aecf0eb0097e25e8c9a0fc409466625f084410ea085bee0ee5fd5e39bb2fd3e0c577ab3311bd4c4f58e809c7a456535b4d144f1ff8b0eb94752ef3c454c965cf1d9f2e08d0aa720c65323ecb050f2a8f790ac8de82e9da5ec", 0xc4, 0x4000001, &(0x7f0000000240)={0x1a, 0x33f, 0x8001, 0x59ff, 0x0, 0x4, @local}, 0xfffffd51) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xd20d, 0x200080) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x7, 0x9, 0xa, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_lifetime={0x4, 0x0, 0x401, 0x4, 0x8, 0x8}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_x_sa2={0x2, 0x13, 0x100, 0x0, 0x0, 0x70bd2c}]}, 0x50}}, 0x20000000) mkdirat(r2, &(0x7f0000000080)='./file0\x00', 0xb8) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020b000007000000000000000000000005000000000000000a00000000000000000000000000000000000000000000010000000000000000c036f16d4dc0bba05b36f6f5268c8c37"], 0x38}}, 0x0) [ 3205.525940] ? __switch_to_asm+0x34/0x70 [ 3205.525955] ? __switch_to_asm+0x40/0x70 [ 3205.525979] ? __schedule+0x884/0x1ec0 [ 3205.526004] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 3205.559979] ? do_mount+0x581/0x30e0 [ 3205.563716] ? __sched_text_start+0x8/0x8 [ 3205.567876] ? find_held_lock+0x36/0x1c0 [ 3205.571996] ? check_same_owner+0x340/0x340 [ 3205.576326] ? rcu_is_watching+0x8c/0x150 [ 3205.580478] ? rcu_pm_notify+0xc0/0xc0 [ 3205.584362] __should_failslab+0x124/0x180 [ 3205.588590] should_failslab+0x9/0x14 [ 3205.592381] __kmalloc+0x2c8/0x760 [ 3205.595930] ? kmem_cache_alloc+0x5fa/0x760 [ 3205.600416] ? fscache_alloc_cookie+0x701/0x880 [ 3205.605112] fscache_alloc_cookie+0x701/0x880 [ 3205.609638] ? fscache_cookie_init_once+0x80/0x80 [ 3205.614484] ? lock_downgrade+0x8f0/0x8f0 [ 3205.618622] ? radix_tree_delete_item+0x188/0x310 [ 3205.623466] ? kasan_check_read+0x11/0x20 [ 3205.627606] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3205.632014] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3205.636587] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3205.641681] __fscache_acquire_cookie+0x230/0xb00 [ 3205.646526] ? fscache_cookie_put+0x850/0x850 [ 3205.651012] ? p9_client_attach+0x215/0x860 [ 3205.655325] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3205.660433] ? debug_check_no_obj_freed+0x30b/0x595 [ 3205.665446] ? p9_client_walk+0xab0/0xab0 [ 3205.669596] ? trace_hardirqs_off+0xd/0x10 [ 3205.673829] ? quarantine_put+0x10d/0x1b0 [ 3205.677984] ? kfree+0x111/0x260 [ 3205.681343] v9fs_cache_session_get_cookie+0xc4/0x270 [ 3205.686580] v9fs_session_init+0x1013/0x1a80 [ 3205.691011] ? v9fs_show_options+0x7e0/0x7e0 [ 3205.695438] ? rcu_is_watching+0x8c/0x150 [ 3205.699585] ? rcu_pm_notify+0xc0/0xc0 [ 3205.703466] ? v9fs_mount+0x61/0x900 [ 3205.707177] ? rcu_read_lock_sched_held+0x108/0x120 [ 3205.712188] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3205.717720] v9fs_mount+0x7c/0x900 [ 3205.721260] mount_fs+0xae/0x328 [ 3205.724668] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3205.729280] ? may_umount+0xb0/0xb0 [ 3205.732896] ? _raw_read_unlock+0x22/0x30 [ 3205.737037] ? __get_fs_type+0x97/0xc0 [ 3205.740925] do_mount+0x581/0x30e0 [ 3205.744460] ? copy_mount_string+0x40/0x40 [ 3205.748702] ? copy_mount_options+0x5f/0x380 [ 3205.753111] ? rcu_read_lock_sched_held+0x108/0x120 [ 3205.758135] ? kmem_cache_alloc_trace+0x616/0x780 [ 3205.762969] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3205.768495] ? _copy_from_user+0xdf/0x150 [ 3205.772634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3205.778177] ? copy_mount_options+0x285/0x380 [ 3205.782686] ksys_mount+0x12d/0x140 [ 3205.786333] __x64_sys_mount+0xbe/0x150 [ 3205.790298] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3205.795310] do_syscall_64+0x1b9/0x820 [ 3205.799222] ? finish_task_switch+0x1d3/0x870 [ 3205.803717] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3205.808649] ? syscall_return_slowpath+0x31d/0x5e0 [ 3205.813608] ? __switch_to_asm+0x34/0x70 [ 3205.817682] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3205.823041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3205.827875] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3205.833077] RIP: 0033:0x457089 [ 3205.836259] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3205.855157] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3205.862859] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3205.870119] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3205.877376] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3205.884631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3205.891897] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000024 [ 3205.900139] ================================================================== [ 3205.907913] BUG: KASAN: double-free or invalid-free in fscache_free_cookie+0x230/0x280 [ 3205.915966] [ 3205.917598] CPU: 0 PID: 7089 Comm: syz-executor6 Not tainted 4.18.0+ #192 [ 3205.924506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3205.933848] Call Trace: [ 3205.936444] dump_stack+0x1c9/0x2b4 [ 3205.940062] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3205.945242] ? printk+0xa7/0xcf [ 3205.948527] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 3205.953289] ? fscache_free_cookie+0x230/0x280 [ 3205.957874] ? fscache_free_cookie+0x230/0x280 [ 3205.962447] print_address_description+0x6c/0x20b [ 3205.967277] ? fscache_free_cookie+0x230/0x280 [ 3205.971848] ? fscache_free_cookie+0x230/0x280 [ 3205.976449] kasan_report_invalid_free+0x64/0xa0 [ 3205.981210] __kasan_slab_free+0x150/0x170 [ 3205.985447] ? fscache_free_cookie+0x230/0x280 [ 3205.990015] kasan_slab_free+0xe/0x10 [ 3205.993804] kfree+0xd9/0x260 [ 3205.996901] fscache_free_cookie+0x230/0x280 [ 3206.001312] ? __fscache_check_consistency+0xbe0/0xbe0 [ 3206.006592] ? fscache_alloc_cookie+0x701/0x880 [ 3206.011264] fscache_alloc_cookie+0x74c/0x880 [ 3206.015752] ? fscache_cookie_init_once+0x80/0x80 [ 3206.020588] ? lock_downgrade+0x8f0/0x8f0 [ 3206.024725] ? radix_tree_delete_item+0x188/0x310 [ 3206.029565] ? kasan_check_read+0x11/0x20 [ 3206.033724] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3206.038160] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3206.042754] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3206.047853] __fscache_acquire_cookie+0x230/0xb00 [ 3206.052701] ? fscache_cookie_put+0x850/0x850 [ 3206.057198] ? p9_client_attach+0x215/0x860 [ 3206.061508] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3206.066602] ? debug_check_no_obj_freed+0x30b/0x595 [ 3206.071606] ? p9_client_walk+0xab0/0xab0 [ 3206.075786] ? trace_hardirqs_off+0xd/0x10 [ 3206.080032] ? quarantine_put+0x10d/0x1b0 [ 3206.084182] ? kfree+0x111/0x260 [ 3206.087566] v9fs_cache_session_get_cookie+0xc4/0x270 [ 3206.092762] v9fs_session_init+0x1013/0x1a80 [ 3206.097187] ? v9fs_show_options+0x7e0/0x7e0 [ 3206.101605] ? rcu_is_watching+0x8c/0x150 [ 3206.105767] ? rcu_pm_notify+0xc0/0xc0 [ 3206.109658] ? v9fs_mount+0x61/0x900 [ 3206.113361] ? rcu_read_lock_sched_held+0x108/0x120 [ 3206.118381] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3206.123951] v9fs_mount+0x7c/0x900 [ 3206.127501] mount_fs+0xae/0x328 [ 3206.130869] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3206.135459] ? may_umount+0xb0/0xb0 [ 3206.139091] ? _raw_read_unlock+0x22/0x30 [ 3206.143228] ? __get_fs_type+0x97/0xc0 [ 3206.147109] do_mount+0x581/0x30e0 [ 3206.150657] ? copy_mount_string+0x40/0x40 [ 3206.154903] ? copy_mount_options+0x5f/0x380 [ 3206.159316] ? rcu_read_lock_sched_held+0x108/0x120 [ 3206.164346] ? kmem_cache_alloc_trace+0x616/0x780 [ 3206.169191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3206.174728] ? _copy_from_user+0xdf/0x150 [ 3206.178875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3206.184400] ? copy_mount_options+0x285/0x380 [ 3206.188915] ksys_mount+0x12d/0x140 [ 3206.192543] __x64_sys_mount+0xbe/0x150 [ 3206.196507] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3206.201515] do_syscall_64+0x1b9/0x820 [ 3206.205398] ? finish_task_switch+0x1d3/0x870 [ 3206.209900] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3206.214830] ? syscall_return_slowpath+0x31d/0x5e0 [ 3206.219764] ? __switch_to_asm+0x34/0x70 [ 3206.223823] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3206.229187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3206.234026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3206.239217] RIP: 0033:0x457089 [ 3206.242411] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3206.261317] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3206.269018] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3206.276272] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3206.283527] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3206.290782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3206.298038] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000024 [ 3206.305303] [ 3206.306950] Allocated by task 30193: [ 3206.310656] save_stack+0x43/0xd0 [ 3206.314099] kasan_kmalloc+0xc4/0xe0 [ 3206.317803] kmem_cache_alloc_node_trace+0x150/0x770 [ 3206.322907] __get_vm_area_node+0x12d/0x390 [ 3206.327230] __vmalloc_node_range+0xc4/0x760 [ 3206.331624] vzalloc+0x6f/0x80 [ 3206.334819] alloc_counters.isra.11+0xb7/0x840 [ 3206.339429] do_ip6t_get_ctl+0x7e3/0xc30 [ 3206.343493] nf_getsockopt+0x80/0xe0 [ 3206.347204] ipv6_getsockopt+0x1f0/0x320 [ 3206.351277] tcp_getsockopt+0x93/0xe0 [ 3206.355076] sock_common_getsockopt+0x9a/0xe0 [ 3206.359574] __sys_getsockopt+0x1ad/0x390 [ 3206.363722] __x64_sys_getsockopt+0xbe/0x150 [ 3206.368119] do_syscall_64+0x1b9/0x820 [ 3206.372006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3206.377186] [ 3206.378803] Freed by task 30193: [ 3206.382173] save_stack+0x43/0xd0 [ 3206.385619] __kasan_slab_free+0x11a/0x170 [ 3206.389840] kasan_slab_free+0xe/0x10 [ 3206.393633] kfree+0xd9/0x260 [ 3206.396742] __vunmap+0x333/0x460 [ 3206.400201] vfree+0x68/0x100 [ 3206.403317] do_ip6t_get_ctl+0xa52/0xc30 [ 3206.407366] nf_getsockopt+0x80/0xe0 [ 3206.411070] ipv6_getsockopt+0x1f0/0x320 [ 3206.415134] tcp_getsockopt+0x93/0xe0 [ 3206.418923] sock_common_getsockopt+0x9a/0xe0 [ 3206.423414] __sys_getsockopt+0x1ad/0x390 [ 3206.427555] __x64_sys_getsockopt+0xbe/0x150 [ 3206.431962] do_syscall_64+0x1b9/0x820 [ 3206.435872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3206.441046] [ 3206.442682] The buggy address belongs to the object at ffff8801c2276c00 [ 3206.442682] which belongs to the cache kmalloc-64 of size 64 [ 3206.455195] The buggy address is located 0 bytes inside of [ 3206.455195] 64-byte region [ffff8801c2276c00, ffff8801c2276c40) [ 3206.466791] The buggy address belongs to the page: [ 3206.471713] page:ffffea0007089d80 count:1 mapcount:0 mapping:ffff8801dac00340 index:0xffff8801c2276880 [ 3206.481145] flags: 0x2fffc0000000100(slab) [ 3206.485377] raw: 02fffc0000000100 ffffea000713b008 ffffea00075f7f88 ffff8801dac00340 [ 3206.493269] raw: ffff8801c2276880 ffff8801c2276000 000000010000001f 0000000000000000 [ 3206.501137] page dumped because: kasan: bad access detected [ 3206.506831] [ 3206.508441] Memory state around the buggy address: [ 3206.513369] ffff8801c2276b00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3206.520753] ffff8801c2276b80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3206.528108] >ffff8801c2276c00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3206.535462] ^ [ 3206.538819] ffff8801c2276c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3206.546185] ffff8801c2276d00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3206.553526] ================================================================== [ 3206.560870] Disabling lock debugging due to kernel taint [ 3206.566314] Kernel panic - not syncing: panic_on_warn set ... [ 3206.566314] [ 3206.573681] CPU: 0 PID: 7089 Comm: syz-executor6 Tainted: G B 4.18.0+ #192 [ 3206.581994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3206.591340] Call Trace: [ 3206.593934] dump_stack+0x1c9/0x2b4 [ 3206.597557] ? dump_stack_print_info.cold.2+0x52/0x52 [ 3206.602734] ? lock_downgrade+0x8f0/0x8f0 [ 3206.606869] ? fscache_free_cookie+0x1b0/0x280 [ 3206.611452] panic+0x238/0x4e7 [ 3206.614632] ? add_taint.cold.5+0x16/0x16 [ 3206.618766] ? add_taint.cold.5+0x5/0x16 [ 3206.622857] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3206.627266] ? fscache_free_cookie+0x230/0x280 [ 3206.631867] ? fscache_free_cookie+0x230/0x280 [ 3206.636438] kasan_end_report+0x47/0x4f [ 3206.640402] kasan_report_invalid_free+0x81/0xa0 [ 3206.645157] __kasan_slab_free+0x150/0x170 [ 3206.649413] ? fscache_free_cookie+0x230/0x280 [ 3206.653988] kasan_slab_free+0xe/0x10 [ 3206.657771] kfree+0xd9/0x260 [ 3206.660880] fscache_free_cookie+0x230/0x280 [ 3206.665276] ? __fscache_check_consistency+0xbe0/0xbe0 [ 3206.670539] ? fscache_alloc_cookie+0x701/0x880 [ 3206.675195] fscache_alloc_cookie+0x74c/0x880 [ 3206.679680] ? fscache_cookie_init_once+0x80/0x80 [ 3206.684519] ? lock_downgrade+0x8f0/0x8f0 [ 3206.688660] ? radix_tree_delete_item+0x188/0x310 [ 3206.693505] ? kasan_check_read+0x11/0x20 [ 3206.697647] ? do_raw_spin_unlock+0xa7/0x2f0 [ 3206.702041] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 3206.706631] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 3206.711738] __fscache_acquire_cookie+0x230/0xb00 [ 3206.716570] ? fscache_cookie_put+0x850/0x850 [ 3206.721057] ? p9_client_attach+0x215/0x860 [ 3206.725370] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 3206.730484] ? debug_check_no_obj_freed+0x30b/0x595 [ 3206.735488] ? p9_client_walk+0xab0/0xab0 [ 3206.739626] ? trace_hardirqs_off+0xd/0x10 [ 3206.743847] ? quarantine_put+0x10d/0x1b0 [ 3206.748000] ? kfree+0x111/0x260 [ 3206.751371] v9fs_cache_session_get_cookie+0xc4/0x270 [ 3206.756567] v9fs_session_init+0x1013/0x1a80 [ 3206.760969] ? v9fs_show_options+0x7e0/0x7e0 [ 3206.765365] ? rcu_is_watching+0x8c/0x150 [ 3206.769521] ? rcu_pm_notify+0xc0/0xc0 [ 3206.773399] ? v9fs_mount+0x61/0x900 [ 3206.777116] ? rcu_read_lock_sched_held+0x108/0x120 [ 3206.782130] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 3206.787658] v9fs_mount+0x7c/0x900 [ 3206.791204] mount_fs+0xae/0x328 [ 3206.794559] vfs_kern_mount.part.34+0xdc/0x4e0 [ 3206.799127] ? may_umount+0xb0/0xb0 [ 3206.802747] ? _raw_read_unlock+0x22/0x30 [ 3206.806885] ? __get_fs_type+0x97/0xc0 [ 3206.810778] do_mount+0x581/0x30e0 [ 3206.814307] ? copy_mount_string+0x40/0x40 [ 3206.818538] ? copy_mount_options+0x5f/0x380 [ 3206.822947] ? rcu_read_lock_sched_held+0x108/0x120 [ 3206.827955] ? kmem_cache_alloc_trace+0x616/0x780 [ 3206.832787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 3206.838320] ? _copy_from_user+0xdf/0x150 [ 3206.842472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 3206.848017] ? copy_mount_options+0x285/0x380 [ 3206.852509] ksys_mount+0x12d/0x140 [ 3206.856122] __x64_sys_mount+0xbe/0x150 [ 3206.860090] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 3206.865104] do_syscall_64+0x1b9/0x820 [ 3206.868977] ? finish_task_switch+0x1d3/0x870 [ 3206.873474] ? syscall_return_slowpath+0x5e0/0x5e0 [ 3206.878413] ? syscall_return_slowpath+0x31d/0x5e0 [ 3206.883360] ? __switch_to_asm+0x34/0x70 [ 3206.887432] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 3206.892787] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 3206.897638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3206.903073] RIP: 0033:0x457089 [ 3206.906256] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 3206.925242] RSP: 002b:00007f1288e5bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3206.932964] RAX: ffffffffffffffda RBX: 00007f1288e5c6d4 RCX: 0000000000457089 [ 3206.940243] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 3206.947503] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 3206.954757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 3206.962011] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000024 [ 3206.969703] Dumping ftrace buffer: [ 3206.973240] --------------------------------- [ 3206.977736] syz-exec-26427 0...2 437769413us : 0: }D [ 3206.977740] --------------------------------- [ 3206.987474] Kernel Offset: disabled [ 3206.991101] Rebooting in 86400 seconds..