7036746e6c30cd") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:09 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) poll(&(0x7f0000000040)=[{r1, 0x4220}, {r1}, {r1, 0x200}, {r0, 0x80}, {r0, 0x20}], 0x5, 0x101) r3 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x24002) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000200)=0x1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r4 = getpgrp(0x0) getgroups(0x7, &(0x7f0000001780)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0xee01]) sysfs$3(0x3) r6 = gettid() ftruncate(r0, 0x7) lstat(&(0x7f00000017c0)='./file1\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f00000018c0)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000014c0)="207ab0a36e58344a94acb5f272d1edeb0bd214e40bbdf4764263e0c0d0359d0b108298456e863e4d93aa301610b94fd0bcf69c776ecffb88ad609befa3e1d880068533ac988b68c3c07b288f0695b558da3a8f38393ce73d436bcea72c042bf9712f58bf551578a0e7af1d12a806a2806106f88a97157d8e00af42983a265da4759e5de5953870c4daa7a193f70fae1e6255995da4ecc7928f9cbdea0ffb7266634efa4164f28dfc8094849797e877a1f830e81ac3ac188941ba956965ced7c56452d4570532561fd25aed86caf3542386ed30a82b6162c64baf91db3ef73dede53bdc9f7273ea92f7405c79486b", 0xee}, {&(0x7f0000001900)="6c35dcd39532162ceca097a4f33177bb1ea45e10b1b424df1f4236", 0x1b}, {&(0x7f00000016c0)="54d83847aac1b5e2f6c6375013c29400fe9e118c19611092b6fd1e359ced371dbfd088172da564aceb9a5cae2f4921aca3b50bdbb536e0ea42548b4a56088258115481bdee28626326858de137a5d5aef438331f46adfcb0b73b5c5973d98d2937aea2d45b376c6bbbe6eb5581276217c5507de09c1c3e0de16d48a3352bd8f8b3a9c51c05fd854bedb704c15c0c689c859c3a835ea9c960ef65ac8247d1d476bff56d3289b84b3fc4ed8d2df8503f5f829c70d64002b2aee7448162e314", 0xbe}], 0x3, &(0x7f0000001880)=[@cred={0x20, 0x1, 0x2, r4, r2, r5}, @cred={0x20, 0x1, 0x2, r6, r2, r7}], 0x40, 0x40000}, 0x4c000) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x100, 0xa) ptrace$setregs(0xf, r4, 0x4, &(0x7f0000001ac0)="661601663a7733d4bcecf54f6b17c7ba41093846170358ff39dc72b59066480b68e093c7f1c2c076c02c73bd9a9106a45b3454af4cfdcde8ee4d2d879e31eb27730b9fd5fff2c0c08894fa6d558041ae9786199d0972093125d615f94f2bd701ca550cf4d74c58e828440a6d3d83f0df0396ebc11cf2d306a95ea10b6f9655abe088f2bc1a46fefa53533b0511af2231470a444cca6ba751be9ff8888792aa6ddb75f6695be5ef4d095e8774d2d88cb59e2cfa30f37aecea494252f67658bde806ac83de1f46dcccb1288200aa1a0549f91b3763cd908c7b95accf87b60aeca9fc34cbe419b29f48b0d4afe7e22a53742f234e42e809915fcb54667a3b9758") ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r8, 0x80045301, &(0x7f0000000340)) 06:16:09 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x5, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00c8"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc0c0583b, 0x20000001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000157, 0x4c004800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x4, 0x6, 0x55edba19}) pipe2(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='cmdline\x00') 06:16:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090007006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0)') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090003006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c744240009000a006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x256, 0x4000) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000400)={0x80000001, 0x8, 0xed6, 0x0, 0x9, 0x8000}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x4302, 0x200, 0x6, 0x4, 0x692f, 0x6}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x101, 0x141082) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000200)={0x8e, &(0x7f0000000340)="068cb1185c73d2f523aca2b3379d72558b86debd9593b2c873dbe75a56af5b43380e8043fb7ac99a6a29933eb8bf9666b3a9ee59b186f3218122b5b39aaeb65ee6d93d94a3e0b79af9d2ae43d2224065b6504d7b9d96d5504af0bf5b4ea1a4c1442bdf523b206847ecf38c19999aa77a23e017cb45bafc571d17020b12518c74199c9c5cb0e0cfcd28fa4525ad4c"}) 06:16:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x5, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00c8"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc0c0583b, 0x20000001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000157, 0x4c004800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x4, 0x6, 0x55edba19}) pipe2(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='cmdline\x00') 06:16:10 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090004006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:10 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090009006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x20000001, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f0000001ac0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:10 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x5, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00c8"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc0c0583b, 0x20000001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000157, 0x4c004800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000002c0)={0x4, 0x6, 0x55edba19}) pipe2(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='cmdline\x00') 06:16:10 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000066766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:10 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:10 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x121080, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000018}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000400)={@mcast1, @mcast2, @empty, 0x401, 0x5, 0x200, 0x100, 0x10001, 0x8, r2}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) open_by_handle_at(r3, &(0x7f00000014c0)={0xa4, 0x81, "7fafebfc2ef2a44c854a36e8f999391abb9b28f99ec8bcccef84672de237ed0bbaf615a08a9ebcbf68ea0f06f741a02dd82baf6e17fe3901b71a8d5112052fd8613a6446ce2d63146255fd8523b64bdebc5192f09077820e95f92b7dbc34ecc4f3d028de5304dfa330807df840062b839975618d043c4b381b84575c87295ebd26d3ad3d460f1b9d4db415293f18db3e74c13701ae1b3c0265682e5e"}, 0x2) 06:16:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090003006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 0: mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x3, 0x20000000000000, &(0x7f0000000040)) 06:16:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000b6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) r3 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='/dev/net/tun\x00', 0xfffffffffffffff8) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000000340)={{0x2, 0x4e20, @multicast2}, {0x306, @broadcast}, 0x2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 'syzkaller0\x00'}) keyctl$get_persistent(0x16, r2, r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) keyctl$assume_authority(0x10, r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000076766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3002") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 0: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x800000, 0xfffffffffffffffe}, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="66b81e018ed866ba2100b01ceec7442400f6000000c7442402fbff0000c7442406000000000f0114240f20d835080000000f22d80fed0e0f01be019d000006652667660f388024dfcb0fc7a800900000", 0x50}], 0x1, 0x1, &(0x7f0000000200), 0x0) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900003f6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:11 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090005006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000056766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) r1 = accept4$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x80000) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000100)={0x40, 0x8, 0xffffffff, 0x0, 0x4}) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) perf_event_open$cgroup(&(0x7f0000000200)={0x7, 0x70, 0xfff, 0xd3b, 0x2, 0xf96, 0x0, 0x200000000000000, 0x408, 0x2, 0x24, 0x1, 0x0, 0x9178, 0x6, 0x1f, 0x0, 0x1, 0x8, 0x9, 0xffffffffffffffc1, 0x9, 0xfff, 0xfffffffffffff001, 0x9, 0x100, 0x1, 0xfff, 0x7, 0x5, 0x80000001, 0x100, 0x50, 0x81, 0xb9, 0x100000000, 0x6dea, 0x9, 0x0, 0x0, 0x7, @perf_config_ext={0x7, 0x3}, 0x2000, 0x6, 0x0, 0x1, 0xfffffffffffffff9, 0x80, 0x3}, r0, 0x2, 0xffffffffffffffff, 0xc) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) setxattr$security_ima(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@ng={0x4, 0x4, "61e28306c7"}, 0x7, 0x3) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x3, {0xa55b, 0x3f, 0x9, 0x100000001, 0x1, 0x3}, 0x1f, 0x8}, 0xe) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000003c0)=0x1d) signalfd4(r0, &(0x7f0000000400)={0x7}, 0x8, 0x0) truncate(&(0x7f0000000440)='./file0\x00', 0x1) r3 = accept(r1, 0x0, &(0x7f0000000480)) recvfrom$unix(r1, &(0x7f00000004c0)=""/13, 0xd, 0x0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setflags(r3, 0x2, 0x1) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000580)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x20010, r1, 0x0) fstatfs(r0, &(0x7f00000005c0)=""/4096) pivot_root(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)='./file0\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000001640), &(0x7f0000001680)=0x4) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f00000016c0)={0x2, 0xb7, 0x6c67, 0x6, 0x200000000000000}) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000001700)) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) bind$vsock_dgram(r3, &(0x7f0000001740)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001780)={0x2, [0x0, 0x0]}, &(0x7f00000017c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000001800)={r4, 0x1}, 0x8) fchdir(r2) r5 = fcntl$getown(r1, 0x9) write$cgroup_pid(r0, &(0x7f0000001840)=r5, 0x12) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:11 executing program 0: mount(&(0x7f0000000380)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ea, 0x80000001, 0x0, 0x0, 0x0, 0x1, 0x1227d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xae, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, 0xffffffffffffffff, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746574003c23fb572a1f4294e6f378b41ad54b4d9d9a1f63f8785ad82ca7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0dfca0d4b00000000000000009c0100e89e6a357c00", 0x2761, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x0, 0x10}, 0xc) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000780), 0xbb1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r2, 0xb, "e1a1fa", "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"}}, 0x110) 06:16:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) prctl$setendian(0x14, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:11 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c744240009000b006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30fe") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:11 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000046766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x181040, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000002c0)={0x0, 0x9}) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090002006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:12 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x20c, 0x5, 0x80}) sendmsg$nl_netfilter(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000001ac0)={0x610, 0x0, 0xf, 0x800, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x3}, [@typed={0xc, 0x57, @u64=0x5}, @generic="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", @nested={0x180, 0x94, [@typed={0x4, 0x50}, @typed={0x4, 0x69}, @generic="de642cfeb3c22418bf8937eda80b2108f1a12d854221739818b94922b3592e15f3ceff80d8a590d755681055db3c108e7736875805075f7822f3bf93d62a486ef98d1f37ff7e8bfc1a8260b6876f16025e3c120986464ae507bbeeb734aa1ec41834ef9694e2af9bc5a1ec8abb5f33b4b4680e7d106feb572dbdf9e78df9925c981a4619a4997eb5da1b620235d5", @generic="74cf09b5cae139b92961cd03e7f01bf6", @generic="1bf0443d8981387cac11595ee0181af8c037517dd3ce49", @typed={0x4, 0x14}, @generic="fa51ffd2cd3a757f06a76279c3885de61b7c9bc434c09768927ffc97a34aa2f3238eeda0a045c305494948b163308ed9dca51d7d7e42b3a78a26dad970d37b4e367e34a5ef39b103255c3b7f4c6517466f0b22279fb77eda9f0627c30df487b46107f7470d5c019a69200dd4323347bf23b6b2e60ff90a3ebdbe56711a813cb306249fe9b77e817afb0f6b4a217b9e03c44861055c70129f90c1675f45b5e35931c3b42bc3629b6e604058838998a16bc4adb16fc6f5f6d0495621"]}, @typed={0xc, 0x1c, @u64=0x10000}, @typed={0x50, 0x93, @binary="44b99efc2ed417fb7231e2735a0451be24eb205c1014968a02df3f33544c71a76b4c288395b1c625ddb9c880f7c0879072de57d26899f7645a667a6d3433f8dac55adb59342226c26422"}, @generic="0553e9063e1fdfcb4683682bbb1c513e84a912f7671397291df35e7074fcd143d3e3baa7aa68c5127b2d1d990561f3034a948cd88ed3e373a6e8739e2d1aea0e609c1501681161297d7174c9e77c51455aa00e5e7e2a229094b0a6827126a671044a75c1279fb3be7fbd5c0e7d202f1e455de5a6f9c22e6f393b273bb2f06d276562b4cd160388d2decd9ca254770e5ad8566a6de019fd1461ee097b1a89ed", @nested={0x278, 0x66, [@generic="e9cfd56e3ae4ed21c4dacb0f8268ca7e2088a03f765c4d40e447", @generic="ea29658c911e1d85aebb80020bacd937778d9a9f670800dab5e85d976eeddf831fc446c2125459a1d78b83f0511d7412c75d9b4f4d91436caace0fa63b6ddb4f2432253329bbfb47821e590f2409d005a0a8672eab9d64c12def284ae8a7f1c1a8ca5b044426f91a74c40106289636286e99d72e2d78ca9a343b07976bd18d03ef3af24faaa6c82e94feffb4accc719403b6871d97085fe957a7308e531f6e8d4c9feea5e824abd59c9c00108639cdf3da43231068cf498242e1790e948680aa325eda9024a63f02baf4d9117d5a922fa39a", @typed={0x8, 0xf, @uid=r2}, @generic="8b9329ebad1377aabf2f21a55138d26851506a495037433f78ced4cbcacfdb919b40cf38c4ac85992a6d0d969f5529ef2d8d7dc6063e099bad179ee528fd61945ed84a31d70c6091fce09bc8df4cad36bf180fc41cd951e55126870a77ce3a3087dc882648cb3d7a53694d8006a580387b792033a37a6a23ba94d3e4e0dbbb7a1d44cf0e5573bdfcafccce7a704a53c5cbb76cf9cb96699f1ffb918ee8060b6125538ff50f953cb99193f1253b739254fe8fcf6db3decbfb2f349c4f1f08c6a2401b56506b3e59ac467ede0148713278ccdf52800461138bb45667f93b36275afd5b221015c4", @generic="f91ed84d48e8f1c1bb416acb56038feece5b1620ece1df0b6ad13db69d46e0e202a383e6d4729d310055518a61d1f6671c3d9fc5805618c636f7630c7ea67c7ba00a87bc37f640f34f0de53c4c7f6467c60f610daeb0014597fa5edf04526a8ab793b86e167db5018b30ec8d0090dbac7d92eae2c81c83a5fafdfce5", @generic="f4d38e51889756db6ffe39d5662d125155255477e693379e560027db"]}]}, 0x610}, 0x1, 0x0, 0x0, 0x1}, 0x80) 06:16:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000096766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x210000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/77) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'veth1\x00', @ifru_map={0x0, 0xf16, 0xff, 0x8, 0x3, 0xc4f}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) msgrcv(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x2, 0x1, 0x4000001000) 06:16:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000206766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000506766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:12 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000040)=0xaa511ec282ecc71d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x200800000001, r0}) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 06:16:12 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000056766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:13 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x3, @mcast1, 0xe227}}, [0x0, 0x3f, 0xfffffffffffffffd, 0xffffffffffffff5b, 0x40, 0x9, 0x1000, 0x8, 0x9, 0xdd0a, 0x4, 0x39d, 0x4b, 0x3f, 0x101]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r2, 0x7fffffff, 0x3}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000080)={0x1fd}) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) 06:16:13 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000036766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000a6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000001c0)={{0x3, 0x2}, {0xff, 0x7fff}, 0xfff, 0x4, 0x5}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3003") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090009006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xaf, @loopback, 0xe5}], 0x1c) bpf$BPF_MAP_GET_NEXT_ID(0x12, &(0x7f0000000080), 0x4) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000380)=0x3f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) write$binfmt_elf32(r1, &(0x7f00000016c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x5, 0xad1, 0x4, 0xb8, 0x3, 0x3, 0x1, 0x370, 0x38, 0xd8, 0xffffffffffff1068, 0x1000, 0x20, 0x1, 0x81, 0x9, 0x5}, [{0x70000006, 0x9, 0x4, 0x537e, 0x9, 0x4, 0x9, 0x30000000000}, {0x5, 0x6, 0x80000000, 0x8a46, 0x2, 0xffffffffb8826f77, 0x4, 0x7}], "eaaaa9a5536aae06dccb8af3b48d9ff35467c25134a524cc5df0f21e895d041d347b32049dd2f11a65e0c40596452db7c8f137e32d7197b5a40488769c87a15366269c602b5433b7ea30e682835a8f9dc9d08f261cfe20b14a3e1d58c260d559c2ddb8a852ac8a96de7124764642d9135a0a18b02f1f5e952ba52f099e7c023fd1fb126c486ee8637acdf8a4ca7350ccdba69bcdf54f5b9017a41c402924734a02502e04cec4caa27d12c8fd26"}, 0x125) 06:16:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x8, 0x0) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="85c48b02c583aa43ede7d35440", 0xd, 0xfffffffffffffffc) keyctl$read(0xb, r1, &(0x7f0000000240)=""/125, 0x7d) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000003000090200000000000000000000000400010000"], 0x18}}, 0x0) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000086766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:13 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3001") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 417.137155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 417.162418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 06:16:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c744240009000a006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:13 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:13 executing program 0: clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x8, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x80000}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x2000, 0x0) memfd_create(&(0x7f0000000280)='md5sumuser&}cgroup^\x00', 0x5) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x800000000000000}) r3 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x3, 0x20000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={r2, 0x80000, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)={0x0, @aes128, 0x1, "5b806f8efb3d98bf"}) r5 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) fcntl$setown(r5, 0x8, r0) 06:16:13 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000026766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = getpid() capset(&(0x7f00000003c0)={0x0, r1}, &(0x7f0000000400)={0xe609, 0xfffffffffffff026, 0x5, 0x4, 0x0, 0x5}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000280)=0x800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x1, 0x1000, 0x100000000, 'queue1\x00', 0x10}) read(r2, &(0x7f0000000080)=""/11, 0xfffffe9e) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x2000}) r6 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r0, &(0x7f0000000000)={0xffffffffffffffff, r2}) close(r4) syz_open_procfs(0x0, &(0x7f0000000480)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x8, 0x2}}, 0x28) socket$inet6_dccp(0xa, 0x6, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x4000, 0x0) recvmmsg(r3, &(0x7f0000004300)=[{{&(0x7f0000000340)=@nfc_llcp, 0x80, &(0x7f0000001880)=[{&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000580)=""/123, 0x7b}, {&(0x7f0000000600)=""/152, 0x98}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/137, 0x89}, {&(0x7f0000001780)=""/242, 0xf2}], 0x6, 0x0, 0x0, 0x7c5}, 0x1}, {{&(0x7f0000001900)=@nl=@proc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001980)=""/117, 0x75}], 0x1, 0x0, 0x0, 0x9}, 0x20}, {{&(0x7f0000001a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001a80)=""/65, 0x41}, {&(0x7f0000001b00)=""/152, 0x98}, {&(0x7f0000000440)=""/46, 0x2e}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/105, 0x69}], 0x5, &(0x7f0000002cc0)=""/4096, 0x1000, 0x4}, 0x2}, {{&(0x7f0000003cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003d40)=""/102, 0x66}, {&(0x7f0000003dc0)=""/205, 0xcd}, {&(0x7f0000003ec0)=""/154, 0x9a}], 0x3, &(0x7f0000003fc0)=""/89, 0x59, 0x2}, 0xff}, {{&(0x7f0000004040)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f00000041c0)=[{&(0x7f00000040c0)=""/224, 0xe0}], 0x1, &(0x7f0000004200)=""/209, 0xd1, 0x7fff}, 0xeb60}], 0x5, 0x60, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000300)) r7 = socket(0x40000000015, 0x805, 0x0) getsockopt(r7, 0x114, 0x271d, &(0x7f0000000040)=""/13, &(0x7f000033bffc)=0xd) 06:16:13 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090007006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:13 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000a6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:14 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) syncfs(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000001c0)={0x5, 0x24, [0xeb, 0xe6, 0x6, 0x9, 0x4, 0x8, 0x4, 0xff, 0x8]}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000200)={0x3, 0x3}) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9d3, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) r3 = dup3(r0, r1, 0x0) r4 = getpgid(0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f00000000c0)={r2, r3, 0x5}) 06:16:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090008006766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:14 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x40000) r4 = memfd_create(&(0x7f00000001c0)='syzkaller0\x00', 0x5) bind$xdp(r3, &(0x7f0000000200)={0x2c, 0x2, r2, 0x3e, r4}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9d3, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) r3 = dup3(r0, r1, 0x0) r4 = getpgid(0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f00000000c0)={r2, r3, 0x5}) 06:16:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000066766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0R') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000180)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x200000002}, 0x1c) dup(r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r2, 0xfffffffffffffff7, 0x0, 0xfffffffffffffffc, 0x6}, &(0x7f0000000140)=0x18) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8dd26084c40600083a00fe8000000000000000000000000000bbff0200000000000000000000000000010000000000089078"], &(0x7f0000000040)) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000506766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000013001103000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000001400280076657468305f746f5f7465616d00000014000300744db619c222d405d7655f310000000005e3010b9c96905e788c1606bdc5e08df124d39fc8bb81556bdb9359af01407d2957be3db9d932a6931a58f6955fa8c347b9d7599d83118c9e4d44161d1ef19fc579fa8201318e3aaa3b9dba179a0c6b4cbf3394b82f5959d8942915b347f0100fd2a82181b1b0f3ac4f4b0e137f4e62b38ad1885af8a778ba264c2edadb3315979263da6e61c6cdf519"], 0x50}}, 0x0) 06:16:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000b6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:14 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@local, @in=@dev}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000280)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, &(0x7f0000000100)=""/163, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) syz_open_pts(r1, 0x2200) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x200800000001, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 06:16:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 418.264071] netlink: 48 bytes leftover after parsing attributes in process `syz-executor0'. 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000180)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6aa2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x125001, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f00000001c0)=""/94, &(0x7f0000000240)=0x5e) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744e804020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x10000, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000200)) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[], 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000100)=0x1, 0x4) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x4c00) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) recvmsg(r3, &(0x7f0000000180)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/75, 0x4b}, 0x0) 06:16:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:14 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30fa") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:14 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x330f, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffff9c}) 06:16:14 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442408020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x2) sync_file_range(r0, 0xffffffff, 0x9, 0x2) clock_adjtime(0x7, &(0x7f0000000040)={0x10000, 0x7732, 0x7a, 0x1000, 0x0, 0xffff, 0x7f, 0xd, 0xff, 0x7ff, 0x1, 0x0, 0xffffffff, 0xfffffffffffffffb, 0x4, 0x3, 0x0, 0x2, 0x7, 0x9, 0x80006, 0x1ff, 0x9, 0x3, 0xffff, 0x1}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) unshare(0x20000000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x28000004) 06:16:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000017c0)={0x0, 0x0, 0xc90a}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001840)={r1, 0x0, 0x0, 0xeef}, &(0x7f0000001880)=0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001c40)=ANY=[@ANYBLOB="f1338e885d59f02bdc30ffcd6138e7a18a214c4d7979f5eafce76b6a4e"], &(0x7f0000000100)=0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x8}, &(0x7f0000000280)=0x20) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={"626f6e645f736c6176655f30000e00", {0x2, 0x0, @rand_addr=0x80000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) r4 = fcntl$dupfd(r0, 0x0, r3) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001380)='net/llc\x00') r6 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001b00)={r2, 0x4, 0x8, 0x3}, &(0x7f0000001b40)=0x10) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001700)='/dev/vsock\x00', 0x0, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/full\x00', 0x60000, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/ppp\x00', 0x100, 0x0) io_submit(0x0, 0x8, &(0x7f0000001ac0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000002c0)="154e87203d89762947238addbe5f80e2b1fb907a07da664c047b85e384e9857e158ec179f991eef662a9a5a56627bf2eec13a90680c369edb3f0107e49af5187015019fbb97b042d14acd8c3f2b1b56fe14840a6e922255c7e4899d14b4504cb31c79f857b6bda325ba268ab6d67ecdc075f24e21f5a38e975cb3fa3eb7691c105be9b7e78c4c6e5397ce8aae6a3750b368e4c4e73a1e9881daa7d2107bd74d1359f8f5875fb0a99e98d25e8f73a984858447e1ef5ae53a69eec8df53d5c", 0xbe, 0x8, 0x0, 0x0, r4}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000000, r0, &(0x7f00000001c0)="7b9b2ba12a79f47197c86374c2d6d56c6a2fe88187292e58484bdcc376f13a687a8d20e25e1d5b4cbce46178aa2fe528651aba6ac7e3125450a91303a8ee5ce128ac0db78ba05059414ff0bdd718b7dd704c47da6f5d8022e911ef24ec", 0x5d, 0xfffffffffffffffd, 0x0, 0x2, r3}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x2, 0x42a8, r0, &(0x7f0000000380)="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", 0x1000, 0x14, 0x0, 0x2, r5}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0xf, 0x10001, r0, &(0x7f0000001400)="20bbf7b893b0f069b8b6ee417f9a404e95c4cb6d6351b44083d8bb931f503112d7fca08db9f43707fd9af85089e602d709cd55e8afbd1302fa216daaf845f3fb88e01b7a586539272e71e46345d855a33f9d8d80af4d01d3633d1791a2333026af0c285068d2b0fae3bc67cdfec2f5b37a1b3adfcf5f521a6e07b6b8576019695cf111a9c08a", 0x86, 0x100000001, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x8, 0x80000000, r0, &(0x7f0000001500)="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", 0xff, 0xcf4, 0x0, 0x2, r6}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000001640)="435bd0b58e5dc6c097749a614adf7f972d7127f0ec931e58a74b7b71025e042d8a79e3e01829925057fc412112623717a30688b3ff4398d6ef48b00ee6975c53b261a50eff262c78660f7676b3db86d2d885f85c8c3abc860f4ada13acfeeb848de3ecc391f5a69f5658a0f5a3dbc900bd9ffe1928641f88787c12163458dccb3d69636f7f16200b16789175c06cf115c3b6b869a65107c7", 0x98, 0x2, 0x0, 0x2, r7}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x7, 0x6cb5d69c, r0, &(0x7f0000001780)="72cb098a7fd1653a34d769164303f16f5d24e05d0eec7b6ce77f36fdd3504dda94d2b4158fa294aa8cb713f181d798b2344e3e25", 0x34, 0x6, 0x0, 0x2, r8}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xbf, r0, &(0x7f0000001940)="cf53bada7d37e171e89faa0de8d7a79993c15b8142aa4aef6200ff56f64de2333f203f549b7fa0f1682879061455b716d2dc433edbba399e83d8cf428393b0ddc9f0349c3e544cbfb650dea7e5360e53d29838509864ae807ab4dde897b687c5217ec2af7483ddf1644d29f10f9dcdc1cd28e8e60a1ba05ca6b7dd331e13148d5fbaece1953ebd74e7212169ffa383e55e9cd721e37d53372104e38d", 0x9c, 0x80000001, 0x0, 0x1, r9}]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) 06:16:15 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30ec") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000b6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x3) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000000c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x6) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "d729"}, 0x3, 0x3) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240d020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r1, 0x1, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0x4, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xbfc7010000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000220001000000a1a5c8acd100733f0819f5705e97ab4d00000000001d4956429e7aad5c", @ANYRES32=0x0], 0x1c}}, 0x0) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000a6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442450020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r1, 0x1, 0x6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0x4, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0xbfc7010000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000220001000000a1a5c8acd100733f0819f5705e97ab4d00000000001d4956429e7aad5c", @ANYRES32=0x0], 0x1c}}, 0x0) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 0: unshare(0x8000400) accept$inet6(0xffffffffffffff9c, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000200)=0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0xf, 0x0, @tid=r1}, &(0x7f0000000100)) r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) sync_file_range(r2, 0x0, 0x0, 0x0) 06:16:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000026766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:15 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c307f") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:15 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000001000d0000400500000005000000000100000000004000000000000025000000fff0ffff0004000000000006d20000000000"]) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x290200, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc1}]}) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x80800) finit_module(r3, &(0x7f0000000080)='/dev/kvm\x00', 0x3) 06:16:15 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000086766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:16 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x10003, 0x3, 0x7}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={&(0x7f0000000200), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac000000210021000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005c00110000000000000000000000000000000001ac1414aa00000000000000000000000000000000009c187277892ecf3e00ffffffff00000000000000000000000000000000000000000018e9c0dbefff4398751d00000000ff110a1f800000"], 0xac}}, 0x0) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 419.585871] kvm [26927]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 06:16:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442410020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 419.671803] kvm [26927]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 06:16:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0xffffffffffff8001) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100), 0x4) 06:16:16 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x9) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f00000000c0)={0x1, 0xe761, 0x3, 0x2, 0x1}) 06:16:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000036766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x800000000000}}, 0x8d) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) 06:16:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats}) close(r2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000080)=0x44) close(r1) 06:16:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000066766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x44000, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc00}], 0x1, 0x0) 06:16:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442407020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0xdc, "de54c57ba0f141d127a76cecdd58df1c1821cb0366309f415aaa2fb70c080657bd65482da8c5a6a44f49e759afb88b94d47e388ae12fcada9f51328bff7407a13b172894f6edaeb560f43a0b560670f67648a32c3de81704508ef57176a356cf58bb1714916453f6a5959d435d9e9cc8465098cd2a72d52b7a0ac30332fe481f05fc671412100327266224b6fdc3d583f890a9c2cc62755cfb593883a55010476fb8aef1527dc0aba5f3af0b64fca53d009cc2d6dba975396057c1ca5de2d0facd13067994a90bc909abfdaa3526607f07e5a47b13520370d3c53475"}, &(0x7f0000000100)=0x100) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000700)=@broute={'broute\x00', 0x20, 0x3, 0x448, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x9, 0x0, 0x0, 'veth0_to_team\x00', 'syzkaller1\x00', 'team_slave_0\x00', 'bridge_slave_1\x00', @dev, [], @empty, [], 0xe0, 0x118, 0x148, [@connbytes={'connbytes\x00', 0x18, {{0x0, 0x0, 0x0, 0xc031759d59d6f22f}}}, @state={'state\x00', 0x8}]}, [@common=@mark={'mark\x00', 0x10}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}, {{{0xd, 0x0, 0x0, 'bridge_slave_1\x00', 'vlan0\x00', 'yam0\x00', 'team_slave_1\x00', @local, [], @link_local, [], 0xf0, 0xf0, 0x138, [@quota={'quota\x00', 0x18}, @time={'time\x00', 0x18}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0xd, 0x0, 0x0, 'veth0_to_team\x00', 'ip_vti0\x00', 'team_slave_1\x00', 'bridge_slave_1\x00', @local, [], @local, [], 0x70, 0x108, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}]}, 0x4c0) 06:16:16 executing program 5: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000080)={0x2, 0x404e23, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) write(r0, &(0x7f00000002c0)="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", 0xb29) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x60, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 06:16:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000096766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:16 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442405020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:17 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:17 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000056766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x80000000, 0x88, 0x8, 0xa6c, 0x0, 0x3f, 0x0, 0x2fb, 0x38, 0x0, 0x4, 0x0, 0x20, 0x1, 0x4, 0x1, 0x9}, [{0x60000004, 0x3, 0x0, 0x0, 0x0, 0x8, 0x7, 0xffffffffab690c32}], "32dfc53cbddfb3de320598bf1b186c6762f897a07327ab9268f0abffe59f8b5497f0fedf324e39e9621ec45b0022c25fd80500f2a872b1e4f94e875487b772e28875077eaeb9005221f62fc2b9b1f09fb717c5d0dea55318c52c7edefdad91f078cba017df92c992cb47ebf4720cf3a1d9b89bc95d90ce3cb40121358817f5211baf860442f3718c61a372ac5817c9a7de9aeaed794d37aedd677f87b0876bc3dfcaa9c675957559c83918bacdd3328c513154e4d48b84302213f590", [[], [], []]}, 0x414) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./file0 #! \n'], 0xf) close(r1) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000300)=""/250) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) userfaultfd(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x3}}, 0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xfffffffffffffe31, 0xfc, &(0x7f0000001180)="ccb1d10a52f6006330a39427a4a2e7b907d30139b027b09e020e65e6b23198e13ad4843dc525e491e21a9b9f475e96bea05884724848abac5e3d2714e7f5b2e8eed724f8bde1c4018bca86735af1f0a0d1d799c5d4345fbcc76dce6e2a235a774c3000c43696d0f14649fbc1f73cde55d2170fd9d3d88dac4717eb976224b47cc3ca74d94d980cceae5e143977b45614ac1fe4c09ee00313137ece690b819c5781ec1d9636011ec8890f58ce2d35d8aabe51e60f5d13771f67ea7849f672fac6d1db3464c9b93a7865266f1c1416c34ef1cae54fe9f2273efbaf9fc876199cc1efab880c0ddb2e966eeef0b1c16b08151a7538951402898f43575ec1d20aff774ded8df31f43bcce52954818ded488d2a6c8321b0d9a2b5f17da0c59422b3a2d013b02cb086faeed0e26b213bebda9d5d1ad4d890f521d4aafcef6b0f360c0a279368d090d91c93006f99ec45fec92cc45313fbefccfaf3933f97618868881d56fd30d8f284710d04e785cac36ad8952796c9fc58d7add33d4336f98e3a76ac8f95f6abd28f116c9fc89fe1fa46f4c24973658c0423757de5b55724e8b5aa0e356bd43b4813b0813d5ea070bd7eea983fb23d6302c38c592fa8474d747bda17ad13e52297c56b8ea759ade0ac532fb8ca930a0aea48456ee5c5490098d6b85a2c4b9f25750f6e62d4638b8454a5d359a0d6ab66c35173a93dabd852b85db0d0486b0a5625733926cda453d10073fe64d59e0e7774ef507855c6525dafb7d838efca4dd3cda129162987852b7a543aa9eb66ed0f39aebaadd463244d40954270b90ba4a4057aace594c504624bc852da2a5469fe14fb8d5ce9bda7c0dc0a96b5f7e163b91b5fd33e0ddc8211bbb6d4189a8710cbeb7d9e513dfb35f0fddce8fc427fda965ea710bc04e70d2b7f779660b217ed2b206d49e7407249de61456583afbbc2f15a10738e3a9e1c8cc407bfb72baef8217e8e0f8d081a459312e3265f5b4fce80cc7fc2a0cdbf6456c1325137492e11726010902ff026032402f79aebe561d0aee47b052054d718d07bee48032c2a87990385409f9ab15a1c3c7e7b4b7872a00ed6d53e0c3a3338bb3615e85cc566cbf0376ce53f956528e33820205b8298d45b030886d6cabcc813af0bfcb7558e2f4c62e02518d123841c8d141049a493f7bdecfc88119cb37e40540116a4180c8505e42e03912b1ab11192fbcfc7a903339bf240b872863e4f25ae1497c1127b032492be05d4bbbe9216347f59b43c5aa3c152d65c6f43a91c71dcc86a460727587b9b708bbbb8f4420c517b71ce041ae88e044cf05a46ea5e8fcd2a7239e6b3b7a2be551416cdd20fa4f55c2516a46c87eab5ef9b14648dd508fdeb885df6154c17687a430fe3f4a8e28147eee0dd4fc9f401817d3fe89007fd6b07b9e46f5aedd4d259e8eae5bbfc019615fc7d6f0055dfbcc4067dfe4b22079b1706ab0db5d5b2d2633e5db47180ad37003d9570aa8953b592eb8c894345d53667e8eaee9ca3ce9348777c9c13bd50ea576618f2e4a3945bd152f98c5ca7e8b2607dc120500abb0f6095c5cd650636ae14d16f0f1252ba792d54c1457efbb1958160a565a77aa87b42c91e48d89beeed865d779b604ec0c5cbd43f5c40da1c6a7f19451b2959dd701d7420d267e66d072f391341abcb5de638662080bd569dd4a445ac126e090d899199da07feab3a8a63e06a1b4a7cc2f2918311e34fe3bb5bc974cf9db53863684440c90faa8ec2d5d6d7cacdc0bb9ace793657e6e110186a27a890f8ba6afa514b68cda2326e6942d08b59a0225c47e545d82378f248b01945cd182c5731d46dbc410e8833de44fab17651fadc46a2329503fc1d18d841ef983776b3822ce97455b2eba28c6758ccd153ce5ccf3b88399878cc53b4e4293f326a92438a8db7299c60edbad678e4573dabe633d06ed1903d6ccff8f6203c4c8671a6c5db028a275e5cea366e6233e1c5dcf34e3a028db1021993cb00ec3afaea3da2f5babcb1b0fad4a552e05d67308ac8cde912d736d9f82f00d450b83a6e2dd3411fd6b1bf8be9d9914b31dee999947beeaf4609fb5e420420085724595f2224f2e52e7f1f8108664ed08566282ab58da11a31869b39b4b384622c1c5b9b401ceee2263c470b5a34ef4c38fd6193ebe5bcbbe1487f3741a5bfa7f0b23b83b50a621d57d51a9cf96ca5f578973e0c4e6c7184a441e7b3f8d0b59c6d3ccc20730f6c7736f3af1c75a4e7f0b60b6999ce7914b68d762e7af185ab7baa89d25076c5c3294a940de222835e885fb67a4f3bbfc9a2995a3a8b201a6f28ecee040b6de8b9ac09833134ce9b214189a3574c7a2be2414f3eb82d12ead62d7c3398abcaa0cb8ff20895c6288eb5a78861d69250f33097a95f088303e450f20ac91fc7ae4be91de3cdd6976fbdfc75ea87565f4f9ce26372912aecd0bb1f1036f3746afa49d19629fe854e17505cf8943611dfac99b06333ff44db5537b28fba91d09743fa98da641ef6a8bde585fc4899238ac4536e9abd74228f717ab5ac92c6c215d988081ab4eec200d11bbdae532b4c9f742f25bc9a1ad7ac201b4ff5d933e307710dfa36bd17aa3c04b1d0501b3012a3084ddd3d32c1b22852dd8bd900de6581326f71cf2187c779d3bf37edea13cca2ebd065e575828953ca460c50c10fdfc01c43dc20d47dc7f6cc3ea292f721d8b571cfd385e2abb5c638caa83a19db82ef83f0ef746e38a31deffe9d6294c4f079ff990d8abb7a323e4ef4d26a8bb1a118fcf346cb256078a4f3f19f376aef204d73948fb97cb56e14043fb6f29616c3ecc0e652bd660cb88939cae18d726ad53a47fd881b98a7af8757ab1b5de4df20fc1d5f9f7b1fe5b03faffa9aa2ed11c26b6011d3aba1aae8fed7bec9d6a48307415e1573354c6d000c6902b5f78b8c506691b8374e24b04d0415012404d2bc7a7ec46704542ba9abd0027eebc56c016e988522182bcd48516eef99240c6c76cb52cfe73ff37989dd0c5d3219b4d672724176ef1b5317a0cf192f935728a0259781bd4dfdcdca802f82b0603b74e7ff1c1e2c9dc88062cc31b0c781db1fdfc3525bc4ee471a7981c83b7b20bb6e357365516898a76cea9ca394939b7a47ec6725773fb2b2482ec95c54b1ad7d2220f5f0dcc8c695e0255feba8bf532a8c156eea8e263d30894cbdfa3cbf35713095fd534e08a337a1ec2e29cb741fe86db10b06afeb137d7a143e7dc8161d42a3cfcb7181ef5df748da2868c41400eca56bfce970b7493fb779884258bcc424a45dfad256ee3078f5d67749e0c78812fceafff75aa0635e513caa0e54546209c84ae48c270884da48536074f107c4fe96674c98b2931dfc7c4ac3f10f4465857c9580019fb62e71ed779c095e8712eebc8b98984bd97f09d041d9a19034dd41ba53fcb50ba0e30a97e8922c5fadf05614b8daf69d1c16d485a81d083672a7d1f64ff2666a99921b79ec3baa1b08f709cc4cab0497b0da67d8f4b2168753cb79645bb91a0157a5a837cab81d269abdfe3e3200c61d2094e77a5ded56b7d761f621adfe246c5e09c32334f27432f7676f9b0c28dce73ef817a5da9f3c19ca01828d32b1850638e8ae38f4466cbccce877de5560d46e7536291ca942cd6cb5b33857949c4a6d1536f2ac7ce7ac568863c6cacb21d7934d30edeef28f0083aba9058567c02a4f48288ee6f8ec31560f7fcfee976bd0a976a7fffa2e039024eba267ebb839a808c466c9ae2723b2c8ce1e4c2a0facd15fb53963ce5a87a872513d1a6a48ec0f2a0400cd2e808eedb69158e21466de6b8972b547263184623ece99c5c21627738bcf2442a1ddf97be7cfa6a43e6d1b552641c99584f3b948075d12b", &(0x7f0000000900)=""/252}, 0x28) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000040)={0x6, 0x9}) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) setreuid(0x0, 0x0) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:17 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\b') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442406020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000002900000005000000"], 0x10}}], 0x2, 0x0) r0 = socket$inet6(0xa, 0x8000e, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x3ffffeb, 0x0) 06:16:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000076766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:17 executing program 5: socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000040)='/dev/ptmx\x00', 0x4) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x5) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:17 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30c3") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442421020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:17 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000200)={0x4, 0x6000}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000080)={0x11, 0xa}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x101200, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f00000000c0)=""/9) 06:16:17 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000506766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3002") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:17 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:17 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) prctl$setmm(0x23, 0x7, &(0x7f0000fef000/0x10000)=nil) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r3 = getpid() r4 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff) sched_getattr(r3, &(0x7f00000000c0), 0x30, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000ac0), 0x7e9, r4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) epoll_create1(0x0) syz_open_pts(0xffffffffffffffff, 0x0) close(r2) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001400)={{{@in=@broadcast, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000001500)=0xe8) ppoll(&(0x7f00000001c0)=[{r5}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000180)={0x7, 0xfff}) umount2(&(0x7f0000000140)='./file0\x00', 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000004c0)=""/152) 06:16:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442409020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:18 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:18 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c74424000900000d6766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:18 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:18 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:18 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240b020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:18 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3003") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:18 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x3, &(0x7f00000022c0)=[{&(0x7f00000001c0)="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", 0xfb, 0x6}, {&(0x7f00000002c0)="0532fcf665bf61dc3dbb3fc8b6d0482b5ea686c767575ea5fe3e124a94c6be2e2147ed1bfb049e3734c292df1f7fa952de447f4d271738d126f4048d39ffd3b7facc156c87cd5ff851b9ca15dab641e8095073bbad4e2942df80c37b90485bce8269a9cb28e5f60ce7a3e4f7804cad3954a7d1ef91dd2f9f5f1bded34336a24ca2015cd742fa3b1c491e24322869c570efdd4495bdde4c73a9efe10b75b0f961f73c6481d8fec77c954062f3714ac437705c2706174091e6b5e0813229095be7a1cbf0e6823c702ef4ff2b47425fbe5a4eee3f057c9ef7ae9f79b2c232d7845aaa4b84f4ba21f5b338f720553ccfd33b8baac30a44fa7e827f1174ba2b6ef30a26859ba61536c66b9bcde4bf7e1f695ffd57db85ab0f224b6cfd8409c508cde1fbdf956fc73484f2e6b87e31e5f1b2a974d1dc0c7aa82005d22598f956231115adcd471a7afc7471a8621786aa55f42cccce1558ccec0db8a46784b011880c2c5cf2abf08017fe410cb893487d247e0401531cb2803ee370b429813f52154487e3152d6f903190adf3bf09104677d06526c819593d26e17779f2f0a1adbad312aa839b8f01fd5f4de68937f6fad7547249ba8caf1525d827ab78dcec5c0fc6f50d0fc991edecbe7367f307d2fad9fb267e923103e4ff9ee6412b8f644e3ad191b4ac7366a796120d769c3a5450385083d10fd41f20a0fb492b55ca181d80b7783d35f6a6e20a224a8bddb41efc9967694cb1b9643aa222f08cce835503c9688b662789772872cd167c8dc7bbdf14b14f1b66e2329aeec6895ede1243400b49936a92c236ae48cffce9e12031d247be47dc794acb8e290d7c6ddfa26b4b69f2fa5ec8c47a182dc94b73e42f3a8159b36bd2e3b91247dfbdfd801e03280e3c529f4cef6f18b61e7617324708a1bffb6823cb62635487c803b6a1f74d430f1a2fca313b34a0269c1f32304308ca57efa2dc621e3e48dd2a3f3fcdaa05c83e56a6d6dbf385b5950c31c0ca8f705d3909491b9cdeff5a6f1d8c1d8e46c64a099c269d28da6974fe201be704655eb8ce14aac06ef9423045f30abcfd57a8b0044a9a47bf3691ad1de71c91898e493b63e1b828d5653c0ee773f0d82a0c10dd27578008343d973ba1abd116f0b716c6b5c223b779a62c051520206d902f4ffa92636f5b9b9f5b9c5490a1fe817f344e131347d53d2e9c06302ccb4e0d5d9b4ba0c652e4cc77205f025594a849519f208ab5c9f0513a4e708a3a783548f8eef5434e3baf4b67528047cbd1a3b5fe4fe819c1e6c67128fbeac0d723483cca405fc5d01115f0137ddd51fb39ab18b97ef7990447fb994694008d3455c399b5f41952641bffce0d0ebf60dc6c4cf761f383ecbd5aa82af8a506f3797ce6ea4ccfc2727d902c31ca4e8f8cffca80dd98560dc2d9014c654133a69bdf9795daf5070c72a12655440988432ea440f145344ea38858bce4024ce5a7d2f60fc709667aa54a29d7c5379ef629fba6e758cb31de0ab7237efe9b65407b3b3f911242801b64008753d764ed0dd49c282d970aca83a032e2e7406b70bf7b3c4fdacd544b9851cfca8c840a34d47f105376562cc27b98e5072f9e9686db5a0124452077cda7a3eaf3402f18dbb176e25851f5c210b3cd0af49d57162d9aed6e0e553082c84290f463545058335fa9338fd30c295dfb13a68317ed8f3bde0b065f78a78bba24ca608cfea5c35ec1ac2d567fc9a8c9f0757306cfeee28720569e1dd9ed6afa8902bf3e5da69799105c256990ae2df2ee8fbedba15c8f941fd5588fb56c782adc6527f1a4338799e15a43ba11c8d9e2bf5efb147d88748352666e6ee30e9b4bfc8df92f2f98d888017bb304b7d9577ac3b3ae934574a436f9654787c4769e927be8a7ddc0a6d905da3e9b56279678a038ea78ab47c2d1a61e52c8a7e42aeeb27b88ebcd2aa776fc1ddd6258e1635b9d87fb3388f261e94642bcf3012ba1623d9fa3f0651064db2dc27c05d33b36d78e935d650daabad644e0c79603c5e124120a4530795039f771c9ee7d100dd6afb61655a33b38927ef43a90d6fedee16ac5a99cd9f968e464af9ae0609b07c1f92adbaf7f297c4fe012ce4ce7a68bc8c296be33c4aeb61a563508682270c08fecbae3a2c3a504cecf9384d03448b2cd796e52b35fcff192700c7270d1923bce25f622756a6fec3e7a1c9a6e8e997eab7dcefc11c317134c968242b242dabadb6f8fcee84a54d759907e8ef5f530eaa126273c36313fc0763ef3c686641107a10ef49f3dc1a92925e70dab751e33ec018b7facaa8b9f008bcc59e94cf609982a5f3d5503e1a7b12df35ca3f0d37220eacad642d2250a4d2a00e06f3d62da59f7d2414756c66e64abca1ca9fdbc96e57db6f3f294e4b9e50ea7e3197defc49acfaca8b33d2817babca9b6ec053e57de61224707e6202fc042c653734be34d540ba3e65e8ea40997fe6a3f0a9c04a6bb7f8ea1cec5a2bf59942b9188b1a4389c4dd97563c9286206cc48f022777677a042572e4ad70618f65d012e3db7600755dc2a7481f93777bc81cd4e1878cf493ac7894ac083016814b09c3cc8c7c40e6326746e446f189305f6d4b7d9e1cf1cc824d5f9918e26a7fb6ef3a1dab45f85df189314b6fb12d29c4f0a5ec81e161a7d7fcceb5ac72f66dcb1bfc968ef2f2ffbc5e44adea8be0928740e1ec058bada1734765bca4e3310408ab5f5d857f48a4b78648e8af1656a7ff260f946b6c52750f8894e29ef3486153db0a45b4453e32d5d1eeedd6b3f2b7bb6b4c636e124d4ee898127319e0b53be31b8c6944f5e1fbb39fea9433b6e1390aa88090f664c0eeeb64843894ef4b46d732c2cbc0f6f40dd920d22fe33d34c7930d90c591fb4691ac160e3bb9442799bfd3d11df9f88844e4ff96e84ee133eaa75523cbe13b63fe9c0a2d4115af2a05b2131682f7914d70b33f264fa3fad7eb8f5c26b88b06e4fd625bc33a1081eceae5b2bdd1ffb5190abb4dfb99c54342b76ca0178720efd12525886e6c816ca03640c5c7ccf9ab151e8a375ee60c5361ca457ce5937f789aeda7993e15ca1bfd256bef751d1033375b587c3444415a20a6ad10844eacd87de2c729fa1c4bb3126e1bee5277fabc8ccc95fed288ceb985dacfd4a5c19797840e5b8ddcb99690b40b748109e122ceabdfe4ec6d72b1245bd80b28e5cb668c17e0a8510417b6845bc3d908af8477241a605c1f7909a50bd5860378fd52978a655bd938600b6e3ecb85b2113f28948e34f39c76a1321e3abfd3544b429171ef766e570970154a51dd38071c8c587a1610a4a8ca60163b5648a9ec5613b043320cf579ad5c02a9cff0612e3864b1c2ce90a9daf9a20fcca6a259af64c4d549673f1d303e32a91a26c2a8977f93f30d31652ee7dcd07dfff8d8784325b75f59ee4eb1871ee3671622d4bcc41939621fc05ecd44fe8d7517534c5c92a76d132a01ffb998b8054d36bbd9d795d72e3f84a5366f6bf86569cd68ecd75ec1cae4695c5464c954a47f0bb51740f6cc6b24c49a87405c903bb73577233b4c667d1f7cd0702f275aa91255e22864736a767b3abf20df76f139a32e1d3c4af9e8ad1af0c9a919e8f10217fced7d39611dcea1a7d5cd3b3dc82636cf50e686f10e74ad4ae1dd2d9bbef9bb12c376a2eee0b4878753db2a0e41ada3cc3b8ae7e097ad82cd4b050c193d0304f586ad1fdcaf21d4b7473fd6265bcd4f3fee97937ecf0df6ad19603ccfe9355b43e430622d8072beddc1ac141cc716718a4e0179fdbb4b752e612ff139152de62d2a0e8a9b59a8aef0976ef1f0bd6e8761ee0e6408fac1c47904cdc1191828ae06f43e221f40795cc8430cbaf79441da9079733687ad6e4f1f55ca5be7ca64f6d67daf3dad268eb48f7e7aeeac284ab0d26d8f6ccddc6fea9d5f783ee99ab5f5d322ac9f2ac1838d42a42bc89b6baeea6c8698d574f7b92353a891f7f9711d8566307b58294c50a7c77d963f18bb79d0c172c84d0e16ef56392bd418c90a71bcd7735c6b07faffa76bf6c1c21a0921badf7e9b71cbc4ac1b03af44838b0259543817ff53f0801c24b6d7ab612b9236a800db0ca098ca01b96f2ca3191e86573b7e0b7459a4bdf7a284e21d0cb3611b539603b794ad6011e4ae5420031d8cdc60c3678618868a03b59b4f05d8cba92b593c65c3eae0af19fbe0fd9cd89f4cb01857525f3cac7dac949309bea8cacb17f544a94ded86d425b2c3f7603ce92a3d5bf163220ab61b906b708484a238b84864efaef5f2535475e8a2de2001fd8f8f60d3a72a4376074e7faafc2cbd3d671fcd491f8f3f3687d4bd8f425dc480a0a8d5a6366e2eac93274dc88a080de05edadafe4317da19f430ba042be25f83bd3a8595e8c3cf09793ba3e0c06c30b8f4c1a7340abea8d1750a6c87ec25e91cb31b77ad07e31eec424fd6da347ebb84c4a577617462e93c9dab0cee5ff194522daa33957e047dce677ba98f3c67d0d144cd269c64926558295b4284521fa8bbad1c3e270ca6a67551e7a948898e2e44bb30989c5e4f66a0241cd0f0a04b1f05deae20dfd985909a0283c13320d3b3246c8bfff6eee5de0baa7459ae03467e8200266be9850b7b6e09930384701b7d040fabb799f2dd2fb5f190cecca085cdc7569e758eee39814bfc03668001c010bf5c16e15ee21b234e37cbb77478bd45d5660516b187419e8fbfe4acf09bfd5558c27b495f296ce5dc0ae246a382e5ffd85545a1589d80b4f0a8a8c0387f0a8e87de6e0cf31545819b6953d903690f45cb6efa94d9e099d97a54f25d00a3b4b154bbad880e35dd58069565937f6c2c682c924a0ba7eccc9c359d45628a848f0a5fdbfe7ba65dbb0284adbdb4c5635520eb530194a9e8cf9a6047c0c739561429a1dd57fbbcb28e727b117ceb489d0d0930ae1f78b09ba24ff6cc58c3b8ac1166a14c76aefbec8a2e6a9bcbf2fde649f2398b97f9fb7b489a8bf34cf94bbb0ff9dfad53bc6fa119b8db8ffe3157b4832909d0707f2f201b53b9c9a73c1dc2795166e2bfdaeb42d92a2065f7e4641cea6f6d7f747e33be1ec7a0facc5ec133117800fd5b49b00f74d862a572b89450d8e68f962e7cac812423017c6662cb38351ea820ba35504e8fd41976914b9e5880f81e073f41b41d58bb88e9e90ed530263cbcdb3c43b4592fc0614f12819f6e783561fd8153ce6c5489fb3dd32e2d877a1cc7076d385ebfb6d6807657498e6ce412c79a6184547a1cc47bc051ae7531940e25acfa459f5891a11f7aa448a35f4f30eccd54f4f39fc16ac4baf8471fc74881ddd61580ed1384eeed91c94713aa4063945b700c2d006a4885d6455b2f55c71b36f6a2245e8dd090b3d735d15b6b63bb96ebeb7ac916478f0ac33946bae5d2c7e43a690ccd6e86bb87c6aaa7dc58e18f2005139fb470e3732cb4372b0547c01edbe96f7b5d298c1a6215447a5207a1a378275934cecb8ad2e205a8f728bfdddcf62b5dc86f89b0ea14a23b330350f5fc754696392389cfdbd01ced115d6e79305434f88e23df30a6f354a16d778275fba2b1e1fdcaf5e7af8045ec132d8cb3d107ed46e07d3b522094dd7476b1038752621cb8c5d5df74b78f29368fb898fb6be135a7549999fbb83ddfa9650784875f7d1031d42629220c0611c7b4fc581093ec8a55532ad0f7d7f03a5e67b33c2f752417e1cd6db9afca8c230453cba2b4904f82c72669d812eef6438b0abe7486a27e488b4c1d2e2840e8849e7f377f950588eee7a83d4798c2a087ae81d3c7ef1365f3b319a87fbe8d77d", 0x1000, 0x95}, {&(0x7f00000012c0)="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", 0x1000, 0x7}], 0x810000, &(0x7f0000002340)={[{@quota_quantum={'quota_quantum', 0x3d, 0x8}}, {@nosuiddir='nosuiddir'}], [{@subj_type={'subj_type', 0x3d, ')^trusted\\systemvmnet0]'}}, {@obj_type={'obj_type', 0x3d, 'ppp0em1'}}, {@measure='measure'}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) r2 = dup3(r0, r0, 0x80000) accept4$bt_l2cap(r2, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={&(0x7f0000000040), 0xc, &(0x7f0000003a80)={&(0x7f0000003240)={0x20, r1, 0x225, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 06:16:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000046766c7442404020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:19 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240a020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3088") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 422.894387] gfs2: invalid mount option: subj_type=)^trusted\systemvmnet0] 06:16:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 422.955202] gfs2: can't parse mount arguments 06:16:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744e804020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x105) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x4, @mcast1, 0x3}}, 0x2, 0x4, 0x5, "e819e567fc16dd8c0c5c22a05838c4ecd948a63cc048a99d9908ac2170e511b0a8ef082ee7b567f82853c6b3633f54f38cc2e6cf9b689d49e35040621b9093e1f6b62f1271d3ac9f6efdc38e1aed6b58"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0), &(0x7f0000000ac0)="10323000038741", 0x7, 0xfffffffffffffffc) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404000000c06766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x105) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x4, @mcast1, 0x3}}, 0x2, 0x4, 0x5, "e819e567fc16dd8c0c5c22a05838c4ecd948a63cc048a99d9908ac2170e511b0a8ef082ee7b567f82853c6b3633f54f38cc2e6cf9b689d49e35040621b9093e1f6b62f1271d3ac9f6efdc38e1aed6b58"}, 0xd8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0), &(0x7f0000000ac0)="10323000038741", 0x7, 0xfffffffffffffffc) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) 06:16:19 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0z') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240a020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000041c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x2, 0x800000000000000}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x8f08}, &(0x7f00000000c0)=0x8) ftruncate(r0, 0x0) 06:16:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424041d0000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:19 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:19 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x1d000}) splice(r0, &(0x7f00000000c0), r2, &(0x7f0000000180), 0x9, 0x2) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000140)=0x6800, 0x8800000) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000300)={0xb, 0x8001, {0x0, 0x800, 0x5, {0x4, 0xffffffffffffffff}, {0xfffffffffffffffb, 0x5}, @const={0x6, {0x101, 0x0, 0x42, 0x401}}}, {0x0, 0x7, 0x7, {0xf962, 0x4}, {0x3f17, 0x8000}, @ramp={0x5, 0x5, {0x1f, 0xc1, 0x2, 0x3}}}}) 06:16:19 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442406020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 423.540070] kauditd_printk_skb: 38 callbacks suppressed [ 423.540081] audit: type=1800 audit(1538892979.948:124): pid=27359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16566 res=0 06:16:20 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 423.645550] audit: type=1800 audit(1538892979.998:125): pid=27359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor5" name="file0" dev="sda1" ino=16566 res=0 06:16:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404210000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 0: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442410020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 423.851932] 9pnet: Insufficient options for proto=fd 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 423.887396] 9pnet: Insufficient options for proto=fd 06:16:20 executing program 0: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040f0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:20 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000100)='logon\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="4337451277c769ad8a2844cccc79aa5026a2b90ecd7ef96aca02", 0x1a, r1) read(0xffffffffffffffff, &(0x7f00003fefff)=""/1, 0x1) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0xd5b, 0x4) ioctl$TCSETSF(r0, 0x5437, &(0x7f0000000080)) [ 423.981559] 9pnet: Insufficient options for proto=fd [ 423.992030] 9pnet: Insufficient options for proto=fd 06:16:20 executing program 0: write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 424.113264] 9pnet: Insufficient options for proto=fd [ 424.146969] 9pnet: Insufficient options for proto=fd 06:16:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442408020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:20 executing program 5: r0 = socket(0x2, 0x0, 0x3de2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000000)="1f0000000104ff00fd010000000000200a05010008f8000803f2511a10df80", 0x1f) 06:16:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424041a0000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)=""/99, &(0x7f0000000000)=0x63) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000340)="ba610066edba4300ecbad004b000ee0f22a30f205666b9d00900000f3266b9800000c00f326635000800000f306765660f3832b92616000082e500f3a5", 0x3d}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 06:16:20 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0J') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442421020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404070000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:20 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:20 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:20 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:21 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404010000406766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:21 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 424.755588] 9pnet: Insufficient options for proto=fd 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240b020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:21 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) creat(&(0x7f00000003c0)='./file0/file0\x00', 0x0) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x2) write$FUSE_DIRENT(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="90000000000000000200000000000000010000000b7f5ec2d70066ce656d316e6f246576656d31000000000000000000f386616a1a0a3c0000000000002c0e0000000000619fcd3823b7c9c6bd3276ce8c9461000000000000051c00ecffffff000079737465746a48be1b31486dcc6370757365746367726f757024a3d030914ce146ddb4ddefa62f4fe745fe700471"], 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 424.855086] 9pnet: Insufficient options for proto=fd 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040d0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:21 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:21 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0H') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 425.038922] 9pnet: Insufficient options for proto=fd 06:16:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240d020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 425.120538] 9pnet: Insufficient options for proto=fd 06:16:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404080000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 425.255759] 9pnet: Insufficient options for proto=fd 06:16:21 executing program 5: r0 = socket$inet6(0xa, 0xfbfffffffffffffe, 0xcc1) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='Z', 0x1, 0xfffffff5, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:21 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30d0") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442409020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 425.383053] 9pnet: Insufficient options for proto=fd 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404070000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:21 executing program 5: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000140)) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x40000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x83, 0x4000000004000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000022042134c41101edccda98b684000000000000000000f00000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4000050}, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x0, 0x1, 0x2, 0xc6d, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @loopback}}, 0x9, 0x4, 0x0, 0x7}}, &(0x7f0000000400)=0xb0) syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x3, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x1a200}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) r5 = fcntl$getown(r1, 0x9) setpriority(0x0, r5, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 06:16:21 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:21 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:21 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442450020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:22 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040a0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:22 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 425.697866] *** Guest State *** [ 425.714207] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 06:16:22 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 425.749697] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 425.804490] CR3 = 0x0000000000000000 [ 425.822107] RSP = 0x0000000000000000 RIP = 0x0000000000000000 06:16:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:22 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 425.845339] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 425.868474] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 425.887930] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 425.924499] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 425.946971] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 425.967562] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 425.981332] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 425.990016] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 425.999105] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 426.012971] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 426.025549] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 426.034177] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 426.042480] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 426.049629] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 426.057359] Interruptibility = 00000000 ActivityState = 00000000 [ 426.063732] *** Host State *** [ 426.066999] RIP = 0xffffffff81212b2e RSP = 0xffff88018a8af350 [ 426.073979] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 426.081110] FSBase=00007fabb04b8700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 426.089367] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 426.095327] CR0=0000000080050033 CR3=0000000182d65000 CR4=00000000001426e0 [ 426.102836] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87c013a0 [ 426.110257] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 426.116985] *** Control State *** [ 426.120577] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 426.127297] EntryControls=0000d1ff ExitControls=002fefff [ 426.133010] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 426.140049] VMEntry: intr_info=800000a7 errcode=00000000 ilen=00000000 [ 426.146818] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 426.153460] reason=80000021 qualification=0000000000000000 [ 426.159936] IDTVectoring: info=00000000 errcode=00000000 [ 426.165396] TSC Offset = 0xffffff1998d3abb0 [ 426.169778] TPR Threshold = 0x00 [ 426.173185] EPT pointer = 0x000000018a73f01e 06:16:22 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x800000000000003) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000003c0), 0x0) socketpair(0x5, 0xf, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x9, 0xfffffffffffffffa, 0x9, 0x7, 0xbb}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000140)=0x68) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000004c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x7, 0x1, 0x200, 0x4a6, 0x7fffffff, 0xd3, 0x7, 0x100000000, 0x80000000, 0x3, 0xc6}, 0xb) shmget(0xffffffffffffffff, 0x1000, 0x8, &(0x7f0000fe8000/0x1000)=nil) 06:16:22 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404030000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:22 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442405020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:22 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:22 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:22 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:22 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="f8379d9eb8899db3d878dc00ef02694a39897437981b93bfe58bbcc1a56b35b83defdbbd3cbfb6fd111bc39e2e556c8d83d9c76616694a1a69413d331cdf4a63772b5a20473694daef76dbbd84b0113ff607e3f6d623ff02a9194848513e655ca83ff1a4fd05b0e0c4c482f3a6a74e5b534ea5a3274ff09fd9ad246e1a90fbd1b8ed7c8d2d85301ee3cbdb88107358b2bea1fb5a56fe9970", 0x98}], 0x1, &(0x7f0000000440)=[{0x88, 0x11f, 0x7, "479fc17e3f4a3bd8e3974dd3e79f91565533245431d3a82637dafef6e6faed73f8e6f60c90ebb257e76f70eef725b1b7e5cb4d1880b2d646f0d93b20fbdf09cd667acefb6af3c262f593697872861566e130120eaa122f8ac3a9ca3bf3c8ab22056e374294f6b80124bf5831d3da56401b69"}, {0x18, 0x10b, 0x6, "beb41776"}, {0x90, 0x19f, 0x1, "8343f414871516efccf89d2a94018fb5be2ad56efb5bd0ff19d57e336a88aa7d20dbc22f9297faf4d3a99eea9b1ed9d03cdceab3a5fb6fa8a5d56ac19d9c053331527d49b889b6ff986027461ea06b5c15a63374094088e89dbcb307aba195809c41e3b0bc1cb61b3729df7c5a585866f5e270ae03b5499121ffe93c28"}, {0x58, 0x12d, 0x2be4, "539923a3304cde4089e4d462f72c680ea21db6e2a75ef5fc57d78eb5da9895fb628d8f1642600853ce792897e2b9fa114d4a3f371326d35d69ec835af39b69bcb16ca7bb96976c"}, {0x60, 0x0, 0xffff, "a2ccf7b864c124eb2377d710d16246f13d2aa601c7d09df505d2dd23033d2f9b6ca3707799ff6857ae28882c89246676a25b20ecd08c9d21809126a3f106a1d33028c3cda698fa8989b78956"}, {0xe0, 0x13f, 0x2, "920f6669837657e07f3b719528a280b9ab685bd37cdc603a34889edf00227fefcc69e27a90875cd4883b600aaaa06461d01e3296a27d875f1a31ae81d9b79f128c3f362b8995a3a1a9a55b3e18edf55a4696d2e0ae00ab3674e1c3c6ca8563a82bef2221263330b56d2a1e74e83a5bceb76a0481dbf84497b2900e9465fff056aed52725995d9c5f8758083c9a752c56b00b15ec9be478402abc86d6d5a513a7a4c467f2406f505c42c3fdefbbeb9d14524defceb986060e98bf9bb2eec4f5add7420ae647ffc988f8a822f5f41a47"}, {0x80, 0x0, 0xffff, "d31d3e7303f32abaa4bcf1a5fcaa7bdc848c32fb7a9eccac433af1dfe5cf4df63696fa103b8fb38bad77e1877f22dfda9bf3dd64089dbfb8c6626e422a6f56e1a53be917ab9e591e4051c5a5e5ddbe787db26616396ebcc5060c0f92161192b211ce050671647ba59d"}], 0x348, 0x40}, 0x20040040) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0xa9c13e312cb19b2d}) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f0000000000)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) unshare(0x2040400) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000080)=0xb0) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e24, @multicast2}, {0x306, @local}, 0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 'veth0_to_bond\x00'}) fcntl$addseals(r0, 0x409, 0x4) 06:16:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:22 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404100000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:23 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3003") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:23 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:23 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404050000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:23 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442407020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:23 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3006") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:23 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00'], 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:23 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x210080, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0xb00, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x85}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x4000, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') setsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000240)=@hopopts={0x2f, 0x2d, [], [@calipso={0x7, 0x40, {0x7f, 0xe, 0x2, 0x8, [0x7, 0x1ff, 0x8000000, 0x5, 0x400, 0x1, 0xed]}}, @ra={0x5, 0x2, 0x80}, @calipso={0x7, 0x20, {0xff, 0x6, 0x8001, 0xff, [0x80, 0x7, 0x6]}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x1, 0xde, "843b6806a65f30fe4408cb2307a8ef9c9c27c82b1e0834e38a93629e0abf89b4dba8f5e1754d76ef94424bc4033e3824935fa8b0a7e0a435aa05534a91a252c0142693795cfe42f782d6a3fc4839212d3d2f149f5adc8429ca2ceced361f137a5fdbb4d30eccf99941cba363b2b70018a2e9ae204b84f82a9d99ccc0f9ba941f6bbb06e246529f044381b5de77eeaf750b992c4f262f079588f7ee458e205a601322f20dccdbb2f0690c69bd11aabd11ccc61982ff76b70230763b993eb02e65c9aa2faf169190d8dcabbdf03e9712d795863904a5cb65fd9280083187dc"}, @pad1, @ra={0x5, 0x2, 0x4}, @pad1]}, 0x178) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000003c0)) fadvise64(r0, 0x0, 0x8, 0x7) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000440)={0x1, 0x26, &(0x7f0000000400)="2646acb52256bc43b3e5b90d766a6d00cdd130163a06ae2fdad9fa240fa548063900040beab0"}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000480)='security.SMACK64TRANSMUTE\x00', &(0x7f00000004c0)='TRUE', 0x4, 0x1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x1, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r4) ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000540)={"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"}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000940)='/dev/qat_adf_ctl\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000980)=0x7) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/nullb0\x00', 0x412002, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000a00)) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000a40)) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000a80)) r7 = msgget(0x0, 0x4) msgctl$IPC_STAT(r7, 0x2, &(0x7f0000000ac0)=""/59) syz_execute_func(&(0x7f0000000b00)="c482fd2a10400fae1ac461fd287406fec481fc2fbe00800000c4c27d038cea56e4dee6c4a145f2fcf2476d664c0f3a22126fc402910bb900800000f20f706abaa7") r8 = add_key$user(&(0x7f0000000b80)='user\x00', &(0x7f0000000bc0)={'syz', 0x1}, &(0x7f0000000c00)="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", 0x1000, 0xfffffffffffffff9) keyctl$read(0xb, r8, &(0x7f0000001c00)=""/245, 0xf5) io_setup(0xffffffffffffffff, &(0x7f0000001d00)=0x0) r10 = eventfd2(0x7fffffff, 0x800) io_submit(r9, 0x3, &(0x7f0000002f00)=[&(0x7f0000002d40)={0x0, 0x0, 0x0, 0x7, 0x101, r0, &(0x7f0000001d40)="9afd1e6e471007eadbdc75591ece07130b8dd006fe428368efee9986186204df784f9f5a56d36e19d982f4bdf69c72e0d81526433e7a31ebd4fb50e97a68826da2f5727a088882a41bbd8932832442b7b86a6c2ebe0b1433d0046b5a5b3e97211973e2ff5f9e174830474ce9f282b4420130c882e6fc61ca54ea748d485a98f29a2f431044bb65b92fb004965069c0b806a9b6118f39dba90a79a1b28924958fbefa7a9315bc92055282e55ce8dd3e13e870956c8908acd7e8f055ca217d0832d21e18697dd33144fe33c3fc5a41a19111ea78620e7f8096c87b897e8603dd9c59d6509b725fce8f7288ae82f32171177c1bc328f0c8156e94c27e1a51472d7272a9b23e5fe7408dd3880ccadb2bff69d2bda13f400db4ba7c90dae214e5a7134c54a6110d71c0e22f72deca5cd874403b595d346daecbae50ab7e16d537b9879302cc665366a36019fed139e260ea7b7fad264323cff84ae042e7d032e5c5fc8586add742392e5c02c838ca5906c271b203defd562e44ef1499ea62f7115cd89a53b535fe8f71bd20d147d63b565984e83ee646c2e9a8ac447bf329012fbc9d9fc3de755b79c22a179806628d60dbbb6e837607707cb97f0b188469c6465871102c8c8b9e6717fe278d352429dab7fea3195a0e4caf389b7ad321a1a391a6915bdab15252eb335d633ada4e3d1a19a82734f1062c85dfd5084a8bb5fc47ce4778035747d31debaecd09a439158049193ca8e1fb887aaf7ab7dd44181b68ddd97b9bcff6672a0bf34bf9065ef820b26ea6d9dce92b025f150a1e2afaf5941de2c7fe329dd8daa09b90a4d996026bd086acc68a59789e13d7a9dabbfe34280c85799d1c6e532bb9d327559b059e3af9d189558dac1ac5a21d4b9c4f512d5de53ac1515e35d1c4481e720857e1fe6af135edc196f3b0307a46b971bac23fbdc4fb795bb8eecf448ec469cdae764e43e775070cf19c8070ad922f82f362a12482f42f5182d5a688c5eac7580277eb7b8959a1d9ae7387ff316ce99c1b7e7ec2cc522ee6299fc9b168684b7e69710b6449ad3a11ec408b2d953ed704ed6472d3a9d8a2a2c707c2bf8b3158eda773923b5bb7b70d6fe0507ff4d39e22d4c5b61eb21b3755115ecfbabfaeae7bd99f59bcfaeec3f4fedd76e7c0d46ed5788d61d5bd0c45f7744f48fa91d29eb9a01d1b66ac9afe8a262366ed49345d0ebf2bde2fde43305f05e941b82ce660b5a497293491df431add5d7c07e535640138b0eb464d452530679a1edaa8d1902a66ab29a19e21941e86cbe39d7398c9f01e2c18b8f28537b927ea5a539094448baa9c23293843a9a09edcbdc78e6e06519de05c133f6cfbb5e333d6afccaf5b684d4c68639635f70d4fd904eb77d983b2bafa88485324ad560ead02f9bd513d317256d4d746b590152dec89725dace43fa86aa0c801e970188747ba4e58acd7de677ac54d8f175b19aa38847b3f974adc576ebaebac6ce344990d47687e1c61d447fda06e1d553592635d0d07563982cf1d7d30004e56c8754650c9aa45230e4923b5a77b7ee54137fda1d427cf991c296e9d65eaae249d55d2fa40529c163d0247d4ab27481beb115a8d63f133e4c4a5cdbfff060d0d7b1211448788fb312f6a5f30d09eb4f41f0219939c7ef0b2efbb245b4047836520c6bc5fa68438033da3862197e93f9e4bc2139f886d2b396e0089dfc530afb2e1c60ff207779bb6c3a1563c1b56e5c9c18862fef878cd184caab97aaa4e9d58875543219d4c09e9e2da93b9647a7d41e5434abede7d4076c3f7f4b11499d3c0114903fc311736c77992b5f6ae873d08f562b507b767e0872fca41089f4741be69deee51c04a6506ef4d5343e943454d4592b8210d79d468b87d52c5c06dc04b3c5e312d0f7670a2b8eb4029e17aad8867b5b6d27e5ee81c27fcad958950532087083ebf6160592787c49d01d8c1a166310d36227a35253a3912c8fef25d438070fd702a48239fe1609d44277cfaf4d10179f0882c475c6906a7f7c1058daaf9ec9351628d2d508f6c90d940c2ece282f047e9224defb99611fccf6450762c70fd50ab5458b5548bee1397b213560ff2ccbe238bf9edacffb7fb514282689b0bf9292280d9a14a5e43b256e21c497031770e2126be11e5d3d90107ac7256ffb5fb0d2da4126e1184016d9417db4cdc7d61af25c1c3c0863c181773120aedf439bed9968cb784173cef7d16aa6b367c39ccb8b7f33c3824e9b9aa47dc8b3d67f2a45440bb1acacb12992bd4279d06225161694bba9f6c2254e16156e1f1e2631ea1eefc7020d70bc0fb8f7772e31868ae3a3141c33ba1f7a404de3257ed842d84abcb1a7e8af951870f8010686c10b37812d35b7d319e5d21b07d1b7527ca50bd4748c9ba32716b6bb32a5d9e3c8472eb30e93525895dc76db9db2d3e2a70117fd8c3412a74e906f79859d17a8b9991188158de0f458b991831bcd297b921638a05de03ab14f41fdc6a172c22e0365cba0d13bcbeffc9543a19670e972aa0af91f8336dc7abf61422775f229f95b1f44a770eadb6123da880848a4c59488bfebd4470a12d385e764add6f538e68efb7b5c121d78f04859d63e7a8f8c1f9098f038f0fd95540462106c44c64ab56097e4d36ef121e385a418e0a8ddce8c071c7349a64657cd2d5349ce6975704692feb588057f6b4d8015e3b8a3c9717ba24d7d18c2882020da1a7e7f258221c9a32d2731763ec27f75f6109056146d0d52d5befd743016af3a240160df0a6fcefd552b872fd1b48191b8e926760c0e6ef8fa4faf46fa99786e3844e3156dd06ffccd6438d0ee5bb5f9a243f096057c4d8cf190115f1822632e56cf9b675e34e91adf36504f5662ff3705e258361d831b08b30484e5e754aec4f59c0cbf2a7d1840c22a0d8e155bab7648c261f46c47215c221f19b2362056c66c997931c3d60b0577dcb7c67fc9b1be55e2d462fb1d5f604fab1dfe4a2b0304fe3e0163e8b140a693a0611b03698662519fb07cbf9d60156bf795a6493248d4adf43fb9ea5b8359def28e3c026293c58124cb35aa962f25d68aa3116e3ae39f03e4eb8a1e6034d375ea38a441cbf3a318a60913934ad59012577c7571e06f2c271fb34da89e3d7f87ebc5822fea0d716f6227763d298de52f4f4a76f6e3c1f24db8a21dfd3a3ff573ede2c3633e5387d88882d63adca8a2d51810ea78d70b4b02233bf19c9c4d48b472bd5706fb4c490061c77d1eb0a18e16b3aadceaf98a15edc1150e10015b6237761328484ffa7b3bc129cf831d241958cfb63190bcaa3bd5b257ff0c1500ca6daa3497933a891057ffa5366b3f68214e282a97f1310903ac1c8457251910c53be07c49ba3a17a848afd4825d5b6b4bafa323a7f78e18f7a48915b2a6a8f88f6a03687081ba56235cb63ce48f8ee43345a339885ee5e88b2a3f0bc06e81252aa132acb09a5e833d65326f7b062df0cdc3bedb264995c055c384eadf6e58bb7d74e5b66da75566134507b8911c24a559e2c1921be9fd1760bb3ddb9cf683bc7caab744b9d23463d7e6065c6b9f68dc8d629cb07ae394086e0647ae04f7f47fc5da068e5facf85d016ba279506e99ef2307a1f6fd7db635605a6130d1dcddae06b99de38c816c8b430f1447210c7f0a55a1d6cd0dc1b0ae22b02ed6879fe319e18d8190949d56a64c7fc6485d7b4991f25a8ef95cba0668dfdff357036b545a47679e67810af0681ee60452a1ea4021c3c9c0d663ae58ff0d34455efeff659c2d75ad31490392f461ca067d71f9c7f51aae73c5aea0e870c2bcc5f800ba9a945c100d79b94210944e6e0e91f6ddbdf164c5bf20e6db9d63717b76a6482c56d4947e34d9de9fcff821e57401aa7cde7e17650a9c0f9ff02a140774c1a2ecaf8e745c610d947e7db2a8958663763315b992f74dc8b2e4c5d367ccc1907adbc44c42679b40f246d73721041f6b415fdd84922d467c00301c2474111ef021eeac09670edd3426d78b27a4c271d77e0b5ac2dd460414ea60536ed90ba122346b4c648e43949a204c153886ab42f511643895eef9ae6c197ba8a1b86fabc7e4e9c882467507e60057f65f6941a76075b41ce260fb026b527a951645d00b0262a335a25939ecf91ea398d42ade5e14e21c138ee4fd2bdec205adceca2412057986fa8262b4e31b58d939f8c8b261fc533012cbd2844a957aea5b14306ae255b71ffe833d5541f8eb10e335ac214ff8f3a397a28447a1dcc15cb8b7acab0b26a843655dd82add8b2db9f61386ca44595121c0e2c42785f96c7a66f8ecd79146d20758305ac5a3fe6311680338aa2c3c96a8dc821ff132c18a98073d0aa5fefec99a0b4b0987e3a41365962f698bd9a01c5683f5ec3890e91e13eefbe2d2ae1ede01c7d76d949abdf71ed43b44df581cc1ad47c9d72af41f8db444834ede5957fd15d40e7ff587fe0901c8aa1d5ae8fc267ed8eb89f86c0553b69d66a9ca72794d436213ac0eee9efcbf05d8255a173c1ee1bd9b542ff6fabacf51cb8449a4e5a4d526050c768dc07c28abfa4e806c7f70c328fcecf1be4fd56f4219c8cc196567b78a6a2360fbcb907b526a0a44bd843ff731c24cfe2bb597340ff079f1704ee8693fb5282178ead054511a71b3288d207048700c5be07c3c062ab8d04cb25513fbc62cf2c1914f4b7d1eb566eb6998249ff8cd0619e68ad9f074e97ebf507468fd8d710054cb11615a8029127eb7996b981822b01423e344039faa36de5d7c9cbbd508425d4635679bd6978169461441e3cb5adebb6d4da2bcf24bf8167fd2f885e98a21626bf65664fb75875e399aa7daaa763bb661882e25264ccb2c4b0aeac2784ffa573c82dceeee32392ba1f074a8164f59a013c8ff401deed3d68c4ba76b563bdef8ca2736d007d876d74ec649dd6b150ebad2974c14da6459ea58416939457f61f4e7ce97dbbeab5b702c8f2974a9fb6535dc4e463581983a1557203775999b0c39e73a5930182acec806525b0be824a244004af08e231b3e93b892142b02bb34ef77495565fef37b3249158536b798b14d671c2996915f10494110a8131326225812c1abcd36210abea85417f09001b8a2219c6e1a122cd42da55fecc0f5f04d8daf419d3a2716748b37aeae6d9ea92fd856a2bfde84b36f12b0181baa24162072b9c06f1ab02af62453167bd518098b6433f68e6d92062b865d0334b315a40e1f6a84edc4548fd894dc67617ec864789b404aa6cbdac104d73a70024c7f83e3e46e0ae7d37b62be3bf34df8ef252d56d31847eb8b5346a6c02f3bdc2debeb1a86a8eba904bee7cf42e67ec03224df67ddfa3b8535325875dde969d29b88460a43c4c90d5c0db6f241517601e500fdbb03249209aafb9c7473adab278110f4ab30147c63ac7861abab0339553d17efacf33f5ca8a77fc7bf84a7b0cd1f90eaf9ad1907878bf0ab93cddd8117e9d560144e1dba05abbda0128b0d90bd57b5c823319d01e0bf3493effcaad5c03541025c3e09db47b7f2f76326d04b9a649a917ac117a22fce83ebaec8aae4a814773a30170d83b0e3f43eda4698bc03f946285e567595411e86b484d32fb8ab5cd5d5c821f2be987d7e8b6e2611791336771ac1bec0b7d67d535c3a4aeb8c63cd974e3f413200c7da1f73792e0eebd3d269568fc2c96ebce6f0eaa4e06ad706869417a18c0ed710df518a140a5dd14148821f369450c72a63676b8427ce6e11e8eae1e62e1cc4191b3ae18d7e9cf8d15820efe6852a5b7201836273b339f78892a61faf7dd75", 0x1000, 0xfffffffffffffeff, 0x0, 0x1, r3}, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x3, 0x2, r3, &(0x7f0000002d80)="0eafe04f6b174e19a0b8866ea1dd67c7818dd58ac958c680c337c8d8003da6327988ebef0c2f085f1c3876f4146bb7e29bc4c657251fd5beee1dd4138c12d9434ffe95307cb3a999242e8a940f7050efd829ab0bca40b0eca8fe2e3af633b6ad22a231c89a14d235367738ff8bf93e31695c4bfe6b1efa6e3286180866b30b26efa63073697e3b7c0f901a11b88050597cc348ac0fbebf4cac3b957dc4eed2c7101e39f8a2c3a92270c00fca", 0xac, 0x4, 0x0, 0x1, r10}, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000002e80)="edd15d6d5582a3292ff1615647db096586970654025c0253272bcae977a1457cec0370c6acfc8a92145e66cbdbd253", 0x2f, 0x6, 0x0, 0x0, r5}]) clone(0x2010100, &(0x7f0000002f40)="4e9bd8a279820afe039f865761e2ac1e3ec08a2ad7921103016c11e6af2d16d0975033cf708f7e954cd396cb1620270f13ced2b5ee7affcee550ea72789fb134", &(0x7f0000002f80), &(0x7f0000002fc0), &(0x7f0000003000)="06781d3a2e3f72b577cfff351caa399616d32cb47eba6f719e6e16f2481535a67faca814f0a56ef8b19df1b2badd213cece8cc2951fb6ef4c3088487407143a5b30590a66630361ff90ba9eec6001f2c429ca997a19f0cd40206984f5c7247ec97b2ec574f6417ec73e5b0b9e41dfac00085500ceb707f7272c6c9068415d055a8c6d89fcd7b00d1a9d6a05aca98c1f3ca53f7a4fb6ca49da7303b3f520b6a0b8b895faaa63d643e0778f57cf47afa35346b9b813e62c4d85090b32582af795b50f1a1f83a5482e0e2a1d3ca78fcd39a57f81312e3adab16a0a97348e988287322af84") setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000003100)={0x77359400}, 0x10) 06:16:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404000000406766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:23 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00'], 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 427.507437] QAT: Invalid ioctl 06:16:23 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:23 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="0f06c4c28d00bf7fa5000022cc4f0fc79a00380000440f0ff70d66ba4000b0fcee66baf80cb8dac7fa8fef66bafc0c66b80f0066ef66ba4200ec48b801000000000000800f23d80f21f835400000300f23f86726cb", 0x55}], 0x1, 0x0, &(0x7f0000000240), 0x0) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB='*\x00\x00\x00'], 0x4) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404500000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040a0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901"], 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:24 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901"], 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, &(0x7f000016e000)=0x9, 0xf, 0x4) 06:16:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404190000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901"], 0x6) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404230200006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:24 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30c5") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:24 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000002000)=@hci={0x1f, r1}, 0x80) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000010ff0), 0x10) clock_gettime(0xfffffffffffffffe, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000006000)=[{{&(0x7f0000002b40)=@ax25, 0x80, &(0x7f0000000180), 0x324, &(0x7f00000000c0)=""/149, 0x10000020a}}], 0x1, 0x0, &(0x7f00000001c0)={0x0, r3+30000000}) r4 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xff, 0x2000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x7ba, 0x10}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0x7}, 0x8) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000007ff0), 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x3, 0x0, {0x0, 0x2710}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}}, 0x0) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040b0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 428.202601] 9pnet: Insufficient options for proto=fd 06:16:24 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) r0 = getpid() r1 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0xfea7540ed591a931) r2 = geteuid() lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r0, r2, r3}, 0xc) sched_setscheduler(r0, 0x5, &(0x7f0000000200)) socket$nl_generic(0x2c, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040), 0x0) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404000000406766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xfdffffffffffffff) sendmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000ac0)}}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000d40), 0x0, &(0x7f0000002e40)=[{0x10, 0x1, 0x2}], 0x10}}], 0x2, 0x0) [ 428.317316] 9pnet: Insufficient options for proto=fd 06:16:24 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:24 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404230200006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 428.380543] 9pnet: Insufficient options for proto=fd 06:16:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x8, 0x62, 0x8}, &(0x7f0000000040)=0x14) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0xffffffffffffff63, 0x4d, "c466d352f314da7476d93d67bc8e8068e4c8d1a18548906662ae1f72495e30d26f21c11b8a4e8ea083b02ecdc3d448d08b1893fad4b9dd5630790cc5682b96582ebfd1c7879ab22bd06f4bc46e"}, 0x55) sendmsg$IPVS_CMD_DEL_SERVICE(r2, 0xfffffffffffffffe, 0x40000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x6, 0x1, 0x4, 0x9c, 0x9c24, 0xffffffff, 0x8, 0x19, r1}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) bind$xdp(r2, &(0x7f0000000380)={0x2c, 0x5, r3, 0x30, r2}, 0x10) 06:16:24 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:24 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 428.581152] 9pnet: Insufficient options for proto=fd 06:16:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000540)) socket$can_bcm(0x1d, 0x2, 0x2) r1 = accept(r0, 0x0, &(0x7f0000000100)) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000002c0)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x5, r2}, {0x8, 0x2, r3}, {0x8, 0x7, r4}], {0x10, 0x5}, {0x20, 0x4}}, 0x3c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x274, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000e8ffdaf1105050f48df8c3a88d0a87468014a0060001c8e60700200000000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 06:16:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404500000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:25 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c309c") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:25 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404090000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:25 executing program 5: unshare(0x8000000) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xd021, 0x2900) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/55) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_notify(r2, &(0x7f00000001c0)) read(r2, &(0x7f0000000040)=""/251, 0xfb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x9, @ipv4, 0x4}, r3}}, 0x30) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 428.723997] 9pnet: Insufficient options for proto=fd 06:16:25 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 428.815157] 9pnet: Insufficient options for proto=fd 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:25 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:16:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424041d0000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:25 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) fcntl$lock(r0, 0x7, &(0x7f0000000c00)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000000c0)="f234f84f6a1a55791bde56ea1d4fde0e30d8c860e301583bbfeaa57839a2ecb37e95790e594f14326e0a97014943c9e1cb125fc6bc15a8848301f08b613da1ed5a24d6f0c39cc22bb05801bcbff06ee0ebcde4dc8befc763d5590fde47806488d3eca0c15de2f45c8c157a0b7b1755e83789e47cd55b1a671394abf4e7be2dd8650af66b0276a78441e38ffda1b4edbbca6e053e40521ef66c51bde4d44b07f630e78fc486e54f937b14a9777e0a4c2610f8d9aa6e4fa11be0fbd3a4809caf36", &(0x7f0000000240)="2f93201633be2c291d3e5471c9ad2ef3f2d6c55b88c5a815f6a78278903de4203e8c94ee751ec6d13481707bfeded15bd0684534bd45d6485089dc11e670235530e0e72d6df478c28d8c75bcd6d6f6f255f77fd9d42429acfdf57acf64c75d4ac05396ab78c037eac7776df3b59d9ba669430f2fa975a642a7ba31118ef6c3a55ea1ae25f8d4110b785e0bc1f45847ec97a5a9ecada1908f4a4032e12a565a6babd9fae8a6eec49b5fdb5f8a", 0x2}, 0x20) 06:16:25 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404010000c06766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:25 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:16:25 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x5, 0x9}) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000002c0)) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0xfffffffffffffeff}}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0xc690, 0x4) prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000617000/0x3000)=nil, 0x3000}, 0x2}) unlink(&(0x7f0000000200)='./control/file0\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086610, &(0x7f0000000040)={0x7ff00}) close(0xffffffffffffffff) 06:16:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404010000406766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:25 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404060000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 429.207118] EXT4-fs (sda1): resizing filesystem from 524032 to 524032 blocks 06:16:25 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404010000c06766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:25 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404100000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 429.433369] EXT4-fs (sda1): resizing filesystem from 524032 to 524032 blocks 06:16:25 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404040000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:26 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30ff") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x3, 0x5, 0x9}) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f00000002c0)) write$FUSE_POLL(r0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0xfffffffffffffeff}}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0xc690, 0x4) prctl$setmm(0x23, 0x0, &(0x7f0000d51000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000617000/0x3000)=nil, 0x3000}, 0x2}) unlink(&(0x7f0000000200)='./control/file0\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10040, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086610, &(0x7f0000000040)={0x7ff00}) close(0xffffffffffffffff) 06:16:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:26 executing program 0 (fault-call:5 fault-nth:0): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 429.702097] EXT4-fs (sda1): resizing filesystem from 524032 to 524032 blocks 06:16:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040f0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 429.752278] FAULT_INJECTION: forcing a failure. [ 429.752278] name failslab, interval 1, probability 0, space 0, times 0 [ 429.782616] CPU: 1 PID: 28063 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 429.790022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.800175] Call Trace: [ 429.802775] dump_stack+0x1c4/0x2b4 [ 429.806430] ? dump_stack_print_info.cold.2+0x52/0x52 [ 429.811638] should_fail.cold.4+0xa/0x17 [ 429.815704] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 429.820813] ? zap_class+0x640/0x640 [ 429.824532] ? __f_unlock_pos+0x19/0x20 [ 429.828508] ? lock_downgrade+0x900/0x900 [ 429.832661] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.838201] ? proc_fail_nth_write+0x9e/0x210 [ 429.842700] ? kasan_check_read+0x11/0x20 [ 429.846848] ? do_raw_spin_unlock+0xa7/0x2f0 [ 429.851258] ? zap_class+0x640/0x640 [ 429.854972] ? fs_reclaim_acquire+0x20/0x20 [ 429.859296] ? lock_downgrade+0x900/0x900 [ 429.863623] ? ___might_sleep+0x1ed/0x300 [ 429.867863] ? check_preemption_disabled+0x48/0x200 [ 429.872898] ? arch_local_save_flags+0x40/0x40 [ 429.877482] ? fsnotify_first_mark+0x350/0x350 [ 429.882068] ? fsnotify+0x12f0/0x12f0 [ 429.885874] __should_failslab+0x124/0x180 [ 429.890115] should_failslab+0x9/0x14 [ 429.893922] __kmalloc_track_caller+0x2d0/0x750 [ 429.899409] ? strncpy_from_user+0x510/0x510 [ 429.903821] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.909359] ? strndup_user+0x77/0xd0 [ 429.913178] memdup_user+0x2c/0xa0 [ 429.916720] strndup_user+0x77/0xd0 [ 429.920434] ksys_mount+0x3c/0x140 [ 429.924026] __x64_sys_mount+0xbe/0x150 [ 429.928009] do_syscall_64+0x1b9/0x820 [ 429.931913] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 429.937323] ? syscall_return_slowpath+0x5e0/0x5e0 [ 429.942256] ? trace_hardirqs_on_caller+0x310/0x310 [ 429.947273] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 429.952288] ? recalc_sigpending_tsk+0x180/0x180 [ 429.957041] ? kasan_check_write+0x14/0x20 [ 429.961280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 429.966171] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.971362] RIP: 0033:0x457579 [ 429.974602] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 429.993553] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:16:26 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) getpgrp(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r1, &(0x7f0000e6d000)=""/384, 0x180) close(r1) r2 = inotify_init1(0x0) r3 = gettid() fcntl$setown(r2, 0x8, r3) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x2321) fcntl$setsig(r2, 0xa, 0x21) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 430.002073] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 430.009343] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 430.016684] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 430.023994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 430.031263] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:26 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:26 executing program 0 (fault-call:5 fault-nth:1): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:26 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020020006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:26 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:26 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404050000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:26 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl08') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 430.334903] FAULT_INJECTION: forcing a failure. [ 430.334903] name failslab, interval 1, probability 0, space 0, times 0 [ 430.347695] CPU: 0 PID: 28087 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 430.355080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.355086] Call Trace: [ 430.355114] dump_stack+0x1c4/0x2b4 [ 430.370684] ? dump_stack_print_info.cold.2+0x52/0x52 [ 430.375884] ? __kernel_text_address+0xd/0x40 [ 430.375898] ? unwind_get_return_address+0x61/0xa0 [ 430.375918] should_fail.cold.4+0xa/0x17 [ 430.389448] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 430.394568] ? save_stack+0xa9/0xd0 [ 430.398596] ? kasan_kmalloc+0xc7/0xe0 [ 430.402568] ? __kmalloc_track_caller+0x14a/0x750 [ 430.407405] ? memdup_user+0x2c/0xa0 [ 430.411119] ? strndup_user+0x77/0xd0 [ 430.414963] ? ksys_mount+0x3c/0x140 [ 430.418716] ? __x64_sys_mount+0xbe/0x150 [ 430.422862] ? do_syscall_64+0x1b9/0x820 [ 430.426922] ? proc_fail_nth_write+0x9e/0x210 [ 430.431417] ? proc_cwd_link+0x1d0/0x1d0 [ 430.435477] ? kasan_check_read+0x11/0x20 [ 430.439624] ? do_raw_spin_unlock+0xa7/0x2f0 [ 430.444209] ? fs_reclaim_acquire+0x20/0x20 [ 430.448530] ? lock_downgrade+0x900/0x900 [ 430.452678] ? ___might_sleep+0x1ed/0x300 [ 430.456824] ? arch_local_save_flags+0x40/0x40 [ 430.461405] ? lock_release+0x970/0x970 [ 430.465420] ? arch_local_save_flags+0x40/0x40 [ 430.470001] ? usercopy_warn+0x110/0x110 [ 430.474062] __should_failslab+0x124/0x180 [ 430.478295] should_failslab+0x9/0x14 [ 430.482134] kmem_cache_alloc_trace+0x2d7/0x750 [ 430.486802] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.492362] ? _copy_from_user+0xdf/0x150 [ 430.496510] copy_mount_options+0x5f/0x380 [ 430.501221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 430.506761] ksys_mount+0xd0/0x140 [ 430.510302] __x64_sys_mount+0xbe/0x150 [ 430.514275] do_syscall_64+0x1b9/0x820 [ 430.518160] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 430.523566] ? syscall_return_slowpath+0x5e0/0x5e0 [ 430.528533] ? trace_hardirqs_on_caller+0x310/0x310 [ 430.533547] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 430.538561] ? recalc_sigpending_tsk+0x180/0x180 [ 430.543311] ? kasan_check_write+0x14/0x20 [ 430.547568] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 430.552413] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 430.557599] RIP: 0033:0x457579 [ 430.560791] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:16:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 430.579689] RSP: 002b:00007fec80cfdc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 430.587393] RAX: ffffffffffffffda RBX: 00007fec80cfdc90 RCX: 0000000000457579 [ 430.594661] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 430.602281] RBP: 000000000072bfa0 R08: 0000000020000740 R09: 0000000000000000 [ 430.609548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80cfe6d4 [ 430.616812] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000003 06:16:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020800006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:27 executing program 5: syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote, @local}, @dccp={{0x88a8ffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]}) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 06:16:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:27 executing program 0 (fault-call:5 fault-nth:2): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:27 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30e5") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404010000c06766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:27 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240402000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 431.042396] FAULT_INJECTION: forcing a failure. [ 431.042396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.054431] CPU: 1 PID: 28143 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 431.054441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.054446] Call Trace: [ 431.054471] dump_stack+0x1c4/0x2b4 [ 431.054491] ? dump_stack_print_info.cold.2+0x52/0x52 [ 431.054513] should_fail.cold.4+0xa/0x17 [ 431.054532] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.054552] ? is_bpf_text_address+0xac/0x170 [ 431.054567] ? lock_downgrade+0x900/0x900 [ 431.054586] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 431.054602] ? mark_held_locks+0x130/0x130 [ 431.054618] ? mark_held_locks+0x130/0x130 [ 431.054638] ? is_bpf_text_address+0xd3/0x170 [ 431.054655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.054667] ? check_preemption_disabled+0x48/0x200 [ 431.054688] ? debug_smp_processor_id+0x1c/0x20 [ 431.082822] ? perf_trace_lock+0x14d/0x7a0 [ 431.082842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.082861] ? should_fail+0x22d/0xd01 [ 431.148998] ? zap_class+0x640/0x640 [ 431.152717] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.157816] ? zap_class+0x640/0x640 [ 431.161532] __alloc_pages_nodemask+0x34b/0xde0 [ 431.166203] ? __kmalloc_track_caller+0x14a/0x750 [ 431.171052] ? memdup_user+0x2c/0xa0 [ 431.174760] ? strndup_user+0x77/0xd0 [ 431.178559] ? ksys_mount+0x3c/0x140 [ 431.182271] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 431.187369] ? kasan_check_read+0x11/0x20 [ 431.191522] ? fs_reclaim_acquire+0x20/0x20 [ 431.195846] ? lock_downgrade+0x900/0x900 [ 431.200761] ? ___might_sleep+0x1ed/0x300 [ 431.204915] ? trace_hardirqs_off+0xb8/0x310 [ 431.209330] cache_grow_begin+0x91/0x8c0 [ 431.213392] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.218929] ? check_preemption_disabled+0x48/0x200 [ 431.223947] kmem_cache_alloc_trace+0x67e/0x750 [ 431.228617] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.234156] copy_mount_options+0x5f/0x380 [ 431.238389] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.243923] ksys_mount+0xd0/0x140 [ 431.247463] __x64_sys_mount+0xbe/0x150 [ 431.251439] do_syscall_64+0x1b9/0x820 [ 431.255329] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 431.260694] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.265713] ? trace_hardirqs_on_caller+0x310/0x310 [ 431.270728] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 431.275746] ? recalc_sigpending_tsk+0x180/0x180 [ 431.280501] ? kasan_check_write+0x14/0x20 [ 431.284737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.289585] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.294785] RIP: 0033:0x457579 [ 431.298751] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.317656] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 431.325367] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 431.332634] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 06:16:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 431.339900] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 431.347166] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 431.354435] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000480)={'teql0\x00', 0x2000}) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000280)='./file1\x00', 0x9, 0x0, &(0x7f0000000600), 0x30000, &(0x7f0000000640)={[{@norgrplvb='norgrplvb'}, {@data_ordered='data=ordered'}, {@lockproto_dlm='lockproto=dlm'}, {@data_ordered='data=ordered'}, {@noquota='noquota'}, {@meta='meta'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) r1 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'team0\x00'}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[]) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000007c0)={@local}, 0x14) 06:16:27 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404190000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:27 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c3003") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020005006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:28 executing program 0 (fault-call:5 fault-nth:3): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040b0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 432.024832] FAULT_INJECTION: forcing a failure. [ 432.024832] name failslab, interval 1, probability 0, space 0, times 0 [ 432.039167] CPU: 0 PID: 28197 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 432.046579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.055939] Call Trace: [ 432.058548] dump_stack+0x1c4/0x2b4 [ 432.062194] ? dump_stack_print_info.cold.2+0x52/0x52 [ 432.067509] ? modules_open+0xa0/0xa0 [ 432.071331] should_fail.cold.4+0xa/0x17 [ 432.075408] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.080531] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 432.086339] ? kasan_check_read+0x11/0x20 [ 432.090505] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 432.095795] ? rcu_bh_qs+0xc0/0xc0 [ 432.099843] ? unwind_dump+0x190/0x190 [ 432.104305] ? is_bpf_text_address+0xd3/0x170 [ 432.108813] ? kernel_text_address+0x79/0xf0 [ 432.113254] ? __kernel_text_address+0xd/0x40 [ 432.117764] ? unwind_get_return_address+0x61/0xa0 [ 432.122709] ? fs_reclaim_acquire+0x20/0x20 [ 432.127045] ? lock_downgrade+0x900/0x900 [ 432.131229] ? ___might_sleep+0x1ed/0x300 [ 432.135386] ? save_stack+0xa9/0xd0 [ 432.139022] ? arch_local_save_flags+0x40/0x40 [ 432.143622] ? save_stack+0x43/0xd0 [ 432.147259] ? __kasan_slab_free+0x102/0x150 [ 432.151672] ? kasan_slab_free+0xe/0x10 [ 432.155655] ? kmem_cache_free+0x83/0x290 [ 432.159812] ? user_path_at_empty+0x40/0x50 [ 432.164138] ? do_mount+0x177/0x31f0 [ 432.167875] __should_failslab+0x124/0x180 [ 432.172118] should_failslab+0x9/0x14 [ 432.175927] kmem_cache_alloc+0x2be/0x730 [ 432.180087] ? kasan_check_write+0x14/0x20 [ 432.184390] alloc_vfsmnt+0xe9/0x990 [ 432.188114] ? m_stop+0x20/0x20 [ 432.191407] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.197390] ? check_preemption_disabled+0x48/0x200 [ 432.202432] ? trace_hardirqs_on+0xbd/0x310 [ 432.206759] ? putname+0xf2/0x130 [ 432.210245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.215808] ? refcount_sub_and_test_checked+0x203/0x310 [ 432.221303] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 432.226758] ? putname+0xf2/0x130 [ 432.230239] ? kmem_cache_free+0x21a/0x290 [ 432.234575] ? __get_fs_type+0x97/0xc0 [ 432.238474] ? lock_downgrade+0x900/0x900 [ 432.242631] ? lock_release+0x970/0x970 [ 432.246616] ? apparmor_cred_transfer+0x590/0x590 [ 432.251560] vfs_kern_mount.part.35+0x90/0x4f0 [ 432.256156] ? may_umount+0xb0/0xb0 [ 432.259817] ? _raw_read_unlock+0x2c/0x50 [ 432.263975] ? __get_fs_type+0x97/0xc0 [ 432.267873] do_mount+0x581/0x31f0 [ 432.271802] ? trace_hardirqs_off+0x310/0x310 [ 432.276309] ? retint_kernel+0x1b/0x2d [ 432.280239] ? copy_mount_string+0x40/0x40 [ 432.284490] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 432.289260] ? trace_hardirqs_off+0xaf/0x310 [ 432.293677] ? retint_kernel+0x2d/0x2d [ 432.298005] ? copy_mount_options+0x1f3/0x380 [ 432.302510] ? copy_mount_options+0x202/0x380 [ 432.307019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.312563] ? copy_mount_options+0x288/0x380 [ 432.317072] ksys_mount+0x12d/0x140 [ 432.320709] __x64_sys_mount+0xbe/0x150 [ 432.324699] do_syscall_64+0x1b9/0x820 [ 432.328596] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.333968] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.338907] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.343931] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.348957] ? recalc_sigpending_tsk+0x180/0x180 [ 432.353721] ? kasan_check_write+0x14/0x20 [ 432.357970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.362824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.368027] RIP: 0033:0x457579 [ 432.371239] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.390146] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.398329] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 432.405603] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 432.412882] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 06:16:28 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 432.420158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 432.427550] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020007006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:28 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000500)=[{&(0x7f0000000180)="92de895175b392266bf3fa4578fc4687b7754d1ebee5e6e6a7b491b3edb8402de67170bcab324c3b7b7a01f045099ac0fc366bd52300ab63383139781bfa4ee148724ab7b50bef331213159a75e20857a03009d5874f0b6937062ecbb329519656b1fb23078cf87aad9a1e4112021eba4fad3236a891943cd401c8130904a68a3a7ecf53fabcba397e3f3d4dbf3d7877d93e9dc3721df7bb73ddf6755ad387e669142baddfdd337dbfed8351932f27fd92c7891f", 0xb4}, {&(0x7f0000000240)="9bdc046931a6d74e9d2033c9952fb5c854ef3f51ba35224d0bd5326f7e29c4b0b83014edaeb8a1155bd233aa49afc87945f9b9ba4d2cbf53c1cacf5e2118b57227f0fde5219ae97ff481c91a9700c83a6d40359e01ce98686222e27fa531708637a608a331170aa8751ad78c81ddea0e0324fb255b611cab3203abccf882544743e2fef3922d2a29d84d9124e0f3e9d1dfe4a9ac3757ed551f4a8da708fc8b5440bcee25fc0a98373838885d77c9001299f6acc204a1aa1ba68ed68bd0473139f570276a82096f4cdf0ee559aaf6df7b5cb442f57db0a4ab10cd4aae78c9a1fe61f4b0", 0xe3}, {&(0x7f00000000c0)="82e2d7198764969883286f1a7e9eeacea1bf1f8c1301d84e706d7ebdf1ceada7ee9ad3d68cb0300dbe7243763c8ed85e23b87c5841be7bb867eac4c85b337cd2e63e77", 0x43}, {&(0x7f0000000340)="8b8459d6510db7149c60ae488ec45562307b70c7765a69611c904dc62b8386f4db", 0x21}, {&(0x7f0000000380)="f52c99d1d0ce76abcfc9bb6cbae54a3b61681233386a5e973fb739f8afaaf5b9dbf67d5b3a5007da6579df46716a254213d1b65d76a9e4a629722e5730adc56ffa210d67f5825c260da4", 0x4a}, {&(0x7f0000000400)="70e9acfd32bf674cc610a1e7fed4de1dbb8fb1bf33b7339df85120eeae85a61c5cafe7b94d8860b0bde1d70217fe923602936cb4707218b08ba330491579bb7caaa242b48dedba1077ff86f38218016384b8d411750a4ac5ad4bda8307235cebe6a4ec6075494a52141f3816d08736096547eb1a18dc33e1afc6a8ea8008c258c1a2fb46443e4f97dd05adf3fa2795b93773a1680305a8f3b94b5e17b69dd993a87c15492e032d6f6fe894b2a2ef03420daeee8663ddbaf54bb84a58f30da5edb2d97027fa96cb78a81c14cc0292509c6fae9f2ba1b9cc69", 0xd8}], 0x6, r2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000600)) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) tee(r0, r0, 0x8, 0xa) 06:16:29 executing program 0 (fault-call:5 fault-nth:4): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:29 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0.') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 432.639329] FAULT_INJECTION: forcing a failure. [ 432.639329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.689746] CPU: 1 PID: 28215 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 432.697942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.707301] Call Trace: [ 432.709898] dump_stack+0x1c4/0x2b4 [ 432.713528] ? dump_stack_print_info.cold.2+0x52/0x52 [ 432.718761] ? perf_trace_lock+0x14d/0x7a0 [ 432.722999] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 432.728018] should_fail.cold.4+0xa/0x17 [ 432.732122] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 432.737258] ? fs_reclaim_acquire+0x20/0x20 [ 432.741580] ? zap_class+0x640/0x640 [ 432.745293] ? fs_reclaim_acquire+0x20/0x20 [ 432.749699] ? lock_downgrade+0x900/0x900 [ 432.753848] ? ___might_sleep+0x1ed/0x300 [ 432.757992] ? lock_release+0x970/0x970 [ 432.761963] ? arch_local_save_flags+0x40/0x40 [ 432.766548] ? __might_sleep+0x95/0x190 [ 432.770527] __alloc_pages_nodemask+0x34b/0xde0 [ 432.775284] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 432.780293] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.785840] ? check_preemption_disabled+0x48/0x200 [ 432.791028] ? trace_hardirqs_on+0xbd/0x310 [ 432.795346] ? putname+0xf2/0x130 [ 432.799583] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 432.805073] ? kmem_cache_free+0x21a/0x290 [ 432.809352] ? zap_class+0x640/0x640 [ 432.813065] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 432.818600] alloc_pages_current+0x10c/0x210 [ 432.823009] get_zeroed_page+0x14/0x50 [ 432.826893] mount_fs+0x20e/0x31d [ 432.830353] vfs_kern_mount.part.35+0xdc/0x4f0 [ 432.834933] ? may_umount+0xb0/0xb0 [ 432.838558] ? _raw_read_unlock+0x2c/0x50 [ 432.842704] ? __get_fs_type+0x97/0xc0 [ 432.846717] do_mount+0x581/0x31f0 [ 432.850258] ? copy_mount_string+0x40/0x40 [ 432.854492] ? kasan_unpoison_shadow+0x35/0x50 [ 432.859072] ? kasan_kmalloc+0xc7/0xe0 [ 432.862964] ? kmem_cache_alloc_trace+0x31f/0x750 [ 432.867818] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.873354] ? _copy_from_user+0xdf/0x150 [ 432.877500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.883034] ? copy_mount_options+0x288/0x380 [ 432.887548] ksys_mount+0x12d/0x140 [ 432.891230] __x64_sys_mount+0xbe/0x150 [ 432.895210] do_syscall_64+0x1b9/0x820 [ 432.899913] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 432.905281] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.910350] ? trace_hardirqs_on_caller+0x310/0x310 [ 432.915375] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 432.920390] ? recalc_sigpending_tsk+0x180/0x180 [ 432.925161] ? kasan_check_write+0x14/0x20 [ 432.929441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.934287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.939473] RIP: 0033:0x457579 [ 432.942816] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 432.961754] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.969561] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 432.976867] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 06:16:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:29 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000140)="95a4b574665ba7f06c2e67ae2a82cef7a85b0dc85a26cfccbbacc65e26ab893a7c7a2c34b96b7dcf3685b0fff40582550f36e36be24d8da3652d0e28c38169d9a6cfa202c5105030db751d279d778e4060fc33cc716d55e925fc5c68047a66c6292d95ed53b8ea0425d1903a9d64d389d5036002e72ebbc2d777085abec9201aa9269ad427907d896a5d980de3dc8ffb4a11021a40ea451707a3ef5267ba8f5cfc6753cd39fc47c8553bc96b9d", 0xad, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0), 0x8) sendto$inet6(r0, &(0x7f00000000c0), 0xff0c, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000500)={0x2}, 0x8, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0x7, 0xac, 0x77b, 0x9, 0x9, 0x5, 0x0, 0xfe, 0x0, 0x3e, 0x3, 0x8001}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000340)="1e4130f06177ce502affcf656b5a3a0d32d405") [ 432.984268] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 432.991534] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 432.999555] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404060000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240402000d006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:29 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:29 executing program 0 (fault-call:5 fault-nth:5): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 433.163536] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:16:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:29 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040d0000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:29 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 433.401412] FAULT_INJECTION: forcing a failure. [ 433.401412] name failslab, interval 1, probability 0, space 0, times 0 [ 433.456874] CPU: 0 PID: 28271 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 433.464460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.473893] Call Trace: [ 433.476506] dump_stack+0x1c4/0x2b4 [ 433.480168] ? dump_stack_print_info.cold.2+0x52/0x52 [ 433.485378] ? pcpu_balance_workfn+0x1740/0x1740 [ 433.490163] should_fail.cold.4+0xa/0x17 [ 433.494248] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.499847] ? fs_reclaim_acquire+0x20/0x20 [ 433.504188] ? lock_downgrade+0x900/0x900 [ 433.508350] ? ___might_sleep+0x1ed/0x300 [ 433.512583] ? lock_release+0x970/0x970 [ 433.516581] ? __might_sleep+0x95/0x190 [ 433.520577] ? fs_reclaim_acquire+0x20/0x20 [ 433.524911] ? lock_downgrade+0x900/0x900 [ 433.529152] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 433.534189] ? ___might_sleep+0x1ed/0x300 [ 433.538351] ? arch_local_save_flags+0x40/0x40 [ 433.542949] ? putname+0xf2/0x130 [ 433.546424] __should_failslab+0x124/0x180 [ 433.550674] should_failslab+0x9/0x14 [ 433.554554] kmem_cache_alloc_trace+0x2d7/0x750 [ 433.559310] v9fs_mount+0x62/0x8f0 [ 433.563037] ? alloc_pages_current+0x114/0x210 [ 433.567635] mount_fs+0xae/0x31d [ 433.571024] vfs_kern_mount.part.35+0xdc/0x4f0 [ 433.575621] ? may_umount+0xb0/0xb0 [ 433.579261] ? _raw_read_unlock+0x2c/0x50 [ 433.583514] ? __get_fs_type+0x97/0xc0 [ 433.587419] do_mount+0x581/0x31f0 [ 433.591025] ? copy_mount_string+0x40/0x40 [ 433.595280] ? kasan_unpoison_shadow+0x35/0x50 [ 433.600428] ? kasan_kmalloc+0xc7/0xe0 [ 433.604339] ? kmem_cache_alloc_trace+0x31f/0x750 [ 433.609204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.614755] ? _copy_from_user+0xdf/0x150 [ 433.618919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.624472] ? copy_mount_options+0x288/0x380 [ 433.628982] ksys_mount+0x12d/0x140 [ 433.632753] __x64_sys_mount+0xbe/0x150 [ 433.636754] do_syscall_64+0x1b9/0x820 [ 433.640655] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 433.646032] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.650975] ? trace_hardirqs_on_caller+0x310/0x310 [ 433.656008] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 433.661036] ? recalc_sigpending_tsk+0x180/0x180 [ 433.665828] ? kasan_check_write+0x14/0x20 [ 433.670109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.674975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.680182] RIP: 0033:0x457579 [ 433.683395] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:16:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) ioctl$BLKTRACESETUP(r1, 0x2284, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d}) 06:16:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020700006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 433.702813] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.710533] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 433.717861] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 433.725134] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 433.732403] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 433.739670] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:30 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30ea") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:30 executing program 0 (fault-call:5 fault-nth:6): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) ioctl$BLKTRACESETUP(r1, 0x2284, &(0x7f0000000000)={[], 0x0, 0x0, 0x279d}) 06:16:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404080000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020500006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x0, &(0x7f0000000200), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f6d6263616368504f1a62dc0dbfff66092b947c0e6275672c626172726965723d0500000030303030303030303030303030312c6175746f5f64615f6f632c626c6f636b5f76616c69646974792c6f626a5f74798a653d65000000", @ANYRESDEC=r1, @ANYBLOB=',measure,uid<', @ANYRESDEC=r2, @ANYBLOB=',euid<', @ANYRESDEC=r3, @ANYBLOB=',\x00']) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x18, 0x2f, 0x313, 0x0, 0x0, {0x3}, [@generic=',']}, 0x18}}, 0x0) 06:16:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:30 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30fd") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 434.038783] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 06:16:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:30 executing program 5: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={[], 0x6, 0x1, 0xe037, 0x0, 0x81, 0xf000, 0x5000, [], 0x9}) rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffe}, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x8) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r3, 0x7}, 0x8) wait4(r2, &(0x7f0000000180), 0x1, &(0x7f0000007200)) [ 434.116376] 9pnet: Insufficient options for proto=fd 06:16:30 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020600006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 434.145975] FAULT_INJECTION: forcing a failure. [ 434.145975] name failslab, interval 1, probability 0, space 0, times 0 [ 434.220639] CPU: 0 PID: 28307 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 434.228213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.228220] Call Trace: [ 434.228247] dump_stack+0x1c4/0x2b4 [ 434.228267] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.228282] ? pcpu_balance_workfn+0x1740/0x1740 [ 434.228305] should_fail.cold.4+0xa/0x17 [ 434.249268] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 434.249287] ? fs_reclaim_acquire+0x20/0x20 [ 434.258115] ? lock_downgrade+0x900/0x900 [ 434.258134] ? ___might_sleep+0x1ed/0x300 [ 434.258147] ? lock_release+0x970/0x970 [ 434.258173] ? __might_sleep+0x95/0x190 [ 434.267594] ? fs_reclaim_acquire+0x20/0x20 [ 434.267614] ? lock_downgrade+0x900/0x900 [ 434.292819] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 434.298103] ? ___might_sleep+0x1ed/0x300 [ 434.302251] ? arch_local_save_flags+0x40/0x40 [ 434.306829] ? putname+0xf2/0x130 [ 434.310288] __should_failslab+0x124/0x180 [ 434.314520] should_failslab+0x9/0x14 [ 434.318322] kmem_cache_alloc_trace+0x2d7/0x750 [ 434.323060] v9fs_mount+0x62/0x8f0 [ 434.326639] ? alloc_pages_current+0x114/0x210 [ 434.331222] mount_fs+0xae/0x31d [ 434.334590] vfs_kern_mount.part.35+0xdc/0x4f0 [ 434.339173] ? may_umount+0xb0/0xb0 [ 434.342803] ? _raw_read_unlock+0x2c/0x50 [ 434.346946] ? __get_fs_type+0x97/0xc0 [ 434.350834] do_mount+0x581/0x31f0 [ 434.354380] ? copy_mount_string+0x40/0x40 [ 434.358615] ? kasan_unpoison_shadow+0x35/0x50 [ 434.363192] ? kasan_kmalloc+0xc7/0xe0 [ 434.367127] ? kmem_cache_alloc_trace+0x31f/0x750 [ 434.371970] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.377548] ? _copy_from_user+0xdf/0x150 [ 434.381696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.387268] ? copy_mount_options+0x288/0x380 [ 434.391762] ksys_mount+0x12d/0x140 [ 434.395388] __x64_sys_mount+0xbe/0x150 [ 434.399723] do_syscall_64+0x1b9/0x820 [ 434.403607] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.408970] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.413899] ? trace_hardirqs_on_caller+0x310/0x310 [ 434.418913] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 434.423925] ? recalc_sigpending_tsk+0x180/0x180 [ 434.428676] ? kasan_check_write+0x14/0x20 [ 434.432915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.437826] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.443065] RIP: 0033:0x457579 [ 434.446258] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.465298] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 434.473027] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 434.480292] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 434.487658] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 434.494934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 434.502570] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:30 executing program 0 (fault-call:5 fault-nth:7): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:30 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424041a0000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/86, 0x56}], 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000280)={0x0}) r6 = mmap$binder(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x2f) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002440)={0x64, 0x0, &(0x7f0000002340)=[@release={0x40046306, 0x4}, @release, @release={0x40046306, 0x4}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, r4, 0x2}, @acquire_done={0x40106309, r5, 0x3}, @acquire_done={0x40106309, r6, 0x3}], 0x47, 0x0, &(0x7f00000023c0)="e4a7b87863bb632b903522f21253e73e99c7ff1c32e10f3134ff79e7cdd5fad8c7e7e86436cf43a1e7db61343c5356f49be2b45dd545c6913c3301d47c513bdbca3d1a3e8b0d26"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000002c0)="66b99408000066b81e111ee366ba25b5a6000f303681950d00918e66b80b0000000f23c80f21f86635080060000f23f83e0f009125000f381ee594360f320f019dfc32f20f01c98395008800", 0x4c}], 0x1, 0x57, &(0x7f0000000100), 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r7, 0x10c, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{0x0, 0x400, 0x1, 0x0, 0x3, 0x0, 0x7, 0xdd22, 0x4, 0x0, 0x0, 0x0, 0x7ff}, {0x538e}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:16:31 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020003006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 434.643088] FAULT_INJECTION: forcing a failure. [ 434.643088] name failslab, interval 1, probability 0, space 0, times 0 [ 434.693673] CPU: 1 PID: 28368 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 434.702126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.711487] Call Trace: [ 434.714094] dump_stack+0x1c4/0x2b4 [ 434.717732] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.723182] should_fail.cold.4+0xa/0x17 [ 434.727249] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 434.732363] ? save_stack+0xa9/0xd0 [ 434.736012] ? save_stack+0x43/0xd0 [ 434.739638] ? kasan_kmalloc+0xc7/0xe0 [ 434.743525] ? __kmalloc_track_caller+0x14a/0x750 [ 434.748454] ? kstrdup+0x39/0x70 [ 434.751916] ? v9fs_session_init+0xdd/0x1a70 [ 434.756321] ? v9fs_mount+0x7d/0x8f0 [ 434.760046] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 434.764885] ? do_mount+0x581/0x31f0 [ 434.768596] ? ksys_mount+0x12d/0x140 [ 434.772404] ? do_syscall_64+0x1b9/0x820 [ 434.776513] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.781884] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 434.787689] ? kasan_check_read+0x11/0x20 [ 434.791885] ? zap_class+0x640/0x640 [ 434.795603] ? fs_reclaim_acquire+0x20/0x20 [ 434.800735] ? lock_downgrade+0x900/0x900 [ 434.804889] ? ___might_sleep+0x1ed/0x300 [ 434.809042] ? arch_local_save_flags+0x40/0x40 [ 434.813625] ? trace_hardirqs_on+0xbd/0x310 [ 434.817952] ? unwind_get_return_address+0x61/0xa0 [ 434.822914] __should_failslab+0x124/0x180 [ 434.827154] should_failslab+0x9/0x14 [ 434.830957] __kmalloc_track_caller+0x2d0/0x750 [ 434.835647] ? save_stack+0xa9/0xd0 [ 434.839274] ? save_stack+0x43/0xd0 [ 434.842904] ? v9fs_session_init+0x115/0x1a70 [ 434.847403] kstrdup+0x39/0x70 [ 434.850689] v9fs_session_init+0x115/0x1a70 [ 434.855093] ? __might_sleep+0x95/0x190 [ 434.859071] ? zap_class+0x640/0x640 [ 434.862789] ? v9fs_show_options+0x7e0/0x7e0 [ 434.867198] ? lock_downgrade+0x900/0x900 [ 434.871349] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 434.876371] ? ___might_sleep+0x1ed/0x300 [ 434.880523] ? trace_hardirqs_on+0xbd/0x310 [ 434.884845] ? v9fs_mount+0x62/0x8f0 [ 434.888569] ? kasan_unpoison_shadow+0x35/0x50 [ 434.893228] ? kasan_kmalloc+0xc7/0xe0 [ 434.897939] ? kmem_cache_alloc_trace+0x31f/0x750 [ 434.902810] ? zap_class+0x640/0x640 [ 434.906531] v9fs_mount+0x7d/0x8f0 [ 434.910078] ? alloc_pages_current+0x114/0x210 [ 434.914665] mount_fs+0xae/0x31d [ 434.918040] vfs_kern_mount.part.35+0xdc/0x4f0 [ 434.922629] ? may_umount+0xb0/0xb0 [ 434.926257] ? _raw_read_unlock+0x2c/0x50 [ 434.930405] ? __get_fs_type+0x97/0xc0 [ 434.934336] do_mount+0x581/0x31f0 [ 434.937882] ? copy_mount_string+0x40/0x40 [ 434.942121] ? kasan_unpoison_shadow+0x35/0x50 [ 434.946708] ? kasan_kmalloc+0xc7/0xe0 [ 434.950687] ? kmem_cache_alloc_trace+0x31f/0x750 [ 434.955532] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.961237] ? _copy_from_user+0xdf/0x150 [ 434.965391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.970925] ? copy_mount_options+0x288/0x380 [ 434.975425] ksys_mount+0x12d/0x140 [ 434.979057] __x64_sys_mount+0xbe/0x150 [ 434.983038] do_syscall_64+0x1b9/0x820 [ 434.986925] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 434.992380] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.998121] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.003141] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.008160] ? recalc_sigpending_tsk+0x180/0x180 [ 435.012986] ? kasan_check_write+0x14/0x20 [ 435.017227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.022078] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.027266] RIP: 0033:0x457579 [ 435.030460] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.049363] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 435.057075] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 435.064346] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 435.071614] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 435.078883] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 435.086150] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:31 executing program 0 (fault-call:5 fault-nth:8): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:31 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) open_by_handle_at(r1, &(0x7f0000000140)={0x101, 0x6, "6494b9bde243f0688d83af6a1ffd14676c7203ef61eb2b6ed2121f8ffa1393dd3199b7e96ae9aed82c78b95d731cb277db78059fb92bd9e15306d88896c1590d0bdb59896b9083aefe128ed48fe888bf5e42c843751c3c11cf83176ad161a5afd6a6190fdfd3e00ea379e7dbd6280669b9e5d75f6e19e8e05321695a430d627dcf120957d1ce539189134dac78e7b63c385b0891cb9a933d077a1ba65ff737edfbde122cf8c6c5dd53ac81d2ccf065bfd4b0c85a8b8f2183c833f9d2c8e57c8b752c3d38bdae2ddef338e616b42051de5ad148561802c39bdc3ee4bb518fab38c14d0655e2415e043b70c8afe4cd63551e97e80ef08e73c489"}, 0xa00) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x2}, 0x20) 06:16:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:31 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:31 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:31 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404030000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 435.251582] FAULT_INJECTION: forcing a failure. [ 435.251582] name failslab, interval 1, probability 0, space 0, times 0 [ 435.301660] CPU: 0 PID: 28395 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 435.309074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.318545] Call Trace: [ 435.321187] dump_stack+0x1c4/0x2b4 [ 435.324886] ? dump_stack_print_info.cold.2+0x52/0x52 [ 435.330091] ? arch_local_save_flags+0x40/0x40 [ 435.334687] should_fail.cold.4+0xa/0x17 [ 435.338755] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 435.343863] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 435.348629] ? is_bpf_text_address+0xac/0x170 [ 435.353128] ? lock_downgrade+0x900/0x900 [ 435.357282] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 435.363206] ? kasan_check_read+0x11/0x20 [ 435.367357] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 435.372635] ? rcu_bh_qs+0xc0/0xc0 [ 435.376183] ? fs_reclaim_acquire+0x20/0x20 [ 435.380507] ? lock_downgrade+0x900/0x900 [ 435.384660] ? ___might_sleep+0x1ed/0x300 [ 435.388809] ? arch_local_save_flags+0x40/0x40 [ 435.393394] ? __save_stack_trace+0x8d/0xf0 [ 435.398088] __should_failslab+0x124/0x180 [ 435.402323] should_failslab+0x9/0x14 [ 435.406168] kmem_cache_alloc_trace+0x2d7/0x750 [ 435.410840] ? save_stack+0x43/0xd0 [ 435.414464] ? kasan_kmalloc+0xc7/0xe0 [ 435.418373] ? __kmalloc_track_caller+0x14a/0x750 [ 435.423216] ? kstrdup+0x39/0x70 [ 435.426585] ? v9fs_session_init+0x115/0x1a70 [ 435.431078] ? v9fs_mount+0x7d/0x8f0 [ 435.434870] p9_client_create+0x106/0x160a [ 435.439115] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 435.445008] ? p9_client_read+0xc70/0xc70 [ 435.449161] ? fs_reclaim_acquire+0x20/0x20 [ 435.453484] ? lock_downgrade+0x900/0x900 [ 435.457645] ? __lockdep_init_map+0x105/0x590 [ 435.462236] ? lockdep_init_map+0x9/0x10 [ 435.466297] ? kasan_check_write+0x14/0x20 [ 435.470529] ? __init_rwsem+0x1cc/0x2a0 [ 435.474504] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 435.479520] ? kasan_kmalloc+0xc7/0xe0 [ 435.483410] ? save_stack+0xa9/0xd0 [ 435.487077] ? save_stack+0x43/0xd0 [ 435.490702] ? memcpy+0x45/0x50 [ 435.494075] v9fs_session_init+0x217/0x1a70 [ 435.498799] ? __might_sleep+0x95/0x190 [ 435.502785] ? v9fs_show_options+0x7e0/0x7e0 [ 435.507206] ? lock_downgrade+0x900/0x900 [ 435.511356] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 435.516374] ? ___might_sleep+0x1ed/0x300 [ 435.520526] ? trace_hardirqs_on+0xbd/0x310 [ 435.524846] ? v9fs_mount+0x62/0x8f0 [ 435.528650] ? kasan_unpoison_shadow+0x35/0x50 [ 435.533234] ? kasan_kmalloc+0xc7/0xe0 [ 435.537128] ? kmem_cache_alloc_trace+0x31f/0x750 [ 435.541983] v9fs_mount+0x7d/0x8f0 [ 435.545524] ? alloc_pages_current+0x114/0x210 [ 435.550148] mount_fs+0xae/0x31d [ 435.553522] vfs_kern_mount.part.35+0xdc/0x4f0 [ 435.558108] ? may_umount+0xb0/0xb0 [ 435.561736] ? _raw_read_unlock+0x2c/0x50 [ 435.565888] ? __get_fs_type+0x97/0xc0 [ 435.569802] do_mount+0x581/0x31f0 [ 435.573347] ? copy_mount_string+0x40/0x40 [ 435.577586] ? kasan_unpoison_shadow+0x35/0x50 [ 435.582168] ? kasan_kmalloc+0xc7/0xe0 [ 435.586058] ? kmem_cache_alloc_trace+0x31f/0x750 [ 435.591082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.597010] ? copy_mount_options+0x288/0x380 [ 435.601509] ksys_mount+0x12d/0x140 [ 435.605138] __x64_sys_mount+0xbe/0x150 [ 435.609118] do_syscall_64+0x1b9/0x820 [ 435.613007] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 435.618371] ? syscall_return_slowpath+0x5e0/0x5e0 [ 435.623302] ? trace_hardirqs_on_caller+0x310/0x310 [ 435.628318] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 435.633333] ? recalc_sigpending_tsk+0x180/0x180 [ 435.638090] ? kasan_check_write+0x14/0x20 [ 435.642330] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 435.647178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.652371] RIP: 0033:0x457579 [ 435.655566] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.674464] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 435.682187] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 435.689454] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 06:16:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020b00006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:32 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:32 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="153f6234488dd25d766070") r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x15, 0x1, 0x1, 0x200, 0x100000001}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000018000101000000000000000002000000ac1414000000000000000000000000008d070fff3a870567d5bc4b9f55ceaffa6ec7985ea7f37f052da0850f0451e92af437d6193dbf736b7b8d9aaeab9471ceae785364be6d83e992184859a123172dbabfba42076c973128c9e2f2b88dd26810122769c2294d4ab1d1bb0509869043131ba90064f3592a206b150764230c92c1135ad223357325e0df3ea0e337b6fb5d891bbdcdc0ceff16310eb9c60e4935d757cbddaf1f93f34138f9fa46ceb2d15a9a149c8e81a62bdba1dc3647aea04582"], 0x24}}, 0x0) [ 435.697187] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 435.704473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 435.711788] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:32 executing program 0 (fault-call:5 fault-nth:9): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:32 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:32 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x80000) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x31) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001480)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) 06:16:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404210000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:32 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020050006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 435.936481] FAULT_INJECTION: forcing a failure. [ 435.936481] name failslab, interval 1, probability 0, space 0, times 0 [ 435.985849] CPU: 0 PID: 28430 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 435.993262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.002918] Call Trace: [ 436.005505] dump_stack+0x1c4/0x2b4 [ 436.009133] ? dump_stack_print_info.cold.2+0x52/0x52 [ 436.014323] ? arch_local_save_flags+0x40/0x40 [ 436.018913] should_fail.cold.4+0xa/0x17 [ 436.022967] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 436.028073] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 436.032822] ? is_bpf_text_address+0xac/0x170 [ 436.037314] ? lock_downgrade+0x900/0x900 [ 436.041467] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 436.047252] ? kasan_check_read+0x11/0x20 [ 436.051394] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 436.056663] ? rcu_bh_qs+0xc0/0xc0 [ 436.060198] ? fs_reclaim_acquire+0x20/0x20 [ 436.064510] ? lock_downgrade+0x900/0x900 [ 436.068680] ? ___might_sleep+0x1ed/0x300 [ 436.072840] ? arch_local_save_flags+0x40/0x40 [ 436.077516] ? __save_stack_trace+0x8d/0xf0 [ 436.081855] __should_failslab+0x124/0x180 [ 436.086093] should_failslab+0x9/0x14 [ 436.089896] kmem_cache_alloc_trace+0x2d7/0x750 [ 436.094553] ? save_stack+0x43/0xd0 [ 436.098526] ? kasan_kmalloc+0xc7/0xe0 [ 436.102406] ? __kmalloc_track_caller+0x14a/0x750 [ 436.107716] ? kstrdup+0x39/0x70 [ 436.111082] ? v9fs_session_init+0x115/0x1a70 [ 436.115571] ? v9fs_mount+0x7d/0x8f0 [ 436.119282] p9_client_create+0x106/0x160a [ 436.123514] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 436.129308] ? p9_client_read+0xc70/0xc70 [ 436.133481] ? fs_reclaim_acquire+0x20/0x20 [ 436.137796] ? lock_downgrade+0x900/0x900 [ 436.141941] ? __lockdep_init_map+0x105/0x590 [ 436.146462] ? lockdep_init_map+0x9/0x10 [ 436.150520] ? kasan_check_write+0x14/0x20 [ 436.154749] ? __init_rwsem+0x1cc/0x2a0 [ 436.158722] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 436.163780] ? kasan_kmalloc+0xc7/0xe0 [ 436.167664] ? save_stack+0xa9/0xd0 [ 436.171286] ? save_stack+0x43/0xd0 [ 436.174907] ? memcpy+0x45/0x50 [ 436.178186] v9fs_session_init+0x217/0x1a70 [ 436.182505] ? __might_sleep+0x95/0x190 [ 436.186481] ? v9fs_show_options+0x7e0/0x7e0 [ 436.190896] ? lock_downgrade+0x900/0x900 [ 436.195039] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 436.200415] ? ___might_sleep+0x1ed/0x300 [ 436.204589] ? trace_hardirqs_on+0xbd/0x310 [ 436.208911] ? v9fs_mount+0x62/0x8f0 [ 436.212618] ? kasan_unpoison_shadow+0x35/0x50 [ 436.217195] ? kasan_kmalloc+0xc7/0xe0 [ 436.221085] ? kmem_cache_alloc_trace+0x31f/0x750 [ 436.225930] v9fs_mount+0x7d/0x8f0 [ 436.229465] ? alloc_pages_current+0x114/0x210 [ 436.234044] mount_fs+0xae/0x31d [ 436.237438] vfs_kern_mount.part.35+0xdc/0x4f0 [ 436.242019] ? may_umount+0xb0/0xb0 [ 436.245640] ? _raw_read_unlock+0x2c/0x50 [ 436.249782] ? __get_fs_type+0x97/0xc0 [ 436.253666] do_mount+0x581/0x31f0 [ 436.257204] ? copy_mount_string+0x40/0x40 [ 436.261435] ? kasan_unpoison_shadow+0x35/0x50 [ 436.266013] ? kasan_kmalloc+0xc7/0xe0 [ 436.269915] ? kmem_cache_alloc_trace+0x31f/0x750 [ 436.275118] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.280687] ? _copy_from_user+0xdf/0x150 [ 436.284836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.290382] ? copy_mount_options+0x288/0x380 [ 436.294883] ksys_mount+0x12d/0x140 [ 436.299014] __x64_sys_mount+0xbe/0x150 [ 436.302983] do_syscall_64+0x1b9/0x820 [ 436.306907] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 436.312266] ? syscall_return_slowpath+0x5e0/0x5e0 [ 436.317190] ? trace_hardirqs_on_caller+0x310/0x310 [ 436.322289] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 436.327296] ? recalc_sigpending_tsk+0x180/0x180 [ 436.332076] ? kasan_check_write+0x14/0x20 [ 436.336319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 436.341162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.346377] RIP: 0033:0x457579 [ 436.349565] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 436.368461] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 436.376192] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 06:16:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x4001, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="070000000c0000000000000009000000800049517f86445e4d1b494b7a0d7f009edd0000c2dccb0514ea12cc86a2dac88824179be80ac6b213fdfd17c72bb967d5613d45c2d6b613874d506fcc12a5059da14ecea777a09b41f9ec31627658a2ca5cec7d887874a9f46f6e904aa5c37cb25e4e17592b59efb2ffe753da49fdf51814d5a1b5b08b5838c8662cda8ff2600815cf0feca9a8a1dadee665c9859b2a575356faeeb5dc4249f699913c177375781f15cf2719d69cb7"]) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbfe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x80002) ioctl$RTC_UIE_ON(r2, 0x7003) finit_module(r0, &(0x7f0000000080)='/dev/amidi#\x00', 0x1) fcntl$setflags(r1, 0x2, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) [ 436.383453] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 436.390743] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 436.398393] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 436.405659] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:32 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:32 executing program 0 (fault-call:5 fault-nth:10): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:33 executing program 5: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x40000000, @ipv4, 0xe7}, 0x1c) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="f69379616580dd3f3bfff72609c228d6d3447be99f7ac9d0cd5e55a873a1f21d26d74bd28f5dacdd85c37d0b71691de9588aa5e35556adad05d115f4d60441daf3aee5251e54d5acbecedf49b4b33ad84dca342993ca1566e89ed60a97c24559686870629e03cad14ffa4721d4a698745f44bbed82b85ec99f404405ffb3390f039e6c07cfb03120e77e2f192dbc5ffa797c599c52588f1d8f331af34603944e84faae6c6f38307b64bcfa5aa89b7edf6c2dd397b4ba3c8e120d9ca81ca0d3b22f54d93d19cc97e5e7bfbaf47a", 0xcd, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$reject(0x13, r1, 0x4, 0x2834dbaf, r2) listen(r0, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) [ 436.578494] FAULT_INJECTION: forcing a failure. [ 436.578494] name failslab, interval 1, probability 0, space 0, times 0 [ 436.627095] CPU: 1 PID: 28462 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 436.634614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.643968] Call Trace: [ 436.643993] dump_stack+0x1c4/0x2b4 [ 436.644012] ? dump_stack_print_info.cold.2+0x52/0x52 [ 436.644034] should_fail.cold.4+0xa/0x17 [ 436.644052] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 436.664770] ? save_stack+0xa9/0xd0 [ 436.668408] ? save_stack+0x43/0xd0 [ 436.672045] ? kasan_kmalloc+0xc7/0xe0 [ 436.675941] ? kmem_cache_alloc_trace+0x152/0x750 [ 436.680809] ? v9fs_session_init+0x217/0x1a70 [ 436.685424] ? v9fs_mount+0x7d/0x8f0 [ 436.689129] ? mount_fs+0xae/0x31d [ 436.692660] ? do_mount+0x581/0x31f0 [ 436.697153] ? ksys_mount+0x12d/0x140 [ 436.700976] ? __x64_sys_mount+0xbe/0x150 [ 436.705117] ? do_syscall_64+0x1b9/0x820 [ 436.709172] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 436.714529] ? kasan_check_read+0x11/0x20 [ 436.718677] ? zap_class+0x640/0x640 [ 436.722385] ? fs_reclaim_acquire+0x20/0x20 [ 436.726699] ? lock_downgrade+0x900/0x900 [ 436.730853] ? ___might_sleep+0x1ed/0x300 [ 436.734994] ? arch_local_save_flags+0x40/0x40 [ 436.739574] ? p9_client_create+0x106/0x160a [ 436.744064] __should_failslab+0x124/0x180 [ 436.748380] should_failslab+0x9/0x14 [ 436.752175] kmem_cache_alloc_trace+0x2d7/0x750 [ 436.756849] ? kmem_cache_alloc_trace+0x31f/0x750 [ 436.761688] ? __lockdep_init_map+0x105/0x590 [ 436.766174] ? save_stack+0x43/0xd0 [ 436.769842] p9_idpool_create+0x42/0x190 [ 436.773930] p9_client_create+0x2df/0x160a [ 436.778163] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 436.783984] ? p9_client_read+0xc70/0xc70 [ 436.788126] ? zap_class+0x640/0x640 [ 436.791846] ? fs_reclaim_acquire+0x20/0x20 [ 436.796862] ? lock_downgrade+0x900/0x900 [ 436.801006] ? __lockdep_init_map+0x105/0x590 [ 436.805493] ? lockdep_init_map+0x9/0x10 [ 436.809576] ? kasan_check_write+0x14/0x20 [ 436.813804] ? __init_rwsem+0x1cc/0x2a0 [ 436.817787] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 436.822821] ? kasan_kmalloc+0xc7/0xe0 [ 436.826702] ? save_stack+0xa9/0xd0 [ 436.830328] ? save_stack+0x43/0xd0 [ 436.834035] ? memcpy+0x45/0x50 [ 436.837342] v9fs_session_init+0x217/0x1a70 [ 436.841663] ? __might_sleep+0x95/0x190 [ 436.845658] ? zap_class+0x640/0x640 [ 436.849370] ? v9fs_show_options+0x7e0/0x7e0 [ 436.853859] ? lock_downgrade+0x900/0x900 [ 436.858012] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 436.863021] ? ___might_sleep+0x1ed/0x300 [ 436.867165] ? trace_hardirqs_on+0xbd/0x310 [ 436.871482] ? v9fs_mount+0x62/0x8f0 [ 436.875190] ? kasan_unpoison_shadow+0x35/0x50 [ 436.879764] ? kasan_kmalloc+0xc7/0xe0 [ 436.883676] ? kmem_cache_alloc_trace+0x31f/0x750 [ 436.888510] ? zap_class+0x640/0x640 [ 436.892231] v9fs_mount+0x7d/0x8f0 [ 436.895760] ? alloc_pages_current+0x114/0x210 [ 436.901132] mount_fs+0xae/0x31d [ 436.904497] vfs_kern_mount.part.35+0xdc/0x4f0 [ 436.909074] ? may_umount+0xb0/0xb0 [ 436.912695] ? _raw_read_unlock+0x2c/0x50 [ 436.916841] ? __get_fs_type+0x97/0xc0 [ 436.920721] do_mount+0x581/0x31f0 [ 436.924257] ? copy_mount_string+0x40/0x40 [ 436.928486] ? kasan_unpoison_shadow+0x35/0x50 [ 436.933086] ? kasan_kmalloc+0xc7/0xe0 [ 436.936969] ? kmem_cache_alloc_trace+0x31f/0x750 [ 436.941819] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 436.947352] ? _copy_from_user+0xdf/0x150 [ 436.951494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 436.957054] ? copy_mount_options+0x288/0x380 [ 436.961543] ksys_mount+0x12d/0x140 [ 436.965163] __x64_sys_mount+0xbe/0x150 [ 436.969133] do_syscall_64+0x1b9/0x820 [ 436.973014] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 436.978403] ? syscall_return_slowpath+0x5e0/0x5e0 [ 436.983329] ? trace_hardirqs_on_caller+0x310/0x310 [ 436.988341] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 436.993348] ? recalc_sigpending_tsk+0x180/0x180 [ 436.998856] ? kasan_check_write+0x14/0x20 [ 437.003087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.007926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.013112] RIP: 0033:0x457579 06:16:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240402000a006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 437.016306] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.035284] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.042990] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 437.050250] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 437.057510] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 437.064773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 437.072139] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:33 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30fc") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:33 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x7, 0x4, 0x2, 0xffffffffffffffe5, 0x6}, &(0x7f00000001c0)=0x98) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000340)={'sit0\x00', {0x2, 0x4e20}}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r1, 0xa1bf}, &(0x7f00000002c0)=0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @remote, @multicast1}, &(0x7f0000000440)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x101081, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000300)={'syzkaller0\x00', 0x7f}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r2}) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) fchdir(r3) 06:16:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404070000806766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:33 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:33 executing program 0 (fault-call:5 fault-nth:11): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 437.292892] FAULT_INJECTION: forcing a failure. [ 437.292892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.305550] CPU: 1 PID: 28501 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 437.312920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.322362] Call Trace: [ 437.322385] dump_stack+0x1c4/0x2b4 [ 437.322405] ? dump_stack_print_info.cold.2+0x52/0x52 [ 437.328611] should_fail.cold.4+0xa/0x17 [ 437.328630] ? fault_create_debugfs_attr+0x1f0/0x1f0 06:16:33 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020400006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 437.328647] ? __isolate_free_page+0x610/0x610 [ 437.328667] ? mark_held_locks+0x130/0x130 [ 437.351817] ? mark_held_locks+0x130/0x130 [ 437.356079] ? lock_acquire+0x1ed/0x520 [ 437.360067] ? pcpu_alloc+0xbce/0x15e0 [ 437.363973] ? lock_release+0x970/0x970 [ 437.367957] ? arch_local_save_flags+0x40/0x40 [ 437.367979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.367995] ? should_fail+0x22d/0xd01 [ 437.368013] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 437.378115] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 437.378134] __alloc_pages_nodemask+0x34b/0xde0 [ 437.378148] ? is_bpf_text_address+0xac/0x170 [ 437.378166] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 437.406877] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 437.412675] ? kasan_check_read+0x11/0x20 [ 437.416821] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 437.422131] ? rcu_bh_qs+0xc0/0xc0 [ 437.425675] ? fs_reclaim_acquire+0x20/0x20 [ 437.429993] ? lock_downgrade+0x900/0x900 [ 437.434141] ? ___might_sleep+0x1ed/0x300 [ 437.438303] ? trace_hardirqs_off+0xb8/0x310 [ 437.442713] cache_grow_begin+0x91/0x8c0 [ 437.446783] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.452316] ? check_preemption_disabled+0x48/0x200 [ 437.457336] kmem_cache_alloc_trace+0x67e/0x750 [ 437.461998] ? save_stack+0x43/0xd0 [ 437.465621] ? __kmalloc_track_caller+0x14a/0x750 [ 437.470465] p9_client_create+0x106/0x160a [ 437.474699] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 437.480497] ? p9_client_read+0xc70/0xc70 [ 437.484672] ? fs_reclaim_acquire+0x20/0x20 [ 437.489001] ? lock_downgrade+0x900/0x900 [ 437.493177] ? __lockdep_init_map+0x105/0x590 [ 437.498525] ? lockdep_init_map+0x9/0x10 [ 437.502582] ? kasan_check_write+0x14/0x20 [ 437.506810] ? __init_rwsem+0x1cc/0x2a0 [ 437.510795] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 437.515832] ? kasan_kmalloc+0xc7/0xe0 [ 437.519721] ? save_stack+0xa9/0xd0 [ 437.523353] ? save_stack+0x43/0xd0 [ 437.526974] ? memcpy+0x45/0x50 [ 437.530264] v9fs_session_init+0x217/0x1a70 [ 437.534584] ? __might_sleep+0x95/0x190 [ 437.538567] ? v9fs_show_options+0x7e0/0x7e0 [ 437.543321] ? lock_downgrade+0x900/0x900 [ 437.547463] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 437.552508] ? ___might_sleep+0x1ed/0x300 [ 437.556655] ? trace_hardirqs_on+0xbd/0x310 [ 437.560974] ? v9fs_mount+0x62/0x8f0 [ 437.564683] ? kasan_unpoison_shadow+0x35/0x50 [ 437.569269] ? kasan_kmalloc+0xc7/0xe0 [ 437.573189] ? kmem_cache_alloc_trace+0x31f/0x750 [ 437.578052] v9fs_mount+0x7d/0x8f0 [ 437.581616] ? alloc_pages_current+0x114/0x210 [ 437.586199] mount_fs+0xae/0x31d [ 437.589572] vfs_kern_mount.part.35+0xdc/0x4f0 [ 437.594241] ? may_umount+0xb0/0xb0 [ 437.598641] ? _raw_read_unlock+0x2c/0x50 [ 437.602786] ? __get_fs_type+0x97/0xc0 [ 437.606674] do_mount+0x581/0x31f0 [ 437.610209] ? kasan_check_read+0x11/0x20 [ 437.614354] ? do_raw_spin_unlock+0xa7/0x2f0 [ 437.618770] ? copy_mount_string+0x40/0x40 [ 437.623002] ? kasan_check_write+0x14/0x20 [ 437.627234] ? kasan_unpoison_shadow+0x35/0x50 [ 437.631820] ? kasan_kmalloc+0xc7/0xe0 [ 437.635795] ? kmem_cache_alloc_trace+0x31f/0x750 [ 437.640639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 437.646179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 437.651713] ? copy_mount_options+0x288/0x380 [ 437.656220] ksys_mount+0x12d/0x140 [ 437.659852] __x64_sys_mount+0xbe/0x150 [ 437.663830] do_syscall_64+0x1b9/0x820 [ 437.667712] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 437.673088] ? syscall_return_slowpath+0x5e0/0x5e0 [ 437.678016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.682856] ? trace_hardirqs_on_caller+0x310/0x310 [ 437.687872] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 437.692885] ? prepare_exit_to_usermode+0x291/0x3b0 [ 437.698723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 437.703584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 437.708775] RIP: 0033:0x457579 [ 437.711966] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 437.730860] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:16:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 437.738594] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 437.745859] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 437.753121] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 437.760387] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 437.767652] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:34 executing program 0 (fault-call:5 fault-nth:12): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:34 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:34 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000301000)={0x2, 0x0, @rand_addr}, 0x10) shutdown(0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r1, &(0x7f0000004400)=[{{&(0x7f0000001180)=@pppol2tp, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/255, 0xff}}], 0x1, 0x0, &(0x7f00000045c0)={0x77359400}) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"}}}}}}, &(0x7f0000001780)) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 06:16:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404070000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 437.968964] FAULT_INJECTION: forcing a failure. [ 437.968964] name failslab, interval 1, probability 0, space 0, times 0 [ 438.049515] CPU: 0 PID: 28530 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 438.056926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.066291] Call Trace: [ 438.068895] dump_stack+0x1c4/0x2b4 [ 438.068916] ? dump_stack_print_info.cold.2+0x52/0x52 [ 438.068940] should_fail.cold.4+0xa/0x17 [ 438.081815] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.081834] ? perf_trace_lock+0x14d/0x7a0 [ 438.091253] ? zap_class+0x640/0x640 [ 438.091276] ? __radix_tree_replace+0x258/0x3c0 [ 438.091293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.091309] ? node_tag_clear+0xc2/0x1c0 [ 438.100097] ? zap_class+0x640/0x640 [ 438.100115] ? fs_reclaim_acquire+0x20/0x20 [ 438.100128] ? lock_downgrade+0x900/0x900 [ 438.100144] ? idr_alloc_u32+0x235/0x3f0 [ 438.126400] ? ___might_sleep+0x1ed/0x300 [ 438.130546] ? arch_local_save_flags+0x40/0x40 [ 438.135122] ? p9_idpool_get+0x4a/0x90 [ 438.139008] __should_failslab+0x124/0x180 [ 438.143240] should_failslab+0x9/0x14 [ 438.147038] __kmalloc_track_caller+0x2d0/0x750 [ 438.151718] ? idr_alloc_u32+0x3f0/0x3f0 [ 438.155776] ? do_raw_spin_lock+0xc1/0x200 [ 438.160010] ? p9_client_create+0x483/0x160a [ 438.164446] kstrdup+0x39/0x70 [ 438.167633] p9_client_create+0x483/0x160a [ 438.171867] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 438.177661] ? p9_client_read+0xc70/0xc70 [ 438.181802] ? zap_class+0x640/0x640 [ 438.185512] ? fs_reclaim_acquire+0x20/0x20 [ 438.189827] ? lock_downgrade+0x900/0x900 [ 438.193972] ? __lockdep_init_map+0x105/0x590 [ 438.198860] ? lockdep_init_map+0x9/0x10 [ 438.202916] ? kasan_check_write+0x14/0x20 [ 438.207142] ? __init_rwsem+0x1cc/0x2a0 [ 438.211142] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 438.216180] ? kasan_kmalloc+0xc7/0xe0 [ 438.220065] ? save_stack+0xa9/0xd0 [ 438.223683] ? save_stack+0x43/0xd0 [ 438.227318] ? memcpy+0x45/0x50 [ 438.230597] v9fs_session_init+0x217/0x1a70 [ 438.234918] ? __might_sleep+0x95/0x190 [ 438.238889] ? zap_class+0x640/0x640 [ 438.242599] ? v9fs_show_options+0x7e0/0x7e0 [ 438.247002] ? lock_downgrade+0x900/0x900 [ 438.251142] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 438.256243] ? ___might_sleep+0x1ed/0x300 [ 438.260386] ? trace_hardirqs_on+0xbd/0x310 [ 438.264713] ? v9fs_mount+0x62/0x8f0 [ 438.268420] ? kasan_unpoison_shadow+0x35/0x50 [ 438.273390] ? kasan_kmalloc+0xc7/0xe0 [ 438.277277] ? kmem_cache_alloc_trace+0x31f/0x750 [ 438.282148] ? zap_class+0x640/0x640 [ 438.285863] v9fs_mount+0x7d/0x8f0 [ 438.289396] ? alloc_pages_current+0x114/0x210 [ 438.293976] mount_fs+0xae/0x31d [ 438.297731] vfs_kern_mount.part.35+0xdc/0x4f0 [ 438.302310] ? may_umount+0xb0/0xb0 [ 438.305963] ? _raw_read_unlock+0x2c/0x50 [ 438.310105] ? __get_fs_type+0x97/0xc0 [ 438.314024] do_mount+0x581/0x31f0 [ 438.317560] ? copy_mount_string+0x40/0x40 [ 438.321790] ? kasan_unpoison_shadow+0x35/0x50 [ 438.326366] ? kasan_kmalloc+0xc7/0xe0 [ 438.330252] ? kmem_cache_alloc_trace+0x31f/0x750 [ 438.335096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 438.340623] ? copy_mount_options+0x288/0x380 [ 438.345113] ksys_mount+0x12d/0x140 [ 438.348733] __x64_sys_mount+0xbe/0x150 [ 438.352731] do_syscall_64+0x1b9/0x820 [ 438.356611] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 438.361971] ? syscall_return_slowpath+0x5e0/0x5e0 [ 438.366898] ? trace_hardirqs_on_caller+0x310/0x310 [ 438.371952] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 438.376963] ? recalc_sigpending_tsk+0x180/0x180 [ 438.381765] ? kasan_check_write+0x14/0x20 [ 438.385995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.390835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.396573] RIP: 0033:0x457579 [ 438.399770] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.418663] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 438.426382] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 438.433644] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 438.440908] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 06:16:34 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 438.448173] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 438.455441] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020200006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:34 executing program 0 (fault-call:5 fault-nth:13): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:35 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff), 0x0, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000301000)={0x2, 0x0, @rand_addr}, 0x10) shutdown(0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x20000004e20}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x59aa, 0x4) recvmmsg(r1, &(0x7f0000004400)=[{{&(0x7f0000001180)=@pppol2tp, 0x80, &(0x7f00000012c0), 0x0, &(0x7f0000001300)=""/255, 0xff}}], 0x1, 0x0, &(0x7f00000045c0)={0x77359400}) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "2b00b32def4f1142b6793bb530f9b20e90aa25d5c2b9431efd840a07c1922833b2c789aefbbaee9f63cbab38a8acfb8dba0595ecb683e74ea2bc44a7aee9c52e18ca01c06a5c354712b8b1ff75f45ba55a3487c83849023d37e037d2d3e3e842e9ba099e9ed8775d1173d8e78335aa65d58f54c1d78d4fce897cfefa24b7f268f90be76c7f4e1bfe4d84a869353e931c3732afea55697618a1318ecb657b34172b93fd59d7988d43630cf81e976a0ea01fd8b2547ab593bc605c985f56664b84ed3c9f90ffb666e030c794e2d2d5070af38d83dc275da88cfe6910b2ded59f6c418af5d247237eceb14857c1d7c3ee32e729d9793040f8f4e432eb875a89fe31cbed117f0e76643797169fba3dac3f377d145ce97980ba626da7a279e698a9e040a22d63c535f0ee06adb59e9e06ad7295e6601f3a5fe9b581975993c6c775734212bccb26288d42a672c965d40e80d0e1908f04425a60a08241378ec7ff88315de073b64c5f9647e51732be34988e0948f12e6c560bedbece811bca501d4389dbfe20e4df5160cd7324c0670c7b3e8980b061e31b1c8461d6f7a63f9e9fd24326924c076e01631a0b9703a6106accfaa064075fa1f16e16c5171b6a324e8642b2ab76618b824110c312ab12d9f65d6a980634a6a7cba8bf89e01a91259f446232476a1c490982636b78d1300befab1a2f6e8261e07336c5692db37bb7d3cebf4a942b62f2fa6cceb7e488aa02b2e52c6f82bd3792845fff41cce52e0469d14821ce11491864860c11421a92dae3152eb23106a0c679d2b1f0a9809b56abdcf893f9531508f24e64ec911fd8e8b3c8fd2291f1a7b910222c38533d4caadac9acd194be7e53549c1719bdf668887a0e19db83b5356f8f7d93cbef1ef3505dcc40d0d2a02a2745ab518979b9c3774babfe8e70ead767c7a00289b8cc6e51d1a957548270cb3f5064961a88f61b34f9442d78ae5a8551713f9afb4269d689f9adb6b4a902a637184f7f899efe9fa0ddb45cd1076c4eeeda51ca8dc20dcfc9cc5f56768073b3f4c2c9f543324a4fd0b8bc7b95e232bf85bf222394fa4336ab4007d7ad2dc85afa6eb79ad2624c4be6c674ee98fce9a51786b7cc2b5044de114d36d2690e13bcedf96590c7d5aeb8040b74c4d6a5aa38a7c1f0857522f4f968795056b9a7034dc3444784f9486b575e44dec3216d72845500e63297d7197961e7e593ea3411001d1d47ba42d70e7af8e91246c02d7e37ff0eb60abebc37dd00315b4fbb09e77a6b5f7e8441818ebcfafecf622731f1db8a11fa2de8e30d808bedbfee104b3b1100f5094675521da07dd2a28be7e486b325a0f0e6d75116be1bbc2aa20deb64a6e4e7b824b12d009e6f1802f5a8e31559b125d71d00a5684fbde4668f5af1eb4ca04fa7c4ef4d2a194b0856e007"}}}}}}, &(0x7f0000001780)) sendto$inet6(r1, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 06:16:35 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404000000c06766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 438.629437] FAULT_INJECTION: forcing a failure. [ 438.629437] name failslab, interval 1, probability 0, space 0, times 0 [ 438.669847] CPU: 0 PID: 28565 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 438.677259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.686620] Call Trace: [ 438.689239] dump_stack+0x1c4/0x2b4 [ 438.692876] ? dump_stack_print_info.cold.2+0x52/0x52 [ 438.698481] should_fail.cold.4+0xa/0x17 [ 438.702545] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.707740] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 438.712788] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 438.717544] ? zap_class+0x640/0x640 [ 438.721263] ? lock_downgrade+0x900/0x900 [ 438.725415] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 438.731215] ? zap_class+0x640/0x640 [ 438.734963] ? fs_reclaim_acquire+0x20/0x20 [ 438.739498] ? lock_downgrade+0x900/0x900 [ 438.743836] ? ___might_sleep+0x1ed/0x300 [ 438.748794] ? arch_local_save_flags+0x40/0x40 [ 438.753497] ? __kernel_text_address+0xd/0x40 [ 438.758000] __should_failslab+0x124/0x180 [ 438.762235] should_failslab+0x9/0x14 [ 438.766035] __kmalloc_track_caller+0x2d0/0x750 [ 438.770733] ? save_stack+0xa9/0xd0 [ 438.774356] ? parse_opts+0x176/0x510 [ 438.778159] kstrdup+0x39/0x70 [ 438.781350] parse_opts+0x176/0x510 [ 438.784978] ? trace_hardirqs_off+0xb8/0x310 [ 438.789510] ? do_raw_spin_unlock+0xa7/0x2f0 [ 438.793922] ? p9_fd_poll+0x2b0/0x2b0 [ 438.798112] ? kasan_check_write+0x14/0x20 [ 438.802347] ? trace_hardirqs_off+0xb8/0x310 [ 438.806753] ? trace_hardirqs_on+0x310/0x310 [ 438.811159] ? debug_check_no_obj_freed+0x305/0x58d [ 438.816202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 438.821766] ? check_preemption_disabled+0x48/0x200 [ 438.826786] p9_fd_create+0x8b/0x3f0 [ 438.830504] ? p9_fd_show_options+0x1c0/0x1c0 [ 438.835029] ? p9_client_create+0x7c3/0x160a [ 438.839441] p9_client_create+0x866/0x160a [ 438.843692] ? p9_client_read+0xc70/0xc70 [ 438.847838] ? zap_class+0x640/0x640 [ 438.851579] ? fs_reclaim_acquire+0x20/0x20 [ 438.855926] ? lock_downgrade+0x900/0x900 [ 438.860077] ? __lockdep_init_map+0x105/0x590 [ 438.864570] ? lockdep_init_map+0x9/0x10 [ 438.868629] ? kasan_check_write+0x14/0x20 [ 438.872877] ? __init_rwsem+0x1cc/0x2a0 [ 438.876849] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 438.881859] ? kasan_kmalloc+0xc7/0xe0 [ 438.885753] ? save_stack+0x43/0xd0 [ 438.889376] ? memcpy+0x45/0x50 [ 438.892672] v9fs_session_init+0x217/0x1a70 [ 438.897337] ? __might_sleep+0x95/0x190 [ 438.901312] ? zap_class+0x640/0x640 [ 438.905060] ? v9fs_show_options+0x7e0/0x7e0 [ 438.909466] ? lock_downgrade+0x900/0x900 [ 438.913612] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 438.918657] ? ___might_sleep+0x1ed/0x300 [ 438.922804] ? trace_hardirqs_on+0xbd/0x310 [ 438.927121] ? v9fs_mount+0x62/0x8f0 [ 438.930835] ? kasan_unpoison_shadow+0x35/0x50 [ 438.935415] ? kasan_kmalloc+0xc7/0xe0 [ 438.939333] ? kmem_cache_alloc_trace+0x31f/0x750 [ 438.944187] ? zap_class+0x640/0x640 [ 438.947902] v9fs_mount+0x7d/0x8f0 [ 438.951437] ? alloc_pages_current+0x114/0x210 [ 438.956048] mount_fs+0xae/0x31d [ 438.959420] vfs_kern_mount.part.35+0xdc/0x4f0 [ 438.964009] ? may_umount+0xb0/0xb0 [ 438.967677] ? _raw_read_unlock+0x2c/0x50 [ 438.971825] ? __get_fs_type+0x97/0xc0 [ 438.975717] do_mount+0x581/0x31f0 [ 438.979261] ? copy_mount_string+0x40/0x40 [ 438.983497] ? kasan_unpoison_shadow+0x35/0x50 [ 438.988104] ? kasan_kmalloc+0xc7/0xe0 [ 438.991996] ? kmem_cache_alloc_trace+0x31f/0x750 [ 438.997242] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.002991] ? _copy_from_user+0xdf/0x150 [ 439.007145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.012683] ? copy_mount_options+0x288/0x380 [ 439.017350] ksys_mount+0x12d/0x140 [ 439.020977] __x64_sys_mount+0xbe/0x150 [ 439.024983] do_syscall_64+0x1b9/0x820 [ 439.028870] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 439.034241] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.039171] ? trace_hardirqs_on_caller+0x310/0x310 [ 439.044188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 439.049203] ? recalc_sigpending_tsk+0x180/0x180 [ 439.053957] ? kasan_check_write+0x14/0x20 [ 439.058192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.063126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.068314] RIP: 0033:0x457579 [ 439.071534] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.091242] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.099383] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 439.106738] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 439.114118] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 439.121384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 439.128653] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x100c0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket(0x15, 0x80005, 0x0) recvmmsg(r1, &(0x7f00000034c0)=[{{&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000b40), 0x0, 0x0, 0x0, 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f40)=""/49, 0x31}, {&(0x7f0000000f80)=""/179, 0xb3}], 0x2, &(0x7f0000001080)=""/28, 0x1c}, 0x3}], 0x2, 0x121, &(0x7f0000003680)={0x0, 0x1c9c380}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000036c0), 0x14) getsockopt(r1, 0x200400000114, 0x2000000002718, &(0x7f00000002c0)=""/1, &(0x7f0000000080)=0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x1ff}) [ 439.169534] 9pnet: Insufficient options for proto=fd 06:16:35 executing program 0 (fault-call:5 fault-nth:14): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:35 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x0) dup3(r0, r0, 0x80000) close(r0) 06:16:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020900006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:35 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:35 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/vsock\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xffdffffffffffffd) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mount$bpf(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c80)='bpf\x00', 0x80, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0xfff}}, {@mode={'mode', 0x3d, 0x406e}}]}) 06:16:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404090000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 439.401894] ntfs: (device loop5): parse_options(): Unrecognized mount option ./file0. 06:16:35 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020300006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 439.561238] ntfs: (device loop5): parse_options(): Unrecognized mount option ./file0. [ 439.588625] overlayfs: filesystem on './file0' not supported as upperdir [ 439.647171] FAULT_INJECTION: forcing a failure. [ 439.647171] name failslab, interval 1, probability 0, space 0, times 0 [ 439.664029] CPU: 1 PID: 28639 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 439.671431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.680790] Call Trace: [ 439.683392] dump_stack+0x1c4/0x2b4 [ 439.687036] ? dump_stack_print_info.cold.2+0x52/0x52 [ 439.692245] should_fail.cold.4+0xa/0x17 [ 439.697096] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.702206] ? save_stack+0xa9/0xd0 [ 439.705831] ? save_stack+0x43/0xd0 [ 439.709458] ? kasan_kmalloc+0xc7/0xe0 [ 439.713341] ? __kmalloc_track_caller+0x14a/0x750 [ 439.718180] ? kstrdup+0x39/0x70 [ 439.721546] ? p9_client_create+0x483/0x160a [ 439.725968] ? v9fs_session_init+0x217/0x1a70 [ 439.730459] ? mount_fs+0xae/0x31d [ 439.733998] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 439.738750] ? do_mount+0x581/0x31f0 [ 439.742460] ? __x64_sys_mount+0xbe/0x150 [ 439.746611] ? do_syscall_64+0x1b9/0x820 [ 439.750670] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.756036] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.761585] ? node_tag_clear+0xc2/0x1c0 [ 439.765647] ? zap_class+0x640/0x640 [ 439.769360] ? fs_reclaim_acquire+0x20/0x20 [ 439.773678] ? lock_downgrade+0x900/0x900 [ 439.777818] ? idr_alloc_u32+0x235/0x3f0 [ 439.781878] ? ___might_sleep+0x1ed/0x300 [ 439.786050] ? arch_local_save_flags+0x40/0x40 [ 439.790661] ? trace_hardirqs_on+0xbd/0x310 [ 439.794987] __should_failslab+0x124/0x180 [ 439.800025] should_failslab+0x9/0x14 [ 439.803852] __kmalloc+0x2d4/0x760 [ 439.807393] ? match_wildcard+0x3c0/0x3c0 [ 439.811575] ? match_strdup+0x5e/0xa0 [ 439.815406] match_strdup+0x5e/0xa0 [ 439.819062] p9_client_create+0x6d8/0x160a [ 439.823305] ? p9_client_read+0xc70/0xc70 [ 439.827450] ? zap_class+0x640/0x640 [ 439.831162] ? fs_reclaim_acquire+0x20/0x20 [ 439.835479] ? lock_downgrade+0x900/0x900 [ 439.839629] ? __lockdep_init_map+0x105/0x590 [ 439.844211] ? lockdep_init_map+0x9/0x10 [ 439.848269] ? kasan_check_write+0x14/0x20 [ 439.852533] ? __init_rwsem+0x1cc/0x2a0 [ 439.856520] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 439.861531] ? kasan_kmalloc+0xc7/0xe0 [ 439.865432] ? save_stack+0x43/0xd0 [ 439.869057] ? memcpy+0x45/0x50 [ 439.872346] v9fs_session_init+0x217/0x1a70 [ 439.876668] ? __might_sleep+0x95/0x190 [ 439.880669] ? zap_class+0x640/0x640 [ 439.884385] ? v9fs_show_options+0x7e0/0x7e0 [ 439.888825] ? lock_downgrade+0x900/0x900 [ 439.892974] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 439.898805] ? ___might_sleep+0x1ed/0x300 [ 439.902954] ? trace_hardirqs_on+0xbd/0x310 [ 439.907271] ? v9fs_mount+0x62/0x8f0 [ 439.910982] ? kasan_unpoison_shadow+0x35/0x50 [ 439.915573] ? kasan_kmalloc+0xc7/0xe0 [ 439.919467] ? kmem_cache_alloc_trace+0x31f/0x750 [ 439.924308] ? zap_class+0x640/0x640 [ 439.928023] v9fs_mount+0x7d/0x8f0 [ 439.931571] ? alloc_pages_current+0x114/0x210 [ 439.936160] mount_fs+0xae/0x31d [ 439.939531] vfs_kern_mount.part.35+0xdc/0x4f0 [ 439.944156] ? may_umount+0xb0/0xb0 [ 439.947781] ? _raw_read_unlock+0x2c/0x50 [ 439.951928] ? __get_fs_type+0x97/0xc0 [ 439.955815] do_mount+0x581/0x31f0 [ 439.959353] ? retint_kernel+0x1b/0x2d [ 439.963239] ? trace_hardirqs_on+0x310/0x310 [ 439.967661] ? copy_mount_string+0x40/0x40 [ 439.971907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 439.976665] ? trace_hardirqs_off+0xaf/0x310 [ 439.981081] ? retint_kernel+0x2d/0x2d [ 439.984969] ? copy_mount_options+0x1e2/0x380 [ 439.989468] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.995128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.001479] ? copy_mount_options+0x288/0x380 [ 440.005977] ksys_mount+0x12d/0x140 [ 440.009639] __x64_sys_mount+0xbe/0x150 [ 440.013665] do_syscall_64+0x1b9/0x820 [ 440.017592] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 440.023046] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.028180] ? trace_hardirqs_on_caller+0x310/0x310 [ 440.033281] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 440.038293] ? recalc_sigpending_tsk+0x180/0x180 [ 440.043051] ? kasan_check_write+0x14/0x20 [ 440.047287] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.052161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.057375] RIP: 0033:0x457579 [ 440.060581] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.079603] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.087329] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 06:16:36 executing program 0 (fault-call:5 fault-nth:15): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:36 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404040000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:36 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/vsock\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0xffdffffffffffffd) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) mount$bpf(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c80)='bpf\x00', 0x80, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0xfff}}, {@mode={'mode', 0x3d, 0x406e}}]}) [ 440.094595] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 440.102677] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 440.110331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 440.117600] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:36 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 440.191661] FAULT_INJECTION: forcing a failure. [ 440.191661] name failslab, interval 1, probability 0, space 0, times 0 [ 440.258202] CPU: 1 PID: 28652 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 440.265610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.275459] Call Trace: [ 440.278084] dump_stack+0x1c4/0x2b4 [ 440.281733] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.286955] should_fail.cold.4+0xa/0x17 [ 440.291054] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.296976] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.302095] ? bpf_prog_kallsyms_find+0xde/0x4a0 [ 440.306870] ? zap_class+0x640/0x640 [ 440.310611] ? lock_downgrade+0x900/0x900 [ 440.314776] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 440.320577] ? zap_class+0x640/0x640 [ 440.324288] ? fs_reclaim_acquire+0x20/0x20 [ 440.328602] ? lock_downgrade+0x900/0x900 [ 440.332749] ? ___might_sleep+0x1ed/0x300 [ 440.336931] ? arch_local_save_flags+0x40/0x40 [ 440.341508] ? __kernel_text_address+0xd/0x40 [ 440.346013] __should_failslab+0x124/0x180 [ 440.350243] should_failslab+0x9/0x14 [ 440.354043] __kmalloc_track_caller+0x2d0/0x750 [ 440.358735] ? save_stack+0xa9/0xd0 [ 440.362358] ? parse_opts+0x176/0x510 [ 440.366154] kstrdup+0x39/0x70 [ 440.369338] parse_opts+0x176/0x510 [ 440.372960] ? trace_hardirqs_off+0xb8/0x310 [ 440.377362] ? do_raw_spin_unlock+0xa7/0x2f0 [ 440.381762] ? p9_fd_poll+0x2b0/0x2b0 [ 440.385588] ? kasan_check_write+0x14/0x20 [ 440.389816] ? trace_hardirqs_off+0xb8/0x310 [ 440.394220] ? trace_hardirqs_on+0x310/0x310 [ 440.399365] ? debug_check_no_obj_freed+0x305/0x58d [ 440.404375] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.409906] ? check_preemption_disabled+0x48/0x200 [ 440.414918] p9_fd_create+0x8b/0x3f0 [ 440.418628] ? p9_fd_show_options+0x1c0/0x1c0 [ 440.423121] ? p9_client_create+0x7c3/0x160a [ 440.427536] p9_client_create+0x866/0x160a [ 440.431768] ? p9_client_read+0xc70/0xc70 [ 440.435913] ? zap_class+0x640/0x640 [ 440.439620] ? fs_reclaim_acquire+0x20/0x20 [ 440.443935] ? lock_downgrade+0x900/0x900 [ 440.448079] ? __lockdep_init_map+0x105/0x590 [ 440.452569] ? lockdep_init_map+0x9/0x10 [ 440.456626] ? kasan_check_write+0x14/0x20 [ 440.460852] ? __init_rwsem+0x1cc/0x2a0 [ 440.464820] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 440.469856] ? kasan_kmalloc+0xc7/0xe0 [ 440.473739] ? save_stack+0x43/0xd0 [ 440.477359] ? memcpy+0x45/0x50 [ 440.480637] v9fs_session_init+0x217/0x1a70 [ 440.484967] ? __might_sleep+0x95/0x190 [ 440.488938] ? zap_class+0x640/0x640 [ 440.492831] ? v9fs_show_options+0x7e0/0x7e0 [ 440.498046] ? lock_downgrade+0x900/0x900 [ 440.502191] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 440.507200] ? ___might_sleep+0x1ed/0x300 [ 440.511343] ? trace_hardirqs_on+0xbd/0x310 [ 440.515657] ? v9fs_mount+0x62/0x8f0 [ 440.519366] ? kasan_unpoison_shadow+0x35/0x50 [ 440.523939] ? kasan_kmalloc+0xc7/0xe0 [ 440.527825] ? kmem_cache_alloc_trace+0x31f/0x750 [ 440.532662] ? zap_class+0x640/0x640 [ 440.536372] v9fs_mount+0x7d/0x8f0 [ 440.539905] ? alloc_pages_current+0x114/0x210 [ 440.544481] mount_fs+0xae/0x31d [ 440.547857] vfs_kern_mount.part.35+0xdc/0x4f0 [ 440.552432] ? may_umount+0xb0/0xb0 [ 440.556051] ? _raw_read_unlock+0x2c/0x50 [ 440.560194] ? __get_fs_type+0x97/0xc0 [ 440.564163] do_mount+0x581/0x31f0 [ 440.567796] ? kasan_check_read+0x11/0x20 [ 440.571938] ? do_raw_spin_unlock+0xa7/0x2f0 [ 440.576342] ? copy_mount_string+0x40/0x40 [ 440.580572] ? kasan_check_write+0x14/0x20 [ 440.584803] ? kasan_unpoison_shadow+0x35/0x50 [ 440.589378] ? kasan_kmalloc+0xc7/0xe0 [ 440.593268] ? kmem_cache_alloc_trace+0x31f/0x750 [ 440.598910] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.604443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.609974] ? copy_mount_options+0x288/0x380 [ 440.614474] ksys_mount+0x12d/0x140 [ 440.618106] __x64_sys_mount+0xbe/0x150 [ 440.622073] do_syscall_64+0x1b9/0x820 [ 440.625954] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 440.631313] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.636267] ? trace_hardirqs_on_caller+0x310/0x310 [ 440.641312] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 440.646329] ? recalc_sigpending_tsk+0x180/0x180 [ 440.651106] ? kasan_check_write+0x14/0x20 [ 440.655339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.660178] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.665359] RIP: 0033:0x457579 [ 440.668547] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.687469] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.695192] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 440.703241] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 06:16:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240402003f006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:37 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 440.710516] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 440.717778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 440.725070] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 440.741581] 9pnet: Insufficient options for proto=fd 06:16:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404025000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 440.785660] ntfs: (device loop5): parse_options(): Unrecognized mount option ./file0. 06:16:37 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:37 executing program 0 (fault-call:5 fault-nth:16): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020006006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 441.020237] FAULT_INJECTION: forcing a failure. [ 441.020237] name failslab, interval 1, probability 0, space 0, times 0 [ 441.031494] CPU: 0 PID: 28695 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 441.031504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.031508] Call Trace: [ 441.031531] dump_stack+0x1c4/0x2b4 [ 441.031551] ? dump_stack_print_info.cold.2+0x52/0x52 [ 441.031570] ? is_bpf_text_address+0xac/0x170 [ 441.031593] should_fail.cold.4+0xa/0x17 [ 441.031611] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 441.031631] ? is_bpf_text_address+0xac/0x170 [ 441.054597] ? __debug_object_init+0x57d/0x1290 [ 441.054615] ? lock_downgrade+0x900/0x900 [ 441.086787] ? lock_downgrade+0x900/0x900 [ 441.090953] ? trace_hardirqs_on+0xbd/0x310 [ 441.095285] ? kasan_check_read+0x11/0x20 [ 441.095299] ? __debug_object_init+0x57d/0x1290 [ 441.095316] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.104920] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 441.104934] ? kasan_check_write+0x14/0x20 [ 441.104952] ? lock_acquire+0x1ed/0x520 [ 441.123219] ? p9_client_prepare_req.part.8+0x5d0/0xc30 [ 441.128582] __should_failslab+0x124/0x180 [ 441.132809] should_failslab+0x9/0x14 [ 441.136604] kmem_cache_alloc_trace+0x4b/0x750 [ 441.141180] ? kasan_check_write+0x14/0x20 [ 441.145408] ? do_raw_spin_lock+0xc1/0x200 [ 441.149643] p9_client_prepare_req.part.8+0x68d/0xc30 [ 441.154829] ? p9_free_req.isra.7+0x140/0x140 [ 441.159316] ? p9_pollwait+0x83/0x210 [ 441.163114] ? p9_conn_create+0x720/0x720 [ 441.167257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.172787] p9_client_rpc+0x1c2/0x1480 [ 441.176754] ? p9_fd_poll+0x1e0/0x2b0 [ 441.180550] ? p9_conn_create+0x565/0x720 [ 441.184692] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 441.190051] ? ksys_dup3+0x680/0x680 [ 441.193756] ? p9_fd_poll+0x2b0/0x2b0 [ 441.197934] ? p9_fd_create+0x1a7/0x3f0 [ 441.201909] ? kasan_unpoison_shadow+0x35/0x50 [ 441.206489] ? kmem_cache_alloc_trace+0x31f/0x750 [ 441.211356] ? p9_fd_show_options+0x1c0/0x1c0 [ 441.215849] p9_client_create+0xc1b/0x160a [ 441.220088] ? p9_client_read+0xc70/0xc70 [ 441.224230] ? fs_reclaim_acquire+0x20/0x20 [ 441.228546] ? lock_downgrade+0x900/0x900 [ 441.232688] ? __lockdep_init_map+0x105/0x590 [ 441.237207] ? kasan_check_write+0x14/0x20 [ 441.241436] ? __init_rwsem+0x1cc/0x2a0 [ 441.245422] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 441.250480] ? kasan_kmalloc+0xc7/0xe0 [ 441.254367] ? save_stack+0x43/0xd0 [ 441.258017] ? memcpy+0x45/0x50 [ 441.261295] v9fs_session_init+0x217/0x1a70 [ 441.265613] ? __might_sleep+0x95/0x190 [ 441.269582] ? v9fs_show_options+0x7e0/0x7e0 [ 441.273979] ? lock_downgrade+0x900/0x900 [ 441.278119] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 441.283129] ? ___might_sleep+0x1ed/0x300 [ 441.287268] ? trace_hardirqs_on+0xbd/0x310 [ 441.291584] ? v9fs_mount+0x62/0x8f0 [ 441.295285] ? kasan_unpoison_shadow+0x35/0x50 [ 441.300229] ? kasan_kmalloc+0xc7/0xe0 [ 441.304109] ? kmem_cache_alloc_trace+0x31f/0x750 [ 441.308954] v9fs_mount+0x7d/0x8f0 [ 441.312478] ? alloc_pages_current+0x114/0x210 [ 441.317058] mount_fs+0xae/0x31d [ 441.320459] vfs_kern_mount.part.35+0xdc/0x4f0 [ 441.325029] ? may_umount+0xb0/0xb0 [ 441.328646] ? _raw_read_unlock+0x2c/0x50 [ 441.332787] ? __get_fs_type+0x97/0xc0 [ 441.336660] do_mount+0x581/0x31f0 [ 441.340195] ? copy_mount_string+0x40/0x40 [ 441.344415] ? kasan_unpoison_shadow+0x35/0x50 [ 441.348991] ? kasan_kmalloc+0xc7/0xe0 [ 441.352866] ? kmem_cache_alloc_trace+0x31f/0x750 [ 441.357694] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.363216] ? _copy_from_user+0xdf/0x150 [ 441.367352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.372876] ? copy_mount_options+0x288/0x380 [ 441.377357] ksys_mount+0x12d/0x140 [ 441.380972] __x64_sys_mount+0xbe/0x150 [ 441.384934] do_syscall_64+0x1b9/0x820 [ 441.388809] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 441.394159] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.399421] ? trace_hardirqs_on_caller+0x310/0x310 [ 441.404447] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 441.409461] ? recalc_sigpending_tsk+0x180/0x180 [ 441.414214] ? kasan_check_write+0x14/0x20 [ 441.418450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.423280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.428458] RIP: 0033:0x457579 [ 441.431638] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.450524] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.458231] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 06:16:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:37 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x1) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet(0x1e, 0x802, 0x0, &(0x7f0000000080)={0x0}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0x1000, "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"}, &(0x7f00000000c0)=0x1024) sendmsg$key(r1, &(0x7f0000f22000)={0x0, 0x0, &(0x7f0000f22000)={&(0x7f00001d7000)={0x1e, 0x0, 0x401, 0x0, 0x1}, 0x2ac4}}, 0x0) 06:16:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:37 executing program 0 (fault-call:5 fault-nth:17): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020020006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 441.465486] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 441.472742] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 441.479997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 441.487263] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 441.494525] 9pnet: Couldn't grow tag array 06:16:37 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:38 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30e4") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:38 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) fchmod(r0, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1d, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x6611, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0xaa1, 0x9, 0x1, 0x10, r1, 0x2}, 0x2c) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000400)=0x18) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x2, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000180)={0x100, r3, 0x0, 0x1f}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x7fffffff, 0xa, 0x2, 0x8, 0xff, 0x7, 0x9845, 0x100000001, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r4, @in={{0x2, 0x4e20, @remote}}}, 0x84) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) syz_open_pts(r2, 0x200) 06:16:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020d00006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 441.719540] FAULT_INJECTION: forcing a failure. [ 441.719540] name failslab, interval 1, probability 0, space 0, times 0 [ 441.766538] CPU: 0 PID: 28733 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 441.773940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.783289] Call Trace: [ 441.783315] dump_stack+0x1c4/0x2b4 [ 441.783335] ? dump_stack_print_info.cold.2+0x52/0x52 [ 441.794704] ? kernel_text_address+0x79/0xf0 [ 441.799436] should_fail.cold.4+0xa/0x17 [ 441.803496] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 441.808597] ? save_stack+0xa9/0xd0 [ 441.812214] ? save_stack+0x43/0xd0 [ 441.815832] ? kmem_cache_alloc_trace+0x152/0x750 [ 441.820673] ? p9_client_prepare_req.part.8+0x68d/0xc30 [ 441.826064] ? p9_client_rpc+0x1c2/0x1480 [ 441.830211] ? p9_client_create+0xc1b/0x160a [ 441.834610] ? v9fs_session_init+0x217/0x1a70 [ 441.839094] ? v9fs_mount+0x7d/0x8f0 [ 441.842796] ? mount_fs+0xae/0x31d [ 441.846340] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 441.851082] ? do_mount+0x581/0x31f0 [ 441.854784] ? ksys_mount+0x12d/0x140 [ 441.858659] ? __x64_sys_mount+0xbe/0x150 [ 441.862798] ? do_syscall_64+0x1b9/0x820 [ 441.866849] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.872203] ? lock_downgrade+0x900/0x900 [ 441.876338] ? lock_downgrade+0x900/0x900 [ 441.880483] ? trace_hardirqs_on+0xbd/0x310 [ 441.884791] ? kasan_check_read+0x11/0x20 [ 441.888928] ? __debug_object_init+0x57d/0x1290 [ 441.893597] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.899399] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 441.903974] ? ___might_sleep+0x1ed/0x300 [ 441.908114] ? arch_local_save_flags+0x40/0x40 [ 441.912688] ? p9_client_prepare_req.part.8+0x7c2/0xc30 [ 441.918060] __should_failslab+0x124/0x180 [ 441.922286] should_failslab+0x9/0x14 [ 441.926075] __kmalloc+0x2d4/0x760 [ 441.929604] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 441.935048] ? init_wait_entry+0x1c0/0x1c0 [ 441.939274] ? p9_fcall_alloc+0x1e/0x90 [ 441.943239] ? do_raw_spin_lock+0xc1/0x200 [ 441.947469] p9_fcall_alloc+0x1e/0x90 [ 441.951264] p9_client_prepare_req.part.8+0x887/0xc30 [ 441.956454] ? p9_free_req.isra.7+0x140/0x140 [ 441.960954] ? p9_pollwait+0x83/0x210 [ 441.964742] ? p9_conn_create+0x720/0x720 [ 441.968884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.974422] p9_client_rpc+0x1c2/0x1480 [ 441.978404] ? p9_fd_poll+0x1e0/0x2b0 [ 441.982198] ? p9_conn_create+0x565/0x720 [ 441.986344] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 441.991704] ? ksys_dup3+0x680/0x680 [ 441.995435] ? p9_fd_poll+0x2b0/0x2b0 [ 441.999555] ? p9_fd_create+0x1a7/0x3f0 [ 442.003520] ? kasan_unpoison_shadow+0x35/0x50 [ 442.008100] ? kmem_cache_alloc_trace+0x31f/0x750 [ 442.012942] ? p9_fd_show_options+0x1c0/0x1c0 [ 442.017453] p9_client_create+0xc1b/0x160a [ 442.021688] ? p9_client_read+0xc70/0xc70 [ 442.025834] ? fs_reclaim_acquire+0x20/0x20 [ 442.030161] ? lock_downgrade+0x900/0x900 [ 442.034312] ? __lockdep_init_map+0x105/0x590 [ 442.038803] ? kasan_check_write+0x14/0x20 [ 442.043026] ? __init_rwsem+0x1cc/0x2a0 [ 442.046992] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 442.051995] ? kasan_kmalloc+0xc7/0xe0 [ 442.055878] ? save_stack+0x43/0xd0 [ 442.059500] ? memcpy+0x45/0x50 [ 442.062775] v9fs_session_init+0x217/0x1a70 [ 442.067214] ? __might_sleep+0x95/0x190 [ 442.071189] ? v9fs_show_options+0x7e0/0x7e0 [ 442.075598] ? lock_downgrade+0x900/0x900 [ 442.079735] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 442.084757] ? ___might_sleep+0x1ed/0x300 [ 442.088902] ? trace_hardirqs_on+0xbd/0x310 [ 442.093214] ? v9fs_mount+0x62/0x8f0 [ 442.097291] ? kasan_unpoison_shadow+0x35/0x50 [ 442.101864] ? kasan_kmalloc+0xc7/0xe0 [ 442.106231] ? kmem_cache_alloc_trace+0x31f/0x750 [ 442.111072] v9fs_mount+0x7d/0x8f0 [ 442.114601] ? alloc_pages_current+0x114/0x210 [ 442.119175] mount_fs+0xae/0x31d [ 442.122556] vfs_kern_mount.part.35+0xdc/0x4f0 [ 442.127128] ? may_umount+0xb0/0xb0 [ 442.130759] ? _raw_read_unlock+0x2c/0x50 [ 442.134910] ? __get_fs_type+0x97/0xc0 [ 442.138792] do_mount+0x581/0x31f0 [ 442.142327] ? copy_mount_string+0x40/0x40 [ 442.146576] ? kasan_unpoison_shadow+0x35/0x50 [ 442.151155] ? kasan_kmalloc+0xc7/0xe0 [ 442.155124] ? kmem_cache_alloc_trace+0x31f/0x750 [ 442.159966] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.165491] ? _copy_from_user+0xdf/0x150 [ 442.169634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.175160] ? copy_mount_options+0x288/0x380 [ 442.179646] ksys_mount+0x12d/0x140 [ 442.183262] __x64_sys_mount+0xbe/0x150 [ 442.187240] do_syscall_64+0x1b9/0x820 [ 442.191117] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 442.196892] ? syscall_return_slowpath+0x5e0/0x5e0 [ 442.201812] ? trace_hardirqs_on_caller+0x310/0x310 [ 442.206821] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 442.211825] ? recalc_sigpending_tsk+0x180/0x180 [ 442.216568] ? kasan_check_write+0x14/0x20 [ 442.220794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.225629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.230808] RIP: 0033:0x457579 [ 442.233992] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.253404] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 442.261103] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 06:16:38 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 442.268373] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 442.275934] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 442.283190] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 442.290447] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 442.312343] 9pnet: Couldn't grow tag array 06:16:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:38 executing program 0 (fault-call:5 fault-nth:18): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 442.402812] FAULT_INJECTION: forcing a failure. [ 442.402812] name failslab, interval 1, probability 0, space 0, times 0 [ 442.417185] CPU: 1 PID: 28757 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 442.424575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.433930] Call Trace: [ 442.436513] dump_stack+0x1c4/0x2b4 [ 442.440159] ? dump_stack_print_info.cold.2+0x52/0x52 [ 442.445351] ? __kernel_text_address+0xd/0x40 [ 442.449866] ? unwind_get_return_address+0x61/0xa0 [ 442.454802] should_fail.cold.4+0xa/0x17 [ 442.458856] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 442.463950] ? save_stack+0xa9/0xd0 [ 442.467561] ? save_stack+0x43/0xd0 [ 442.471170] ? kasan_kmalloc+0xc7/0xe0 [ 442.475044] ? __kmalloc+0x14e/0x760 [ 442.478748] ? p9_fcall_alloc+0x1e/0x90 [ 442.482710] ? p9_client_prepare_req.part.8+0x887/0xc30 [ 442.488057] ? p9_client_rpc+0x1c2/0x1480 [ 442.492195] ? v9fs_session_init+0x217/0x1a70 [ 442.496675] ? v9fs_mount+0x7d/0x8f0 [ 442.500389] ? mount_fs+0xae/0x31d [ 442.503916] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 442.508655] ? do_mount+0x581/0x31f0 [ 442.512359] ? ksys_mount+0x12d/0x140 [ 442.516161] ? __x64_sys_mount+0xbe/0x150 [ 442.520294] ? do_syscall_64+0x1b9/0x820 [ 442.524359] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.529736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.534566] ? native_iret+0x7/0x7 [ 442.538094] ? error_exit+0xb/0x20 [ 442.541631] ? ___might_sleep+0x1ed/0x300 [ 442.545768] ? lock_release+0x19b/0x970 [ 442.549770] ? arch_local_save_flags+0x40/0x40 [ 442.554348] ? trace_hardirqs_on+0xbd/0x310 [ 442.558684] ? p9_fcall_alloc+0x1e/0x90 [ 442.563178] __should_failslab+0x124/0x180 [ 442.567430] should_failslab+0x9/0x14 [ 442.571232] __kmalloc+0x2d4/0x760 [ 442.571248] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 442.571267] ? init_wait_entry+0x1c0/0x1c0 [ 442.571283] ? p9_fcall_alloc+0x1e/0x90 [ 442.571302] p9_fcall_alloc+0x1e/0x90 [ 442.580270] p9_client_prepare_req.part.8+0x812/0xc30 [ 442.580295] ? p9_free_req.isra.7+0x140/0x140 [ 442.592265] ? p9_pollwait+0x83/0x210 [ 442.601914] ? p9_conn_create+0x720/0x720 [ 442.601930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.601949] p9_client_rpc+0x1c2/0x1480 [ 442.601963] ? p9_fd_poll+0x1e0/0x2b0 [ 442.623135] ? p9_conn_create+0x565/0x720 [ 442.627273] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 442.632630] ? ksys_dup3+0x680/0x680 [ 442.636338] ? p9_fd_poll+0x2b0/0x2b0 [ 442.640125] ? p9_fd_create+0x1a7/0x3f0 [ 442.644086] ? kasan_unpoison_shadow+0x35/0x50 [ 442.648662] ? kmem_cache_alloc_trace+0x31f/0x750 [ 442.653512] ? p9_fd_show_options+0x1c0/0x1c0 [ 442.658011] p9_client_create+0xc1b/0x160a [ 442.662271] ? p9_client_read+0xc70/0xc70 [ 442.666410] ? fs_reclaim_acquire+0x20/0x20 [ 442.670722] ? lock_downgrade+0x900/0x900 [ 442.674862] ? __lockdep_init_map+0x105/0x590 [ 442.679357] ? kasan_check_write+0x14/0x20 [ 442.683597] ? __init_rwsem+0x1cc/0x2a0 [ 442.687573] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 442.692573] ? kasan_kmalloc+0xc7/0xe0 [ 442.696460] ? save_stack+0x43/0xd0 [ 442.700071] ? memcpy+0x45/0x50 [ 442.703350] v9fs_session_init+0x217/0x1a70 [ 442.707678] ? v9fs_show_options+0x7e0/0x7e0 [ 442.712544] ? lock_downgrade+0x900/0x900 [ 442.716677] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 442.721684] ? ___might_sleep+0x1ed/0x300 [ 442.725843] ? trace_hardirqs_on+0xbd/0x310 [ 442.730154] ? native_iret+0x7/0x7 [ 442.733681] ? v9fs_mount+0x62/0x8f0 [ 442.737395] ? kasan_unpoison_shadow+0x35/0x50 [ 442.741965] ? kasan_kmalloc+0xc7/0xe0 [ 442.745850] ? kmem_cache_alloc_trace+0x31f/0x750 [ 442.750678] ? lock_release+0x19b/0x970 [ 442.754648] v9fs_mount+0x7d/0x8f0 [ 442.758188] ? alloc_pages_current+0x114/0x210 [ 442.762772] mount_fs+0xae/0x31d [ 442.766134] vfs_kern_mount.part.35+0xdc/0x4f0 [ 442.770705] ? may_umount+0xb0/0xb0 [ 442.774328] ? _raw_read_unlock+0x2c/0x50 [ 442.778465] ? __get_fs_type+0x97/0xc0 [ 442.782349] do_mount+0x581/0x31f0 [ 442.785880] ? copy_mount_string+0x40/0x40 [ 442.790107] ? kasan_unpoison_shadow+0x35/0x50 [ 442.794675] ? kasan_kmalloc+0xc7/0xe0 [ 442.798553] ? kmem_cache_alloc_trace+0x31f/0x750 [ 442.803405] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.808931] ? _copy_from_user+0xdf/0x150 [ 442.813072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.818602] ? copy_mount_options+0x288/0x380 [ 442.823086] ksys_mount+0x12d/0x140 [ 442.826700] __x64_sys_mount+0xbe/0x150 [ 442.830667] do_syscall_64+0x1b9/0x820 [ 442.834544] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 442.840288] ? syscall_return_slowpath+0x5e0/0x5e0 [ 442.845219] ? trace_hardirqs_on_caller+0x310/0x310 [ 442.850233] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 442.855247] ? recalc_sigpending_tsk+0x180/0x180 [ 442.859989] ? kasan_check_write+0x14/0x20 [ 442.864213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.869136] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.874325] RIP: 0033:0x457579 [ 442.877516] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.896403] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:16:39 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 442.904102] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 442.911359] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 442.918615] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 442.925945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 442.933203] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 442.941258] 9pnet: Couldn't grow tag array 06:16:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020600006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:39 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="58465342000010000000000000000040c0000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 06:16:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404025000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:39 executing program 0 (fault-call:5 fault-nth:19): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:39 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:39 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020009006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 443.209743] FAULT_INJECTION: forcing a failure. [ 443.209743] name failslab, interval 1, probability 0, space 0, times 0 [ 443.220986] CPU: 1 PID: 28801 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 443.228343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.237684] Call Trace: [ 443.240265] dump_stack+0x1c4/0x2b4 [ 443.243894] ? dump_stack_print_info.cold.2+0x52/0x52 [ 443.250044] ? debug_smp_processor_id+0x1c/0x20 [ 443.254809] ? perf_trace_lock+0x14d/0x7a0 [ 443.259064] should_fail.cold.4+0xa/0x17 [ 443.263207] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 443.268307] ? debug_smp_processor_id+0x1c/0x20 [ 443.273441] ? perf_trace_lock+0x14d/0x7a0 [ 443.277666] ? is_bpf_text_address+0xac/0x170 [ 443.282153] ? zap_class+0x640/0x640 [ 443.285859] ? zap_class+0x640/0x640 [ 443.289564] ? __debug_object_init+0x57d/0x1290 [ 443.294223] ? lock_downgrade+0x900/0x900 [ 443.298359] ? lock_downgrade+0x900/0x900 [ 443.302503] ? kasan_check_read+0x11/0x20 [ 443.306640] ? __debug_object_init+0x57d/0x1290 [ 443.311305] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 443.316745] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 443.321317] ? kasan_check_write+0x14/0x20 [ 443.325640] ? lock_acquire+0x1ed/0x520 [ 443.329622] ? p9_client_prepare_req.part.8+0x5d0/0xc30 [ 443.334986] __should_failslab+0x124/0x180 [ 443.339215] should_failslab+0x9/0x14 [ 443.343020] kmem_cache_alloc_trace+0x4b/0x750 [ 443.348531] ? kasan_check_write+0x14/0x20 [ 443.352760] ? do_raw_spin_lock+0xc1/0x200 [ 443.357006] p9_client_prepare_req.part.8+0x68d/0xc30 [ 443.362191] ? p9_free_req.isra.7+0x140/0x140 [ 443.366675] ? p9_pollwait+0x83/0x210 [ 443.370464] ? p9_conn_create+0x720/0x720 [ 443.374614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.380147] p9_client_rpc+0x1c2/0x1480 [ 443.384110] ? p9_fd_poll+0x1e0/0x2b0 [ 443.387899] ? p9_conn_create+0x565/0x720 [ 443.392053] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 443.397423] ? ksys_dup3+0x680/0x680 [ 443.401131] ? p9_fd_poll+0x2b0/0x2b0 [ 443.404921] ? p9_fd_create+0x1a7/0x3f0 [ 443.408888] ? kasan_unpoison_shadow+0x35/0x50 [ 443.413467] ? kmem_cache_alloc_trace+0x31f/0x750 [ 443.418309] ? p9_fd_show_options+0x1c0/0x1c0 [ 443.422805] p9_client_create+0xc1b/0x160a [ 443.427036] ? p9_client_read+0xc70/0xc70 [ 443.431173] ? zap_class+0x640/0x640 [ 443.434878] ? fs_reclaim_acquire+0x20/0x20 [ 443.439190] ? lock_downgrade+0x900/0x900 [ 443.443437] ? __lockdep_init_map+0x105/0x590 [ 443.448873] ? kasan_check_write+0x14/0x20 [ 443.453099] ? __init_rwsem+0x1cc/0x2a0 [ 443.457062] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 443.462210] ? kasan_kmalloc+0xc7/0xe0 [ 443.466091] ? save_stack+0x43/0xd0 [ 443.469719] ? memcpy+0x45/0x50 [ 443.472995] v9fs_session_init+0x217/0x1a70 [ 443.477325] ? __might_sleep+0x95/0x190 [ 443.481291] ? zap_class+0x640/0x640 [ 443.485009] ? v9fs_show_options+0x7e0/0x7e0 [ 443.489407] ? lock_downgrade+0x900/0x900 [ 443.493559] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 443.498572] ? ___might_sleep+0x1ed/0x300 [ 443.502713] ? trace_hardirqs_on+0xbd/0x310 [ 443.507036] ? v9fs_mount+0x62/0x8f0 [ 443.510765] ? kasan_unpoison_shadow+0x35/0x50 [ 443.515346] ? kasan_kmalloc+0xc7/0xe0 [ 443.519230] ? kmem_cache_alloc_trace+0x31f/0x750 [ 443.524069] ? zap_class+0x640/0x640 [ 443.527781] v9fs_mount+0x7d/0x8f0 [ 443.531309] ? alloc_pages_current+0x114/0x210 [ 443.535888] mount_fs+0xae/0x31d [ 443.539349] vfs_kern_mount.part.35+0xdc/0x4f0 [ 443.543927] ? may_umount+0xb0/0xb0 [ 443.548514] ? _raw_read_unlock+0x2c/0x50 [ 443.553493] ? __get_fs_type+0x97/0xc0 [ 443.557375] do_mount+0x581/0x31f0 [ 443.560904] ? kasan_check_read+0x11/0x20 [ 443.565044] ? do_raw_spin_unlock+0xa7/0x2f0 [ 443.569443] ? copy_mount_string+0x40/0x40 [ 443.573665] ? kasan_check_write+0x14/0x20 [ 443.577894] ? kasan_unpoison_shadow+0x35/0x50 [ 443.582464] ? kasan_kmalloc+0xc7/0xe0 [ 443.586349] ? kmem_cache_alloc_trace+0x31f/0x750 [ 443.591188] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.596731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.602278] ? copy_mount_options+0x288/0x380 [ 443.606768] ksys_mount+0x12d/0x140 [ 443.610391] __x64_sys_mount+0xbe/0x150 [ 443.614363] do_syscall_64+0x1b9/0x820 [ 443.618249] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 443.623607] ? syscall_return_slowpath+0x5e0/0x5e0 [ 443.628550] ? trace_hardirqs_on_caller+0x310/0x310 [ 443.633556] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 443.638564] ? recalc_sigpending_tsk+0x180/0x180 [ 443.643307] ? kasan_check_write+0x14/0x20 [ 443.648513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.653366] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.658567] RIP: 0033:0x457579 [ 443.661756] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.680648] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 443.688348] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 443.695606] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 443.702865] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 06:16:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:40 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30e3") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 443.710122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 443.717382] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 443.724656] 9pnet: Couldn't grow tag array 06:16:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:40 executing program 0 (fault-call:5 fault-nth:20): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 443.759072] XFS (loop5): Filesystem has a realtime volume, use rtdev=device option [ 443.780470] XFS (loop5): RT mount failed 06:16:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020a00006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:40 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30d4") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 443.898745] FAULT_INJECTION: forcing a failure. [ 443.898745] name failslab, interval 1, probability 0, space 0, times 0 [ 443.910582] CPU: 0 PID: 28824 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 443.917980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.927326] Call Trace: [ 443.929921] dump_stack+0x1c4/0x2b4 [ 443.929940] ? dump_stack_print_info.cold.2+0x52/0x52 [ 443.929960] ? kernel_text_address+0x79/0xf0 [ 443.943162] should_fail.cold.4+0xa/0x17 [ 443.947526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.953076] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 443.958197] ? debug_smp_processor_id+0x1c/0x20 [ 443.962881] ? perf_trace_lock+0x14d/0x7a0 [ 443.962898] ? zap_class+0x640/0x640 [ 443.962918] ? p9_client_prepare_req.part.8+0x68d/0xc30 [ 443.976195] ? p9_client_rpc+0x1c2/0x1480 [ 443.980375] ? p9_client_create+0xc1b/0x160a [ 443.984789] ? v9fs_session_init+0x217/0x1a70 [ 443.984803] ? v9fs_mount+0x7d/0x8f0 [ 443.984816] ? mount_fs+0xae/0x31d [ 443.984834] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 444.001262] ? do_mount+0x581/0x31f0 [ 444.004965] ? ksys_mount+0x12d/0x140 [ 444.008755] ? __x64_sys_mount+0xbe/0x150 [ 444.012987] ? do_syscall_64+0x1b9/0x820 [ 444.017037] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.022391] ? lock_downgrade+0x900/0x900 [ 444.026529] ? lock_downgrade+0x900/0x900 [ 444.030673] ? kasan_check_read+0x11/0x20 [ 444.034809] ? __debug_object_init+0x57d/0x1290 [ 444.039471] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 444.044045] ? ___might_sleep+0x1ed/0x300 [ 444.048568] ? arch_local_save_flags+0x40/0x40 [ 444.053146] ? p9_client_prepare_req.part.8+0x7c2/0xc30 [ 444.058509] __should_failslab+0x124/0x180 [ 444.062736] should_failslab+0x9/0x14 [ 444.066615] __kmalloc+0x2d4/0x760 [ 444.070165] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 444.075616] ? init_wait_entry+0x1c0/0x1c0 [ 444.079839] ? p9_fcall_alloc+0x1e/0x90 [ 444.083801] ? do_raw_spin_lock+0xc1/0x200 [ 444.088031] p9_fcall_alloc+0x1e/0x90 [ 444.091825] p9_client_prepare_req.part.8+0x887/0xc30 [ 444.097013] ? p9_free_req.isra.7+0x140/0x140 [ 444.101499] ? p9_pollwait+0x83/0x210 [ 444.105802] ? p9_conn_create+0x720/0x720 [ 444.109942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.115471] p9_client_rpc+0x1c2/0x1480 [ 444.119433] ? p9_fd_poll+0x1e0/0x2b0 [ 444.123234] ? p9_conn_create+0x565/0x720 [ 444.127395] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 444.132754] ? ksys_dup3+0x680/0x680 [ 444.136457] ? p9_fd_poll+0x2b0/0x2b0 [ 444.140247] ? p9_fd_create+0x1a7/0x3f0 [ 444.144224] ? kasan_unpoison_shadow+0x35/0x50 [ 444.149182] ? kmem_cache_alloc_trace+0x31f/0x750 [ 444.154034] ? p9_fd_show_options+0x1c0/0x1c0 [ 444.158540] p9_client_create+0xc1b/0x160a [ 444.162776] ? p9_client_read+0xc70/0xc70 [ 444.166916] ? zap_class+0x640/0x640 [ 444.170633] ? fs_reclaim_acquire+0x20/0x20 [ 444.174945] ? lock_downgrade+0x900/0x900 [ 444.179087] ? __lockdep_init_map+0x105/0x590 [ 444.183577] ? kasan_check_write+0x14/0x20 [ 444.187802] ? __init_rwsem+0x1cc/0x2a0 [ 444.191771] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 444.196783] ? kasan_kmalloc+0xc7/0xe0 [ 444.200671] ? save_stack+0x43/0xd0 [ 444.204286] ? memcpy+0x45/0x50 [ 444.207560] v9fs_session_init+0x217/0x1a70 [ 444.211873] ? __might_sleep+0x95/0x190 [ 444.215838] ? zap_class+0x640/0x640 [ 444.219543] ? v9fs_show_options+0x7e0/0x7e0 [ 444.223940] ? lock_downgrade+0x900/0x900 [ 444.228079] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 444.233089] ? ___might_sleep+0x1ed/0x300 [ 444.237230] ? trace_hardirqs_on+0xbd/0x310 [ 444.241539] ? v9fs_mount+0x62/0x8f0 [ 444.245259] ? kasan_unpoison_shadow+0x35/0x50 [ 444.250216] ? kasan_kmalloc+0xc7/0xe0 [ 444.254098] ? kmem_cache_alloc_trace+0x31f/0x750 [ 444.258942] ? zap_class+0x640/0x640 [ 444.262648] v9fs_mount+0x7d/0x8f0 [ 444.266175] ? alloc_pages_current+0x114/0x210 [ 444.271077] mount_fs+0xae/0x31d [ 444.274439] vfs_kern_mount.part.35+0xdc/0x4f0 [ 444.279015] ? may_umount+0xb0/0xb0 [ 444.282643] ? _raw_read_unlock+0x2c/0x50 [ 444.286780] ? __get_fs_type+0x97/0xc0 [ 444.290662] do_mount+0x581/0x31f0 [ 444.294206] ? kasan_check_read+0x11/0x20 [ 444.298350] ? do_raw_spin_unlock+0xa7/0x2f0 [ 444.302761] ? copy_mount_string+0x40/0x40 [ 444.306985] ? kasan_check_write+0x14/0x20 [ 444.311224] ? kasan_unpoison_shadow+0x35/0x50 [ 444.315795] ? kasan_kmalloc+0xc7/0xe0 [ 444.319679] ? kmem_cache_alloc_trace+0x31f/0x750 [ 444.324515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.330047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.335571] ? copy_mount_options+0x288/0x380 [ 444.340078] ksys_mount+0x12d/0x140 [ 444.343698] __x64_sys_mount+0xbe/0x150 [ 444.348011] do_syscall_64+0x1b9/0x820 [ 444.351888] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 444.357242] ? syscall_return_slowpath+0x5e0/0x5e0 [ 444.362160] ? trace_hardirqs_on_caller+0x310/0x310 [ 444.367200] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 444.372214] ? recalc_sigpending_tsk+0x180/0x180 [ 444.376961] ? kasan_check_write+0x14/0x20 [ 444.381201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.386037] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.391214] RIP: 0033:0x457579 [ 444.394399] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.413287] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.420986] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 444.428242] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 444.435497] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 444.442755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 06:16:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:40 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="58465342000010000000000000000040c0000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) [ 444.450347] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:40 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020700006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 444.532235] XFS (loop5): Filesystem has a realtime volume, use rtdev=device option [ 444.554781] XFS (loop5): RT mount failed 06:16:41 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:41 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="58465342000010000000000000000040c0000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f00000001c0)) 06:16:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020009006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 444.802394] 9pnet: Couldn't grow tag array [ 444.818090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.840815] XFS (loop5): Filesystem has a realtime volume, use rtdev=device option 06:16:41 executing program 0 (fault-call:5 fault-nth:21): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020200006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:41 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30d5") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 444.853063] XFS (loop5): RT mount failed 06:16:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000076766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 444.943667] FAULT_INJECTION: forcing a failure. [ 444.943667] name failslab, interval 1, probability 0, space 0, times 0 [ 444.982561] CPU: 1 PID: 28902 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 444.989958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.999331] Call Trace: [ 445.001936] dump_stack+0x1c4/0x2b4 [ 445.005591] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.010793] ? __kernel_text_address+0xd/0x40 [ 445.015301] ? unwind_get_return_address+0x61/0xa0 [ 445.020243] should_fail.cold.4+0xa/0x17 [ 445.020263] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.020279] ? save_stack+0xa9/0xd0 [ 445.020292] ? save_stack+0x43/0xd0 [ 445.020301] ? kasan_kmalloc+0xc7/0xe0 [ 445.020319] ? __kmalloc+0x14e/0x760 06:16:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c74424040200000d6766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 445.029452] ? p9_fcall_alloc+0x1e/0x90 [ 445.029469] ? p9_client_prepare_req.part.8+0x887/0xc30 [ 445.029483] ? p9_client_rpc+0x1c2/0x1480 [ 445.029500] ? v9fs_session_init+0x217/0x1a70 [ 445.029518] ? v9fs_mount+0x7d/0x8f0 [ 445.036745] ? mount_fs+0xae/0x31d [ 445.036763] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 445.036775] ? do_mount+0x581/0x31f0 [ 445.036789] ? ksys_mount+0x12d/0x140 [ 445.044355] ? __x64_sys_mount+0xbe/0x150 [ 445.044371] ? do_syscall_64+0x1b9/0x820 [ 445.044386] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.044402] ? __x64_sys_mount+0xbe/0x150 [ 445.074709] ? do_syscall_64+0x1b9/0x820 [ 445.074726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.074741] ? lock_downgrade+0x900/0x900 [ 445.074757] ? lock_downgrade+0x900/0x900 [ 445.082248] ? kasan_check_read+0x11/0x20 [ 445.082263] ? __debug_object_init+0x57d/0x1290 [ 445.082278] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 445.082298] ? ___might_sleep+0x1ed/0x300 [ 445.099976] ? arch_local_save_flags+0x40/0x40 [ 445.099991] ? trace_hardirqs_on+0xbd/0x310 [ 445.100008] ? p9_fcall_alloc+0x1e/0x90 [ 445.100039] __should_failslab+0x124/0x180 [ 445.100051] should_failslab+0x9/0x14 [ 445.100065] __kmalloc+0x2d4/0x760 [ 445.100077] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 445.100094] ? init_wait_entry+0x1c0/0x1c0 [ 445.109546] ? p9_fcall_alloc+0x1e/0x90 [ 445.109564] p9_fcall_alloc+0x1e/0x90 [ 445.109581] p9_client_prepare_req.part.8+0x812/0xc30 [ 445.109603] ? p9_free_req.isra.7+0x140/0x140 [ 445.187631] ? p9_pollwait+0x83/0x210 [ 445.191427] ? p9_conn_create+0x720/0x720 [ 445.195565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.201091] p9_client_rpc+0x1c2/0x1480 [ 445.205059] ? p9_fd_poll+0x1e0/0x2b0 [ 445.208860] ? p9_conn_create+0x565/0x720 [ 445.212996] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 445.218352] ? ksys_dup3+0x680/0x680 [ 445.222052] ? p9_fd_poll+0x2b0/0x2b0 [ 445.225838] ? p9_fd_create+0x1a7/0x3f0 [ 445.229801] ? kasan_unpoison_shadow+0x35/0x50 [ 445.234387] ? kmem_cache_alloc_trace+0x31f/0x750 [ 445.239240] ? p9_fd_show_options+0x1c0/0x1c0 [ 445.243731] p9_client_create+0xc1b/0x160a [ 445.248898] ? p9_client_read+0xc70/0xc70 [ 445.253064] ? zap_class+0x640/0x640 [ 445.256765] ? fs_reclaim_acquire+0x20/0x20 [ 445.261072] ? lock_downgrade+0x900/0x900 [ 445.265210] ? __lockdep_init_map+0x105/0x590 [ 445.269695] ? kasan_check_write+0x14/0x20 [ 445.274413] ? __init_rwsem+0x1cc/0x2a0 [ 445.278376] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 445.283388] ? kasan_kmalloc+0xc7/0xe0 [ 445.287270] ? save_stack+0x43/0xd0 [ 445.290886] ? memcpy+0x45/0x50 [ 445.294162] v9fs_session_init+0x217/0x1a70 [ 445.298476] ? __might_sleep+0x95/0x190 [ 445.302441] ? zap_class+0x640/0x640 [ 445.306231] ? v9fs_show_options+0x7e0/0x7e0 [ 445.310642] ? lock_downgrade+0x900/0x900 [ 445.314778] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 445.319786] ? ___might_sleep+0x1ed/0x300 [ 445.323920] ? trace_hardirqs_on+0xbd/0x310 [ 445.328247] ? v9fs_mount+0x62/0x8f0 [ 445.331950] ? kasan_unpoison_shadow+0x35/0x50 [ 445.336517] ? kasan_kmalloc+0xc7/0xe0 [ 445.340397] ? kmem_cache_alloc_trace+0x31f/0x750 [ 445.345224] ? zap_class+0x640/0x640 [ 445.349932] v9fs_mount+0x7d/0x8f0 [ 445.353456] ? alloc_pages_current+0x114/0x210 [ 445.358027] mount_fs+0xae/0x31d [ 445.361384] vfs_kern_mount.part.35+0xdc/0x4f0 [ 445.365955] ? may_umount+0xb0/0xb0 [ 445.369568] ? _raw_read_unlock+0x2c/0x50 [ 445.373702] ? __get_fs_type+0x97/0xc0 [ 445.377577] do_mount+0x581/0x31f0 [ 445.381120] ? kasan_check_read+0x11/0x20 [ 445.385255] ? do_raw_spin_unlock+0xa7/0x2f0 [ 445.389649] ? copy_mount_string+0x40/0x40 [ 445.393869] ? kasan_check_write+0x14/0x20 [ 445.398101] ? kasan_unpoison_shadow+0x35/0x50 [ 445.402685] ? kasan_kmalloc+0xc7/0xe0 [ 445.406562] ? kmem_cache_alloc_trace+0x31f/0x750 [ 445.411394] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.416920] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.422455] ? copy_mount_options+0x288/0x380 [ 445.426936] ksys_mount+0x12d/0x140 [ 445.430549] __x64_sys_mount+0xbe/0x150 [ 445.434527] do_syscall_64+0x1b9/0x820 [ 445.438401] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 445.443751] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.449667] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.454673] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 445.459765] ? recalc_sigpending_tsk+0x180/0x180 [ 445.464507] ? kasan_check_write+0x14/0x20 [ 445.468751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.473587] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.478765] RIP: 0033:0x457579 06:16:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 445.481951] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.500836] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.508536] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 445.515790] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 445.523046] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 445.530301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 445.537571] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:42 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d766070") sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x18}, 0x0) 06:16:42 executing program 0 (fault-call:5 fault-nth:22): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 445.631097] 9pnet: Couldn't grow tag array 06:16:42 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040), 0x13f, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xffffffffa0020000}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) [ 445.736392] FAULT_INJECTION: forcing a failure. [ 445.736392] name failslab, interval 1, probability 0, space 0, times 0 [ 445.767428] CPU: 0 PID: 28936 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 445.774827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.774832] Call Trace: [ 445.774863] dump_stack+0x1c4/0x2b4 [ 445.790503] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.795703] should_fail.cold.4+0xa/0x17 [ 445.799767] ? prepare_to_wait_event+0x39f/0xa10 [ 445.804534] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.809647] ? pdu_read+0x90/0xd0 [ 445.813108] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.818658] ? p9pdu_readf+0xb6a/0x2130 [ 445.822644] ? p9pdu_writef+0xe0/0xe0 [ 445.826458] ? prepare_to_wait_event+0x39f/0xa10 [ 445.831236] ? prepare_to_wait_exclusive+0x480/0x480 [ 445.836346] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.836361] ? p9_parse_header+0x3ea/0x510 [ 445.836379] ? ___might_sleep+0x1ed/0x300 [ 445.850581] ? arch_local_save_flags+0x40/0x40 [ 445.855169] ? p9_client_cb+0x60/0x60 [ 445.858978] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.864522] ? trace_9p_protocol_dump+0xe0/0x3a0 [ 445.869286] __should_failslab+0x124/0x180 [ 445.873521] should_failslab+0x9/0x14 [ 445.877327] __kmalloc+0x2d4/0x760 [ 445.880975] ? memcpy+0x45/0x50 [ 445.884248] ? p9pdu_readf+0x529/0x2130 [ 445.884264] p9pdu_readf+0x529/0x2130 [ 445.884280] ? p9pdu_writef+0xe0/0xe0 [ 445.895818] ? ksys_dup3+0x680/0x680 [ 445.899534] ? p9_fd_poll+0x2b0/0x2b0 [ 445.903330] ? p9_fd_create+0x1a7/0x3f0 [ 445.903345] ? kasan_unpoison_shadow+0x35/0x50 [ 445.903363] ? finish_wait+0x430/0x430 [ 445.911890] ? kmem_cache_alloc_trace+0x31f/0x750 [ 445.911911] ? p9_fd_show_options+0x1c0/0x1c0 [ 445.925104] p9_client_create+0xcee/0x160a [ 445.929353] ? p9_client_read+0xc70/0xc70 [ 445.933540] ? zap_class+0x640/0x640 [ 445.937287] ? fs_reclaim_acquire+0x20/0x20 [ 445.941618] ? lock_downgrade+0x900/0x900 [ 445.945785] ? __lockdep_init_map+0x105/0x590 [ 445.945803] ? kasan_check_write+0x14/0x20 [ 445.945813] ? __init_rwsem+0x1cc/0x2a0 [ 445.945833] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 445.955486] ? kasan_kmalloc+0xc7/0xe0 [ 445.955505] ? save_stack+0x43/0xd0 [ 445.955517] ? memcpy+0x45/0x50 [ 445.955538] v9fs_session_init+0x217/0x1a70 [ 445.964492] ? __might_sleep+0x95/0x190 [ 445.964507] ? zap_class+0x640/0x640 [ 445.964526] ? v9fs_show_options+0x7e0/0x7e0 [ 445.972000] ? lock_downgrade+0x900/0x900 [ 445.972016] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 445.972030] ? ___might_sleep+0x1ed/0x300 [ 445.972060] ? trace_hardirqs_on+0xbd/0x310 [ 445.979619] ? v9fs_mount+0x62/0x8f0 [ 445.979635] ? kasan_unpoison_shadow+0x35/0x50 [ 445.979647] ? kasan_kmalloc+0xc7/0xe0 [ 445.979670] ? kmem_cache_alloc_trace+0x31f/0x750 [ 445.987426] ? zap_class+0x640/0x640 [ 445.987444] v9fs_mount+0x7d/0x8f0 06:16:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020900006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:42 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 445.987454] ? alloc_pages_current+0x114/0x210 [ 445.987470] mount_fs+0xae/0x31d [ 445.995995] vfs_kern_mount.part.35+0xdc/0x4f0 [ 445.996012] ? may_umount+0xb0/0xb0 [ 445.996031] ? _raw_read_unlock+0x2c/0x50 [ 446.005188] ? __get_fs_type+0x97/0xc0 [ 446.005205] do_mount+0x581/0x31f0 [ 446.005216] ? kasan_check_read+0x11/0x20 [ 446.005234] ? do_raw_spin_unlock+0xa7/0x2f0 [ 446.013229] ? copy_mount_string+0x40/0x40 [ 446.013242] ? kasan_check_write+0x14/0x20 [ 446.013256] ? kasan_unpoison_shadow+0x35/0x50 [ 446.013271] ? kasan_kmalloc+0xc7/0xe0 [ 446.021723] ? kmem_cache_alloc_trace+0x31f/0x750 [ 446.021741] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.021759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.030278] ? copy_mount_options+0x288/0x380 [ 446.030294] ksys_mount+0x12d/0x140 [ 446.030308] __x64_sys_mount+0xbe/0x150 [ 446.030324] do_syscall_64+0x1b9/0x820 [ 446.030341] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 446.038425] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.038442] ? trace_hardirqs_on_caller+0x310/0x310 [ 446.038457] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 446.038475] ? recalc_sigpending_tsk+0x180/0x180 [ 446.066030] ? kasan_check_write+0x14/0x20 [ 446.066062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.066081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.074689] RIP: 0033:0x457579 [ 446.074705] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.074716] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 446.189468] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 446.196721] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 446.203998] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 446.211266] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 446.218533] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:42 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000036766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:42 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:42 executing program 5: syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, &(0x7f0000000540)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x7000000) 06:16:42 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:42 executing program 0 (fault-call:5 fault-nth:23): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:42 executing program 5: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000000000000003"]}) [ 446.317577] FAULT_INJECTION: forcing a failure. [ 446.317577] name failslab, interval 1, probability 0, space 0, times 0 [ 446.328811] CPU: 0 PID: 28974 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 446.336196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.345540] Call Trace: [ 446.345564] dump_stack+0x1c4/0x2b4 [ 446.345581] ? dump_stack_print_info.cold.2+0x52/0x52 [ 446.345598] ? update_curr+0x4ec/0xbe0 [ 446.361657] should_fail.cold.4+0xa/0x17 06:16:42 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x1, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000100), &(0x7f0000000480)=[{}, {}, {}]}, 0x108) shutdown(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x0, @remote}}, 0x0, 0x0, 0x0, "50fa799ba124e5fe2ec1455631c39f4a4a8738c302db59e86264277962ab0017879c27f12846f04d2ff650b549a0dd6edb14efa9caf0f5b202883a4fdde4d4803b389c782cc6cbfa839f9da66e3f9014"}, 0xd8) [ 446.365724] ? check_preemption_disabled+0x48/0x200 [ 446.370747] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.375860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.381400] ? __perf_event_task_sched_out+0x337/0x1ab0 [ 446.386766] ? debug_smp_processor_id+0x1c/0x20 [ 446.391540] ? update_load_avg+0x2470/0x2470 [ 446.391560] ? mark_held_locks+0x130/0x130 [ 446.400189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.400203] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 446.400220] ? trace_hardirqs_on+0x310/0x310 [ 446.415303] ? perf_sched_cb_inc+0x350/0x350 [ 446.419724] ? run_rebalance_domains+0x500/0x500 [ 446.424483] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 446.429591] ? finish_task_switch+0x1f5/0x900 [ 446.434091] ? lock_downgrade+0x900/0x900 [ 446.438239] ? finish_task_switch+0x1b5/0x900 [ 446.442735] __should_failslab+0x124/0x180 [ 446.447309] should_failslab+0x9/0x14 [ 446.451110] kmem_cache_alloc+0x47/0x730 [ 446.455165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.460707] radix_tree_node_alloc.constprop.18+0x1f7/0x370 [ 446.466419] radix_tree_extend+0x294/0x660 [ 446.470653] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 446.476559] ? lock_downgrade+0x900/0x900 [ 446.480727] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 446.486525] ? kasan_check_read+0x11/0x20 [ 446.490679] idr_get_free+0x83d/0xec0 [ 446.494484] ? is_bpf_text_address+0xd3/0x170 [ 446.498984] ? ida_pre_get+0x130/0x130 [ 446.502882] ? __save_stack_trace+0x8d/0xf0 [ 446.507208] ? mark_held_locks+0x130/0x130 [ 446.511446] ? __sanitizer_cov_trace_cmp4+0x16/0x20 06:16:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c0ae489339775ee84cadf9e284de8e56bbf1205119cd3c54eb0418f5fbd7a6e61b24fa1c7865f672d4628bb8fc4a461931bb5adf55dc7074d6d850a8036676"}, 0x60) dup2(r0, r1) [ 446.516459] ? mark_held_locks+0x130/0x130 [ 446.520712] ? modules_open+0xa0/0xa0 [ 446.524518] idr_alloc_u32+0x201/0x3f0 [ 446.528405] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 446.533245] ? p9_idpool_get+0x23/0x90 [ 446.537134] idr_alloc+0x111/0x1b0 [ 446.540671] ? idr_alloc_u32+0x3f0/0x3f0 [ 446.544733] ? do_raw_spin_lock+0xc1/0x200 [ 446.549341] p9_idpool_get+0x3d/0x90 [ 446.553073] p9_client_prepare_req.part.8+0xec/0xc30 [ 446.558176] ? __kernel_text_address+0xd/0x40 [ 446.562678] ? unwind_get_return_address+0x61/0xa0 [ 446.567618] ? p9_free_req.isra.7+0x140/0x140 [ 446.572127] ? idr_get_free+0xa83/0xec0 [ 446.576105] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.581637] ? replace_slot+0x151/0x520 [ 446.581655] p9_client_rpc+0x1c2/0x1480 [ 446.589578] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 446.589591] ? is_bpf_text_address+0xd3/0x170 [ 446.589609] ? __radix_tree_replace+0x258/0x3c0 [ 446.604095] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.609668] ? node_tag_clear+0xc2/0x1c0 [ 446.613736] ? p9_fid_create+0x1e2/0x2b0 [ 446.617801] ? lock_downgrade+0x900/0x900 [ 446.621947] ? idr_alloc_u32+0x235/0x3f0 [ 446.621964] ? trace_hardirqs_on+0xbd/0x310 [ 446.630339] ? kasan_check_read+0x11/0x20 [ 446.630353] ? p9_fid_create+0x1e2/0x2b0 [ 446.630371] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.643983] ? kasan_check_write+0x14/0x20 [ 446.648601] ? do_raw_spin_lock+0xc1/0x200 [ 446.652823] p9_client_attach+0x18c/0x860 [ 446.656956] ? debug_check_no_obj_freed+0x305/0x58d [ 446.661966] ? p9_client_walk+0xb30/0xb30 [ 446.666105] ? check_preemption_disabled+0x48/0x200 [ 446.671104] ? trace_hardirqs_on+0xbd/0x310 [ 446.675409] ? v9fs_session_init+0xd46/0x1a70 [ 446.679886] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 446.685333] ? __kasan_slab_free+0x119/0x150 [ 446.689725] v9fs_session_init+0xf4d/0x1a70 [ 446.694039] ? v9fs_session_init+0xf4d/0x1a70 [ 446.698519] ? __might_sleep+0x95/0x190 [ 446.702492] ? v9fs_show_options+0x7e0/0x7e0 [ 446.706882] ? lock_downgrade+0x900/0x900 [ 446.711020] ? ___might_sleep+0x1ed/0x300 [ 446.715151] ? trace_hardirqs_on+0xbd/0x310 [ 446.719453] ? v9fs_mount+0x62/0x8f0 [ 446.723148] ? kasan_unpoison_shadow+0x35/0x50 [ 446.727713] ? kasan_kmalloc+0xc7/0xe0 [ 446.731600] ? kmem_cache_alloc_trace+0x31f/0x750 [ 446.736432] v9fs_mount+0x7d/0x8f0 [ 446.739954] ? alloc_pages_current+0x114/0x210 [ 446.744520] mount_fs+0xae/0x31d [ 446.747875] vfs_kern_mount.part.35+0xdc/0x4f0 [ 446.752442] ? may_umount+0xb0/0xb0 [ 446.756066] ? _raw_read_unlock+0x2c/0x50 [ 446.760199] ? __get_fs_type+0x97/0xc0 [ 446.764437] do_mount+0x581/0x31f0 [ 446.767971] ? copy_mount_string+0x40/0x40 [ 446.772204] ? kasan_unpoison_shadow+0x35/0x50 [ 446.776768] ? kasan_kmalloc+0xc7/0xe0 [ 446.780640] ? kmem_cache_alloc_trace+0x31f/0x750 [ 446.785466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.791024] ? _copy_from_user+0xdf/0x150 [ 446.795167] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.800698] ? copy_mount_options+0x288/0x380 [ 446.805186] ksys_mount+0x12d/0x140 [ 446.808798] __x64_sys_mount+0xbe/0x150 [ 446.812768] do_syscall_64+0x1b9/0x820 [ 446.816647] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 446.822015] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.826929] ? trace_hardirqs_on_caller+0x310/0x310 [ 446.831932] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 446.836946] ? recalc_sigpending_tsk+0x180/0x180 [ 446.841726] ? kasan_check_write+0x14/0x20 [ 446.845946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.850773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.855956] RIP: 0033:0x457579 [ 446.859158] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.878471] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 446.886179] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 446.893437] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 446.900688] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 446.907943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 446.915212] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:43 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020005006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:43 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)="697036746e6c30f6") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000004180)={&(0x7f0000003e80)=@can, 0x80, &(0x7f0000004040), 0x0, &(0x7f0000004080)=""/205, 0xcd}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000e640)={&(0x7f0000000000)={0x10, 0xf0ffffff00000000}, 0xc, &(0x7f0000000080)={&(0x7f000000dd40)={0x20, r2, 0x105, 0x0, 0x0, {0x3802}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x0) 06:16:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:43 executing program 0 (fault-call:5 fault-nth:24): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:43 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3ffffffffff0600, 0x0) 06:16:43 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)='ns\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020050006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 447.125885] FAULT_INJECTION: forcing a failure. [ 447.125885] name failslab, interval 1, probability 0, space 0, times 0 [ 447.168142] CPU: 1 PID: 29017 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 447.175547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.185662] Call Trace: [ 447.188252] dump_stack+0x1c4/0x2b4 [ 447.188270] ? dump_stack_print_info.cold.2+0x52/0x52 [ 447.188292] should_fail.cold.4+0xa/0x17 [ 447.201142] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 447.206253] ? lock_downgrade+0x900/0x900 [ 447.210419] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 447.210466] ? kasan_check_read+0x11/0x20 [ 447.210480] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 447.210497] ? rcu_bh_qs+0xc0/0xc0 [ 447.225690] ? unwind_dump+0x190/0x190 [ 447.225710] ? is_bpf_text_address+0xd3/0x170 [ 447.225725] ? zap_class+0x640/0x640 [ 447.241318] ? fs_reclaim_acquire+0x20/0x20 [ 447.245656] ? lock_downgrade+0x900/0x900 [ 447.245674] ? ___might_sleep+0x1ed/0x300 [ 447.245691] ? arch_local_save_flags+0x40/0x40 [ 447.258552] __should_failslab+0x124/0x180 [ 447.262788] should_failslab+0x9/0x14 [ 447.262805] kmem_cache_alloc_trace+0x2d7/0x750 [ 447.262821] ? trace_hardirqs_off+0xb8/0x310 [ 447.271249] ? kasan_check_read+0x11/0x20 [ 447.271265] ? do_raw_spin_unlock+0xa7/0x2f0 [ 447.271277] ? trace_hardirqs_on+0x310/0x310 [ 447.271296] p9_fid_create+0x49/0x2b0 [ 447.280788] p9_client_attach+0xbc/0x860 [ 447.280804] ? debug_check_no_obj_freed+0x305/0x58d [ 447.280821] ? p9_client_walk+0xb30/0xb30 [ 447.289650] ? check_preemption_disabled+0x48/0x200 [ 447.289665] ? trace_hardirqs_on+0xbd/0x310 [ 447.289684] ? v9fs_session_init+0xd46/0x1a70 [ 447.297524] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 447.297538] ? __kasan_slab_free+0x119/0x150 [ 447.297557] v9fs_session_init+0xf4d/0x1a70 [ 447.320495] ? v9fs_session_init+0xf4d/0x1a70 [ 447.320514] ? __might_sleep+0x95/0x190 [ 447.320532] ? v9fs_show_options+0x7e0/0x7e0 [ 447.320548] ? lock_downgrade+0x900/0x900 [ 447.334679] ? ___might_sleep+0x1ed/0x300 [ 447.355813] ? trace_hardirqs_on+0xbd/0x310 [ 447.360143] ? v9fs_mount+0x62/0x8f0 [ 447.363868] ? kasan_unpoison_shadow+0x35/0x50 [ 447.368466] ? kasan_kmalloc+0xc7/0xe0 [ 447.372359] ? kmem_cache_alloc_trace+0x31f/0x750 [ 447.378181] ? zap_class+0x640/0x640 [ 447.381905] v9fs_mount+0x7d/0x8f0 [ 447.385458] ? alloc_pages_current+0x114/0x210 [ 447.390047] mount_fs+0xae/0x31d [ 447.393428] vfs_kern_mount.part.35+0xdc/0x4f0 [ 447.398025] ? may_umount+0xb0/0xb0 [ 447.401655] ? _raw_read_unlock+0x2c/0x50 [ 447.405807] ? __get_fs_type+0x97/0xc0 [ 447.409703] do_mount+0x581/0x31f0 [ 447.413252] ? copy_mount_string+0x40/0x40 [ 447.417511] ? kasan_unpoison_shadow+0x35/0x50 [ 447.417525] ? kasan_kmalloc+0xc7/0xe0 [ 447.417541] ? kmem_cache_alloc_trace+0x31f/0x750 [ 447.417560] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.426020] ? _copy_from_user+0xdf/0x150 [ 447.426038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.426053] ? copy_mount_options+0x288/0x380 [ 447.436403] ksys_mount+0x12d/0x140 [ 447.436430] __x64_sys_mount+0xbe/0x150 [ 447.436465] do_syscall_64+0x1b9/0x820 [ 447.446105] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 447.446122] ? syscall_return_slowpath+0x5e0/0x5e0 [ 447.446140] ? trace_hardirqs_on_caller+0x310/0x310 [ 447.454222] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 447.454241] ? recalc_sigpending_tsk+0x180/0x180 [ 447.487970] ? kasan_check_write+0x14/0x20 [ 447.492197] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.497033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.502231] RIP: 0033:0x457579 06:16:43 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) 06:16:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 447.505437] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.524324] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 447.532022] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 447.539283] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 447.546539] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 447.553797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 447.561072] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020007006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:44 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000001500)=""/130, 0x82}}], 0x1, 0x0, &(0x7f0000001940)={0x77359400}) 06:16:44 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2000, 0x4) getdents(r1, &(0x7f0000000280)=""/210, 0xd2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback, 0x0}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$sndseq(r3, &(0x7f00000000c0)=[{0x80000001, 0x2, 0xd3, 0x8000, @time={0x0, 0x989680}, {0x0, 0xd5}, {0x3, 0x100}, @time=@time={0x0, 0x1c9c380}}, {0x20, 0x5, 0x80, 0x2, @time={0x0, 0x989680}, {0x28}, {0x800, 0x800}, @control={0x3ff, 0xffffffff, 0x4}}, {0x8, 0x6, 0x6, 0x0, @tick=0x1, {0x5809, 0x3}, {0x3e, 0x7f}, @connect={{0x7fffffff, 0x3}, {0xffffffff, 0x7ff}}}], 0x90) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={@remote, @ipv4={[], [], @multicast1}, @remote, 0xffffffffffffffe0, 0x9, 0xfffffffffffffff8, 0x500, 0x5301d027, 0x240100, r2}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000400)='bpq0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f0000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:44 executing program 0 (fault-call:5 fault-nth:25): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 447.753640] FAULT_INJECTION: forcing a failure. [ 447.753640] name failslab, interval 1, probability 0, space 0, times 0 [ 447.764877] CPU: 0 PID: 29061 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 447.772250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.781935] Call Trace: [ 447.781960] dump_stack+0x1c4/0x2b4 [ 447.781980] ? dump_stack_print_info.cold.2+0x52/0x52 [ 447.781997] ? update_curr+0x4ec/0xbe0 [ 447.793377] should_fail.cold.4+0xa/0x17 [ 447.793395] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 447.793413] ? perf_trace_lock+0x14d/0x7a0 [ 447.810754] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.816301] ? __perf_event_task_sched_out+0x337/0x1ab0 [ 447.821671] ? debug_smp_processor_id+0x1c/0x20 [ 447.821691] ? zap_class+0x640/0x640 [ 447.821710] ? mark_held_locks+0x130/0x130 [ 447.834288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.839830] ? __perf_event_task_sched_in+0x2a9/0xb60 [ 447.845024] ? perf_trace_lock+0x14d/0x7a0 [ 447.849269] ? trace_hardirqs_on+0x310/0x310 [ 447.853690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.859237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.864781] ? check_preemption_disabled+0x48/0x200 [ 447.864802] ? debug_smp_processor_id+0x1c/0x20 [ 447.864826] ? zap_class+0x640/0x640 [ 447.874488] __should_failslab+0x124/0x180 [ 447.874504] should_failslab+0x9/0x14 [ 447.874517] kmem_cache_alloc+0x47/0x730 [ 447.874535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.896766] radix_tree_node_alloc.constprop.18+0x1f7/0x370 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:44 executing program 5: mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000140)) umount2(&(0x7f0000000240)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 447.902506] radix_tree_extend+0x294/0x660 [ 447.906757] ? radix_tree_node_alloc.constprop.18+0x370/0x370 [ 447.912647] ? lock_downgrade+0x900/0x900 [ 447.916812] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 447.922617] ? kasan_check_read+0x11/0x20 [ 447.926771] idr_get_free+0x83d/0xec0 [ 447.930581] ? is_bpf_text_address+0xd3/0x170 [ 447.935092] ? ida_pre_get+0x130/0x130 [ 447.938985] ? debug_smp_processor_id+0x1c/0x20 [ 447.943641] ? perf_trace_lock+0x14d/0x7a0 [ 447.947863] ? zap_class+0x640/0x640 [ 447.951569] ? mark_held_locks+0x130/0x130 [ 447.955915] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 447.960922] ? mark_held_locks+0x130/0x130 [ 447.965141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.970663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.976201] ? check_preemption_disabled+0x48/0x200 [ 447.981597] idr_alloc_u32+0x201/0x3f0 [ 447.985471] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 447.990333] ? p9_idpool_get+0x23/0x90 [ 447.994210] idr_alloc+0x111/0x1b0 [ 447.997736] ? idr_alloc_u32+0x3f0/0x3f0 [ 448.001784] ? do_raw_spin_lock+0xc1/0x200 [ 448.006010] p9_idpool_get+0x3d/0x90 [ 448.009711] p9_client_prepare_req.part.8+0xec/0xc30 [ 448.014800] ? __kernel_text_address+0xd/0x40 [ 448.019283] ? unwind_get_return_address+0x61/0xa0 [ 448.024200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.029723] ? p9_free_req.isra.7+0x140/0x140 [ 448.034206] ? debug_smp_processor_id+0x1c/0x20 [ 448.038859] ? perf_trace_lock+0x14d/0x7a0 [ 448.043098] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.048635] ? replace_slot+0x151/0x520 [ 448.052601] p9_client_rpc+0x1c2/0x1480 [ 448.056566] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 448.061929] ? is_bpf_text_address+0xd3/0x170 [ 448.066428] ? __radix_tree_replace+0x258/0x3c0 [ 448.071089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.076621] ? zap_class+0x640/0x640 [ 448.080702] ? p9_fid_create+0x1e2/0x2b0 [ 448.084749] ? lock_downgrade+0x900/0x900 [ 448.088895] ? idr_alloc_u32+0x235/0x3f0 [ 448.092957] ? trace_hardirqs_on+0xbd/0x310 [ 448.097276] ? kasan_check_read+0x11/0x20 [ 448.101408] ? p9_fid_create+0x1e2/0x2b0 [ 448.106010] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.111475] ? kasan_check_write+0x14/0x20 [ 448.115698] ? do_raw_spin_lock+0xc1/0x200 [ 448.119924] p9_client_attach+0x18c/0x860 [ 448.124065] ? debug_check_no_obj_freed+0x305/0x58d [ 448.129089] ? p9_client_walk+0xb30/0xb30 [ 448.133337] ? check_preemption_disabled+0x48/0x200 [ 448.138343] ? trace_hardirqs_on+0xbd/0x310 [ 448.142654] ? v9fs_session_init+0xd46/0x1a70 [ 448.147135] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.152573] ? __kasan_slab_free+0x119/0x150 [ 448.156973] v9fs_session_init+0xf4d/0x1a70 [ 448.161296] ? v9fs_session_init+0xf4d/0x1a70 [ 448.165797] ? __might_sleep+0x95/0x190 [ 448.169764] ? v9fs_show_options+0x7e0/0x7e0 [ 448.174172] ? lock_downgrade+0x900/0x900 [ 448.178820] ? ___might_sleep+0x1ed/0x300 [ 448.182953] ? trace_hardirqs_on+0xbd/0x310 [ 448.187271] ? v9fs_mount+0x62/0x8f0 [ 448.190980] ? kasan_unpoison_shadow+0x35/0x50 [ 448.195551] ? kasan_kmalloc+0xc7/0xe0 [ 448.199440] ? kmem_cache_alloc_trace+0x31f/0x750 [ 448.204269] ? zap_class+0x640/0x640 [ 448.207975] v9fs_mount+0x7d/0x8f0 [ 448.211503] ? alloc_pages_current+0x114/0x210 [ 448.216075] mount_fs+0xae/0x31d [ 448.219431] vfs_kern_mount.part.35+0xdc/0x4f0 [ 448.223997] ? may_umount+0xb0/0xb0 [ 448.227608] ? _raw_read_unlock+0x2c/0x50 [ 448.231746] ? __get_fs_type+0x97/0xc0 [ 448.235622] do_mount+0x581/0x31f0 [ 448.239151] ? copy_mount_string+0x40/0x40 [ 448.243819] ? kasan_unpoison_shadow+0x35/0x50 [ 448.248427] ? kasan_kmalloc+0xc7/0xe0 [ 448.252326] ? kmem_cache_alloc_trace+0x31f/0x750 [ 448.257157] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.262679] ? _copy_from_user+0xdf/0x150 [ 448.266812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.272655] ? copy_mount_options+0x288/0x380 [ 448.277446] ksys_mount+0x12d/0x140 [ 448.281157] __x64_sys_mount+0xbe/0x150 [ 448.285124] do_syscall_64+0x1b9/0x820 [ 448.289016] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 448.294370] ? syscall_return_slowpath+0x5e0/0x5e0 [ 448.299291] ? trace_hardirqs_on_caller+0x310/0x310 [ 448.304310] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 448.309326] ? recalc_sigpending_tsk+0x180/0x180 [ 448.314070] ? kasan_check_write+0x14/0x20 [ 448.318296] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.323126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.328302] RIP: 0033:0x457579 [ 448.331483] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:16:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000056766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 448.350370] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 448.358064] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 448.365319] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 448.372576] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 448.380123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 448.387379] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:44 executing program 5: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 06:16:44 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020003006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:45 executing program 0 (fault-call:5 fault-nth:26): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:45 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) sendmsg(r1, &(0x7f0000001b80)={&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)="cb0a05bd57236793887f9e2dea960e53e9122b03f02e8a58e29791b8112241b5da0e7215993031ccf31b1465c881b9cb82062e5c08ab1526c0d7052f093f981dcba9b9ced72e3ed93e6b1811c8c4f8dac47d63beee5f652eeba2851e084de93fb5272ef6142d70241c865fa4c44e47c942e6289e10866751ff2f9eb9e0be6f792c432fd79fa01e4f8f532799f209880b2bfce5a525e9f68899fafbc40bc7ad00f436c81baa9b6788887d4440c39355f04b2abf09e25e131fe30156fd0ea2bdb8b267dd9c73d2206b724c68b4de35cfb4b643f96c90e69a9f5cca0f3c5f2143300f0e261ef4", 0xe5}, {&(0x7f0000000000)="03eef4bf6f0a6ec25907379cad6b79db788bb2a55c3528b9e3c497352bb7d35a93662ac7", 0x24}, {&(0x7f0000000580)="8fae537ab400a5c7f1bef2007738620bf6b663e89a859f91aa1447ab735c191b2121aebcdfd6c10678138563bed5adfbadd31a1c", 0x34}, {&(0x7f00000005c0)="a0893b02e1cbb264b681f15741e2205e7478f7e0d6060a6786e5c00dfcdca27cc512b84f3f2c1c8c37b5684d83358c71f6bc43047a6c7ef0e8cf90bc7d2162309737cd83d494cbcc2356b5a9666501e83fcf19c50db982bd8114b8515874421c717245887abe074c9b38ce286a6de5eed20c9bae5b77eb6184ef2d1fed2dccfa06230ab95119f61ba84ab3f920f771441492552db3b0f03494d97e34ae37cced9785f5a187dc7e00e132653577a13675b8bcb6f0e4d3511162980b7e41af3034ce3deba38e33fc1c383f0f4dfe1da48aa8ef1d97a0575495cad3d4cc18dcf4ab6fbf", 0xe2}, {&(0x7f0000000780)="e092ff312e6e6575b1cab8575cc31dd42fed37b22f0b5e47b4bade85304f5ba6da7370535e890f3e6775eeaec549a9590cbbdb4a828cf614990687f2fcf7950dc09c18bb70f7ec11ec0a2dd4a7aa4908514f5e4111c4db631d65be3eead7586943ee37bb6bd6bf1985cc7757580fd2b3ddd363eaee006f773e943fc27e3b32d6d5", 0x81}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="0f46d3a74a5d14cba7830cf08c515ffd1f7f9b5512ee92fb531fc632", 0x1c}, {&(0x7f0000000840)="55bdfeb4334c0553a87231d76594d48de2d1c0979093a4e67dc7a5b97940bfd564dad321c3753080f06593a42b00d5682d50223c9dfd413afb30a866a601aec3cb87230e4354b23f42a09cd6bad5eba6edea72f0c4f61a3b854b7f8c234a8116cd38a8c28e4bcb89a792e001d52f413d94836a981bdc5b4bb7dc443a5cf90b3643faf41f33b9febc010102109b2936232044691e4848412b73710d11f06bf8d506ab153fcd79b0eef70d4623a70e72d3df86978c9cd8e9ee55bd656a6a8063c080ba3ade6b3752703b173ef1e9e58e85f2d6d2676d", 0xd5}], 0x8, &(0x7f00000009c0)=[{0x18, 0x13b, 0xffff, "b8b95f1138e03d04"}, {0x108, 0x18c, 0xe5, "c30f43a6f49fe332acf0921255f20d68d20fae02ba835377202e4b6b1989283d3efefabc4a7df348d2a9d65fad69f33749623a8ef8102dd81cef9235bbb9faaf6ce04064cffed39b36100ea998ef95721c09ea962fcdb0f8531e14675e6c905b97b77e0489e4c7e45bb605574b48ef363cb420fdc9b6c40405965a14406d118410e1e2079576b436b9df51d7934b2f8b2e559cf5058977f22b29ee71a4a14a34fd1f48da3884223ee8f4c73766d9cccbc5a3dbc33fc5ede3a0c0ae8d110570d79f4554d67dd74990514fe4f99b06c384aa9c1c9a8bc108357418649c86ad16158aaf44486e9ec35a4bc015324a3cb5fd5a418c0c72d259"}, {0x90, 0x11f, 0x3f, "03df9740654cb5a5472251546acf0300986a2f7de9ae5c515609cb19d8799cd8449785a47bec3d0611a2e8e9bdb9f531dc126c559adf40c9b6c4fa8120152074acc43aef4986607dbb5d6c92c3cd1d52368c23fd3c9443b5384e33b16c848baead876a1abb07dfc233fd4c52916bb5887bec4aa93dc91095efb6f4"}, {0x1010, 0x116, 0x7, "d3a4293be2b870c2c7d77257dc92118e7cd8f1d4574bb8d0119b006e7da1b0e742e60ab7f43381256e942fadeae273ec254c57e9ee5cda0cfe96a62f0b7a16b99751d975759513115ab3296c2b3f4453e307be079628d1cfbbfc54a8d1625887ae182526d87b6c8fe32d789409575ebeadc20e4aac84e1797e6e1a25983ef4a75cb3f57c086b4836cbfc089fb7802fba091a10b1a2b414eb893ddf03a181ed24c59b4240ef5a9fcb506e40b19918ff6c8aa2489b88c42eff0b8ccee4ca25b4ac172106ba2352d5ae0ed337457f3d9c9d7e248dfe036031a7ffc943c99e78f04afc15c4e751ee35bffcabddf9f383a4e3441dc02eb996d085b48831524bf71331005af72a44edf10006ad88b8fec7448fe14085699fb2b6435dfde781017582a70198e2dc6b861969c964ba14d6db0d4143d99d89bb7d18480aca4a3405362a6222620078e6b8129f11032c00434ce8273ea833bb7d0a0bc84713927b44bf8a74de115d5bfd9cb149c1e72643197604a2bbac376e0110ff8ececc2140cc70302b897366ea0eeb49cf5c1e2fc9b2aa44647ffcf94a52854291c71c4bec995386f23fb4b62c4b2e761c20fe5544a0272f033a504a86885df862259b2f56e4e354b46ae4e4d5a8fa9788db62ac5ce97a74217eec1a002f7a973a2a11b2ce85e48a5143c547de536d2f34a89733724688274c9c531f90002a67d1984043639d6e6fe1e956bfa917764fc5b7909a9ea8e6d653fab61ef2ab64021174b372c2a8484ea50d9c9df1fb637fd396948a0a7e3e0ac55c3ae7158ed70ba51876ec242f91e2ec0376d6e9dc4de9ced186b795de42ff3bf71218f559b9e6a23736cc388bd87dbbcc67e31573eecdd29fba6b6f0d554e074cd0e6b4a7b56dc2e5c155a3e4c95d4688c6632ca182366e22fd790c223f5d5677e15c5546e9f84865034d3a43c964dcb658726edf65969d45f189772bdda66afafebc4d541dfe321974a626a6f8afde1c60762202f4eddb909e3038ad42a20277792f90598a7415f7f588459bdd22d1d47469226c78b1623632b16a4fb49f946c5377ea926858b971879bd5f433adede8de930eea9ff5b740d8f2dd7c9ddbfa8432f2476e46765a52857465c35c93ee7401714144801310e4acf8f10045e6cdc99a9ba0522d0a7e9dd95d28836f8906da21213804c4960751f570dfa8d375270ac4a58f80add29d5603d8038cf1740095ef3c5ce24ab9ed4fc0efcbffd0685efb51d183c72a312ad0863c6ce590fd4f9f2fad513ac11f36279fd62c7ef20ba01f26501fa9bacb41396d327f424da27fb87859430d5888094b920391862bf1a284e914ef79eb2edeb0d86cce36b651857b585ab9e90666bf193fb8bf9caa9a6b8a53ce77330182bca7b1dffca9de6e2b75de633e7ca359d13326bf3befdf42a1cdcdbebba7af09787f821e4abed6a7df48227fc319088578b8c6cb3bfd2337e73d32651b6be3021b53702ed6c0d05145df68079a4205cf51bdffe25edf387e12db8e01a1bcdcbb3e22977b7ed68b9729931178ef0e8261b216d14ba4b0aabb2559f9b122626c952e4795590d4e17b55f7ec96ebc06cf728a2ef1a181e963446eb7b4e1e7c1e45c2ea0c28297134e7575fb9842cce647fdc7bf5a91bbaaef55598986453c28466637ad13c405bd61df0e17f5102c6c93889cc7f00210c242899a92d06db2fcf4fbc04018ca8f6a04e7bd0968ff88dd46becd981b477a2484bd9e55610c016f56c84b806ee39d89faf02331ee7f70f96a70a5b921bd013c0634e60cd233a92774ebbfd48161020453bcf9fa3f3c9e213d4c4f6909f94a286540a2dd0570d4e0173a9fed5eed7234ac025347b355671059be93ba84a9dc1962d3c9be0ef86125b61ac74746447d3c0109528644b06e196d3ef270d402ca32761f037c0afb0b58673bd33ab1a640d75d97a403ec079bc25823d6073972d5aa291239917011dc037d2ac510a25664dd7c52b86f28f62668d5f540da98b383ddf91b3f0f973995f9f1c69aa11d83142a33f6307aabbf4900bf4db82d1df36cd93389ead3bc8590d93f31df9fa0f38f0136431f8ace2d4ffdb5e14b802fe3ca60d263e20edaebc7b20f718e53d5882d0a21d45dce02b247c38e8df0eb569b6290949b1049820d292ac5aba913eca0004fdf86ec5e65164102af7d3752d812e82ef5f640e20f2fb589501cfd27d6d730007aeabbfa38be59da46d653dfa61e8a1dcf178da7162a896892156644998152bb878e49a7224c74057e884eee0681345d7fa3d7204500571d23e5be758f1ec0a0da556826fccd1413dde0f39a06eda3630e45d5d66808737ec5737746360f33a6fc6ff1a2990b54e1d2cee7c5f201359d5c8f2d4771c9b202241418d855168a0e7422ae50878647175ba4dc6cedc134bfe65950292bcd21b595ed944d862b42848f9208b441798c604cca5fd04021ddf346a4fad36cb5ef3459e3810d03c7f719d6475e7b51a7d20eb0d730e9e590331d607a5de4133edb8d29c63b03af5c59c36fa3b2065aaf79bdb361729a16fc6343d87a18bdcc181235fe70be501d677cec15b300a8e2970dfc471db5196f51fcb4be193f1d073a2dafa39257c2c243a8840ef2497b278624f3d938cf88029bbe58f06d9a1cdbcc73e9f03e5cd04f09868819789e165ce4229569724fc76ed94625e17d336d96d1ae2c4e7cce528778215066628d882ccf18cc3d582efcef12299679c52e009afb310bfc9a162e09703d37a6ae1672f8dfe220411684ecda2049002d779fb94c92deae532fdf8e122d9892578a5c3d31c78f7ad96cf5cebf5bd56b96c82479c51d7c098a12da0227a5ff5a45ff1422c9931ec52a99be19c187a5f0341657f6b4e7a1c4d44b784d6dfaba671390f409a35c3e9adae1f459f71b368c4d59776f8bea88b9ee9200138ea5fe9986f704e6ea1c16c8164af1ee34e7c84f4ff8c2db93a94a1c6dd6718aa19c5b1d881be742d04efdbc3c937dad5e24d33d1f1e3ccb8951b1e99f824bbb2903ea9edfddcc00321cce2367289034e237387b7e595bad46126d72b26699269f9ed9c10f9c776b2cefacf402a25b74711195f067f309a3b3b538abe2a49dc77d42ceb024c36d504c0f00b0934b881caf3dcdbcda7ecf5b7250fd0506ff8b130a9bc12456969e9b8661a6bc8f47c9e57bb691a7d72c61c445a44655ee51b32bddf201d2db886abe851aff4fd872d7cd035d425be9734685ec7c9542d9427213304c951913e367de7cfbfefd68b1b7650fa1b9a0c063ba20d7c512d4886f2e7a84399fc51f560db9e8184bd5834e6341346b99453d80ca719cda506fab9758f4b62b019e96ae73148266b8faf49ec0561ad4babc97e6fffa81abdc278378972c0ab7e843e1d224967a030e644a121d61b88c46c218f79a99194451cd942578ad9c5f244e2f7e023d45530eb58f678008779b5397da4fba7ea65a9f4f8759651eb71996a3e3b06f312ad8a911e4b12c9f623c9bbe1ebedf481cc0f9f1eeef1bd72635c6e63578952b3f95e6677856c7faec51c0a2a18a03346c348df5395d99515d9d06f70a64b58d945e7183ad1c4da33e07897b97098805b9b625fbe9eea0e13d4194e909ffe63e65cf9cd7595e2e4c337a4cc391b39cb3715baa512c473fc992a833112a1ca0ebe8673feb417d3deed65aa5368d43cfd3d66522d5e85d508be633c6df4451a39404ba9f7b0969b1197c5b1c36b5eda427fb242a8d456cec2d50d43ccd4c8cf0a357bf46b70877d18f474043369d5841b08103bcfdf74b25ab07b725cdba1dde85b52f0c68178513ad9565ae7346f15996e78f707c8c00f221a5d3b9dcb3c1918acda316dce30407c3428a57b6c11f7cf882dcc14994306c56a34cda7a9bebbf1264ebe360197f24fe0f5eb144409026db3ead0798ce117c6799c612d03f18f62f2418298f9895d10b62f38e6eeb14086943cd0953284ae4cbe50cb8ad3e055ad415b966b847710a501f0bfe6f67d95b588e63d4a2d7e57239e8f59ea3592f4e231418183a98f52dbb80234f0b3e8ce1e6902ebc2d3cf4a91be1d72c80bef80254edd6b4fa48bf2b54e8298eaf538ad7901199fc79bd7b7de265117430191ccc2123f921933efdd2fbce0a75fc3106adc7686994cf2737f255c9e706628cab112ac8ccd9404b5b8d5917a1fc634e848e7a60069eb8ff6f7acad896034522b905dcfca08a641a4c570cf65f8f50c3b3bc1236a9ca9a547b30127a2acd3889e6b6f7fc90410c5bb19125e3e90ff2723685d856b6b87886922cc15e33ace1c342ce6b2f4d6297004e1af303ec5eed20f9979c89c468b0e9fdb38924f996711f5a453241eddeee0455ea460780cbd76c1e4d76950faa54a863493186e5f233e8fc049bee74ca4df89fdf5f8ba997402d5d64bb58a10d519732478a59871b5a6ff419764401b2694a8997e7226a52c48a46febb0b13d29ee8e9a068957d1298af39c93d5fad7156d7ebc8b15cb2d506e3b6cf3e7dce4b4ddb7dc765a3021ba019d2f2952ea754d54d6426c8af6e1d93a65b7ee88feba2c19d9ce6738ddd8040b5f1199234ff81a822b189f625f5cdb933c6e10000262dd0d10679a7e1322ddcddb35613d27d60d311250a7852be606b91ca9638fbb88e3858815d99dd08b6c90f50bb3a08631ed0fd9a3fc2260ca7f2d21dd8b5fb9fc9ee98f270bfc7bcc911aeb1846440a0a04cb5f1c1f5137baf58919b53c70f0236731e71ab8d93e1fb67c22b30b262796fc4d4cc61598f382a32c30ed74348f50d985e750679259e7ad659238d88d48131a5e6693da97ee7f5066e785d5d434e55dab32e557df4db1891c9e41b147571cb1910f339bf7393ec79710b9158a03450483b4925b0a6fb562f3532d9e3569508e34308394789f30d5a2cfab982c3ead591caf680079fdbefdc8ca8b06cbe44e5eb81c8f0ce9c1c8dd3cb8c822a2c31793f239f94ef089a25e6d500e804fa21b96bcda40148b1562f5fe38a7bbe7c674c870b037bd3605821ec16a2f55f05d4f8d994e5db743ad96c044e9eca1b41a61c1e40786418592a52c9acd8fad5568604e33befff661f560d8cc56ac4ba0e0b3af5c7e6033c20e1b4383f48934f58500f9224b0978e76a3d36d9d470487681bf1f656018dbf8c3b19ee75917a0690ab8d0de679690a66848b9acff0c0174d3d321aa39af262a315591561b3ab9e4a223c5a2f9e755cfebfb284af165ab0231fc6747c5a24c0a565c6d57576a680cd6a8149e71aa8b05a3d3b838c9aed318563e79f158a9392cfa44d7d4e4671fd8476541f1b61dda372f29f79228b64bc7f91e3ced42231864bafb53d0c95cae1d89d87502bec51f0a1dea0099da43e65d3456f94e99409a54bccf64832d520a966d13d99ec31cb2a427decc848948b844aa89696767a596851ba1a21f66830ff1bc34f3ecfc96e890d26e386908ed9fbfb8356d5eab496e0994c33eb401b7d97386fde4c1bd25f56fb804d4503d6808e08e6896713824974972d6de3bd59820cea86ebee9096c3b4cc342eeb0b4e4776a6599a2500563830c62f96394c535400b7ed89e80b658f06dd536eeab1b57abaa181955acbdb2b083df92675b0dfc8bc2993e39a41deb3b4f8cf988ae44dbaef76da03e0beee93ce4ed41494a71a23c2b3b609ce085334117ac5abbbf6aba3b44cd950084e70dfd27e8b83685d3e9fd92d4baaf4c20ee2a519382827489eed6a1529e6c29a509df7ecf80dd63b768894fbdb29b39d23dc939859262243eb58e3943c6207906d396b0631597971f901"}], 0x11c0, 0x800}, 0x20008040) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="070006000400ff0101cc28985c040100010004004c1fe8f30dd92b9988c77997f9c31f11d07b84a4f612ec64e73c7c22362a499fb0c935ba92e8cb788bac255b8f9df7887bbdef80c34341d48bce3433a5ca4337a41326dd33aa9df09a3dd3c26ec217a710ead54fc2f90d058cfb47b919d4d04272e9bb66473c555e09c97e6b3e605cb1eb5544bdcd41a1c0ee3425697a1880d06b92ecf6de92a1582949243977948763c4102a028156c00217566a39866f5ff11bc3043a2d8ce1c59e441ec46240aac9f7a7978fdf1ac6ce2377ae11c83032b7ca18088d9aad425d14ea3c99f7da"], &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000100)={r3, 0x5}, &(0x7f0000000140)=0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') write$binfmt_elf32(r5, &(0x7f0000002b80)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x0, 0xfffffffeffffffff, 0x0, 0x3, 0x2, 0x7, 0xfffffffffffffffa, 0x7c, 0x38, 0x2, 0x7, 0x2, 0x20, 0x2, 0xcb6d, 0x310206b6, 0x1}, [{0x7, 0x8, 0x1, 0xffffffffffffffb2, 0x1, 0xffffffffffff0001, 0x8, 0x1}, {0x70000000, 0x1f, 0xb13, 0x7fffffff, 0x1000, 0x4, 0x10000, 0xfffffffffffffffe}], "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", [[], []]}, 0x1278) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001bc0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000001c40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001c00)={&(0x7f0000001d00)={0xec, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) 06:16:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000206766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 448.633979] FAULT_INJECTION: forcing a failure. [ 448.633979] name failslab, interval 1, probability 0, space 0, times 0 [ 448.659111] CPU: 0 PID: 29099 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 448.666501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.675865] Call Trace: [ 448.678851] dump_stack+0x1c4/0x2b4 06:16:45 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0xd5, 0x10001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r4, @in={{0x2, 0x4e22, @remote}}}, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r4, 0x80, 0x2, [0x9, 0x6]}, 0xc) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r1, 0x0, 0x3, &(0x7f0000000180)='ns\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r5, &(0x7f0000000400)='net/dev_mcast\x00') [ 448.682490] ? dump_stack_print_info.cold.2+0x52/0x52 [ 448.687700] should_fail.cold.4+0xa/0x17 [ 448.691779] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 448.696890] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 448.696909] ? __kasan_slab_free+0x119/0x150 [ 448.706754] ? p9_client_create+0xe45/0x160a [ 448.711167] ? p9_free_req.isra.7+0x95/0x140 [ 448.711186] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.721109] ? p9_client_create+0x358/0x160a [ 448.725531] ? zap_class+0x640/0x640 [ 448.725553] ? fs_reclaim_acquire+0x20/0x20 [ 448.733568] ? lock_downgrade+0x900/0x900 [ 448.737726] ? ___might_sleep+0x1ed/0x300 [ 448.741878] ? arch_local_save_flags+0x40/0x40 [ 448.741895] ? kasan_check_write+0x14/0x20 [ 448.741912] __should_failslab+0x124/0x180 [ 448.750694] should_failslab+0x9/0x14 [ 448.750710] __kmalloc_track_caller+0x2d0/0x750 [ 448.750725] ? save_stack+0x43/0xd0 [ 448.750745] ? v9fs_session_init+0x4ec/0x1a70 [ 448.758747] kstrdup+0x39/0x70 [ 448.758766] v9fs_session_init+0x4ec/0x1a70 [ 448.758789] ? __might_sleep+0x95/0x190 [ 448.783305] ? v9fs_show_options+0x7e0/0x7e0 [ 448.787704] ? lock_downgrade+0x900/0x900 [ 448.792275] ? ___might_sleep+0x1ed/0x300 [ 448.796426] ? trace_hardirqs_on+0xbd/0x310 [ 448.800738] ? v9fs_mount+0x62/0x8f0 [ 448.804440] ? kasan_unpoison_shadow+0x35/0x50 [ 448.809106] ? kasan_kmalloc+0xc7/0xe0 [ 448.812988] ? kmem_cache_alloc_trace+0x31f/0x750 [ 448.817835] v9fs_mount+0x7d/0x8f0 [ 448.821360] ? alloc_pages_current+0x114/0x210 [ 448.825932] mount_fs+0xae/0x31d [ 448.829291] vfs_kern_mount.part.35+0xdc/0x4f0 [ 448.833863] ? may_umount+0xb0/0xb0 [ 448.837477] ? _raw_read_unlock+0x2c/0x50 [ 448.841611] ? __get_fs_type+0x97/0xc0 [ 448.845483] do_mount+0x581/0x31f0 [ 448.849008] ? retint_kernel+0x1b/0x2d [ 448.852881] ? trace_hardirqs_on+0x310/0x310 [ 448.857279] ? copy_mount_string+0x40/0x40 [ 448.861504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.866251] ? trace_hardirqs_off+0xaf/0x310 [ 448.870662] ? retint_kernel+0x2d/0x2d [ 448.874542] ? __sanitizer_cov_trace_const_cmp2+0x20/0x20 [ 448.880371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.885897] ? copy_mount_options+0x288/0x380 [ 448.890381] ksys_mount+0x12d/0x140 [ 448.893995] __x64_sys_mount+0xbe/0x150 [ 448.897962] do_syscall_64+0x1b9/0x820 [ 448.901840] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 448.907192] ? syscall_return_slowpath+0x5e0/0x5e0 [ 448.912110] ? trace_hardirqs_on_caller+0x310/0x310 [ 448.917112] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 448.922128] ? recalc_sigpending_tsk+0x180/0x180 [ 448.926876] ? kasan_check_write+0x14/0x20 [ 448.931100] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.935931] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.941104] RIP: 0033:0x457579 [ 448.944288] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.963175] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 448.970872] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 06:16:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:45 executing program 0 (fault-call:5 fault-nth:27): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 448.978544] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 448.985813] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 448.993068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 449.000326] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020009006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 449.079096] FAULT_INJECTION: forcing a failure. [ 449.079096] name failslab, interval 1, probability 0, space 0, times 0 [ 449.152889] CPU: 0 PID: 29118 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 449.160312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.169668] Call Trace: [ 449.172277] dump_stack+0x1c4/0x2b4 [ 449.175923] ? dump_stack_print_info.cold.2+0x52/0x52 [ 449.181536] should_fail.cold.4+0xa/0x17 [ 449.181560] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 449.190696] ? save_stack+0xa9/0xd0 [ 449.194340] ? save_stack+0x43/0xd0 [ 449.197975] ? kasan_kmalloc+0xc7/0xe0 [ 449.201860] ? __kmalloc_track_caller+0x14a/0x750 [ 449.206692] ? kstrdup+0x39/0x70 [ 449.210047] ? v9fs_session_init+0x4ec/0x1a70 [ 449.214532] ? v9fs_mount+0x7d/0x8f0 [ 449.218237] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 449.222976] ? do_mount+0x581/0x31f0 [ 449.226674] ? ksys_mount+0x12d/0x140 [ 449.230465] ? do_syscall_64+0x1b9/0x820 [ 449.234532] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.239909] ? zap_class+0x640/0x640 [ 449.243631] ? fs_reclaim_acquire+0x20/0x20 [ 449.247947] ? lock_downgrade+0x900/0x900 [ 449.252102] ? ___might_sleep+0x1ed/0x300 [ 449.256240] ? arch_local_save_flags+0x40/0x40 [ 449.260813] ? trace_hardirqs_on+0xbd/0x310 [ 449.265134] __should_failslab+0x124/0x180 [ 449.269363] should_failslab+0x9/0x14 [ 449.273200] __kmalloc+0x2d4/0x760 [ 449.276732] ? match_wildcard+0x3c0/0x3c0 [ 449.281230] ? save_stack+0x43/0xd0 [ 449.284852] ? match_strdup+0x5e/0xa0 [ 449.288657] match_strdup+0x5e/0xa0 [ 449.292279] v9fs_session_init+0x782/0x1a70 [ 449.296610] ? __might_sleep+0x95/0x190 [ 449.300595] ? v9fs_show_options+0x7e0/0x7e0 [ 449.305039] ? lock_downgrade+0x900/0x900 [ 449.309192] ? ___might_sleep+0x1ed/0x300 [ 449.313331] ? trace_hardirqs_on+0xbd/0x310 [ 449.317642] ? v9fs_mount+0x62/0x8f0 [ 449.321359] ? kasan_unpoison_shadow+0x35/0x50 [ 449.325948] ? kasan_kmalloc+0xc7/0xe0 [ 449.329845] ? kmem_cache_alloc_trace+0x31f/0x750 [ 449.334674] ? zap_class+0x640/0x640 [ 449.338383] v9fs_mount+0x7d/0x8f0 [ 449.341920] ? alloc_pages_current+0x114/0x210 [ 449.346492] mount_fs+0xae/0x31d [ 449.349851] vfs_kern_mount.part.35+0xdc/0x4f0 [ 449.354423] ? may_umount+0xb0/0xb0 [ 449.358057] ? _raw_read_unlock+0x2c/0x50 [ 449.362195] ? __get_fs_type+0x97/0xc0 [ 449.366073] do_mount+0x581/0x31f0 [ 449.369599] ? kasan_check_read+0x11/0x20 [ 449.373736] ? do_raw_spin_unlock+0xa7/0x2f0 [ 449.378512] ? copy_mount_string+0x40/0x40 [ 449.382730] ? kasan_check_write+0x14/0x20 [ 449.386952] ? kasan_unpoison_shadow+0x35/0x50 [ 449.391521] ? kasan_kmalloc+0xc7/0xe0 [ 449.395402] ? kmem_cache_alloc_trace+0x31f/0x750 [ 449.400237] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.405778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.411302] ? copy_mount_options+0x288/0x380 [ 449.415794] ksys_mount+0x12d/0x140 [ 449.419412] __x64_sys_mount+0xbe/0x150 [ 449.423377] do_syscall_64+0x1b9/0x820 [ 449.427250] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 449.432604] ? syscall_return_slowpath+0x5e0/0x5e0 [ 449.437538] ? trace_hardirqs_on_caller+0x310/0x310 [ 449.442545] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 449.447551] ? recalc_sigpending_tsk+0x180/0x180 [ 449.452293] ? kasan_check_write+0x14/0x20 [ 449.456520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.461355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.466530] RIP: 0033:0x457579 [ 449.469727] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.489023] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.496720] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 06:16:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x22, [0xff], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc7fb], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8a50]}, 0x45c) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000004b1a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800"}) 06:16:45 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1, &(0x7f00000020c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006340)) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x3000], 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xffc3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:16:45 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:45 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240402000a006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 449.503987] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 449.511243] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 449.518500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 449.525765] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:46 executing program 0 (fault-call:5 fault-nth:28): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) [ 449.610024] input: syz1 as /devices/virtual/input/input16 06:16:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240402000a006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) [ 449.670973] input: syz1 as /devices/virtual/input/input17 [ 449.726174] FAULT_INJECTION: forcing a failure. [ 449.726174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.738017] CPU: 0 PID: 29154 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 449.745375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.745381] Call Trace: [ 449.745412] dump_stack+0x1c4/0x2b4 [ 449.760956] ? dump_stack_print_info.cold.2+0x52/0x52 [ 449.766136] ? kasan_slab_alloc+0x12/0x20 [ 449.770283] should_fail.cold.4+0xa/0x17 [ 449.774338] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 449.779788] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 449.784800] ? radix_tree_extend+0x564/0x660 [ 449.789201] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.794750] ? radix_tree_descend+0x13c/0x2e0 [ 449.799238] ? plist_requeue+0x620/0x620 [ 449.803292] ? lock_downgrade+0x900/0x900 [ 449.807444] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 449.812971] ? delete_node+0x30e/0xd20 [ 449.816870] ? idr_destroy+0x1c0/0x1c0 [ 449.820769] ? replace_slot+0x151/0x520 [ 449.824748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.830275] ? should_fail+0x22d/0xd01 [ 449.834160] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 449.839251] ? perf_trace_lock+0x14d/0x7a0 [ 449.843484] ? perf_trace_lock+0x14d/0x7a0 [ 449.847711] __alloc_pages_nodemask+0x34b/0xde0 [ 449.852377] ? zap_class+0x640/0x640 [ 449.856086] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 449.861105] ? __radix_tree_replace+0x258/0x3c0 [ 449.865771] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.871296] ? node_tag_clear+0xc2/0x1c0 [ 449.875363] ? radix_tree_iter_tag_clear+0x97/0xd0 [ 449.880839] ? radix_tree_iter_replace+0x4c/0x60 [ 449.885584] ? idr_alloc_u32+0x235/0x3f0 [ 449.889639] ? ___might_sleep+0x1ed/0x300 [ 449.893778] ? trace_hardirqs_off+0xb8/0x310 [ 449.898184] cache_grow_begin+0x91/0x8c0 [ 449.902238] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.907766] ? check_preemption_disabled+0x48/0x200 [ 449.912788] __kmalloc+0x68e/0x760 [ 449.916323] ? p9_fcall_alloc+0x1e/0x90 [ 449.920290] p9_fcall_alloc+0x1e/0x90 [ 449.924083] p9_client_prepare_req.part.8+0x887/0xc30 [ 449.929277] ? __kernel_text_address+0xd/0x40 [ 449.933765] ? unwind_get_return_address+0x61/0xa0 [ 449.938693] ? p9_free_req.isra.7+0x140/0x140 [ 449.943190] ? debug_smp_processor_id+0x1c/0x20 [ 449.947846] ? perf_trace_lock+0x14d/0x7a0 [ 449.952087] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.957613] ? replace_slot+0x151/0x520 [ 449.961583] p9_client_rpc+0x1c2/0x1480 [ 449.965572] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 449.970929] ? is_bpf_text_address+0xd3/0x170 [ 449.975419] ? __radix_tree_replace+0x258/0x3c0 [ 449.980591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.986118] ? zap_class+0x640/0x640 [ 449.989826] ? p9_fid_create+0x1e2/0x2b0 [ 449.993877] ? lock_downgrade+0x900/0x900 [ 449.998013] ? idr_alloc_u32+0x235/0x3f0 [ 450.002204] ? trace_hardirqs_on+0xbd/0x310 [ 450.006513] ? kasan_check_read+0x11/0x20 [ 450.010646] ? p9_fid_create+0x1e2/0x2b0 [ 450.014697] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.020148] ? kasan_check_write+0x14/0x20 [ 450.024373] ? do_raw_spin_lock+0xc1/0x200 [ 450.028603] p9_client_attach+0x18c/0x860 [ 450.032771] ? debug_check_no_obj_freed+0x305/0x58d [ 450.037774] ? p9_client_walk+0xb30/0xb30 [ 450.041910] ? check_preemption_disabled+0x48/0x200 [ 450.046938] ? trace_hardirqs_on+0xbd/0x310 [ 450.051249] ? v9fs_session_init+0xd46/0x1a70 [ 450.055744] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 450.061186] ? __kasan_slab_free+0x119/0x150 [ 450.065590] v9fs_session_init+0xf4d/0x1a70 [ 450.069902] ? v9fs_session_init+0xf4d/0x1a70 [ 450.074389] ? __might_sleep+0x95/0x190 [ 450.078907] ? v9fs_show_options+0x7e0/0x7e0 [ 450.083302] ? lock_downgrade+0x900/0x900 [ 450.087445] ? ___might_sleep+0x1ed/0x300 [ 450.091584] ? trace_hardirqs_on+0xbd/0x310 [ 450.095893] ? v9fs_mount+0x62/0x8f0 [ 450.099599] ? kasan_unpoison_shadow+0x35/0x50 [ 450.104683] ? kasan_kmalloc+0xc7/0xe0 [ 450.109315] ? kmem_cache_alloc_trace+0x31f/0x750 [ 450.114148] ? zap_class+0x640/0x640 [ 450.117857] v9fs_mount+0x7d/0x8f0 [ 450.121398] ? alloc_pages_current+0x114/0x210 [ 450.125970] mount_fs+0xae/0x31d [ 450.129330] vfs_kern_mount.part.35+0xdc/0x4f0 [ 450.133903] ? may_umount+0xb0/0xb0 [ 450.137524] ? _raw_read_unlock+0x2c/0x50 [ 450.141672] ? __get_fs_type+0x97/0xc0 [ 450.145553] do_mount+0x581/0x31f0 [ 450.149086] ? copy_mount_string+0x40/0x40 [ 450.153327] ? kasan_unpoison_shadow+0x35/0x50 [ 450.157900] ? kasan_kmalloc+0xc7/0xe0 [ 450.161794] ? kmem_cache_alloc_trace+0x31f/0x750 [ 450.166636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.172164] ? copy_mount_options+0x288/0x380 [ 450.176652] ksys_mount+0x12d/0x140 [ 450.180588] __x64_sys_mount+0xbe/0x150 [ 450.184558] do_syscall_64+0x1b9/0x820 [ 450.188434] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 450.193787] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.198731] ? trace_hardirqs_on_caller+0x310/0x310 [ 450.203741] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 450.208748] ? recalc_sigpending_tsk+0x180/0x180 [ 450.213491] ? kasan_check_write+0x14/0x20 [ 450.217729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.222579] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.227768] RIP: 0033:0x457579 [ 450.230953] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.249843] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.257542] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 450.264810] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 06:16:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 450.272450] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 450.280085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 450.287341] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f00000002c0), &(0x7f0000002600)=0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xa030}, {r1, 0x1}, {r1, 0x8000}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={0x200}, 0x8) 06:16:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:46 executing program 5: 06:16:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:46 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100), 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xae, 0x2) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x5533, 0x6, 0x1, 0x8, 0x6, r3}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r4, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) ioctl$sock_ifreq(r1, 0x89a7, &(0x7f0000000180)={'bcsf0\x00', @ifru_addrs=@l2={0x1f, 0x8001, {0x20, 0x5, 0x8d, 0xffffffffffffa812, 0x508000000, 0x3}, 0x3ff, 0x8}}) clock_gettime(0x0, &(0x7f0000000200)) 06:16:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020008006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:46 executing program 0 (fault-call:5 fault-nth:29): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c744240402000b006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:46 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:46 executing program 5: [ 450.565082] FAULT_INJECTION: forcing a failure. [ 450.565082] name failslab, interval 1, probability 0, space 0, times 0 06:16:47 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) getpid() r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000300)='uid_map\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 450.618335] CPU: 1 PID: 29186 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 450.625730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.625737] Call Trace: [ 450.625761] dump_stack+0x1c4/0x2b4 [ 450.625783] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.646518] should_fail.cold.4+0xa/0x17 [ 450.650597] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.655709] ? perf_trace_lock+0x14d/0x7a0 [ 450.659953] ? debug_smp_processor_id+0x1c/0x20 [ 450.664744] ? perf_trace_lock+0x14d/0x7a0 [ 450.668984] ? zap_class+0x640/0x640 [ 450.668996] ? zap_class+0x640/0x640 [ 450.669016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.676429] ? refcount_sub_and_test_checked+0x203/0x310 [ 450.687783] ? refcount_inc_not_zero_checked+0x2f0/0x2f0 [ 450.693245] ? zap_class+0x640/0x640 [ 450.696970] ? fs_reclaim_acquire+0x20/0x20 [ 450.701298] ? lock_downgrade+0x900/0x900 [ 450.705469] ? ___might_sleep+0x1ed/0x300 [ 450.709624] ? arch_local_save_flags+0x40/0x40 [ 450.709635] ? sget_userns+0x1a9/0xf10 [ 450.709666] __should_failslab+0x124/0x180 [ 450.718097] should_failslab+0x9/0x14 [ 450.718111] kmem_cache_alloc_trace+0x2d7/0x750 [ 450.718124] ? kasan_check_write+0x14/0x20 [ 450.718137] ? do_raw_spin_lock+0xc1/0x200 [ 450.718154] sget_userns+0x1cf/0xf10 [ 450.739275] ? v9fs_kill_super+0xa0/0xa0 [ 450.739298] ? destroy_unused_super.part.10+0x110/0x110 [ 450.739320] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.739340] ? apparmor_capable+0x355/0x6c0 [ 450.747095] ? apparmor_cred_transfer+0x590/0x590 [ 450.767112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.767129] ? cap_capable+0x1f9/0x260 [ 450.776537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.783092] ? security_capable+0x99/0xc0 [ 450.787237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.792779] ? ns_capable_common+0x13f/0x170 [ 450.797183] ? v9fs_kill_super+0xa0/0xa0 [ 450.801235] sget+0x10b/0x150 [ 450.804332] v9fs_mount+0xe4/0x8f0 [ 450.807862] ? alloc_pages_current+0x114/0x210 [ 450.812436] mount_fs+0xae/0x31d [ 450.815798] vfs_kern_mount.part.35+0xdc/0x4f0 [ 450.820372] ? may_umount+0xb0/0xb0 [ 450.823986] ? _raw_read_unlock+0x2c/0x50 [ 450.828311] ? __get_fs_type+0x97/0xc0 [ 450.832193] do_mount+0x581/0x31f0 [ 450.835729] ? copy_mount_string+0x40/0x40 [ 450.840052] ? kasan_unpoison_shadow+0x35/0x50 [ 450.844624] ? kasan_kmalloc+0xc7/0xe0 [ 450.848511] ? kmem_cache_alloc_trace+0x31f/0x750 [ 450.853342] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.858866] ? _copy_from_user+0xdf/0x150 [ 450.863023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.868547] ? copy_mount_options+0x288/0x380 [ 450.873034] ksys_mount+0x12d/0x140 [ 450.877652] __x64_sys_mount+0xbe/0x150 [ 450.881624] do_syscall_64+0x1b9/0x820 [ 450.885509] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 450.890863] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.895782] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.900627] ? trace_hardirqs_on_caller+0x310/0x310 [ 450.905647] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 450.910662] ? prepare_exit_to_usermode+0x291/0x3b0 [ 450.915675] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.920514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.925691] RIP: 0033:0x457579 [ 450.928874] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.947850] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.955548] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 450.962803] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 06:16:47 executing program 5: [ 450.970058] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 450.978289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 450.985544] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:47 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000000c0)={0x524, 0x4, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0xbb1aad26e19a0373) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:47 executing program 5: 06:16:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020007006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:47 executing program 0 (fault-call:5 fault-nth:30): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa4], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:47 executing program 5: 06:16:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020d00006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:47 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={[{@sb={'sb'}}]}) clock_gettime(0x0, &(0x7f0000000200)) 06:16:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 451.205136] FAULT_INJECTION: forcing a failure. [ 451.205136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.216995] CPU: 1 PID: 29223 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 451.224354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.233704] Call Trace: [ 451.233727] dump_stack+0x1c4/0x2b4 [ 451.233745] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.240057] should_fail.cold.4+0xa/0x17 [ 451.240078] ? fault_create_debugfs_attr+0x1f0/0x1f0 06:16:47 executing program 5: [ 451.240090] ? zap_class+0x640/0x640 [ 451.240112] ? is_bpf_text_address+0xac/0x170 [ 451.262643] ? kasan_check_read+0x11/0x20 [ 451.266806] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 451.272622] ? rcu_bh_qs+0xc0/0xc0 [ 451.276170] ? unwind_dump+0x190/0x190 [ 451.281078] ? is_bpf_text_address+0xd3/0x170 [ 451.285580] ? kernel_text_address+0x79/0xf0 [ 451.290108] ? unwind_get_return_address+0x61/0xa0 [ 451.295055] ? __save_stack_trace+0x8d/0xf0 [ 451.299382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:16:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:47 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x5}) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='qnx6\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000240)) clone(0x210007f7, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, &(0x7f0000001fd8)=ANY=[@ANYBLOB="95f900"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 451.304928] ? should_fail+0x22d/0xd01 [ 451.308830] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.313943] __alloc_pages_nodemask+0x34b/0xde0 [ 451.313959] ? save_stack+0x43/0xd0 [ 451.322241] ? kasan_kmalloc+0xc7/0xe0 [ 451.326130] ? __kmalloc+0x14e/0x760 [ 451.329845] ? p9_fcall_alloc+0x1e/0x90 [ 451.333832] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 451.338849] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 451.338860] ? ksys_mount+0x12d/0x140 [ 451.338874] ? __x64_sys_mount+0xbe/0x150 [ 451.347413] ? do_syscall_64+0x1b9/0x820 06:16:47 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) [ 451.347431] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.360985] ? zap_class+0x640/0x640 [ 451.364713] ? lock_downgrade+0x900/0x900 [ 451.368871] ? radix_tree_iter_replace+0x4c/0x60 [ 451.373733] ? kasan_check_read+0x11/0x20 [ 451.378905] ? ___might_sleep+0x1ed/0x300 [ 451.383070] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 451.387660] ? trace_hardirqs_off+0xb8/0x310 [ 451.392086] cache_grow_begin+0x91/0x8c0 [ 451.396162] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 06:16:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="b7f2288a", 0x4) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000001500)=""/130, 0x82}}], 0x1, 0x0, &(0x7f0000001940)={0x77359400}) [ 451.401710] ? check_preemption_disabled+0x48/0x200 [ 451.406739] __kmalloc+0x68e/0x760 [ 451.410289] ? p9_fcall_alloc+0x1e/0x90 [ 451.410307] p9_fcall_alloc+0x1e/0x90 [ 451.410323] p9_client_prepare_req.part.8+0x812/0xc30 [ 451.410340] ? __kernel_text_address+0xd/0x40 [ 451.418102] ? unwind_get_return_address+0x61/0xa0 [ 451.418129] ? p9_free_req.isra.7+0x140/0x140 [ 451.418147] ? debug_smp_processor_id+0x1c/0x20 [ 451.418159] ? perf_trace_lock+0x14d/0x7a0 [ 451.418177] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.451656] ? replace_slot+0x151/0x520 [ 451.455661] p9_client_rpc+0x1c2/0x1480 [ 451.459668] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 451.459684] ? is_bpf_text_address+0xd3/0x170 [ 451.459701] ? __radix_tree_replace+0x258/0x3c0 [ 451.459717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.459735] ? zap_class+0x640/0x640 [ 451.469572] ? p9_fid_create+0x1e2/0x2b0 [ 451.469587] ? lock_downgrade+0x900/0x900 [ 451.469608] ? idr_alloc_u32+0x235/0x3f0 [ 451.469623] ? trace_hardirqs_on+0xbd/0x310 [ 451.469634] ? kasan_check_read+0x11/0x20 [ 451.469651] ? p9_fid_create+0x1e2/0x2b0 [ 451.509056] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 451.514514] ? kasan_check_write+0x14/0x20 [ 451.514530] ? do_raw_spin_lock+0xc1/0x200 [ 451.514553] p9_client_attach+0x18c/0x860 [ 451.523006] ? debug_check_no_obj_freed+0x305/0x58d [ 451.523022] ? p9_client_walk+0xb30/0xb30 [ 451.523041] ? check_preemption_disabled+0x48/0x200 [ 451.541303] ? trace_hardirqs_on+0xbd/0x310 [ 451.545621] ? v9fs_session_init+0xd46/0x1a70 [ 451.550109] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 451.555762] ? __kasan_slab_free+0x119/0x150 [ 451.560166] v9fs_session_init+0xf4d/0x1a70 [ 451.564480] ? v9fs_session_init+0xf4d/0x1a70 [ 451.568991] ? __might_sleep+0x95/0x190 [ 451.572967] ? v9fs_show_options+0x7e0/0x7e0 [ 451.578333] ? lock_downgrade+0x900/0x900 [ 451.582491] ? ___might_sleep+0x1ed/0x300 [ 451.586647] ? trace_hardirqs_on+0xbd/0x310 [ 451.590962] ? v9fs_mount+0x62/0x8f0 [ 451.594665] ? kasan_unpoison_shadow+0x35/0x50 [ 451.599237] ? kasan_kmalloc+0xc7/0xe0 [ 451.603119] ? kmem_cache_alloc_trace+0x31f/0x750 [ 451.607955] ? zap_class+0x640/0x640 [ 451.611679] v9fs_mount+0x7d/0x8f0 [ 451.615224] ? alloc_pages_current+0x114/0x210 [ 451.619817] mount_fs+0xae/0x31d [ 451.623181] vfs_kern_mount.part.35+0xdc/0x4f0 [ 451.627760] ? may_umount+0xb0/0xb0 [ 451.631387] ? _raw_read_unlock+0x2c/0x50 [ 451.635525] ? __get_fs_type+0x97/0xc0 [ 451.639418] do_mount+0x581/0x31f0 [ 451.642953] ? copy_mount_string+0x40/0x40 [ 451.647186] ? kasan_unpoison_shadow+0x35/0x50 [ 451.651760] ? kasan_kmalloc+0xc7/0xe0 [ 451.655643] ? kmem_cache_alloc_trace+0x31f/0x750 [ 451.660481] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.666005] ? copy_mount_options+0x288/0x380 [ 451.670509] ksys_mount+0x12d/0x140 [ 451.674125] __x64_sys_mount+0xbe/0x150 [ 451.678959] do_syscall_64+0x1b9/0x820 [ 451.682835] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 451.688191] ? syscall_return_slowpath+0x5e0/0x5e0 [ 451.693108] ? trace_hardirqs_on_caller+0x310/0x310 [ 451.698114] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 451.703124] ? recalc_sigpending_tsk+0x180/0x180 [ 451.707867] ? kasan_check_write+0x14/0x20 [ 451.712111] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.716948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.722229] RIP: 0033:0x457579 [ 451.725411] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.744309] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 451.752006] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 451.759269] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 451.766523] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 451.773789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 451.781776] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 451.794832] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 06:16:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020000096766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:48 executing program 0 (fault-call:5 fault-nth:31): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:48 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xffff, 0x8002, 0x9, 0xfff, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x1}, 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 451.872043] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 451.921205] FAULT_INJECTION: forcing a failure. [ 451.921205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.933146] CPU: 1 PID: 29266 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 451.933156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.933160] Call Trace: [ 451.933181] dump_stack+0x1c4/0x2b4 [ 451.933203] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.961277] should_fail.cold.4+0xa/0x17 [ 451.965335] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.970431] ? is_bpf_text_address+0xac/0x170 [ 451.974926] ? kasan_check_read+0x11/0x20 [ 451.980030] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 451.985297] ? rcu_bh_qs+0xc0/0xc0 [ 451.988835] ? unwind_dump+0x190/0x190 [ 451.992714] ? is_bpf_text_address+0xd3/0x170 [ 451.997202] ? kernel_text_address+0x79/0xf0 [ 452.001601] ? unwind_get_return_address+0x61/0xa0 [ 452.006533] ? __save_stack_trace+0x8d/0xf0 [ 452.010851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.016376] ? should_fail+0x22d/0xd01 [ 452.020255] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.025353] __alloc_pages_nodemask+0x34b/0xde0 [ 452.030023] ? save_stack+0x43/0xd0 [ 452.033639] ? kasan_kmalloc+0xc7/0xe0 [ 452.037535] ? __kmalloc+0x14e/0x760 [ 452.041274] ? p9_fcall_alloc+0x1e/0x90 [ 452.045239] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 452.050248] ? vfs_kern_mount.part.35+0xdc/0x4f0 [ 452.054991] ? ksys_mount+0x12d/0x140 [ 452.058794] ? __x64_sys_mount+0xbe/0x150 [ 452.062935] ? do_syscall_64+0x1b9/0x820 [ 452.066986] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.072346] ? lock_downgrade+0x900/0x900 [ 452.076482] ? radix_tree_iter_replace+0x4c/0x60 [ 452.082021] ? kasan_check_read+0x11/0x20 [ 452.086163] ? ___might_sleep+0x1ed/0x300 [ 452.090301] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 452.094887] ? trace_hardirqs_off+0xb8/0x310 [ 452.099287] cache_grow_begin+0x91/0x8c0 [ 452.103637] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.109166] ? check_preemption_disabled+0x48/0x200 [ 452.114180] __kmalloc+0x68e/0x760 [ 452.117731] ? preempt_schedule+0x4d/0x60 [ 452.121871] ? ___preempt_schedule+0x16/0x18 [ 452.126271] ? p9_fcall_alloc+0x1e/0x90 [ 452.130239] p9_fcall_alloc+0x1e/0x90 [ 452.134033] p9_client_prepare_req.part.8+0x812/0xc30 [ 452.139302] ? __kernel_text_address+0xd/0x40 [ 452.143785] ? unwind_get_return_address+0x61/0xa0 [ 452.148708] ? p9_free_req.isra.7+0x140/0x140 [ 452.153308] ? idr_get_free+0xa83/0xec0 [ 452.157275] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.162802] ? replace_slot+0x151/0x520 [ 452.166770] p9_client_rpc+0x1c2/0x1480 [ 452.170742] ? p9_client_prepare_req.part.8+0xc30/0xc30 [ 452.176094] ? is_bpf_text_address+0xd3/0x170 [ 452.181586] ? __radix_tree_replace+0x258/0x3c0 [ 452.186249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.191777] ? node_tag_clear+0xc2/0x1c0 [ 452.195833] ? p9_fid_create+0x1e2/0x2b0 [ 452.199885] ? lock_downgrade+0x900/0x900 [ 452.204026] ? idr_alloc_u32+0x235/0x3f0 [ 452.208080] ? trace_hardirqs_on+0xbd/0x310 [ 452.212389] ? kasan_check_read+0x11/0x20 [ 452.216536] ? p9_fid_create+0x1e2/0x2b0 [ 452.220681] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.226134] ? kasan_check_write+0x14/0x20 [ 452.230359] ? do_raw_spin_lock+0xc1/0x200 [ 452.234592] p9_client_attach+0x18c/0x860 [ 452.238731] ? debug_check_no_obj_freed+0x305/0x58d [ 452.243736] ? p9_client_walk+0xb30/0xb30 [ 452.247875] ? check_preemption_disabled+0x48/0x200 [ 452.252894] ? trace_hardirqs_on+0xbd/0x310 [ 452.257222] ? v9fs_session_init+0xd46/0x1a70 [ 452.261706] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.267148] ? __kasan_slab_free+0x119/0x150 [ 452.272025] v9fs_session_init+0xf4d/0x1a70 [ 452.276351] ? v9fs_session_init+0xf4d/0x1a70 [ 452.281932] ? __might_sleep+0x95/0x190 [ 452.285904] ? v9fs_show_options+0x7e0/0x7e0 [ 452.290300] ? lock_downgrade+0x900/0x900 [ 452.294441] ? ___might_sleep+0x1ed/0x300 [ 452.298597] ? trace_hardirqs_on+0xbd/0x310 [ 452.302906] ? v9fs_mount+0x62/0x8f0 [ 452.306615] ? kasan_unpoison_shadow+0x35/0x50 [ 452.311185] ? kasan_kmalloc+0xc7/0xe0 [ 452.315069] ? kmem_cache_alloc_trace+0x31f/0x750 [ 452.319909] v9fs_mount+0x7d/0x8f0 [ 452.323437] ? alloc_pages_current+0x114/0x210 [ 452.328025] mount_fs+0xae/0x31d [ 452.331390] vfs_kern_mount.part.35+0xdc/0x4f0 [ 452.335974] ? may_umount+0xb0/0xb0 [ 452.339590] ? _raw_read_unlock+0x2c/0x50 [ 452.343732] ? __get_fs_type+0x97/0xc0 [ 452.347613] do_mount+0x581/0x31f0 [ 452.351140] ? retint_kernel+0x1b/0x2d [ 452.355037] ? trace_hardirqs_on+0x310/0x310 [ 452.359453] ? copy_mount_string+0x40/0x40 [ 452.363690] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.368436] ? trace_hardirqs_off+0xaf/0x310 [ 452.372851] ? retint_kernel+0x2d/0x2d [ 452.377740] ? copy_mount_options+0x1a1/0x380 [ 452.382221] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 452.387056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.392579] ? copy_mount_options+0x288/0x380 [ 452.397078] ksys_mount+0x12d/0x140 [ 452.400695] __x64_sys_mount+0xbe/0x150 [ 452.404661] do_syscall_64+0x1b9/0x820 [ 452.408547] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 452.413903] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.418820] ? trace_hardirqs_on_caller+0x310/0x310 [ 452.423824] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 452.428832] ? recalc_sigpending_tsk+0x180/0x180 [ 452.433592] ? kasan_check_write+0x14/0x20 [ 452.437821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.442661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.447838] RIP: 0033:0x457579 [ 452.451109] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.469999] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 452.478772] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 452.486033] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 452.493292] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 452.500550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 452.507818] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 06:16:49 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020800006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r1, &(0x7f0000000480)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1) 06:16:49 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000000c0)={0x67446698, 0x0, 0x0, 0x4, 0x4, "4c478808fb8543ad2ca9f560a8500e61ef58b0e9f45af8c7089fe0dcc1181a7e27415c18501ca149c881dd3090eeec43bd73f569dbd86ff94ed16ded28e9e2e9b9b8446d56b7184dea0a8f5adbda2e141bdb3882c96857eb2b50"}, 0x6a) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) 06:16:49 executing program 0 (fault-call:5 fault-nth:32): pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'GPL!cpusetmd5sumposix_acl_access-lo$mime_type!selinux^/wlan0'}}]}}) 06:16:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff], 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e) 06:16:49 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00009b2000/0x18000)=nil, &(0x7f0000001580)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442404020002006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000001500), 0x243) 06:16:49 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000001c80)={@loopback, @loopback}, &(0x7f0000001cc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002280)={0x0, @empty, @dev}, &(0x7f00000022c0)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002340)={@loopback}, &(0x7f0000002380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000002a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000002b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002b40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003f00)={{{@in6=@ipv4={[], [], @remote}, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000004000)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004340)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004640)={{{@in6=@dev}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000004740)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004c00)={{{@in=@remote, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004d00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000004e40)=0xe8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000200f8509400", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="62a50b9a31c145014eb624373f2af44d44553683b9fc9d16793a076320d14566e8c25a0e71120a9e757409459f6725c68e30dc643c01e376efbbf324ecda80a9e3182ad2231152401f53d47af913af62dc58c709a8c089d6fcccba4d57f7fe3a9a7aac3d1e88a55eea088d92d1349720a40b692fece4a9efc6af690a02277975afcab23556e326ec6206758720dbc7cbc3e70683c6eddbb6eebde2e67ded7c026644a66f9982079f3f295f88027365e0d916f50e09a3142721dae1b779f0101f5c86b0ad1e8b7fe39be6a51c254dcfaa6d6395214d9f0e3658d8010ac7c49ae76aaf8a1fc681de848e1401c4b61aa65604e1d5"], @ANYBLOB="d803008003002f0c0900000008000000ff9dae8d8668b17f17046d7b6b9de04c3877f047c3869790449678d4dc7c752ac4d0cc499faa33bc64128a45823c0091076ce8ecf797a61126973d62e895387c2455fd"]) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) timerfd_gettime(r3, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000240)) clock_gettime(0x0, &(0x7f0000000200)) [ 452.717877] FAULT_INJECTION: forcing a failure. [ 452.717877] name failslab, interval 1, probability 0, space 0, times 0 [ 452.775763] CPU: 0 PID: 29297 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 452.783534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.792885] Call Trace: [ 452.792908] dump_stack+0x1c4/0x2b4 [ 452.792929] ? dump_stack_print_info.cold.2+0x52/0x52 [ 452.804322] should_fail.cold.4+0xa/0x17 [ 452.808398] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.813527] ? save_stack+0xa9/0xd0 [ 452.817144] ? save_stack+0x43/0xd0 [ 452.820760] ? kasan_kmalloc+0xc7/0xe0 [ 452.824634] ? kasan_slab_alloc+0x12/0x20 [ 452.828771] ? kmem_cache_alloc+0x12e/0x730 [ 452.833170] ? fscache_alloc_cookie+0xcb/0x880 [ 452.837744] ? __fscache_acquire_cookie+0x230/0xb60 [ 452.842754] ? v9fs_session_init+0xffe/0x1a70 [ 452.847237] ? v9fs_mount+0x7d/0x8f0 [ 452.850940] ? mount_fs+0xae/0x31d [ 452.854469] ? do_mount+0x581/0x31f0 [ 452.858181] ? ksys_mount+0x12d/0x140 [ 452.861994] ? __x64_sys_mount+0xbe/0x150 [ 452.866133] ? do_syscall_64+0x1b9/0x820 [ 452.870184] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.875563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.881351] ? delete_node+0x30e/0xd20 [ 452.885245] ? zap_class+0x640/0x640 [ 452.888949] ? fs_reclaim_acquire+0x20/0x20 [ 452.893262] ? lock_downgrade+0x900/0x900 [ 452.897408] ? ___might_sleep+0x1ed/0x300 [ 452.901550] ? arch_local_save_flags+0x40/0x40 [ 452.906134] ? trace_hardirqs_on+0xbd/0x310 [ 452.910450] ? fscache_alloc_cookie+0xcb/0x880 [ 452.915042] __should_failslab+0x124/0x180 [ 452.919283] should_failslab+0x9/0x14 [ 452.923088] __kmalloc+0x2d4/0x760 [ 452.926631] ? kmem_cache_alloc+0x306/0x730 [ 452.930949] ? fscache_alloc_cookie+0x6f7/0x880 [ 452.935625] fscache_alloc_cookie+0x6f7/0x880 [ 452.940116] ? fscache_cookie_init_once+0x80/0x80 [ 452.944947] ? lock_downgrade+0x900/0x900 [ 452.949092] ? trace_hardirqs_on+0xbd/0x310 [ 452.953400] ? kasan_check_read+0x11/0x20 [ 452.957539] ? p9_idpool_put+0x36/0x40 [ 452.961416] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 452.966870] ? kasan_check_write+0x14/0x20 [ 452.971100] __fscache_acquire_cookie+0x230/0xb60 [ 452.975938] ? fscache_cookie_put+0x880/0x880 [ 452.980735] ? p9_client_attach+0x1f1/0x860 [ 452.985051] ? debug_check_no_obj_freed+0x305/0x58d [ 452.990057] ? p9_client_walk+0xb30/0xb30 [ 452.994196] ? check_preemption_disabled+0x48/0x200 [ 452.999206] ? trace_hardirqs_on+0xbd/0x310 [ 453.003518] ? v9fs_session_init+0xd46/0x1a70 [ 453.008003] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.013450] v9fs_cache_session_get_cookie+0xc4/0x270 [ 453.018646] v9fs_session_init+0xffe/0x1a70 [ 453.022963] ? __might_sleep+0x95/0x190 [ 453.026939] ? v9fs_show_options+0x7e0/0x7e0 [ 453.031338] ? lock_downgrade+0x900/0x900 [ 453.035490] ? ___might_sleep+0x1ed/0x300 [ 453.039630] ? trace_hardirqs_on+0xbd/0x310 [ 453.043941] ? v9fs_mount+0x62/0x8f0 [ 453.047648] ? kasan_unpoison_shadow+0x35/0x50 [ 453.052221] ? kasan_kmalloc+0xc7/0xe0 [ 453.056109] ? kmem_cache_alloc_trace+0x31f/0x750 [ 453.060945] ? zap_class+0x640/0x640 [ 453.064667] v9fs_mount+0x7d/0x8f0 [ 453.068198] ? alloc_pages_current+0x114/0x210 [ 453.072774] mount_fs+0xae/0x31d [ 453.076136] vfs_kern_mount.part.35+0xdc/0x4f0 [ 453.081086] ? may_umount+0xb0/0xb0 [ 453.084704] ? _raw_read_unlock+0x2c/0x50 [ 453.088841] ? __get_fs_type+0x97/0xc0 [ 453.092722] do_mount+0x581/0x31f0 [ 453.096259] ? copy_mount_string+0x40/0x40 [ 453.100498] ? kasan_unpoison_shadow+0x35/0x50 [ 453.105550] ? kasan_kmalloc+0xc7/0xe0 [ 453.109433] ? kmem_cache_alloc_trace+0x31f/0x750 [ 453.114279] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.119808] ? _copy_from_user+0xdf/0x150 [ 453.123950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.129486] ? copy_mount_options+0x288/0x380 [ 453.133976] ksys_mount+0x12d/0x140 [ 453.137595] __x64_sys_mount+0xbe/0x150 [ 453.141565] do_syscall_64+0x1b9/0x820 [ 453.145445] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 453.150813] ? syscall_return_slowpath+0x5e0/0x5e0 [ 453.155734] ? trace_hardirqs_on_caller+0x310/0x310 [ 453.160745] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 453.165752] ? recalc_sigpending_tsk+0x180/0x180 [ 453.170497] ? kasan_check_write+0x14/0x20 [ 453.174727] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.180225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.185406] RIP: 0033:0x457579 [ 453.188602] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 453.207494] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.215208] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 453.222472] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 453.229831] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 453.237103] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 453.244380] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 453.260603] ================================================================== [ 453.268028] BUG: KASAN: double-free or invalid-free in fscache_free_cookie+0x230/0x280 [ 453.276176] [ 453.278203] CPU: 0 PID: 29297 Comm: syz-executor0 Not tainted 4.19.0-rc6+ #271 [ 453.285556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.285562] Call Trace: [ 453.285583] dump_stack+0x1c4/0x2b4 [ 453.285603] ? dump_stack_print_info.cold.2+0x52/0x52 [ 453.306360] ? printk+0xa7/0xcf [ 453.309630] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 453.314385] print_address_description.cold.8+0x9/0x1ff [ 453.319738] ? fscache_free_cookie+0x230/0x280 [ 453.324307] kasan_report_invalid_free+0x64/0xa0 [ 453.329057] ? fscache_free_cookie+0x230/0x280 [ 453.333625] __kasan_slab_free+0x13a/0x150 [ 453.337847] ? fscache_free_cookie+0x230/0x280 [ 453.342416] kasan_slab_free+0xe/0x10 [ 453.346217] kfree+0xcf/0x230 [ 453.349320] fscache_free_cookie+0x230/0x280 [ 453.353719] ? __fscache_check_consistency+0xba0/0xba0 [ 453.358987] ? kmem_cache_alloc+0x306/0x730 [ 453.363300] ? fscache_alloc_cookie+0x6f7/0x880 [ 453.367966] fscache_alloc_cookie+0x74c/0x880 [ 453.372479] ? fscache_cookie_init_once+0x80/0x80 [ 453.377665] ? lock_downgrade+0x900/0x900 [ 453.381807] ? trace_hardirqs_on+0xbd/0x310 [ 453.386120] ? kasan_check_read+0x11/0x20 [ 453.390259] ? p9_idpool_put+0x36/0x40 [ 453.394137] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.399577] ? kasan_check_write+0x14/0x20 [ 453.403821] __fscache_acquire_cookie+0x230/0xb60 [ 453.408662] ? fscache_cookie_put+0x880/0x880 [ 453.413148] ? p9_client_attach+0x1f1/0x860 [ 453.417469] ? debug_check_no_obj_freed+0x305/0x58d [ 453.422487] ? p9_client_walk+0xb30/0xb30 [ 453.426624] ? check_preemption_disabled+0x48/0x200 [ 453.431642] ? trace_hardirqs_on+0xbd/0x310 [ 453.435969] ? v9fs_session_init+0xd46/0x1a70 [ 453.440473] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 453.445940] v9fs_cache_session_get_cookie+0xc4/0x270 [ 453.451124] v9fs_session_init+0xffe/0x1a70 [ 453.455454] ? __might_sleep+0x95/0x190 [ 453.459434] ? v9fs_show_options+0x7e0/0x7e0 [ 453.463833] ? lock_downgrade+0x900/0x900 [ 453.467976] ? ___might_sleep+0x1ed/0x300 [ 453.472126] ? trace_hardirqs_on+0xbd/0x310 [ 453.476465] ? v9fs_mount+0x62/0x8f0 [ 453.480503] ? kasan_unpoison_shadow+0x35/0x50 [ 453.485076] ? kasan_kmalloc+0xc7/0xe0 [ 453.488960] ? kmem_cache_alloc_trace+0x31f/0x750 [ 453.493792] ? zap_class+0x640/0x640 [ 453.497499] v9fs_mount+0x7d/0x8f0 [ 453.501147] ? alloc_pages_current+0x114/0x210 [ 453.505723] mount_fs+0xae/0x31d [ 453.509098] vfs_kern_mount.part.35+0xdc/0x4f0 [ 453.513674] ? may_umount+0xb0/0xb0 [ 453.517287] ? _raw_read_unlock+0x2c/0x50 [ 453.521614] ? __get_fs_type+0x97/0xc0 [ 453.525496] do_mount+0x581/0x31f0 [ 453.529029] ? copy_mount_string+0x40/0x40 [ 453.533264] ? kasan_unpoison_shadow+0x35/0x50 [ 453.537837] ? kasan_kmalloc+0xc7/0xe0 [ 453.541740] ? kmem_cache_alloc_trace+0x31f/0x750 [ 453.546577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.552102] ? _copy_from_user+0xdf/0x150 [ 453.556257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.561781] ? copy_mount_options+0x288/0x380 [ 453.566344] ksys_mount+0x12d/0x140 [ 453.569962] __x64_sys_mount+0xbe/0x150 [ 453.573928] do_syscall_64+0x1b9/0x820 [ 453.578178] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 453.583538] ? syscall_return_slowpath+0x5e0/0x5e0 [ 453.588461] ? trace_hardirqs_on_caller+0x310/0x310 [ 453.593472] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 453.598477] ? recalc_sigpending_tsk+0x180/0x180 [ 453.603222] ? kasan_check_write+0x14/0x20 [ 453.607452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.612288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.617465] RIP: 0033:0x457579 [ 453.620665] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 453.639566] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.647278] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 453.654534] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 453.661790] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 453.669058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 453.676314] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 453.684072] [ 453.685686] Allocated by task 22219: [ 453.689392] save_stack+0x43/0xd0 [ 453.692854] kasan_kmalloc+0xc7/0xe0 [ 453.696563] kmem_cache_alloc_node_trace+0x14c/0x740 [ 453.701656] __get_vm_area_node+0x130/0x3a0 [ 453.705982] __vmalloc_node_range+0xc4/0x750 [ 453.710391] vzalloc+0x6f/0x80 [ 453.713664] alloc_counters.isra.11+0xb7/0x830 [ 453.718233] do_ipt_get_ctl+0x7ac/0xbc0 [ 453.722231] nf_getsockopt+0x80/0xe0 [ 453.725973] ip_getsockopt+0x1af/0x240 [ 453.729849] tcp_getsockopt+0x93/0xe0 [ 453.733639] sock_common_getsockopt+0x9a/0xe0 [ 453.738121] __sys_getsockopt+0x1ad/0x390 [ 453.742257] __x64_sys_getsockopt+0xbe/0x150 [ 453.746668] do_syscall_64+0x1b9/0x820 [ 453.750559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.755742] [ 453.757358] Freed by task 22219: [ 453.760712] save_stack+0x43/0xd0 [ 453.764155] __kasan_slab_free+0x102/0x150 [ 453.768376] kasan_slab_free+0xe/0x10 [ 453.772189] kfree+0xcf/0x230 [ 453.775281] __vunmap+0x335/0x460 [ 453.779022] vfree+0x68/0x100 [ 453.782121] do_ipt_get_ctl+0x9eb/0xbc0 [ 453.786082] nf_getsockopt+0x80/0xe0 [ 453.789783] ip_getsockopt+0x1af/0x240 [ 453.793658] tcp_getsockopt+0x93/0xe0 [ 453.797447] sock_common_getsockopt+0x9a/0xe0 [ 453.801944] __sys_getsockopt+0x1ad/0x390 [ 453.806078] __x64_sys_getsockopt+0xbe/0x150 [ 453.810473] do_syscall_64+0x1b9/0x820 [ 453.814362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.819541] [ 453.821158] The buggy address belongs to the object at ffff8801be009200 [ 453.821158] which belongs to the cache kmalloc-64 of size 64 [ 453.833715] The buggy address is located 0 bytes inside of [ 453.833715] 64-byte region [ffff8801be009200, ffff8801be009240) [ 453.845321] The buggy address belongs to the page: [ 453.850252] page:ffffea0006f80240 count:1 mapcount:0 mapping:ffff8801da800340 index:0xffff8801be009c00 [ 453.859682] flags: 0x2fffc0000000100(slab) [ 453.863918] raw: 02fffc0000000100 ffffea0007453508 ffffea0007051e08 ffff8801da800340 [ 453.871788] raw: ffff8801be009c00 ffff8801be009000 000000010000001d 0000000000000000 [ 453.880227] page dumped because: kasan: bad access detected [ 453.886006] [ 453.887613] Memory state around the buggy address: [ 453.892556] ffff8801be009100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 453.899906] ffff8801be009180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 453.907251] >ffff8801be009200: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 453.914691] ^ [ 453.918047] ffff8801be009280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 453.925406] ffff8801be009300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 453.932746] ================================================================== [ 453.940110] Kernel panic - not syncing: panic_on_warn set ... [ 453.940110] [ 453.947476] CPU: 0 PID: 29297 Comm: syz-executor0 Tainted: G B 4.19.0-rc6+ #271 [ 453.956211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.965550] Call Trace: [ 453.968130] dump_stack+0x1c4/0x2b4 [ 453.971746] ? dump_stack_print_info.cold.2+0x52/0x52 [ 453.977235] ? lock_downgrade+0x900/0x900 [ 453.981375] ? fscache_free_cookie+0x210/0x280 [ 453.985955] panic+0x238/0x4e7 [ 453.989138] ? add_taint.cold.5+0x16/0x16 [ 453.993283] ? print_shadow_for_address+0xb6/0x116 [ 453.998200] ? trace_hardirqs_off+0xaf/0x310 [ 454.002602] ? fscache_free_cookie+0x230/0x280 [ 454.007174] kasan_end_report+0x47/0x4f [ 454.011140] kasan_report_invalid_free+0x81/0xa0 [ 454.015885] ? fscache_free_cookie+0x230/0x280 [ 454.020454] __kasan_slab_free+0x13a/0x150 [ 454.024682] ? fscache_free_cookie+0x230/0x280 [ 454.029250] kasan_slab_free+0xe/0x10 [ 454.033038] kfree+0xcf/0x230 [ 454.036134] fscache_free_cookie+0x230/0x280 [ 454.040712] ? __fscache_check_consistency+0xba0/0xba0 [ 454.045980] ? kmem_cache_alloc+0x306/0x730 [ 454.050294] ? fscache_alloc_cookie+0x6f7/0x880 [ 454.054972] fscache_alloc_cookie+0x74c/0x880 [ 454.059488] ? fscache_cookie_init_once+0x80/0x80 [ 454.064322] ? lock_downgrade+0x900/0x900 [ 454.068484] ? trace_hardirqs_on+0xbd/0x310 [ 454.072808] ? kasan_check_read+0x11/0x20 [ 454.077333] ? p9_idpool_put+0x36/0x40 [ 454.081211] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.086752] ? kasan_check_write+0x14/0x20 [ 454.090998] __fscache_acquire_cookie+0x230/0xb60 [ 454.095850] ? fscache_cookie_put+0x880/0x880 [ 454.100336] ? p9_client_attach+0x1f1/0x860 [ 454.105146] ? debug_check_no_obj_freed+0x305/0x58d [ 454.110157] ? p9_client_walk+0xb30/0xb30 [ 454.114295] ? check_preemption_disabled+0x48/0x200 [ 454.119304] ? trace_hardirqs_on+0xbd/0x310 [ 454.123616] ? v9fs_session_init+0xd46/0x1a70 [ 454.128102] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 454.133549] v9fs_cache_session_get_cookie+0xc4/0x270 [ 454.138735] v9fs_session_init+0xffe/0x1a70 [ 454.143053] ? __might_sleep+0x95/0x190 [ 454.147026] ? v9fs_show_options+0x7e0/0x7e0 [ 454.151423] ? lock_downgrade+0x900/0x900 [ 454.155566] ? ___might_sleep+0x1ed/0x300 [ 454.159720] ? trace_hardirqs_on+0xbd/0x310 [ 454.164033] ? v9fs_mount+0x62/0x8f0 [ 454.167738] ? kasan_unpoison_shadow+0x35/0x50 [ 454.172313] ? kasan_kmalloc+0xc7/0xe0 [ 454.176195] ? kmem_cache_alloc_trace+0x31f/0x750 [ 454.181410] ? zap_class+0x640/0x640 [ 454.185120] v9fs_mount+0x7d/0x8f0 [ 454.188648] ? alloc_pages_current+0x114/0x210 [ 454.193224] mount_fs+0xae/0x31d [ 454.196590] vfs_kern_mount.part.35+0xdc/0x4f0 [ 454.201168] ? may_umount+0xb0/0xb0 [ 454.204785] ? _raw_read_unlock+0x2c/0x50 [ 454.208923] ? __get_fs_type+0x97/0xc0 [ 454.212804] do_mount+0x581/0x31f0 [ 454.216352] ? copy_mount_string+0x40/0x40 [ 454.220591] ? kasan_unpoison_shadow+0x35/0x50 [ 454.225163] ? kasan_kmalloc+0xc7/0xe0 [ 454.229047] ? kmem_cache_alloc_trace+0x31f/0x750 [ 454.233886] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.239419] ? _copy_from_user+0xdf/0x150 [ 454.243560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.249085] ? copy_mount_options+0x288/0x380 [ 454.253573] ksys_mount+0x12d/0x140 [ 454.257196] __x64_sys_mount+0xbe/0x150 [ 454.261164] do_syscall_64+0x1b9/0x820 [ 454.265042] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 454.270736] ? syscall_return_slowpath+0x5e0/0x5e0 [ 454.275661] ? trace_hardirqs_on_caller+0x310/0x310 [ 454.281043] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 454.286049] ? recalc_sigpending_tsk+0x180/0x180 [ 454.290795] ? kasan_check_write+0x14/0x20 [ 454.295025] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.299863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.305043] RIP: 0033:0x457579 [ 454.308227] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.327118] RSP: 002b:00007fec80d1ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 454.334820] RAX: ffffffffffffffda RBX: 00007fec80d1ec90 RCX: 0000000000457579 [ 454.342077] RDX: 0000000020000380 RSI: 00000000200002c0 RDI: 0000000000000000 [ 454.349346] RBP: 000000000072bf00 R08: 0000000020000740 R09: 0000000000000000 [ 454.356703] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fec80d1f6d4 [ 454.363960] R13: 00000000004c28b5 R14: 00000000004d3c90 R15: 0000000000000005 [ 454.372314] Kernel Offset: disabled [ 454.375970] Rebooting in 86400 seconds..