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"], 0x1350}}, 0x801) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x2000010, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c06ead7030a00db15c6f72aaeb2ad8ee775afdb8d8eac636fc716ffc8333ce9ab543c9e4db53090f00be351a17cfef7dfa242a0a071dcd0cbf9f14e35aed05330e3c081bf82ee36d030b443e12c9a5ead059a0c6dcfad4ee9e7acaddb7eb5ab3979ea3c9c564e5445dc6917a02d0b07061e9529602ca89c0c29754aa8ffc5468226c7bfd37aec57c44e93c680dc6656385d5027"]) sched_setattr(r0, &(0x7f0000002e00)={0x38, 0x6, 0x10000018, 0x800, 0x2, 0x5, 0x6, 0x0, 0x3, 0xffff}, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)="6045120a12371c862d2b263e11add9eb481d53db0c1087e638f6377a4cf6a137daa5fefe34cadbadb5ed9ff46930d9100a01162a26a210218ea560d0785d5dda470041ef17b55546ae3c9e1440", 0x4d, 0x0) [ 225.377637] device ipvlan1 entered promiscuous mode [ 225.393185] device ipvlan1 left promiscuous mode 00:38:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 225.486974] device ipvlan1 entered promiscuous mode 00:38:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x14e) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001500)=@filter={'filter\x00', 0xe, 0x4, 0x1410, 0xffffffff, 0x1238, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1340, 0x1340, 0x1340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'bridge_slave_0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0x40}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1470) write(r1, &(0x7f0000000080)="4b49eee1d5bd9058f6034b93efe0ad93d4aab129e2493c631621e1f5a6064de6979995691051bfd3740c10dfa7cb90ef59ceefd0484b94393bfbffb14abaf73ef335def08f586f02f31b129ce913669476d0fc107e04aff831e9f8987e288fda1d94a10e14fa7e9413f33ea1eb3f402c870ff44c7c0704b5a4a239628ba833caa4efd95f61656fcbea8d61039a49ceffaea9c3c54613d8089635b5bbf0975a54a8ed5288233602e685a5a21bf8463afe9a48ea1b14e7bda64d", 0xb9) [ 225.513790] device ipvlan1 left promiscuous mode 00:38:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000500)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="3c9f8a049fdda2d28d676a7a10791993716789196dfe5360d2c4e8a78138cb642cc3350ebc3e30a1ba3367e9399d9fa09c77329b7159c0931aebabc0ed0e29859d085a18c8fa73763428ab4f9439da0c8c95d70016fa946d3b10c30d2bd580657be328067ecffd990cf3cf55d94f8368c99bd60dad78d85faaba31365ba2f8ac9718e9d605", 0x85}, {&(0x7f0000000480)="868a4b22a4c441f33c35e85dde4248e4fb1cabf7f2bf8d5b210fe0e91400b5cf3de8483e04a309ad4352e42180427dc0e18e4eca9290858032f6b01b0d307126465e20a58134f95d736f8f8d3e7c2283d66f4247e3900bc4b40c6e43986d2197a839c931959ffdbe4da3c24129ff105b356a8c40ef8ff33d96a141216383ef50", 0x80}], 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000044c0)=ANY=[@ANYBLOB="c1ff000226bd7000ffdbdf2526a2dd404e224e23080000000300000009000000ff0700000500000003000000090000000300000000000000", @ANYRES32=0x0, @ANYBLOB="01000000030000000200000003000000e90001007670392de47be1877b654ffab08c38e61894c79c7a5214ca4ebfc95a418748d24eeb67493b0ac790f0d770ef5217965c90d3b656f408dae88fc6c556ba17061c6b338c9ca45aec09b6c2ce80b013e89ce4bf4aaa5be4689f7e692842e1206ed271a52bbdc09ecac729b53d7878b457992ee8adf3c102333b6443d0fd40b61efc174e70be0bd81958b9f38f614b1e1419426429421d970bb7d19c062ce9ae262d6736fe77c1ac78014e0c7dff40b10a68f15cf3e6ce6642ebf37de249c960d75cacf2f72571839a2b1cf9547d7ee5570698846c543d5c17ff8c89dc6b933f11ab9766c1f78b00000021000100193bb5a4f93078c8c9da602429db7fea66d1ed161bf2aa0148c5f3ee280000001200010042606dc576ef8c0862b9000000000000c40f01005012bbd4267fe485e1d03d93f1bc64ee44cf3f77731d71296f5b97c8d31536dd5483d0fb8ebb9fded8a7b9fb3efe6755a9c9f000b8abd63561fe5a79293227456b0f3ce03f673b5af4271b4abe62cb10aa8efe3938ae6f324a386379dadc8a52ef559d7cdbf2e67316b667b14793043aa2e51480ba72ff0d957e1734758941dcc3271fa582d84683df1377f2090ff471f865e1250d6c162dfcd2c52f9c8276449a85dee45f4074a59b088cbe3b9ff432dfe0dfda9aecc0c7a02376f5d03a69d13e96d70da3c1195dfb66df62a674d69c58d019692e0dfa7fb5f3f2cc3efc94aa80bc7ba61de469f95180cf8f14025cc65b1b4e2e7d2b236e338e1cf550a8ea1c86b48b46a8b0a9ac23fb31e16fd2f9372347135c580eeb5c0cbb9516348fa276c173b0ce1643ceea30b9e5c79030afedfd81cfbc1eea11806c563086e1b46ea1838e45d28833112630118a936041c7efe1e56151ab8e2604b435ae631d0c4d335ae599c6c92886e0229c4ff9d66ab041a9e35e78656bb8abc9d0ce6dcdb3c691d6463f008a7134cd8d469200d159498c861e0b874501416ec6c033e5c47bb41f2fb803abed372254a674871dc9cb6a24385c88121fc48444a2dcbeabbb53ed65f0ebb8f93354e05029eb418b0e139f92135c2de3c5745d2089e41406900dabd4141a7d926b7c1a787ef5a4fd342f5987904f22be9111614b421be0a6ebc1f553ebcd9fe959992578ecb27374fbe92c5771c411a34534398618b73a428c0639bb2eaf7d905ffc9d08764870390f65076a409bd3d4f8f1c2b85002a6fbe282dbb136c274bee440466acd5f6472e74f79e5910f256b4fc73c74e0369ea25b779518019cba88d0901408d5f1c8a01f81fb92029a5c0ce43b52f53bba65220f0c4705c57adeed330449905383cc0c6b3508705ac747f7ac60a696cbe7bfbb33f89fb59bc2ff4bee805b3596e10bf248908c5eae2df23c5a5d6a6c8c09ee61fa531d5979d6d9630405379bfb098d063ebf8d8f4a056c726b326175ce4120b61550ef62ba3201b0bb0bf83d3301d61e15857fa339f53f8bfe81aa164b4425417fab73f30d6f3382fe05b7fd53cfd91c45e0f3d433cba83ad61a61c59c63a744af64ba6bed49d2b4645f9134ecf71ae1b762a2918c4818ac9e597b52fc6914af35a3108827bb41f1b861eb14391f91bbfe3f4937cd84f1f1e908ae7af8e954b51bd16b009a1c56cd1bf874606f11170d7455afb95f14f91296bcec20c36a07fd2fc2f8bc05b268734fb22583af2181f653befa45869436fdd74584b5e7840aadc0dad78bffa099cf2bbe86d6a8567a20fdfae7809afd13abd915850f6b444528ff95c3e74447f4bb65e03d8c09db03c5ccaa95c73dd84e3ecebdb1016cca775bb9055063d68906f6e4a000eebb6141f1105fdc7581c5b946b1fc79befd67e79b9acaa4ae5c3da02dc220d6508bd261ee0ceacfac5095825346834a5ad9127a946f3245e3bfecc4dc8eb66a8ab1ddefb6574ef7cdc71b2c9728c2801b1901feaaee6237b6ac0ada8329b8d1fa47a16649de8f2aa1d8497ad3031aad2e2f1ac57d7cf39234056d6e4a8b0e819b2d6c5e4f9e4828dcc4abbf9b02547f8c17aa54a414ad10dd68dda5580f33c5636834a31763372d3958d9876064126b7585561d63792e703008fa531b3d1eaf51144cf7f1fc3abf689b240be8976832670c46f8d6989312e91d5585e43bed1d5a0133e465aafa27c681a154d9f7b7d679466ffe12d114b05a411cc58142184d058438d7e391c275ab2b1d81b2568a36ccd67b1c74e9af1478388110a8c70c320fa0085a2f2c262953dc4e79fb8a2c8d625979335c422a43498229f886597e1e46646719b954fcc28fe92c5f2f0ff02c39ccd194050747b1b100c9cbe7a221ffb41df020142f6d0571abeb95d904d3cf1c3e6ce2e5f4528237110ccc78d9bb1801fd08360b5d6fc8c600ada74464ecd41dfed4b00db458b31626965f23fb94896b84318b0b07b63f9d26818944b28a85c1cc7de3d9ba74c054f59aca40c24f26a49517111ca2c2653db5f9ec3c24ec99a73b690112c3683a5984f1f126e10bc8a17824536d2b474c72fe17681ca1280ee1c409311428a2b72d79e914a48b1c3b869ac86551d1cc5936ef78199cc7c7ce34898ee598bd684e744bc5ecac70dd61de23519c1a6fd130af754c2ceabd4c1c9d54e5315ac4f00d6d9bd00adedbc7b9973e5c3eff06d7f18121d067c7430a7f8a10dbc2d2bfa4609819ef2243d00fdfe89a0dc2a564e3bd3276b9107de41cdffd1c048cbaded41b62ae4c1958f9db235aefa05befcfc4fed2cc935f12fb2315f213789da53da35388b3c48936face7785fbed8b085bab267b31522d87e57cafa36d82dc796d3e6deba70104b2fd8484cd6332c7c268e515989e6f6dce5b6f7d56be5a948d1035f76aaa2343774ba587c61499b89f5aeb45fe04448df37b6197df4bcdc9671b3c25b54fa36f7750668b77166820954c55db0f06004a79b6f792c1dcb82bde8041fc6130429456ba7619e380807fe2d27cd1e99956ae8414a3446e241b2734ad82bb4e04fb3067d8dba71dd1394bdb54ecb68f0ff0a90196b241ff063c6f1013b631339ee652aadf911003c2e8be539435508cb69aa178ce07dcb563b682ac55795cf5b48762d789172b7f067634b8e10728f8b02847a384873d7cd422fc9d19130e80fcc51ab8901a6a79592d32f1a200333cb412f499262607445690f292500c5c2645fc3ad0a8e530cd938d960ce773b019d73cda0985cca0c23a4517bc14eb1d27a46ae7468973707b5ff565f1fdd8fcf7185267a7641fc3869ac4a76df80e016b956367898705cd1b11d6d8d01e5bda4b36d8e72101d52857f5fa42db090daad0a9d1400cc8dd9b27d8eed4cea1e57eb15b1c7eb842531e554c8292424a0cd656db8a7d908fdc44bd927889537cf9f4b9656c18d290e7bd6b27034e737e0c1a30782394351ed138dbc76c8e40dc6ded20abb7831971adc69991a7807cbce3aa9b51a34612562fe5ff0600d0f17e8629d241e0722024a6b4806537d0f9a9ef75c4c9bb06236b3d1e7cd9122203740b953051638d5dc310a47b551bfff19603984c2bd656c4a8050ea151193657760d3fd3e0557a1eec88e24cd1204874e102d55e66f194d4e4a82790639535e78113beeaba047de36a9e6584f3fc9ba3955060afbba2886276dca4be7326cd02181f8933bdc2eb4d0537a83a9eed50450f8b47814d3a8ae5a585a38b8abcbcabc01fa5493f169f9b7b46335a816c7be404985029d59f94ca5eca1932ee0521ed2e8f0bda9a697ef9f127bc908a5bdfa58fa1af435dd5e468391b5ed3d447989ac95a1b2030c29d4a2db0921594f34b0e81d9cf1d62400e3d908b90471a118a52f98dcd43f2ff275bb69b9d0a1b2d357d7339d52dce72484afccbc486b9b01325e55f7e84b472bd9dd6ac3d24b9482335baa53e3317a40d6cefd3136663146f9426e68f4fe6cd4f24cb85bb7258d4c58bd1d202f35b422d04361708e8c205d82a7c09fb8686ad94195b2225fbb25f334efb8f93baafd4bd0efed418beb126ee3da4c88d15c2b03baf887d20fb4f66b81d0f7545cf30f793943236043bc834f937b8bfa51fbe284410b14648ded1a278d196dd474ab4275d280fecc2934fe75e79bc0190697b3c46f8e92250b4f795721afb30faa03e01f206febe43cd67632cfe0069ede51c44f6e53e617353cd1623a2a7732ac5f271cf6527c8d76a0368c2ecf4008b2a3ae1f85091afe0dcc9ad54d45fcfe3a8ce708fb737fa583083a481b17767f23b9ae644d832b937eb8907239131ff90f7a848a8db6e0e880591478800a3a7c6eaea9abd7f1ab56da50ee3902c77d082e0f22de0a554b184c17329c54412faa544d4cd6351aaeb976d1f93fe8119f1cdc4418dd10057799efe0ed562a75a90c0e51e3c32811ea24f6edab11784413c14b9eb1974e4b4971f721585be2e2a4e492624aa167f1c1482d65c11a9db3a8e1e0b1053fc28b9d9d6ab740689f9e455c7014f310bc7c77470b68fea8bf3ca1db04c0c049ebdd48ee0c4dbc5988b398563b7632a4ff83ea6f9e1bbb8a83b8a47eb3b20a72a9c6be1edfd0f8ac1e3c24dbd6adb920d4aac5b2359d77f4dc685452a60c9ceab571aabe2cfe1eb9a82636aaa7e114d6a80def48be38c6349115327ab4f107e4e7df4908d0b3322a2eceb4d20c0ba4592d58b01241cf8dc560ad972c5282af8d84e0aabfc88b7983589ba451374df1a889641f2bca0efa8a7397de72873b61c185f1c6e71511d33b9e4e198768237fe2aa7ac959e5747320b1c4d99c3d7892ba921553109b2824a453e6ad18cfb863a3e406970097846db108f012d42a46851ae4c9625fd45dc343b25e43514a4b9a56c584bded5890ba7558489780f77d60c40099ce03322dc7d282fbb573273fc48b3273bf58a2f2a93e2a8007f5493aff6be812e43e2c115b5ef61fb2f67a96365b7dbe3b3bfbf9f885b58c10998719239bb1d376fef734135f809c716afa69d10c795796b60da65540596b35d0be97f0453683e21c2f346b8614a7b410cc79407648cdf67e45a2256c549601612133289abba9e636b2785bbc94a0b649cff0a23496afeeb88c5350b6d95599eede2e56fd1c0919a234044705a1fa16f22c259fbf54a185359fb5841c4eae4728f1ecadfda99b6359a2f9fd032aec31383ae7247abc4d6c2d718951377bd0eecb27e2866e092f2ee317ca10b1f2389a6711672cba259372e921dd9dbb65517b2f956328aa5c4d1e9dde35e6d4eb014495d2db4088d5eaceb4e0ed3f4026a6ccf111e8c712d68be5a679fb4e9c20df64aa5783dc675db96b0193ed3bf902aef193a77fc608d70b5ba5f33c628813fad890be7a39e018291a8257f5ecd28c3277862bbaa3ccd9c235a2f3b9ffedf3f1b16156f13cefc920f37027dabeff4eb92667c2d6ebea4cf6ecd64f4e5e43a87971d81eea540d45816c1bc42a7d2824e9035c466ceb57b6416e0ba6ab0d08ed000031cff2f4fefb0b41d7dafa38e82ad464cbf3241a779e9daa55e8c1dfa2db03805324a635db5669ada51930cf6da0b20883caea74a96b66fd34b8eb1cb9c310222619199b1fd2185af8e212548459c0ab11928328a2bbec7a97faf5092bf98ee8d3430555d32525970412415698a9c49d820e7595e2ae290b59ed15919326c3bf9cb9758cab197d8c8d3ae7ac578c33a38ee0ecaec120c0094f6f6730ee5755f03bef31c69b8d84f8a436adb1cad0ab7bd01e1f4e3a89d62c5ca01fd87fce31b5aec5e035e630891ae8a5acf82a6e0be6faac566d2502ad5f2f918339b50ef1bf90fdf92269a87832d8c037c403cfb912f8f1428605d0bc70534fe789fdc49643fdb6276964bf4cf76ba20beb667412e0bed9c0482b82ed17610c46805d9fdef5314543aa5345950bf0081e3e2448ec74b1865d30f1754c90602d64fd541e56fbd8847d1f0b594a1f89880991e60f6cff00447016a718ebba8efd3927f67e60c2d74732428d4431121a4d8f1157da40a7dacff102ff6e887f4a0e1f547174db0cc86922e042201a567ce34e4d0d74159ed78f3fe395da4850a4574ba99e80269ac4e60da6c454a3b93b1cfd12a64fc27595af07ec22e89c22c6da2d82accc25415ebb6ea81415488b1d49ef6fff169b32c787903010100b2591e9ef58257437b006a0015c865d4f4bcb35df16b636b808212de75a226b4b3e5651d6adbac4839bea5a7672e168649a9a9d123d11a342357fc4c55cb745c62495127ee61faecf03397f01a25ab39589362142dae32cc60b61b9d11afe970aec2d21ec5b5a93dc7105cc69590c3d888acd7cf5338d6ed7a2dddc4ba92d4f0f67fff8101da63bb7f11a4fb5be253142c6abdff36f3b483d481eb052b0df4bb43016190c3528a5c89af4db01487fa0451830c62c6159a75fc44141464d20a26822db8286c2d627ec3d14481c8a0eb36a7c805bc54cad51972b2d49ee9ae7bd1e5a5dbbd382544c7498d75f7f9e6d9854e3c6fd90837a7867e0b165bc645b400880001007e5daf25fee4024dc41dd95981dbc4ed2757044d0c65734b13a9ad65f8d0b3b82f26a219fb0b3b5d611e02b22e334b84c149851b8810f69799ee484125422f7c2000b8691d6ce788f4b6501eec9cbcfdc0983b121c0147209a5c4ff6626eeaf191a516ad8d00c2a39b1f741a5f96c5afd78118b5c3f55f348e0001006d71909d6077d1ca6803807c168a168b42e7bfea25e5422129f6f8a9bf483d2e98933417de34cdd0365b9ade44989b7c9ae546cb24b076e120072a4937160a39d85a66fd8f69c61bda72c20aa1254eaa31ab6262eebfbe76247a4c1f19e824422da1b6d03fb9607e9eb8c74fa381bb13472726663b9c5d4c923c688c57b04ef6891ce4800b3138aad6280000"], 0x1350}}, 0x801) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x2000010, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c06ead7030a00db15c6f72aaeb2ad8ee775afdb8d8eac636fc716ffc8333ce9ab543c9e4db53090f00be351a17cfef7dfa242a0a071dcd0cbf9f14e35aed05330e3c081bf82ee36d030b443e12c9a5ead059a0c6dcfad4ee9e7acaddb7eb5ab3979ea3c9c564e5445dc6917a02d0b07061e9529602ca89c0c29754aa8ffc5468226c7bfd37aec57c44e93c680dc6656385d5027"]) sched_setattr(r0, &(0x7f0000002e00)={0x38, 0x6, 0x10000018, 0x800, 0x2, 0x5, 0x6, 0x0, 0x3, 0xffff}, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)="6045120a12371c862d2b263e11add9eb481d53db0c1087e638f6377a4cf6a137daa5fefe34cadbadb5ed9ff46930d9100a01162a26a210218ea560d0785d5dda470041ef17b55546ae3c9e1440", 0x4d, 0x0) 00:38:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000500)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="3c9f8a049fdda2d28d676a7a10791993716789196dfe5360d2c4e8a78138cb642cc3350ebc3e30a1ba3367e9399d9fa09c77329b7159c0931aebabc0ed0e29859d085a18c8fa73763428ab4f9439da0c8c95d70016fa946d3b10c30d2bd580657be328067ecffd990cf3cf55d94f8368c99bd60dad78d85faaba31365ba2f8ac9718e9d605", 0x85}, {&(0x7f0000000480)="868a4b22a4c441f33c35e85dde4248e4fb1cabf7f2bf8d5b210fe0e91400b5cf3de8483e04a309ad4352e42180427dc0e18e4eca9290858032f6b01b0d307126465e20a58134f95d736f8f8d3e7c2283d66f4247e3900bc4b40c6e43986d2197a839c931959ffdbe4da3c24129ff105b356a8c40ef8ff33d96a141216383ef50", 0x80}], 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000044c0)=ANY=[@ANYBLOB="c1ff000226bd7000ffdbdf2526a2dd404e224e23080000000300000009000000ff0700000500000003000000090000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1350}}, 0x801) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x2000010, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c06ead7030a00db15c6f72aaeb2ad8ee775afdb8d8eac636fc716ffc8333ce9ab543c9e4db53090f00be351a17cfef7dfa242a0a071dcd0cbf9f14e35aed05330e3c081bf82ee36d030b443e12c9a5ead059a0c6dcfad4ee9e7acaddb7eb5ab3979ea3c9c564e5445dc6917a02d0b07061e9529602ca89c0c29754aa8ffc5468226c7bfd37aec57c44e93c680dc6656385d5027"]) sched_setattr(r0, &(0x7f0000002e00)={0x38, 0x6, 0x10000018, 0x800, 0x2, 0x5, 0x6, 0x0, 0x3, 0xffff}, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)="6045120a12371c862d2b263e11add9eb481d53db0c1087e638f6377a4cf6a137daa5fefe34cadbadb5ed9ff46930d9100a01162a26a210218ea560d0785d5dda470041ef17b55546ae3c9e1440", 0x4d, 0x0) 00:38:16 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000500)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="3c9f8a049fdda2d28d676a7a10791993716789196dfe5360d2c4e8a78138cb642cc3350ebc3e30a1ba3367e9399d9fa09c77329b7159c0931aebabc0ed0e29859d085a18c8fa73763428ab4f9439da0c8c95d70016fa946d3b10c30d2bd580657be328067ecffd990cf3cf55d94f8368c99bd60dad78d85faaba31365ba2f8ac9718e9d605", 0x85}, {&(0x7f0000000480)="868a4b22a4c441f33c35e85dde4248e4fb1cabf7f2bf8d5b210fe0e91400b5cf3de8483e04a309ad4352e42180427dc0e18e4eca9290858032f6b01b0d307126465e20a58134f95d736f8f8d3e7c2283d66f4247e3900bc4b40c6e43986d2197a839c931959ffdbe4da3c24129ff105b356a8c40ef8ff33d96a141216383ef50", 0x80}], 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000044c0)=ANY=[@ANYBLOB="c1ff000226bd7000ffdbdf2526a2dd404e224e23080000000300000009000000ff0700000500000003000000090000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1350}}, 0x801) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x2000010, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c06ead7030a00db15c6f72aaeb2ad8ee775afdb8d8eac636fc716ffc8333ce9ab543c9e4db53090f00be351a17cfef7dfa242a0a071dcd0cbf9f14e35aed05330e3c081bf82ee36d030b443e12c9a5ead059a0c6dcfad4ee9e7acaddb7eb5ab3979ea3c9c564e5445dc6917a02d0b07061e9529602ca89c0c29754aa8ffc5468226c7bfd37aec57c44e93c680dc6656385d5027"]) sched_setattr(r0, &(0x7f0000002e00)={0x38, 0x6, 0x10000018, 0x800, 0x2, 0x5, 0x6, 0x0, 0x3, 0xffff}, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)="6045120a12371c862d2b263e11add9eb481d53db0c1087e638f6377a4cf6a137daa5fefe34cadbadb5ed9ff46930d9100a01162a26a210218ea560d0785d5dda470041ef17b55546ae3c9e1440", 0x4d, 0x0) 00:38:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001940)=@nat={'nat\x00', 0x1b, 0x5, 0x688, 0x0, 0xf0, 0xffffffff, 0xf0, 0x408, 0x5b8, 0x5b8, 0xffffffff, 0x5b8, 0x5b8, 0x5, &(0x7f0000000040), {[{{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'veth1_vlan\x00', 'erspan0\x00', {0xff}, {0xff}, 0x88, 0x9, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x9, @ipv6=@loopback, @ipv4=@remote, @gre_key=0xc0c, @gre_key=0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@loopback, @ipv6=@private2, @port=0x4e21, @gre_key=0x9}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xff], 'vcan0\x00', 'bridge0\x00', {}, {0xff}, 0x3a, 0x4, 0x1, 0x5}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0xca9, 0xa5], 0x8, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @local, @private0], 0x5}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@empty, @ipv4=@empty, @port=0x4e21, @gre_key=0x4bd}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@mcast2, [0xff000000, 0xff, 0xff000000, 0xffffff00], @ipv4=@private=0xa010102, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xffffff00, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xff, 0xff], 0x8, 0xdb, 0x1d, 0x4e24, 0x4e23, 0x4e22, 0x4e20, 0x0, 0x1}, 0x1, 0x40}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1d, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @ipv4=@rand_addr=0x64010101, @port=0x4e22, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e8) 00:38:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:16 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:17 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000667000/0x4000)=nil}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 225.988662] xt_addrtype: ipv6 does not support BROADCAST matching [ 225.997496] 9pnet: Insufficient options for proto=fd [ 225.998131] device ipvlan1 entered promiscuous mode [ 226.012696] xt_addrtype: ipv6 does not support BROADCAST matching [ 226.018008] device ipvlan1 left promiscuous mode [ 226.073844] 9pnet: Insufficient options for proto=fd 00:38:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000500)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="3c9f8a049fdda2d28d676a7a10791993716789196dfe5360d2c4e8a78138cb642cc3350ebc3e30a1ba3367e9399d9fa09c77329b7159c0931aebabc0ed0e29859d085a18c8fa73763428ab4f9439da0c8c95d70016fa946d3b10c30d2bd580657be328067ecffd990cf3cf55d94f8368c99bd60dad78d85faaba31365ba2f8ac9718e9d605", 0x85}, {&(0x7f0000000480)="868a4b22a4c441f33c35e85dde4248e4fb1cabf7f2bf8d5b210fe0e91400b5cf3de8483e04a309ad4352e42180427dc0e18e4eca9290858032f6b01b0d307126465e20a58134f95d736f8f8d3e7c2283d66f4247e3900bc4b40c6e43986d2197a839c931959ffdbe4da3c24129ff105b356a8c40ef8ff33d96a141216383ef50", 0x80}], 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000044c0)=ANY=[@ANYBLOB="c1ff000226bd7000ffdbdf2526a2dd404e224e23080000000300000009000000ff0700000500000003000000090000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1350}}, 0x801) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x2000010, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c06ead7030a00db15c6f72aaeb2ad8ee775afdb8d8eac636fc716ffc8333ce9ab543c9e4db53090f00be351a17cfef7dfa242a0a071dcd0cbf9f14e35aed05330e3c081bf82ee36d030b443e12c9a5ead059a0c6dcfad4ee9e7acaddb7eb5ab3979ea3c9c564e5445dc6917a02d0b07061e9529602ca89c0c29754aa8ffc5468226c7bfd37aec57c44e93c680dc6656385d5027"]) sched_setattr(r0, &(0x7f0000002e00)={0x38, 0x6, 0x10000018, 0x800, 0x2, 0x5, 0x6, 0x0, 0x3, 0xffff}, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)="6045120a12371c862d2b263e11add9eb481d53db0c1087e638f6377a4cf6a137daa5fefe34cadbadb5ed9ff46930d9100a01162a26a210218ea560d0785d5dda470041ef17b55546ae3c9e1440", 0x4d, 0x0) 00:38:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000500)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="3c9f8a049fdda2d28d676a7a10791993716789196dfe5360d2c4e8a78138cb642cc3350ebc3e30a1ba3367e9399d9fa09c77329b7159c0931aebabc0ed0e29859d085a18c8fa73763428ab4f9439da0c8c95d70016fa946d3b10c30d2bd580657be328067ecffd990cf3cf55d94f8368c99bd60dad78d85faaba31365ba2f8ac9718e9d605", 0x85}, {&(0x7f0000000480)="868a4b22a4c441f33c35e85dde4248e4fb1cabf7f2bf8d5b210fe0e91400b5cf3de8483e04a309ad4352e42180427dc0e18e4eca9290858032f6b01b0d307126465e20a58134f95d736f8f8d3e7c2283d66f4247e3900bc4b40c6e43986d2197a839c931959ffdbe4da3c24129ff105b356a8c40ef8ff33d96a141216383ef50", 0x80}], 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000044c0)=ANY=[@ANYBLOB="c1ff000226bd7000ffdbdf2526a2dd404e224e23080000000300000009000000ff0700000500000003000000090000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1350}}, 0x801) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x2000010, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c06ead7030a00db15c6f72aaeb2ad8ee775afdb8d8eac636fc716ffc8333ce9ab543c9e4db53090f00be351a17cfef7dfa242a0a071dcd0cbf9f14e35aed05330e3c081bf82ee36d030b443e12c9a5ead059a0c6dcfad4ee9e7acaddb7eb5ab3979ea3c9c564e5445dc6917a02d0b07061e9529602ca89c0c29754aa8ffc5468226c7bfd37aec57c44e93c680dc6656385d5027"]) sched_setattr(r0, &(0x7f0000002e00)={0x38, 0x6, 0x10000018, 0x800, 0x2, 0x5, 0x6, 0x0, 0x3, 0xffff}, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)="6045120a12371c862d2b263e11add9eb481d53db0c1087e638f6377a4cf6a137daa5fefe34cadbadb5ed9ff46930d9100a01162a26a210218ea560d0785d5dda470041ef17b55546ae3c9e1440", 0x4d, 0x0) 00:38:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 226.310506] xt_addrtype: ipv6 does not support BROADCAST matching [ 226.320821] device ipvlan1 entered promiscuous mode 00:38:17 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x1f, 0x8b, 0x81, 0x0, 0x5e, 0x10001, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x8, 0x4a9e}, 0x1040, 0x20, 0x100, 0x3, 0x0, 0x1, 0x4, 0x0, 0x8000, 0x0, 0x101}, 0xffffffffffffffff, 0x9, r1, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x8000000000000009, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x7, 0x4}, 0x0, 0x0, &(0x7f0000000140)={0x1, 0x1, 0xfffffffe, 0x2}, &(0x7f0000000180)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x1}}, 0x10) getpid() unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff00989837f082138b01268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e2526f0c0900000036005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000001000101013c5811039e17775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c0001000000f3ffff2f43740000000000000006ad8e5ecc326d3a0000c2c65400"}, 0x80) getsockname$packet(r3, &(0x7f0000000400), &(0x7f0000000100)=0x14) r4 = socket(0x10, 0x1, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 00:38:17 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 226.366372] device ipvlan1 left promiscuous mode [ 226.377709] xt_addrtype: ipv6 does not support BROADCAST matching [ 226.414779] 9pnet: Insufficient options for proto=fd [ 226.427615] IPVS: ftp: loaded support on port[0] = 21 00:38:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 226.461672] device ipvlan1 entered promiscuous mode [ 226.653094] device ipvlan1 left promiscuous mode 00:38:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r1 = openat(r0, &(0x7f0000000180)='./file0\x00', 0x490a00, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ef99cc12337a3a48dc0a972ffb321fbe757d0e0a"}, 0x15, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x28181, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001940)={{0x0, 0x6c7, 0xe000000000000, 0x0, 0x9, 0xcca, 0xfffffffffffeffff, 0x7fffffff, 0x6, 0x100, 0x1, 0xfff, 0x7, 0x2, 0x2}}) r3 = gettid() getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)=""/145, &(0x7f0000000300)=0x91) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x0, 0xd9f, 0xffffffff) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xff, 0x3, 0xff, 0x6, 0x0, 0xfffffffffffffff9, 0x2a010, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_bp, 0x1, 0x2, 0xcf5, 0x2, 0x1, 0x7fff, 0x5, 0x0, 0x800}, r3, 0x2, r4, 0x9) write$cgroup_type(r2, &(0x7f0000000100), 0x9) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:17 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:17 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42102, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000080)) 00:38:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000500)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="3c9f8a049fdda2d28d676a7a10791993716789196dfe5360d2c4e8a78138cb642cc3350ebc3e30a1ba3367e9399d9fa09c77329b7159c0931aebabc0ed0e29859d085a18c8fa73763428ab4f9439da0c8c95d70016fa946d3b10c30d2bd580657be328067ecffd990cf3cf55d94f8368c99bd60dad78d85faaba31365ba2f8ac9718e9d605", 0x85}, {&(0x7f0000000480)="868a4b22a4c441f33c35e85dde4248e4fb1cabf7f2bf8d5b210fe0e91400b5cf3de8483e04a309ad4352e42180427dc0e18e4eca9290858032f6b01b0d307126465e20a58134f95d736f8f8d3e7c2283d66f4247e3900bc4b40c6e43986d2197a839c931959ffdbe4da3c24129ff105b356a8c40ef8ff33d96a141216383ef50", 0x80}], 0x2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000980)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000044c0)=ANY=[@ANYBLOB="c1ff000226bd7000ffdbdf2526a2dd404e224e23080000000300000009000000ff0700000500000003000000090000000300000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1350}}, 0x801) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440), 0x2000010, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c06ead7030a00db15c6f72aaeb2ad8ee775afdb8d8eac636fc716ffc8333ce9ab543c9e4db53090f00be351a17cfef7dfa242a0a071dcd0cbf9f14e35aed05330e3c081bf82ee36d030b443e12c9a5ead059a0c6dcfad4ee9e7acaddb7eb5ab3979ea3c9c564e5445dc6917a02d0b07061e9529602ca89c0c29754aa8ffc5468226c7bfd37aec57c44e93c680dc6656385d5027"]) sched_setattr(r0, &(0x7f0000002e00)={0x38, 0x6, 0x10000018, 0x800, 0x2, 0x5, 0x6, 0x0, 0x3, 0xffff}, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)="6045120a12371c862d2b263e11add9eb481d53db0c1087e638f6377a4cf6a137daa5fefe34cadbadb5ed9ff46930d9100a01162a26a210218ea560d0785d5dda470041ef17b55546ae3c9e1440", 0x4d, 0x0) [ 226.710516] 9pnet: Insufficient options for proto=fd 00:38:17 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 226.779862] xt_addrtype: ipv6 does not support BROADCAST matching [ 226.799183] device ipvlan1 entered promiscuous mode 00:38:17 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') r0 = syz_open_dev$audion(&(0x7f0000000180), 0xfffffffffffffffe, 0x2) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x0, 0xb2, 0x10000}, {0x8000, 0x80, 0x7, 0x8000}, {0x7000, 0x1f, 0x3f, 0x9}, {0x8, 0xea, 0x6, 0x370d}, {0x0, 0x5, 0x7, 0x7}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x1f, 0x6b, 0x9, 0xfe3}, {0x9, 0x9, 0x0, 0x1}, {0xa6c6, 0xad, 0x40, 0xfffffffa}, {0x0, 0x20, 0x40, 0x8}]}) [ 226.824638] device ipvlan1 left promiscuous mode [ 226.862597] 9pnet: Insufficient options for proto=fd 00:38:17 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:18 executing program 0: r0 = dup(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x76, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x80000000}, &(0x7f0000000080)=0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 227.142191] 9pnet: Insufficient options for proto=fd [ 227.164349] device ipvlan1 entered promiscuous mode [ 227.181824] device ipvlan1 left promiscuous mode [ 227.205496] IPVS: ftp: loaded support on port[0] = 21 [ 227.228859] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0) io_setup(0x3ff, &(0x7f0000000100)=0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x581) io_cancel(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x12400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000002c0)={0x38, 0x5, 0x10000010, 0x800, 0x200, 0x9, 0x0, 0x2, 0x5}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d00000000", 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 00:38:18 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') r0 = syz_open_dev$audion(&(0x7f0000000180), 0xfffffffffffffffe, 0x2) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x5, 0x0, 0xb2, 0x10000}, {0x8000, 0x80, 0x7, 0x8000}, {0x7000, 0x1f, 0x3f, 0x9}, {0x8, 0xea, 0x6, 0x370d}, {0x0, 0x5, 0x7, 0x7}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x1f, 0x6b, 0x9, 0xfe3}, {0x9, 0x9, 0x0, 0x1}, {0xa6c6, 0xad, 0x40, 0xfffffffa}, {0x0, 0x20, 0x40, 0x8}]}) 00:38:18 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x0) vmsplice(r2, 0x0, 0x0, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fb}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6tnl0\x00', {0x45, 0xffffffff, 0xb46, 0x0, 0x0, 0x2, 0x6}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 00:38:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:18 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:18 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 227.416802] device ipvlan1 entered promiscuous mode [ 227.435372] device ipvlan1 left promiscuous mode 00:38:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:18 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0) io_setup(0x3ff, &(0x7f0000000100)=0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x581) io_cancel(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x12400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000002c0)={0x38, 0x5, 0x10000010, 0x800, 0x200, 0x9, 0x0, 0x2, 0x5}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d00000000", 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 00:38:18 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0xd65e3000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="cf625e4dca69002b0400000019000f0003000400fffffffffffffff50f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}, {0x0}, {&(0x7f0000013900)}], 0x0, &(0x7f00000000c0)=ANY=[]) r4 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, &(0x7f00000000c0)) write$cgroup_type(r4, &(0x7f00000009c0), 0xd4ba0ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = gettid() ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000080)={'tunl0\x00'}) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000038000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r6, 0xc8f64000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) tkill(r5, 0x0) 00:38:18 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 227.830264] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1298031311)! [ 227.873281] EXT4-fs (loop4): group descriptors corrupted! [ 228.147926] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:19 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:19 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x113600, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:19 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x100000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0) io_setup(0x3ff, &(0x7f0000000100)=0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x581) io_cancel(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x12400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f00000002c0)={0x38, 0x5, 0x10000010, 0x800, 0x200, 0x9, 0x0, 0x2, 0x5}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d00000000", 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 00:38:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00002a4000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0xeb198000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x400, 0x40840) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x4, 0x3, 0x4, 0x15, @local, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1, 0x30, 0x4, 0xffff0000}}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000300)={@loopback, r3}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:19 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:19 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) mkdir(&(0x7f0000002100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f0000002380)='./bus\x00', 0x31) lchown(&(0x7f0000000340)='./bus\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002840)=0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006a40)="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", 0x2000, &(0x7f0000002d00)={0x0, &(0x7f00000022c0)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000002400)={0x18, 0x0, 0x0, {0x40}}, &(0x7f0000002440)={0x18, 0x0, 0xf23, {0x6}}, &(0x7f0000002480)={0x18, 0x0, 0x4e34, {0x2}}, &(0x7f00000024c0)={0x28, 0xfffffffffffffff5}, &(0x7f0000002500)={0x60, 0x0, 0xff, {{0x0, 0xfff, 0x3, 0x3, 0x1000, 0x89f, 0x3, 0xfc}}}, &(0x7f0000002580)={0x18, 0x0, 0x4}, &(0x7f00000025c0)={0x1a, 0x0, 0x0, {'/dev/fuse\x00'}}, &(0x7f0000002600)={0x20, 0x0, 0x28, {0x0, 0x14}}, &(0x7f00000026c0)={0x78, 0xfffffffffffffffe, 0x1, {0x6, 0x4, 0x0, {0x1, 0x7, 0x2, 0x7231, 0x2, 0x7ff, 0x3f, 0x10001, 0x1, 0x4000, 0x1, r1, 0x0, 0x4}}}, &(0x7f0000002740)={0x90, 0x0, 0x6aa, {0x3, 0x1, 0x3ff, 0x8001, 0xffffff27, 0x404afb3e, {0x6, 0x4cd1, 0x1, 0x6, 0x100000000, 0x6, 0xff, 0x3f, 0x32, 0xc000, 0x7fff, 0xee00, 0xee00, 0xfffffffd, 0x8}}}, &(0x7f0000002800)={0x10, 0xffffffffffffffda, 0x8}, &(0x7f0000002f80)=ANY=[@ANYBLOB="58030000000000000400000000000000020000000000000000000000000000000900000000000000030000000000000000020000fffffeff0100000000000000080000000000000000080000000000000400000000000000080000000000000003000000000000000500000002000000ff0f000000c0000008000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="c7000000090000000000000003000000000000005ba60000000000001b000000030000005e2d257b7b5b23215d232d2326652a212d5d24242ea7402f663a3a00000000000600000000000000030000000000000000800000000000000100000000000000040000000900000003000000000000000900000000000000090000000000000008000000000000000010000000000000190200000000000000000000ff7f00000000008000100000ffff0000", @ANYRESHEX=r0, @ANYRES32=0xee01, @ANYBLOB="0600000004000000000000000300000000000000080000000000000001000000000001002700000000000000040000000000000000000000000000000100000000000000f10300000000000001000000800000000400000000000000200000000000000005000000000000000180ffffffffffff03000000000000004000000000000000feffffffffffffff030000000010000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000100000000000000030000000000000003000000000000001e000000000000807d2e7d232329254d272f7d7d5e5c2e232a2e7b2ffd265e402a242b28285b0000000000000000000003000000000000000400000000000000ff010000000000000200000020000000020000000000000004000000000000000800000000000000030000000000000008000000000000000000000000000000060000000101000081ffffff0060000009000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000001800000000000000100000000000000e2ec000000000000080000008000000067726f75705f696405000000000000000000000000000000080000000000000001000000000000003f00000002000000060000000000000000000000000000000100000000000000050000000000000020000000000000004f020000000000000800000002000000b2030000004000000500000026", @ANYRES32=r1, @ANYRES32=0xee01, @ANYBLOB="010000000300000000000000010000050000f9ffa50000000000b84093362925c5960800"], &(0x7f0000002880)={0xa0, 0x0, 0x100000000, {{0x1, 0x2, 0x3, 0x1f, 0x193de2d0, 0x2, {0x5, 0x40, 0xfffffffffffffff8, 0x319, 0x8341, 0xf182, 0x5, 0xffffffff, 0x5, 0x8000, 0x7, 0xee01, 0x0, 0x8}}, {0x0, 0x1}}}, &(0x7f0000002cc0)={0x20, 0x0, 0xc9, {0x6, 0x0, 0x6e3c, 0x5}}}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000380)='squashfs\x00') read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000002d80)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x6d, 0x6, 0x7, 0x7, 0x0, 0x2}, {0xffffff48, 0x9, 0x101, 0xfff, 0x81, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="9eda438838743bd4e9720bee57093515dc189a5ea685e9556c1c2c3cfc4df50d66d31a48aa312663b68d18c5826b5b55fb738208863dac0f10f423aee7a5d8ddc45ebdfeb7424bae859d7c37ecfc4b63914d5a56d91017dd22bc84f759a15969951aef9d5c88c96560896988fa18cd946cfcc3a0f1c993348377904eac32c980bdf7976ebca2b499cab63c4e841514277fc71d4620e29a92523402485de0e82896484c0ae497a4d686df23ca7b68c3fd5e624d3510d7f94838e54af877ca58a00c5a672bba11f5aa1ed1980dfef47b9973d0bf456ded5e72f1702b3dc5197fce39cba53a038d8dc0ec783ce70577107dc5e8b299e64a0b7f1191f0926bd25762370191710bab2f44e9069f55f8a3f87e4cb488a2fb3348c0bf3b3874291f83e4776b160ea73aafa3919c7c069c73c0052173a63158db8b65541d161f9c964926ad7f06bdd6cb6a32135b04e35701c2e13c49c1f75dc7a25d623378860692d172ec3f1e1f2d9dc77c015c13721efcb101c2390abb847e871132f472a37cc0163b39b1d575a5444e246a08a1afb1a696cabab29498a314429a3b9f44c43ba29f71fac1fbe0d01c3c16d22730932704bcfb0c1b7a432bc51dd3f5dd5afc3b342cbe6a6ff899039e28f9a51881b1d46fdcf31767cb6f5c5c69ab3c80615d77c4d1664fc4ec831b8cea2e752bbb7a9ce79df875b29f1e232751daf32a1a0c4ff8bd0688e2b8e2d668b8a77e20a9eb6ec2e2c23b94e507baeacbcfa31fb6e1ca3343668f43e3aa6d85e7c29bf0bb4dbdabddc92be7f4a6f5d21b19e6da17bfb6cc926e3847532fae29c7b62fb909130ec372d3c16cfe6aaf3ce2af0fe7610fde7aad61bc80d2f96b999c8ccf6d22cf903ca8ae8b879ec4a416f334982e9810c0140a18d4dc81b5edaae23e9f4abaf40ed71512aebbba5bb251545e188db789558a845a2877b14bdaeec3c738b7d730c0860531bf5517d4f0e8f95ed3571f8a35816d5116fcb8d7cbf42b7d5d5e65541508c898bb2e0fe96297d2ab7135662de39df099ebaed5871111f5346278cee5728cec512e6c0a0d65b51e3d627873195b84103341c2bc83b6c8fdd8ba17f5957413f61c69d618c9b9d0b1f08dc81921b6c662ee1da3bfa019b095e9a03c2db4d645ccb7364e895098cbf7d932c72d80663c7a1694d122f7348393079223c11d36c64a5856eae0397ab9a9d948204b74e56525a9d552dd0916de81cbb5af3c59b3d7f8f9154423ce2cb45a5bc808e24bef13212019a19545fe54ba84d01534358380192b8c7b0eda907810375bb66a578a58fec392b47991271c8367b91d710e8a176bc1a4e96f0e137d4c25fbb03eddc392f9f170dd744472b864fbbae7c93d86e682308b21b73c5652065d72cf02e1152b44024a90a3b52eb0bb3cb412e518d37a68aa4c7f46789c54ab30d3a73d0a8712fde612294cda2aa1ccf164930b9b1d17801d4fbb06e849d39bf2b5141330caa0d2618b616f1c67e1ca57080e79ed9092ba7a55e8121cfc825cd26a0199a479a7ab1b7b23d2a4dd82fa6d04ee41ca680435efc934f0451e865e8632ac2f1115f4cdd33b0fccb7a2326127faf20cba37c828613dba5a98f4e1ad25eb6b91078cf73d873df9ef91531476f64b83559ff7ccdc4c070d478b18196ea05fe8d4ea0216ee5273dfabbd04582f40f064c9781afd2cbf30901f28cd09cc934f1b2d50883778274177e3dba8af0a1b931d80ce1a6c4085780ea2195b65ecfd2953f78a5290fe560d0cd6a5e73890a5a82dc410b92a3ef2be05ec5607820fd4ca6b9c3aa258d59022fdcb21665f1ce4e8aad8fd918c43bd3c2afe3dc223ff9f48831d401c8b6996190793d1dd7551f8511b69283992398d8f9b4bd2b3398d3b8c6f3c5d8b802ca5282b70242df2b7be4b38e70c3065f8da888631375afcc05ce578089c4f783776b286b7a60d1b5e189e2742a3240c1036a953d886885422eef01413c38099b64505fd5a73488acb4e611820674c58ae74d6c64a885d4beda9bd7903bcdc71e3711e2a057c0eab2100c321050ab14c6e453c53182577ad3178603cd9afde40a701120e9a36074fd582428c74e02781318e6c65450f8f020bd22475696fe13b8c59260e53a06d16eabd135e887a0a6bbc8ad21be7661df76fec5b13844f68b8eed1a7379713738beac9f23c7a26520e19797a910cde9fb285179526889b908b7eb49bb06f70f6271fba8712c1a4269ebcf4b7d043e924e3d2c4c753fd7e547d95841e335179836f76424e728810d7f32b78256ea30c79d9238a6588426e1f2d4c0b03d5605bd826ed24f0f11326b4cf958632b86e017aa80e142db1580c44f76d9c98196f3f6852ab2bfc6a01a3553a130c2d171957f5a45c3550fbbc990ef8742a98a86b280a57b9f198ff436bc01161ada50e6f23026c3254adf2321bff7e20aa54080bbb57d8d52c6a6df6107706a2e5bc6da68f17b474c0edd39401d765086e885cf7992405f856557915603cbe8894676e996bbadbb649a5e7498b91f9bd2f697dd9ebbe4d386050258b9f4c94781e61c660651c3f1e3ae51f8c035eca365bf15d6db48ea9ce183515f4a208d010f7c23dcacbd6e225490d7e9c133525f5c9018d752b21b4897bf18b64b6a9936f538a0a8958fc934440aeeaad2b68ac844d76f0900a6c95bd0b353d85d4fb62eb88360112237fd8c636a80e3130b21d66ae8ec58a4b76cba0602f96da919f7e84fd37e3ec2379f58e389a39c78d2482e03c379e3c4649ad63a76e3707ecff07d2fcb0c9dfc524cab49e69a09c92e4f88714335cb57d3f6184d07bef9657280fb5c9fd2d8f940f7ac6c5407e3077aa2e4ba8e217e0ee19e302d6d90e3be05a86dade35d2e454e511afb5cf5936f1d11f2fa6be6ceaa817dbdc7a6aabf2fad8ff3efa8382a25099f0c5989d2ad56ae0f4968b2cfcfc67b4f1c161c75900b4848f59a3c0376dfcb7997bf28e9e85d6dd942a360516de38e1c1a038a796f9a77ff2b0c7e5e8f4932391a0e58e76dacc6f9764178a211dfde3e75d367d2911ff398126ffdf83cf2fbdf1ad5232bed9155f7a168638a572094a9e934d4969b358cf6e121d7fd2aeae2f499068b42c152f0e3403a230885d6f92f038ddaa23499f804ffb06abdbabb51f6c38c92fb1a6271a4b13d6d11125b8ec12efa5907dc65062797fb9cca15e2f254e76b182d3fcdb4e96ac4de36d6df7e7bba5c32f422286b1be3b79bffb6fd693761952d195a84ad9ceb07287a0fbefab9e0347b513c5f60233ccd4b52d90ec144a2f896d9dc7f279f8aa93038f3efa286e1c3006933a4d7183d952f8d28b141b28b2af355b5bd8198dfde1ffb8d09202aff0d16ca3fec194662892a49f829813970a4520f1228aa03d211a45bed3b2e05bf1f10b1a152761e7b6c6ddea863a3c02224256092c70ca70dc185c4c385dd98b09e2682661e1e66f71d9c4037048eb70e8a1cbe57de87ec43713abf5fdcf63b9c482f318e3bec37e878dadbae15a02d731e6c8574eb14c059d72f73be5174add786d06b585a28a06d349d8e434a491b34897b3c1ad786ec8280d7f57edd4fbc6aea5485d659b59d393e331cf91e6ed76f340fcf7cf460892fa7318fc42b883f61d888ad982a751accb613c66661fba5f3d6de751a6a9ef8a4700316aaad04e991aab7903f4ef012ec2a8c092234e74ef335daf360ae47bbd2bbc6ad8c1a4f81efe8bbd703cb55ef36b32b4e30cb5a3b165c02ba295d0e1c40ce6ff8f479a74f01275f113ebfa8ade37a59ce70e6ca2a6f48f1be085f61bf772e2c2da523a2cfe63e99c57bdb1ff23139d4fca49eff7547e9880eefd3f7511a677efa23b52098ba89037c48dfcda2e8c1cfb9f892161049e53f8cee55256279512aecab8c441600dae0fd957883273047cf5c66ba209f830aa2ce0cbe41ca08c0cef4aed7f4324009200661a7ce680e5a8df2d051c1d8b2f63d25d8d74d05c75c46c8f3f24d625539e63459650960498a54ec3b16225bbbf4d3930009df265839d72611f5332a904cdebada108236e4414a2909ad01ec44b9d7f75de4385ad7ca5152e890a0919b3639fd1bcbca3b737ebb8d9ae541b1271cf2166ba15830e66f3d3afd3b754a7f81ad4f0999704ae99c114907c5be4a4797f13b80564f234723a34dbe137dabfd7fa23562df679f54a6ab54def6d63deae9844f72fd73efd0413551f5c4b9ee826eb3b7faf92a59ea34a16723b4fea14d1c8815a4e2d39fc48d1dbce526a7c53f5a96d0ef6463a0cee73fd3505f5c764a264b83c4a21f80e8b61c82d24442d13da99d18dc1b2538e7a510f6093d9ef2bc5cc777d4f98411e93919eddfd69d6e20d227cb61c50f358ea227f4de941fb080c1cf6b1f6e25533768fe133dbfc3f9d29c603bed38aa3c5af5b81a706b0067b40b88f992610d04c7cc36b8f649697cd6a93fae51138161891ae75a7147780fc59af5a6e18c54f9d2a4fe7fa92314b399afba9a40d0cc24f70a2593acf8d179215e06b7a9a88224bafcb2cbf60caf5fe4ff38208a70793b5dc33cd572956260e1c86312d3ba9b3a4b2b44376f2e78c616a6c0880ac8dcbaa30b9f761d500fd03a8518dd0509157b184a2d95e0caf3ffc8ac2db6c54d80c71a1e5b9ea3bf51071e2118af204123daceeb04e4f6f31f32a4d3fbb76ee49440cabda2c121c1b99acab5b87cecc37c3f9066af34ab29d6598bbfd91047a2ac7ce3a8f3027ff5e6d743506f161087278896a98ed37122ba208b61cf54d3929555ab06b564cd5e4f46f4755a6cfa2ef2b30d29ea66f2749d4060d411fa9160c91b6f55cf071ac8222c6313df18759e2958cddfe3db4cbeb9cd39abcf5f0beaecae8437813995cb7ed0b87d42ca942ff7245ece204798d01361c5f008e0d82bdf76660515bc78f7f8f409ccf68614b2cb50f5af2615661326fd971bc57eeeade60ea906b8df1cb0dfafd318cd2c396309c329d0469ca192aa8f51d7c4227685440f073983255baf054b97b9d7be1d1470d7eabd5c09b2116b4e86b0567b7e97e088717a4fe3dbdd310a1c39136ea4d2c47492001f9885dba03bf97e7da376171d666441cdc2f999db137603d57df32b4260fa0165e82917bb1631ea314e7a7437e66fc68cef22cda8f456d6e583f6e3237e0bc79987a9103f7cf0918e26881f67ea582e1ff3a49177599d385bf6e42572a2547933aeddb826530e9adf30dd84c3a7fae5c4c26f6c6f3a9f0906decd314e2407825abef959c5416d18a92ff34e6c521a16e8a0a29937c77d4ee99b41d530a732acbe0bf5d274df9d496b47a9a624546bdcf9976cde12ec989cb2a70b33a7c8a3a77652023164695f9db30dfcf587f0cd4f73e385730bcbdd688f6dcb08ba0efbb9f579220afefa4acfea522e864fce9b1782ce9f14824d16e9d33a2609c23ba3c5a1af02549357a0dcc12e37819d778021762cf895abeac1125b744c8b8225a091e7be9ded9993cfa3ca9abb83e25c8f559009977a2ed9374a89619fae5ef6d164bb73d242004dc8428e44689b33ee3bbe88bb4962ab0a32a90e7aea044f08410752cb2d7aeaf3196648a3a99092665b478bb394b48f79b36db0efc7f50d6a5179c945f5298cfaac5e5dea715296f92abce7281d48a0c9c6b785a35ef5f1697c047ddb254fe9a8ab9f498b0c1ae09ffd01a3d8d427fee7e36c51e0e5c2fee2245fb8464626ab5c9857ebce91f7d22bf024d10c2d71021cd69268472de419e6cefd970cc3a8e4d1bbe6496799aa7f100411766e712aff08b731460f14f9d7356db12cf8e1c6121968dc68b1d81c086b325ca4ce6fe1f476707e08fa913144b757c6be17cf93150db29544d207f09a896f33b7335d9339215da751e7af2c6bdd19db6f521af2c8a5998dc607f97026d07111488741134c1c86eba123273d1fd5ee4b471e86f9ae9478a04c7482076ab34a1eca5c64f89e5106eed44bceec019c67c12fb4db4fdac153f4ac3b63ffeb6d30de58ec039e2dd3c181e254cd94d0a2b0b44490384cc5915b54ee1db2b6d059879bf8126c9ca976d0f7862da07ecd350930a081810a7afd72b2ad3f65b96ae9c7f91227a2b5513a559f36b90fe01be9ae5ad3ca65e2c26f358fc26b858a3633fda7ae49a5fb705220a5819b3cca41b1ccc21d7c40f5fa9c422288efa5394e4312675899d704a2aab62b8363f58fd4bc12a8bea6ffc45b4414237bf5f019321206dbba439acb5ef26641f30fdac20f964354bce94e4c9d73e137f9806deefaf6f4acaa0e76ad4fef9f6cb7fc01bbabda9612c05adbe46afcf94819e8a4b4b49ff764784fa432d47fb6d4230900043d1b4521cd6839fe8c5df4d1899fdfb13880e207cac73f0a29020bdd563bd9c2f6bcd1ec523b3e03ebf6164fc65af001830c51396f9df2d346f83a59cfc82201cf1150ea57259d579fc2ed199b3fbe42d5188c84e4354610743e5b23a265246313cc63913f17412fa00d98b379b80b96d936969572e11316bc8926cb23115186f3b2387b82c3898fa41bf16a308da62d5a3eb3609af1943fddde08a4036eb2a41b7292caad9eb082614b02a1fa255bc7abd4d0e3b4ec1801e131e68c7aa9da1a0ff10f9de87dec8fad1ad8bfa99caa49e203a7b9c33e044d4544a537471e7a452468b821959bc488c6b8cbf81e90081a26de273ad1203cc06adb6af242ab19f96c1c66b58c37e2c9309704fba63af99a8d9c5efc651afb631fe9f546b938cc3b8e526c4159e5c9f7afb29fd1d55fabf09367ce2a63a35e7a2062d1c772ed981fd77157a847f687a177cf9886ce41df8cc509302b46bc1e2ba896b1c1656a1bbfdf4cd9ac39cf8510d1c823075f16550fd044aacc8d42a56f03718f7b18475cdc3999faeb25ab3dd8a807ee04d8e5d831d08b4e309dff50330685138797e10c6362636f53f22bfc1f3d5090a5d369282d9de36bb4e2505411ccc6ea395afa1567b15a2fb4be2adeea7126b1a8e80034105e0d98bdd78e796ce1cdc06a4ae666fc0baec5c52614340ed997673e26ec47c88846c000bb7c9077337cd44f5c041fdcc64986e5e1c0f488148f0ee6f842c44c0b72e82109270341bba6e9080b70fcf930d0f10be5a36798e70111fed72727b72282ff164fc08319d74f1f57cde71b57cb397a9e753f87b97729bafba017a24cbfdee5dfe7fc296c112e93bb8fce560ca80a3afd8370baaa79ad783b51352b5440b144a47378c9ae22eda5794328e95bcca220fd07bb56915529b155c61858efe89ad36a79288e74c0e251addcfaf797432175a5562b46eff5e3aebeb74623e18beef85389383c604d8884431b07dc4bea0174aadc337ff41f558a63f16690feae47efa2a5d1318b7397e1e4ba398727d286791b71610e1d78d32800e7e113c12abf0f60b6ca4401ecd23b7aacd990633b2b017daf6bfef1b2361ece74b7dbcbb1a73d4bc1f9d2e5c9fb0b7980d25cc44d1b10c09ef5a6a05c84669294a5cadf0cd88ab449f9f0bcdd8c48590d416c5c1feaa494a2145949c2a3373df7c6014225f2745bbeb20ff294d22c0d96ca111e6926946207cab56a03162a49e68968e398f70690188ee3ca847ef421742d60b9a6ad029e8a3d607950b2bf8ad8ff297cb39acc94905635770436e134435e28205140331b5100d9f64469792fffac87bca0835cbc617446ff86a7b50418c305f32e658b32130e491e38709fd3697017ac8084cdf1ed81a28375aed092ab4e32ca88a933154dd3a9e99351acbada926b67b310c7070ac1a414a28c5abfe1f45476249a12f18ca2d981528d881ed3c5072e46a6eff3cdf37dcbc89c7f79c88a1f8d15d15beb66a0e4440c7b93e379c4e2bac1d5c8e85f1852887e2cfeb178fba1c67dc2adb0c87df8ca4444ca7f455509f492effb5001328b8cc696e2933207a2d78bbce8562ca34a248193c914406b161c8141479d891b0c6110ec1e25cad38299b489f2ec437017cadba67dcb58abd4933c95b3526f1d4747b8701a7d71e446e4b62e2941d4281faca0cf22914be5aad80f47100000000ceb24e82508fe55a92fb6db70d03d1c1ec09cfee31639341756a4630a0eaaecac7bfbddf9d30c42cbd45eb181d5bd341307ad26f496bb042e2b655c03ac3dcc587acbf50f79b5c239be9938b62d3251b199f8413b020605d5d0552cfd9c39c9132719d6d0a326b000e12fcb51bc274df79d11430060d05978cdd50583f1bca82c57dbee605e2d00fcb5414af13a596d35cb5ba62de6a28cbccc857d23547b1c7fd5ac8fbf6758d5b8451fa46d9acc00344dc2e565674b1dd3547eb8f8aa5fff99042f8d1d59e6ad2f53379211e6832fcb68f5777eb2db85b28f724f4e4ce6342cf55713ff7b0cb4f7f47dd12a6566b86709eaefae024373267ce72a89e7f3e42ab48edcccc96b5d0403fe93a927e5ccf470014f220b8257393226cd7b996f20e6a34f81206733a9fdce03b701943c1b560d3eab68c2c225cf7f7f2b56123be2bb173e9e5b37f4d3348f6b987764ad07c2acd44514ff264d7eda31e5e517a179414841ad4553d51c08f435e05f10aa82d74b97a9ba3a133e6c9175fdcd4f3dc9c16d3be1d5bbaf13240177081ac1d56681bfa988a93af09868afd608520c0bfd71d857a6661fdaf6f2e166987eb007449dd26334ae932c5003fefc0f983b9e49cbfcea325f2de16a9ae935caa46f5b3433957fb370971ed957f138f08a60fed5b84995e428e7ae7d5c22021ff016baef0e713a118344c016a99ad469313ba7f2452da0dd82e019f64aa229cf80a69b3e08ac5847f10d247179855546313232f23e055c2f74ecef14e0fdcc29a9bf0976fbb249bd5c7903183d2a53c70960a183630e7d4928daa7091a85ad987d2a4a5b8f6be6612fa72d9fbb33c67bb38eff19f2e784f94e0354cf6d35a5b2c62233c039de3734b38e97ec72bd673fef09fd56fec329818cc68cdf12cb52f7d37a8350c16e94208880bfcd3e895d7aa4489e3dd15db4a9026f0d2a46f1e89c35845dbd976a1992b87c15a0c7580e6424b8792a7bb7b933d7c5433d4133ba4dbbcf7995d6ed3feaa32f876a287feeb9cc6107778c1f83e0119d980b9e994c2a3ae3de24a103efb3cacb746b49d1ad85746b233ab4aaf0e988ec2a786bc93f32040d3bdc3008031634cdfded5ac95b2279e096243228296591e7ba53c4a127772cc4620e6b238ccad250629194533d0a669ff3366c52d64928693e0b0cbb0b8e2c6029089d4dfe2b4b6c5dcd85f1a02770611e65001e48a32a8b0431a3b9d77fa3a95be38a0436a704c05a8e0183f3214c25531a63796f679bf72885aa766468d42b2543542d7e82544efc5c5e81e6a91a0f5d4e68000cff687d63e45c9a11d4ef515050daa592c9a828ac7c0488e7cdb3d6fdaef5e9176ee68d981ea50d386d74df3b40660351736deb03bfceb721878cf9894b0302df15964242ab6b9f77f98ba1c7993735983d2b022600ab74a19e3636e1400d08ba45d3a5c2774cb06a1c358bbfc11d27efaf7ca53c2e7757c8c76da24707d91a4a5244262898d68083ff91c514d9b9b1ebaa0cb0b10254fda1b1e82b9a1a47f117b5b280ddbec1f6732d11117ef1a7a674699df87fe795d1243cb9c4527e364e2b711b6562a87fafc130ce0baf1701686639b05f0c8dc708f008b1e6ab89e8d623bb83f3d54b7bcdbdacd055ac4eccbd36bbe0af0f65a00e3d6dd985ae8851d176976cfb5816d1fc2a63d3546aecaa4e712ca6961d1f181315d553de6b53485faed0dcfcf819a1ba3badffe797377d3d1ddaed8e7a0acc0c3d277762262a139f94de49faca167b11bf04f2104a5ab9a73367a6461f7124c91a2c4229ef98e6ebde9aac283c7d029400d71293f488ba169b62c1e94689cf5b248ed4aea62b88d65bb764cfe27d5231a58486e7381df518f4ed81cb905108c54a5050a94ca0e94da20d3794bc5fab9127dc95b6404b1e27b4e28136fc27806f7be798444c33aca88ffd45b860eba0d5033839f5a092863954604f1952bd61dad23b11643fe14f3ade08116aa2c13eee701ccd13e506bd65a1060bf69579aea8c8143cd38c0891a3065f251eba0c20ab9c69ddf28e3bd6400cc203bac8de1882239ad4e1b97b0ae2f1abb7bac7c0d8ef82b97ebfb1f5577f06a3a1377b09ada4db87d342f20ab0eca4b9c206042471307511429cb57a578211f92d3647189861cad9145f5eb26ab696abe50a2a6c1b469df97da28aba4e79b586c348a430f5ea61c4be1032fa61d18581f05a07fb8707c8996e0fff1c3eda59b992687fa12483b9327e10224b20d42e8b3fc4670bf070ced602283273d6818acd1f6da567c44d3f5e1377065d43d87d889843ae48e7fa8ba1634815695b8c480ca271e6e833799c70da80fd79acc09b989667a2294de5da73f0363df9a33ad4dab8d27cf7bed0a06838672e3d07d52b6396e9b5576021d5e925abd533bf161c944795065fdd44e8462e3070c479f1c118276653488dd9b2f1a673f8cad3612ca1fab4388ec9c8f834a01a499adb7b3a9a977672f6d75b41bbdd7f91ceb7e7a88568d17bb432be9e4e96e115075bce197ef4754d2914c2c59e2d7f4c08f0dbe34d31f229428f211bf1d7e8f5c319ed4a8273cb6255eb318851ac4557b0278fac63107a54d407c42f300b843a12abd3b893b46c7efac2e388ab42b87aebe2543bd4c15f459bc50aad10ffe1c1196fb52c26e54bdaa7fbd52451f207ffb073ef4b3f71eedd7da40c89505019739e3fa733bcdc84ff4919e8fe2358129ef28291be1d6426b8bafe88463b1d3cd7273745381c7f65221898e6ad361e88b24c54ccc7ac9a830145b6dc096e2d71ef71ec4f03524cb870b724e08d223bdec2f6fdde6200217a13b5136004d455d66547f5a1793e0cad85677d49e5c558852107007c8136812cf021afaf6f7e8f59883371be46cda412dd9c6fcf187c31252ceb5758901d39cd5355ab386d9a7fe6ea46ebf277aaf809c3023211ea9aa189de4d422080ebb9fec50ffab6b95ba4ae5018accc497e79149ed6047ce561ccc10e9194cdccd5c9fb75175c8dbc9d0a916ad59288f010defbbb50d263041ab37aac0f93253bef6f898cd0825d99d27224f26181f9713b8979da64756c95e7505f25a2688960d6155c3613dcc31b6c337a6dbfc6b12cfde1db22b93bbd5e48534fb0bda8b212577a14dcf665c834b0bd24e5f624d2455fe048dbe930328d7cb632db3b0e244bb5d43390b420b15157a339487fc78976f867d3a361aafdd3f50a93c01882da7c220089a544381db22e2c86b228dc2be01820468460437588952a549d37498e529e62aa62bad1580546bcb1e9a6ed1870b7838d05d12f6e3a041e78b1bdb80894626f20889ccb3a468aa4fb24b9c87cbb28623ce59c6b3c6286db366d08004551a25fe4d8d194a2bb7c52e1c85a5fbe4cb15b171489da121bea1c469a6bb185d63213084e3a81ee54dc03a94dc5ecdda7bfaad1df68021aaf4627c9d529f13e5c81b5ee4dd228949ca16b9a61d186211d153294470907557e5e14ae665013f285fe4d3766e7b3d8ce5e2a14692072d4d8f79354bcc8db8a2a36c8bcd", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28a3, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffffffffffd, 0x11, 0x0, @buffer={0x0, 0x40000, &(0x7f00000021c0)=""/209}, &(0x7f00000020c0)="7155640d559dcb778937fb86e0f8ded777", 0x0, 0x216, 0x0, 0x0, 0x0}) 00:38:19 executing program 2: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:19 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:19 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) [ 228.877462] xt_addrtype: ipv6 does not support BROADCAST matching [ 228.922207] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.178330] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 1298031311)! [ 230.188756] EXT4-fs (loop4): group descriptors corrupted! 00:38:21 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:21 executing program 2: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00006c6000/0x4000)=nil, 0x4000, 0x1800003, 0x8010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:21 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) 00:38:21 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0xfffffffa, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r4, 0x105, 0x0, 0x0, {{0x5f}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44815}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r6, 0x105, 0x0, 0x0, {{0x5f}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) [ 230.354736] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.390152] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:21 executing program 2: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:21 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) 00:38:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/211, 0xd3}, {&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000240)=""/93, 0x5d}, {&(0x7f00000002c0)=""/88, 0x58}], 0x4, &(0x7f0000000380)=""/184, 0xb8}, 0x7}], 0x1, 0x2, &(0x7f0000001940)={r2, r3+10000000}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000001980)={0x0, 0xb5}, 0x8) 00:38:21 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 230.557180] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.598389] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:21 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) keyctl$link(0x8, r6, r7) 00:38:21 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 230.662410] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.684453] 9pnet: Insufficient options for proto=fd 00:38:21 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x5, 0x3, 0x2, 0x0, 0x9, 0x5f60091}) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000000c0)) [ 230.790415] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.853220] xt_addrtype: ipv6 does not support BROADCAST matching [ 230.874515] 9pnet: Insufficient options for proto=fd [ 230.888154] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:21 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0xfffffffa, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r4, 0x105, 0x0, 0x0, {{0x5f}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44815}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r6, 0x105, 0x0, 0x0, {{0x5f}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 00:38:21 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:21 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) 00:38:21 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:21 executing program 0: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x6, 0x5, &(0x7f0000000340)=[{&(0x7f0000002ec0)="af92a7f0deb7fa63d7fec9dfcffad2907c0de64912f4a3fb7b21e445b6f65f26bf4d583a928746069d1c12cda6b6a61b0308b1955fbfdfca64637791e0358c295daba7970823f19b6d8b509730ee7d68a10900000000000000023890b1e792d4a0cbec42255012516a6f50b1774fa6dc29f631f6f177d6", 0x77, 0x4}, {&(0x7f0000001940)="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", 0x1000, 0x5}, {&(0x7f0000000100)="2074b6fe900885f64ba891363c93f1ba2b590e9839d8d14fea47b51e3f8ba2ee3d7dd86dd08f4b75127f314c56d0d0efe9b4d280d1c188a0ea0c", 0x3a, 0xa93}, {&(0x7f0000000140)="21ada61b03a8974cbbf78a03ff57a965575f93db92ab9a58710b0cd499f34c62bcd0787780181889f898b9787888ee4d6772720ea1c1ddbde3b2812561cbfc27442b673a4a50efea22c50542136cb2a61ca7f17753d222e80dd349f334f8d2ef5845005ddfe737bd5afba1b16b12d6c64d420c74750ac4c8a9062fb08b0482992de9548c08eb8b755991e4a2536b47aef914a46dea9949866f78b68688754093030d5c0aef03fc15984f1895b4466f83836365051e5da82d532b39fc126d7a55d159b9cb2e0483a7a8ecb1cc278975d2656792afc0cc44db1e3b3047a29723138dfd77861ced", 0xe6, 0x7}, {&(0x7f0000000240)="47748ee31ae40eba8e78a05486b23fee5e239b11dfbb444ac78edc192229fe9b34fb58fb4e4c18990e0caf676edd6b4176426f710f285c2fdaebb346f57a3eee4be4419e8ca7afb5f3f5a6a0511e77ff3af92c393b36d1d1c3e14eb1f3c34c4ae0eedfb2e44ffc839620f450c5cb8f5bba294dca5cc1bce2d605b3e80fa4a311c84c78d9922b1ce4f44bbf8f0b2d084f19e15325ec7f38db76c7811e13ce324f1aa554c5bf838e594ae3d73f39a2ba0b5e8bc78d0e7f336d7dfc5146b39bbcf9eb40937c63df16de310cada0d8714743cb6713f26041bf0a08cbf6a93c67cf1820dd2ae417d7e1", 0xe7, 0x7}], 0x2248810, &(0x7f0000002940)=ANY=[@ANYBLOB="666f776e65ffac", @ANYRESDEC=0xee00, @ANYBLOB=',defcontext=unconfined_u,dont_hash,func=KEXEC_KERNEL_CHECK,fsuuid=584fb0f7-213e-5bed-3bad-591a0a\x009,\x00']) preadv(r1, &(0x7f0000000080), 0x0, 0xd9f, 0x6a9) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x8001, 0x6, &(0x7f0000002dc0)=[{&(0x7f00000029c0)="5a1a91b556ffd4b6c9ced075fcd9edf3d49bba0a1439a4e0cc22a6467f455e0ad99c1bb972ec671ce859907dc00a8185b620e7eea2b2617366627c4eb5c342414a2d9e78f61f9fb4dc71c321640e1b75fe5cc2b8232bd4dd2d1017cb2fc80983d3e82499f3f33005650506638372a0caa0e8639c78bfc87b019235750748ccccff2f559dcfb4f8bc47a78794d22aaf2f664f6dccaaa90626e96ccfc047c3ed68e3ace5c25ed9719961b1cb4a4ac9450a4129759190d5bb672f5331756d3933d2897b9ec995f002c0a02aa31d9676c084e08b6ba084fd69cce4db07e59e", 0xdd, 0xfffffffffffffffd}, {&(0x7f0000002ac0)="ce287d64003d85cb68d4d771500bcf04313b68a90b434f19c833b9980245b32c0599a4b349d57f72d64bdaf63c6eb7a2d537b02d914fef88cb0b3c0d79ef7fc997c7fd2ab0f9e58022ff6a686564a9c8f11fd499e5aad6305cc67b71f6b4635281c840a572101d27270b850db14191d837deaabca8676d5dcbdd3495dc86a7cffb0d6b0e1aff7887e6365ef193466c932543400f724d595d81b3801e8b7db8f3fd222ee2b7f8e021944c8ae7f4c110376534c15215e05cb235bb919c4d18e0d559d293960cafe7fda30c60bb1639", 0xce, 0x9}, {&(0x7f0000000400)="f90da272d20b594fa5bdd3efe95f4c287e705e52f1ee9943306fb497aa31a7e0761b8ed77eec569b565962601f47bf8a00a1d46ba69e10d7fdb84dce21cd9847dc29609333bbdd91d1b92d3c85a4e5d8830244fd06ca17c30b8e0537b1cda1308e2ec8f67cdd185e85344f9cf63169613c8390c2fb098750636facc264a7475fb6972afcd826286d0ed3284ec32564ffeecf66d82c7c474b8f8de01241c65694d8b960b10466", 0xa6, 0x1}, {&(0x7f0000002bc0)="a8798d1e64464abeb2cf50e69ae074dbda8eb5617ebee6f110fa0d4db859fa412b99a0f00d63df0769a1067a1f6a557089915e05ada463d696b8856cb730d61910321536446aceaabaed5f053c0caa37ffa4aed7deaf0627df48dfb02d3a72a8d738ca097d80423d72f3bdec1e7d9c6aeaf1829d85b82a1ef01eefe0ff24ac53f2d92e7448463e06e53bc4670002688708b48f4b4765c1d4894af69a5b92be68827f639126f3a69d75e55322618ee9a4b4f8164df03c77cf8f45b68da07f08f752f7444e25a4897a5c6883ff0a32b968da0c7147da7b7d450df6b345313ed43fc9a784e58200fed44a77343d1305", 0xee, 0xa}, {&(0x7f0000002cc0)="91c47e8dffbb9279b7f4102c144a90ac8bfba20e56096dc85c1c3ac97ca72f5287cc2bbfcfaf31a872058b889be1a1bd505a765eb615a979ceda10447720692a5a7860556acca1339516fba17b2dd5b0e9e448fa1744ef0f81d5b89a829410480240967306d5371a15461aa3265ec5e56519728e4c43527db3b84a852367fe33c35cfd7175e01ba0cb4ca2e963bf1a04b505e4e0ff1764586ea6", 0x9a, 0xfff}, {&(0x7f0000002d80)="54a43d5ad4fb1d14637649eb72218fa0843ddcfe05f12c2878713499c5b1f7c58a11f6517848f1dc7687ab422e6669d27625", 0x32, 0xffff}], 0x3000840, &(0x7f0000002e80)=ANY=[@ANYBLOB="636865636b3d73747269636c3d302c6f626a5f1d8e2f7b72964fb965421fc51c05f3444758259e5a747970653d2c000063fac67d764d005a4e"]) [ 231.030933] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.046021] 9pnet: Insufficient options for proto=fd [ 231.046117] 9pnet: Insufficient options for proto=fd 00:38:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 231.080831] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:22 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 00:38:22 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 231.188502] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.218717] 9pnet: Insufficient options for proto=fd 00:38:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd, 0x50, r0, 0xe0651000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 231.233136] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.238261] 9pnet: Insufficient options for proto=fd 00:38:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 231.378203] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.398016] 9pnet: Insufficient options for proto=fd [ 231.425003] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:22 executing program 1: syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0xfffffffa, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r4, 0x105, 0x0, 0x0, {{0x5f}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44815}, 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r6, 0x105, 0x0, 0x0, {{0x5f}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 00:38:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:22 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:22 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:22 executing program 0: r0 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800, 0x5, &(0x7f0000000280)=[{&(0x7f00000000c0)="07ab78895a252fc3ab75c496d70a18bf1fec886ad6b897d9b8ff704dfaf1c3df7e2e1b669c2692602c", 0x29, 0x2}, {0xfffffffffffffffc, 0x0, 0x7}, {&(0x7f0000000100)="beddd5f01f0c6eba91cf5afbb2a07efdbacd443213caa225fe27d56cb80cd5e367a295873f6f53213c3fd30f3df869522f080dc8cbfdd8ee43f24a070bb52cc4f8bc9303f5025e26ae1998f5253a3334162b91c42e5e090523d73a16448b66036558cad9a15c3124cc57cd35", 0x6c, 0x1}, {&(0x7f0000000180)="1ab4c60f6e182efa3feafeaa4bea8a5b4d0443940a9aadd743669cac6e2a16f4fbf59ce51c773a3fe715713d0021835761c64689c8acfd51c022dc8c61b105bb9cc75f37a4134be096e9a5051d462ef5c1cdf28b707bec90da537e639fa39c6fe7c24bb8208587bc0d49de32e2ae4bc89eb90beffda9729c60f9110e30dfda7f5e636a14786810ece7597775b9b4c1db9fd6de757ec24b5c3a3c870fd8", 0x9d, 0x7}, {&(0x7f0000000240)="48baa5ad5391594342ec9c1824150db64df95a03b346ce965892f94a8665f769b6f83a08b3df38cbfacf3def57dbc0a1d46a65d790bd011452844062d1969f4f", 0x40, 0x4}], 0x2000804, &(0x7f0000000300)=ANY=[@ANYBLOB='/\\(,subj_role=TCPOPTSTRIP\x00,dont_measure,euid<', @ANYRESDEC=0xee01, @ANYBLOB='0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 231.594567] device ipvlan1 entered promiscuous mode 00:38:22 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 231.635146] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.699558] 9pnet: Insufficient options for proto=fd 00:38:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7fffffff, 0x4, &(0x7f0000000280)=[{&(0x7f00000000c0), 0x0, 0xffffffff}, {&(0x7f0000000100)="ec01e2bedc8829ff55398f1c72c15126ddeb7e73059812dcbaed17ce0c1847", 0x1f, 0x7}, {&(0x7f0000000140)="f9bad35fe92d96766823197b5e5e5afc7d7e13f340cd6bc7287a26cd6ed32f5a3081dd0459e187bb3d53807abf5864f1da1f91f27dbadb8227986addc26094e983c827ab2b3a2d36da8abb", 0x4b, 0xf6}, {&(0x7f00000001c0)="77aacda5615fff7e0161d52f9ef8ae52071ba4d487c4884ed2588cb297d3e6c05dfa30d18abea1af385bee7d706ea31e0724ae3c984d596b65945c5e8b984c9e8f2d1c4fa7afbb5be0f6def8e23189beb9af75eb68f4183a6c487e93490e60c01ec2a6f41184381f77aa135039ad1c1319f68ac32e93dfa9c5b43c45ae173ea44585981d", 0x84, 0x10001}], 0x10004, &(0x7f0000000300)={[{@max_inline={'max_inline', 0x3d, [0x25, 0x34, 0x65, 0x30, 0x67, 0x31, 0x37, 0x39]}}, {@noenospc_debug}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) preadv(r1, &(0x7f0000000340), 0x0, 0x2c, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 231.726829] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.747312] device ipvlan1 left promiscuous mode 00:38:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 231.826376] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.870527] 9pnet: Insufficient options for proto=fd [ 231.878375] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:22 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) 00:38:22 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:22 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:22 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14000}, 0x4040841) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:23 executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 232.069117] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.073156] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.087729] 9pnet: Insufficient options for proto=fd [ 232.094941] device ipvlan1 entered promiscuous mode [ 232.096592] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:23 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) 00:38:23 executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 232.213234] device ipvlan1 left promiscuous mode [ 232.240093] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:23 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 232.290065] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.301763] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 232.368764] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:23 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) r7 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r7, 0x0, 0x0) 00:38:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 232.415626] device ipvlan1 entered promiscuous mode 00:38:23 executing program 4: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 232.486365] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.486976] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.511720] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:23 executing program 4: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 232.542084] device ipvlan1 left promiscuous mode 00:38:23 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 232.565325] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.596653] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) ftruncate(r2, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:23 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:23 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) 00:38:23 executing program 4: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 232.728611] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.757093] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) mmap(&(0x7f000023f000/0x1000)=nil, 0x1000, 0x1000005, 0x40010, r0, 0x31193000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 232.784320] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.789461] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:23 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:23 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:23 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:23 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:23 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 232.953413] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.954942] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.960516] xt_addrtype: ipv6 does not support BROADCAST matching [ 232.972657] 9pnet: Insufficient options for proto=fd [ 232.985728] 9pnet: Insufficient options for proto=fd 00:38:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:24 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:24 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 233.064838] xt_addrtype: ipv6 does not support BROADCAST matching [ 233.084897] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8ac0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0xa0000200) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x4000041) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0xa0000200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:24 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 233.127898] 9pnet: Insufficient options for proto=fd [ 233.135578] 9pnet: Insufficient options for proto=fd [ 233.158711] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:24 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 233.221888] xt_addrtype: ipv6 does not support BROADCAST matching [ 233.237063] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xdaf, 0xa0402) mmap(&(0x7f0000166000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r1, 0x27c70000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 233.277034] 9pnet: Insufficient options for proto=fd [ 233.281916] 9pnet: Insufficient options for proto=fd [ 233.304751] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 233.343043] device ipvlan1 entered promiscuous mode 00:38:24 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4, r5}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 233.417253] xt_addrtype: ipv6 does not support BROADCAST matching [ 233.421077] xt_addrtype: ipv6 does not support BROADCAST matching [ 233.453780] device ipvlan1 left promiscuous mode 00:38:24 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:24 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 233.468662] 9pnet: Insufficient options for proto=fd [ 233.489208] 9pnet: Insufficient options for proto=fd 00:38:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 233.543406] xt_addrtype: ipv6 does not support BROADCAST matching [ 233.557747] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 233.634591] device ipvlan1 entered promiscuous mode [ 233.645651] 9pnet: Insufficient options for proto=fd [ 233.653893] 9pnet: Insufficient options for proto=fd 00:38:24 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r2, 0xac00, &(0x7f0000000080)={0x0, 0x7, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 233.677610] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 233.722652] device ipvlan1 left promiscuous mode [ 233.739491] xt_addrtype: ipv6 does not support BROADCAST matching [ 233.753219] 9pnet: Insufficient options for proto=fd 00:38:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}], [], 0x6b}}) 00:38:24 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 233.785362] xt_addrtype: ipv6 does not support BROADCAST matching [ 233.844417] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:24 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}], [], 0x6b}}) [ 233.898613] 9pnet: Insufficient options for proto=fd [ 233.903709] device ipvlan1 entered promiscuous mode [ 233.916531] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:24 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:24 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.002052] device ipvlan1 left promiscuous mode 00:38:25 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8001, 0x128) r1 = timerfd_create(0xe, 0x1000) close(r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0xc42, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xc200, 0x0) 00:38:25 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.056420] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:25 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}], [], 0x6b}}) 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.150015] device ipvlan1 entered promiscuous mode [ 234.162593] xt_addrtype: ipv6 does not support BROADCAST matching [ 234.168548] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:25 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f00001ce000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0xf789c000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.216616] xt_addrtype: ipv6 does not support BROADCAST matching [ 234.242314] device ipvlan1 left promiscuous mode 00:38:25 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}], [], 0x6b}}) 00:38:25 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:25 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:25 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.352912] xt_addrtype: ipv6 does not support BROADCAST matching [ 234.359507] xt_addrtype: ipv6 does not support BROADCAST matching [ 234.387732] device ipvlan1 entered promiscuous mode 00:38:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x8b, 0xc4, &(0x7f0000000040)="6119f932a96f996ddc313cee08e5e0be42aa815dd955e41574d6c4a493e673a38b7825c29717ef58243d4ff9caef4427b016aeefd37efef26236605e66d6917fa3befb4a1c820728c9ff44a02b3a641e8b79547f8aa9ab21719eca40d06cc96af0d2c1cbf3e86a0b5238fe5db3e21cff3e3452ec97a7b412d6c6ec683c2b55fa9a19ab9047498902cc75ad", &(0x7f0000000100)=""/196, 0x6, 0x0, 0x49, 0xf5, &(0x7f0000000200)="a37dced6c9d37963e2d33b31300991abfb94dcb15bc5cd3249e0ececfe0d88131833363f490f5f5bb3c6667c3abb2e246871aa2cc14115a9d3ca91f9ff6ddd80ce8a517d9944429496", &(0x7f0000000280)="c9d9d1e4d504879d694bbab213184e89d72fbdf03053f02bfce02262a704e7bd4524177eea860a9a72776670e26e51e1f9a9e7e30a61fc47d4ed5f99d78e8ef65e6584f8f45673e63cfd51226478a7b6f094824fd6b03b961695c941a8d70a3fb1a6aef90eab6a968fe8e17b89e6e79d0d21bcc6f7fe51e5ddec331b1b0b2c61bb48aaed2254d9b1c25cca480ade5f89e3d3af67695f7e027c02a84dd124a3c84cdb90de8ab50e8332ca72e5c35f183bfc76221085f15072493dc9f3f68e005f0d22931257a636b8a7c017ce52e2658b41e178f86dd8e6ed6c5846ff5a518913418083325a458ec07cc9f88c49300049458935bb08", 0x1}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:25 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 234.468658] xt_addrtype: ipv6 does not support BROADCAST matching [ 234.492416] device ipvlan1 left promiscuous mode [ 234.511168] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:25 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:25 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r3, r4}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x101, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="00000080f7ffce4108526d03c1950458f0524079af044a48a614ae2af7ae074d4ff0c73896752038f048845c11767b4449465607be34c25086dab74ae3f6a8873b3254ba169122cfada1738e9cf08e34edcc83f8189f0ac51e36a8cfa72117b4237c35818b438164a5aed18b78d532d0642c3889c28dc474c705c9c4c9d6642e7ddea2d334e3bfbd1897e959a096c7a5"]) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x3, 0x2, {0xa, 0x4e23, 0xffffde00, @private1, 0x1}}}, 0x32) 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.653375] device ipvlan1 entered promiscuous mode 00:38:25 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 00:38:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 00:38:25 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.704649] xt_addrtype: ipv6 does not support BROADCAST matching [ 234.727256] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:25 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 234.782163] device ipvlan1 left promiscuous mode 00:38:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) preadv(r0, &(0x7f0000001c00)=[{&(0x7f0000000040)=""/251, 0xfb}, {&(0x7f0000000140)=""/203, 0xcb}, {&(0x7f0000000240)=""/244, 0xf4}, {&(0x7f0000000340)=""/243, 0xf3}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f0000001940)=""/62, 0x3e}, {&(0x7f0000001980)=""/220, 0xdc}, {&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/120, 0x78}], 0x9, 0x93, 0xfffffffe) 00:38:25 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) [ 234.898982] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:25 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020}, 0x2020) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:25 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 00:38:25 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 234.941907] xt_addrtype: ipv6 does not support BROADCAST matching [ 234.955034] device ipvlan1 entered promiscuous mode 00:38:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x7ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 235.017518] device ipvlan1 left promiscuous mode 00:38:26 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 00:38:26 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 235.105485] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 235.156782] xt_addrtype: ipv6 does not support BROADCAST matching [ 235.181458] device ipvlan1 entered promiscuous mode 00:38:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x7ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) mmap(&(0x7f00000ca000/0x3000)=nil, 0x3000, 0x4, 0x810, r2, 0x79d9b000) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)="8cd4dbb6c6a11eff74230c7f6c69eb8ef1b00dec60c4af996b511b1b676fa4691feccc27fffd03f367a92487745ed3e96dbef3d3c74d8e8d6f1555f8b8f4d54e6b8bc83f25e4e3f7c763a56c31b341b6bcc93e7ddc8f30e80b9665803242856e68b671b242a4ab1f14353858c2477c127bfe49055dcdbf40c51ebe81dd9b385fee339bde5980891691722e6d9583c62c05", 0x91}, {&(0x7f0000001940)="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", 0x1000}], 0x2, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:26 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 235.302276] device ipvlan1 left promiscuous mode [ 235.309464] 9pnet: Insufficient options for proto=fd [ 235.318625] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:26 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 235.368252] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 235.422238] 9pnet: Insufficient options for proto=fd [ 235.428623] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 2 (fault-call:3 fault-nth:0): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 235.467633] xt_addrtype: ipv6 does not support BROADCAST matching [ 235.479986] device ipvlan1 entered promiscuous mode 00:38:26 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0xbb) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) read(r1, &(0x7f0000000040)=""/63, 0x3f) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)={0x5, 0xa, 0x4, 0x1, 0x80000001, {0x0, 0x2710}, {0x2, 0x1, 0x5, 0x6, 0x81, 0x38, "539cf02f"}, 0x9, 0x2, @userptr=0xdc02, 0x4, 0x0, r0}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r2, r3}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 235.566142] 9pnet: Insufficient options for proto=fd [ 235.577991] device ipvlan1 left promiscuous mode [ 235.610380] FAULT_INJECTION: forcing a failure. [ 235.610380] name failslab, interval 1, probability 0, space 0, times 0 [ 235.636334] CPU: 1 PID: 14824 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 235.644581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.654481] Call Trace: [ 235.657103] dump_stack+0x1b2/0x281 [ 235.660785] should_fail.cold+0x10a/0x149 [ 235.664962] should_failslab+0xd6/0x130 [ 235.669349] __kmalloc_track_caller+0x2bc/0x400 [ 235.674084] ? strndup_user+0x5b/0xf0 [ 235.677910] memdup_user+0x22/0xa0 [ 235.681481] strndup_user+0x5b/0xf0 [ 235.685170] ? copy_mnt_ns+0xa30/0xa30 [ 235.689090] SyS_mount+0x39/0x120 [ 235.692584] ? copy_mnt_ns+0xa30/0xa30 [ 235.696651] do_syscall_64+0x1d5/0x640 [ 235.700570] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 235.705777] RIP: 0033:0x4665f9 00:38:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 235.708978] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.716883] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 235.724169] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 235.731465] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 235.738748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.746034] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) [ 235.818971] 9pnet: Insufficient options for proto=fd [ 235.827121] xt_addrtype: ipv6 does not support BROADCAST matching [ 235.836224] device ipvlan1 entered promiscuous mode 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 1: read$FUSE(0xffffffffffffffff, &(0x7f0000001940)={0x2020}, 0x2020) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:26 executing program 2 (fault-call:3 fault-nth:1): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 235.928335] 9pnet: Insufficient options for proto=fd [ 235.942769] device ipvlan1 left promiscuous mode [ 236.000004] FAULT_INJECTION: forcing a failure. [ 236.000004] name failslab, interval 1, probability 0, space 0, times 0 [ 236.023897] CPU: 1 PID: 14862 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 236.031904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.041278] Call Trace: [ 236.043892] dump_stack+0x1b2/0x281 [ 236.047595] should_fail.cold+0x10a/0x149 [ 236.051821] should_failslab+0xd6/0x130 [ 236.055817] kmem_cache_alloc_trace+0x29a/0x3d0 [ 236.060505] ? copy_mnt_ns+0xa30/0xa30 [ 236.064421] copy_mount_options+0x59/0x2f0 [ 236.068679] ? copy_mnt_ns+0xa30/0xa30 [ 236.072621] SyS_mount+0x84/0x120 [ 236.076100] ? copy_mnt_ns+0xa30/0xa30 [ 236.080048] do_syscall_64+0x1d5/0x640 [ 236.084529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 236.090713] RIP: 0033:0x4665f9 [ 236.094567] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.102986] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 236.110862] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 236.122256] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 236.131002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.138472] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:27 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xfffffffffffff7f0, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0)="412bdf03adbe7e48189292f202d42b158eba56b3560266d62542dac773bede409b001ca128fcce5f9db348af2c88f8212a226396d5a52e31102665202f188980d7148ba1393c80e26ca7b8b4ec4245e7fe7ca5ad0171268f7ee5175036fce7c04aab4d946b048f1bd3f65c2b26bce3c6a8dbd431fc0a5b82ceac65637803068c06da", 0x82, 0x1}, {&(0x7f0000000180)="3617a51d4dff6a1c95f5bf7d6bdef721559fd7f33019d883dcf8ea176c2de2064873829ef9139cc272343e631922a67245e8ffe00ea784613481f76853751a64052f045263eb5e525d61eac876e40d90a48985b919227476d04c6aebea1bbc6594f8a7be569fa0876e0f8918ef9ee26994b831b2b1690af1a304792fb7ea6336a1c44496fa5f028ce2410349c902b320ebfb13e1ba62fce522dbac89cdf6", 0x9e, 0x51}, {&(0x7f0000000240)="cdc2938748434d8361172935688ac1dbc499ff040fd2ba652c61a1e8a5c6886c13f23af1a99f1840068e2f3ed60d9bf1f48350aad8d217497a24d2c364078fad65a9ad9a63a7bcb1aa2ff36ae3920889b2933731120d36b76af4308b746264685e974ef6bf63d3bdae0f1bfacc54384e5b8fbb2ff3fe60604bab3b44364cbc4a063d7543024d354689d1113b6b56bb4811b48dfd65d0ac744c7435da8ef45cb6996bc2f65430bbdd416815cdff41f722d572f1ddd880195de932f563ba9f8b87dfa14d2dfd479d3dba51348664", 0xcd, 0x3}], 0xa1, &(0x7f0000000440)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303230303030312c706172743d3078303030303030303030303030303030322c61756469742c636f6e746578743d73746166665f752c636f6e746578743d757365725f752c007989cdd55798bb6c665fa18a140d7c80"]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:27 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}, {@dfltgid}], [], 0x6b}}) 00:38:27 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:27 executing program 2 (fault-call:3 fault-nth:2): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 236.494996] xt_addrtype: ipv6 does not support BROADCAST matching [ 236.547035] 9pnet: Insufficient options for proto=fd [ 236.551874] FAULT_INJECTION: forcing a failure. [ 236.551874] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 236.567332] device ipvlan1 entered promiscuous mode [ 236.569605] CPU: 1 PID: 14883 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 236.569635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:38:27 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}, {@mmap}], [], 0x6b}}) [ 236.569641] Call Trace: [ 236.569675] dump_stack+0x1b2/0x281 [ 236.589724] xt_addrtype: ipv6 does not support BROADCAST matching [ 236.596148] should_fail.cold+0x10a/0x149 [ 236.596165] __alloc_pages_nodemask+0x22c/0x2720 [ 236.596183] ? __lock_acquire+0x5fc/0x3f20 [ 236.596196] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 236.596212] ? get_pid_task+0xb8/0x130 [ 236.639043] ? cache_alloc_refill+0x1da/0x350 [ 236.644719] cache_grow_begin+0x91/0x700 [ 236.648796] ? fs_reclaim_release+0xd0/0x110 [ 236.653234] ? check_preemption_disabled+0x35/0x240 [ 236.658262] cache_alloc_refill+0x273/0x350 [ 236.662592] kmem_cache_alloc_trace+0x340/0x3d0 [ 236.667271] ? copy_mnt_ns+0xa30/0xa30 [ 236.671169] copy_mount_options+0x59/0x2f0 [ 236.675498] ? copy_mnt_ns+0xa30/0xa30 [ 236.679395] SyS_mount+0x84/0x120 [ 236.682850] ? copy_mnt_ns+0xa30/0xa30 [ 236.686743] do_syscall_64+0x1d5/0x640 [ 236.690637] entry_SYSCALL_64_after_hwframe+0x46/0xbb 00:38:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fork() process_vm_writev(r3, &(0x7f0000001680)=[{&(0x7f00000012c0)=""/101, 0x65}], 0x1, &(0x7f0000002a80)=[{&(0x7f0000001700)=""/100, 0x64}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x40010, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 236.695824] RIP: 0033:0x4665f9 [ 236.699011] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.706735] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 236.714025] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 236.721312] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 236.728601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.735886] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:27 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}, {@aname={'aname', 0x3d, 'wfdno'}}], [], 0x6b}}) 00:38:27 executing program 2 (fault-call:3 fault-nth:3): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:27 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 236.851909] device ipvlan1 left promiscuous mode [ 236.860000] FAULT_INJECTION: forcing a failure. [ 236.860000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.872722] CPU: 1 PID: 14917 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 236.880620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.889996] Call Trace: [ 236.892607] dump_stack+0x1b2/0x281 [ 236.896261] should_fail.cold+0x10a/0x149 [ 236.902691] __alloc_pages_nodemask+0x22c/0x2720 [ 236.907472] ? __save_stack_trace+0x63/0x160 [ 236.911981] ? is_bpf_text_address+0x91/0x150 [ 236.916951] ? __lock_acquire+0x5fc/0x3f20 [ 236.921481] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 236.926343] ? kernel_text_address+0xbd/0xf0 [ 236.930767] ? __kernel_text_address+0x9/0x30 [ 236.935344] ? depot_save_stack+0x10d/0x3f0 [ 236.939697] ? kasan_kmalloc+0x139/0x160 [ 236.943791] cache_grow_begin+0x91/0x700 [ 236.947869] ? fs_reclaim_release+0xd0/0x110 [ 236.952407] ? check_preemption_disabled+0x35/0x240 [ 236.954186] xt_addrtype: ipv6 does not support BROADCAST matching [ 236.957478] cache_alloc_refill+0x273/0x350 [ 236.968044] kmem_cache_alloc+0x333/0x3c0 [ 236.972204] getname_flags+0xc8/0x550 [ 236.976020] user_path_at_empty+0x2a/0x50 [ 236.980280] do_mount+0x118/0x2a00 [ 236.983832] ? copy_mount_string+0x40/0x40 [ 236.988079] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 236.993105] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 236.997955] ? copy_mnt_ns+0xa30/0xa30 [ 237.001857] ? copy_mount_options+0x1fa/0x2f0 [ 237.006387] ? copy_mnt_ns+0xa30/0xa30 [ 237.010284] SyS_mount+0xa8/0x120 [ 237.013748] ? copy_mnt_ns+0xa30/0xa30 [ 237.017648] do_syscall_64+0x1d5/0x640 [ 237.021557] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 237.026761] RIP: 0033:0x4665f9 [ 237.029961] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.037692] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 237.044973] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:28 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 237.052253] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 237.059530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.066814] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:28 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, 0x0, 0x0, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:28 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:28 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}, {@access_any}], [], 0x6b}}) 00:38:28 executing program 2 (fault-call:3 fault-nth:4): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 237.212966] device ipvlan1 entered promiscuous mode [ 237.216890] FAULT_INJECTION: forcing a failure. [ 237.216890] name failslab, interval 1, probability 0, space 0, times 0 [ 237.256679] CPU: 1 PID: 14952 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 237.264700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.274747] Call Trace: [ 237.277618] dump_stack+0x1b2/0x281 [ 237.283233] should_fail.cold+0x10a/0x149 [ 237.287392] should_failslab+0xd6/0x130 [ 237.291410] kmem_cache_alloc+0x28e/0x3c0 [ 237.297142] alloc_vfsmnt+0x23/0x7f0 [ 237.300863] ? _raw_read_unlock+0x29/0x40 [ 237.305041] vfs_kern_mount.part.0+0x27/0x470 [ 237.309560] do_mount+0xe53/0x2a00 [ 237.313638] ? copy_mount_string+0x40/0x40 [ 237.317888] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 237.323033] ? copy_mnt_ns+0xa30/0xa30 [ 237.327113] ? copy_mount_options+0x1fa/0x2f0 [ 237.332082] ? copy_mnt_ns+0xa30/0xa30 [ 237.336023] SyS_mount+0xa8/0x120 [ 237.339488] ? copy_mnt_ns+0xa30/0xa30 [ 237.343392] do_syscall_64+0x1d5/0x640 [ 237.347302] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 237.352498] RIP: 0033:0x4665f9 [ 237.355690] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.363429] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 237.370730] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 237.377992] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 237.385270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.392527] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 237.443536] device ipvlan1 left promiscuous mode 00:38:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:28 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@cache_mmap}], [], 0x6b}}) 00:38:28 executing program 2 (fault-call:3 fault-nth:5): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:28 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [0x0, 0x0, 0xffffffff], 'batadv0\x00', 'veth0_vlan\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xc2}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [0xffffffff], [], '\x00', 'veth0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x3030, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) write$binfmt_elf32(r1, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x7f, 0x0, 0x49, 0x1000, 0x2, 0x6, 0xb35, 0x244, 0x38, 0x382, 0x6, 0xfffd, 0x20, 0x1, 0x1, 0x8f25}, [{0x5, 0x3, 0x8000, 0x1, 0x7e0, 0x8, 0x8, 0xe1d}, {0x5, 0x10000, 0x5, 0x9, 0x3ff, 0x7fff, 0x4, 0x9}], "ee1fc6e85fc81388f887f1256cd89d4a5ea266a76753c0a1b2dc56339597ce82c82a23a3a8292615ee97cf35ca6b71d550fc60057543f0dff96c663c0780f828538e9e026e6570ff73a5a6871d76b1f9f704d52bdfd5f5ff8f7614978636f142ff4e3f1100cd15780654509a35f3cea6617d6c228722e240fbcddbf2bacdd43e3c6486c21efd3371c0fe4f81bcb5794fb1d29173ae807a3a63a0aa7ef5de649fc5aefc1644c7bddce87bb476741659ac5a9798d3446253eb86ca6cfca8019af9f4a9a4033a3f99bc33bb7c022db411d03d8308379612", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x84e) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="34000000250001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0c00f2fff1ff18000300400008000e00040000060000000002010000"], 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x20004000) syz_mount_image$ntfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x9, 0x5, &(0x7f0000000940)=[{&(0x7f0000000100)="236296b7151852b82a411af1c008c2e8ffb0dbf0d91d2db018d6e1b707173136a01ea16468ab61374d4bb70bfe472348615f7417c3c774aa1d17af66b93e0121c3b7d7b925cac721fe7a9e246db9a6c249acd2ab05bd750acc4bf802d6ecf1a0f450625e79bb36ca357fc24daf", 0x6d, 0x3}, {&(0x7f0000000180)="c4b15bd9684e3f8db70a049f2dc6f4a98399a9d516c5024c49c1db4852cc29f28e4db083df9ac6008cf6e11f292c275a88a9c000b7f022f74521cb49294bbf1bcf2f81edef8c465d16515ac238f37ae8de90d381746898a78aed6ce59f8a9fe38ad11e4a80efc5d259799d7ea0046905fcf940de0acd27f5007da936833392eabb37e063141f3f27a0da995dfc3381a2dd81e218a08ec42bffe2c6457ee13d58b90589bcbd3fbcc18298de5ef2d23dc8c7845071d89fafe5d13174771e0c0d74fa24dbad1d487000af2ebe0347113d5ee6833e1414b6947843014eb440abb480", 0xe0, 0xa2}, {&(0x7f0000000280)="e0dd138263cc53c1c80067f33d49d423668e789e55131420081b50d3d250a50f0d657270a3d0241c7773d6b07336632e7654e378d2e1d76b44157e73b1e66122c102fd95d1bba236f068955cb615b7117384f1e5c190ac194d5051ee523ea5bc2b50120077a949a49f83eebf0dc6668bba0ccc37355aebfbea243b715f00f9311386f2fb9d198e80104176b6dabca8d856ee31de", 0x94}, {&(0x7f0000000340)="c0dc3048b702112d78769912f92c54d6de03dd3bafa0e25f64a026586c2ffd41a34b32b800b1dc66e91e44965cbeee80f98a3deb53eaa4b7d2ce013ed9b2f5ccc3038cbe2b52f54843846cd3041d4b3d140596c53a73eebfc0550ae9c347a032fb9f1ff5b8f96f7117d662c999454be00b9cd17abb56c8dcc45d54a671ee78193ed4f551ec559d2f9640b97bbf8240699b8bdd4eed3255c6d2e4bb93ec902190ee60daf0a23097179a508c06a2326513f911d5541ac8844ba9677cc05fabfb34e055b8eba303147941481f0967501786d0b19fed", 0xd4}, {&(0x7f0000000440)="6efbff78ec3dff9a7e70905a39922cdede85a4bf3a0173ab4abb0d5cd9bf2490a7dc319421117ddb489eb976185d06e2f1c61f4adbc4e3d47669824b3a78389268417b1a43622460f48c0a631a53de8904e93fb171a93c", 0x57, 0x39e9}], 0x1000, &(0x7f00000009c0)={[{@umask={'umask', 0x3d, 0x80000001}}, {@mft_zone_multiplier}, {@disable_sparse_yes}, {@gid={'gid', 0x3d, r3}}, {@case_sensitive_no}, {@errors_remount}, {@show_sys_files_yes}], [{@smackfsdef={'smackfsdef', 0x3d, 'TCPOPTSTRIP\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@audit}]}) 00:38:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:28 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 237.786742] FAULT_INJECTION: forcing a failure. [ 237.786742] name failslab, interval 1, probability 0, space 0, times 0 [ 237.804440] device ipvlan1 entered promiscuous mode 00:38:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:28 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1c5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 237.859239] CPU: 1 PID: 14980 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 237.867191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.876560] Call Trace: [ 237.879170] dump_stack+0x1b2/0x281 [ 237.882807] should_fail.cold+0x10a/0x149 [ 237.886973] should_failslab+0xd6/0x130 [ 237.890973] kmem_cache_alloc_trace+0x29a/0x3d0 [ 237.895665] v9fs_mount+0x54/0x860 [ 237.899202] ? alloc_pages_current+0x15d/0x260 [ 237.903785] ? __lockdep_init_map+0x100/0x560 [ 237.908377] mount_fs+0x92/0x2a0 [ 237.911756] vfs_kern_mount.part.0+0x5b/0x470 [ 237.916299] do_mount+0xe53/0x2a00 [ 237.919872] ? do_raw_spin_unlock+0x164/0x220 [ 237.924437] ? copy_mount_string+0x40/0x40 [ 237.928691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 237.929254] xt_addrtype: ipv6 does not support BROADCAST matching [ 237.933732] ? copy_mnt_ns+0xa30/0xa30 [ 237.933746] ? copy_mount_options+0x1fa/0x2f0 [ 237.933755] ? copy_mnt_ns+0xa30/0xa30 [ 237.933765] SyS_mount+0xa8/0x120 [ 237.933773] ? copy_mnt_ns+0xa30/0xa30 00:38:28 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x14) umount2(&(0x7f0000000000)='./file0\x00', 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 237.933785] do_syscall_64+0x1d5/0x640 [ 237.933801] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 237.933813] RIP: 0033:0x4665f9 [ 237.971857] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.979689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 237.986990] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 237.990348] xt_addrtype: ipv6 does not support BROADCAST matching [ 237.994274] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 00:38:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) [ 237.994280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.994285] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 238.030231] device ipvlan1 left promiscuous mode 00:38:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 238.158885] device ipvlan1 entered promiscuous mode 00:38:29 executing program 2 (fault-call:3 fault-nth:6): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 00:38:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_mount_image$ocfs2(&(0x7f0000000240), 0x0, 0x7, 0x3, &(0x7f0000001740)=[{&(0x7f0000000480)="b12f9a9d94df6b8cd70e64037975b485ee97a21f1da452bff5d7d043fa0a6a8f2f81aa4b0e28dd96bf4dc076d238341f297d7b31de85702d213a4ac327304f590f2aba6b95682534f5bfafabe8ae6f66ad5d6b73830e6297a7a8e8d356ed3500da51b280d1f2ac1e95dea9bac2f26d4cab422be65111", 0x76, 0xd8e}, {&(0x7f0000000580)="247567a3bc630d7608a1fefbb6504f0a6cfc50f504a73dc6942d93d7cb3ad28795ef679d1aad0c0e4ca955dd854549862f882e64c7bf85b581b7582a7402e545cc0d3b75a7d0ce076481b8defcf9c5937790eff5f034481baa5ae4f19cf7a09f2cd7a579c1b99fd1e2eb6fe9fad0835f1dc751d66a63ddbb93a090d28832621c960abb81c94a1293eaec3cd6910fc26c8d7f9cbc1f18fc7c7d9febb9170ddbb1be0a926c2c2602372e1c1367a1792f1dc8a1398bbaebcc6c311d528282c5c501fa618d160b970936fd71221df5a8e086012da3dace27c8b25706", 0xda, 0x1f}, {&(0x7f0000000680)="16782025c1403cecd24404f6d02d6bca729247a99795f1c65b87dfc391ec5370a2be50c6bc082e60da4e36171f37b03cada8cc174f5c67ee0ee6fbfc034fe2d25a2d975fc83016369c1973925474bbb980a3790d1e9f01d52058daf2cbd37cfaa8018357e38b4157d067834051deec77bd6556c9530b248c12e9a19d89be7723b58cfa4762ebf5", 0x87}], 0x4c080, &(0x7f00000002c0)={[{'/dev/ubi_ctrl\x00'}], [{@obj_user={'obj_user', 0x3d, '}1%\'\\-.-'}}]}) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x47, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="14ba4fdec098a67dc3bf8f03f1a48a01638c8b8e5cf0d1c9ad3a8217b22238c1d126", @ANYRESDEC=r2, @ANYBLOB="1d43fddd59670a5f12614e201c4e9271821a4c06bc4471d3457f115d91bb35"], 0x0, 0x4, 0xaa, &(0x7f0000000040)=""/170, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x1}, 0x10}, 0x78) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x7, 0x9, &(0x7f0000001b80)=[{&(0x7f0000000240)="63a132e327d104decb10239ab8c1c4c5e61c32372523bed6cb939499bd1ee729fe74ab7be6f61cbdd9b574ce299fd287853c7208fea6222ed07db435bf6af3650ee8907a77013a14223c877378aa7d86dca147a77c740511cad0855eb0fe6015d060876ec422c8bc69cda301d5d792c2b34a561fff933e9408cea83eef23fbe3be77d9f23f89", 0x86, 0x100000000}, {&(0x7f0000000300)="4da2a4cc076f3cda5e16768d73277859c822406aacf95386ffc68f6263790e0d47c9caeb13a1d12ed43efa5f24d13b18e1155d1570b80eaceb428d160fe8897e4870401cd04de9a6cfa65f541a9ad257da26426c7f56be24a9e52e2a965c2af2b2aa2943a94e5fb56fc9e51124ed5a66eb9f8ce6a45068de54cb959e97d4bae268094135629469b60ad666166bf7f0773a1618b9964b0c59658202996012302682928257d1310f26696bcd8210eb32bc3a88d41eb8fc0b6015b28dd29671697762025a41deb7", 0xc6}, {&(0x7f0000000400)="48a6c065eea755951556df9330209cc54c6d9698b9cb4e5437f35e7ac2d1864360b8b647174597034a2a8e9069689813a2de1d", 0x33, 0x9}, {&(0x7f0000000440), 0x0, 0xff}, {&(0x7f0000001940)="cc5f56529bab0399885c53444bd86f6dc695c3304f3951369284ca31c8343d72d6e133512f9f644788cefd6f49bc144f12c52938ff1e4d037295f4340eedb976aca06156ac5014674818b633e1ed97899b9dd1a1c611ace0b0d0090e7b70e8", 0x5f, 0xcdf5}, {&(0x7f0000000480)="da97e75b97e4774bbcd9d4579aff0980bcdcc6d39ddb746367fed4f8fc2fb39b92c432e80b54298885f1779237a2764400f381d0cfc1fdc970", 0x39}, {&(0x7f00000019c0)="7888633501c3cac9f6fb9f474fbb80ae9d9ee71a5ff0da04353e68afbc0b74b7b12c86f50c6ca78220de7bb9d42dab26c4ba59e43396950d6547354b53b1382f369fb0e333403c838a4d95aa6d585f0d1d9e577e96432b357e7d759a67198edb510bb9cb6e1c3b6da7fdce10b0156459e2b2f44939853e261d32f472010d9f5f27cc06a0c6ff2520375250c3def85057773b5e6cb8f70d8a9f1b78899190f5", 0x9f, 0xe7}, {&(0x7f0000001a80)="6d68c6e82b727dbea5295a5a4660abdb087e9b1a98aca63f336c88897d2f40855b1c5b15c973d47399fe69227378f9d5602c92e30385419696cbc45052e64cb57f384bbe9ecbd513efac5f053fe57a6cf4", 0x51, 0xfffffffffffffffc}, {&(0x7f0000001b00)="964fabc2816c270d19bd0682462101b09c76bd9ced6357af9a4b0726a487164d3572a2fdc8f91b3998d2d266c6e1dacd1d23766d4782c03cb72987133aafaebf25cd890ab628186436794471bd1c05b2468ae39f6ec910a2424aa00a820bece0b410c1f5f84685765c34a2440da8", 0x6e, 0x80000001}], 0x5000, &(0x7f0000001c80)={[{@user_xattr}, {@norecovery}, {@dioread_lock}, {@data_err_abort}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@discard}, {@nogrpid}, {@grpid}, {@debug}], [{@subj_type}, {@obj_role={'obj_role', 0x3d, 'syzkaller0\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller0\x00'}}, {@seclabel}, {@uid_eq={'uid', 0x3d, r2}}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1) statx(r3, &(0x7f0000000080)='./file0\x00', 0x1000, 0x100, &(0x7f00000000c0)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:29 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 238.224044] device ipvlan1 left promiscuous mode 00:38:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) [ 238.290895] xt_addrtype: ipv6 does not support BROADCAST matching [ 238.307249] FAULT_INJECTION: forcing a failure. [ 238.307249] name failslab, interval 1, probability 0, space 0, times 0 [ 238.342538] xt_addrtype: ipv6 does not support BROADCAST matching [ 238.349079] CPU: 1 PID: 15041 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 238.357018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.360142] device ipvlan1 entered promiscuous mode [ 238.366380] Call Trace: [ 238.366406] dump_stack+0x1b2/0x281 [ 238.366421] should_fail.cold+0x10a/0x149 [ 238.366434] should_failslab+0xd6/0x130 [ 238.366449] kmem_cache_alloc_trace+0x29a/0x3d0 [ 238.366464] v9fs_mount+0x54/0x860 [ 238.366473] ? alloc_pages_current+0x15d/0x260 [ 238.366482] ? __lockdep_init_map+0x100/0x560 [ 238.366491] mount_fs+0x92/0x2a0 [ 238.366504] vfs_kern_mount.part.0+0x5b/0x470 [ 238.366515] do_mount+0xe53/0x2a00 [ 238.366530] ? copy_mount_string+0x40/0x40 [ 238.366542] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 238.366550] ? copy_mnt_ns+0xa30/0xa30 [ 238.366560] ? copy_mount_options+0x1fa/0x2f0 [ 238.366573] ? copy_mnt_ns+0xa30/0xa30 [ 238.436346] SyS_mount+0xa8/0x120 [ 238.439815] ? copy_mnt_ns+0xa30/0xa30 [ 238.443722] do_syscall_64+0x1d5/0x640 [ 238.447643] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 238.452946] RIP: 0033:0x4665f9 [ 238.456402] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 238.464208] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 238.471480] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 238.478751] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 238.486022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 00:38:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x12711, 0x2, 0x2, 0x1000, &(0x7f0000232000/0x1000)=nil}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) socket$netlink(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x12000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x48}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10000, 0x44}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x40080) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x13e, &(0x7f0000000140)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x17) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) gettid() [ 238.493327] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 238.566102] device ipvlan1 left promiscuous mode 00:38:29 executing program 2 (fault-call:3 fault-nth:7): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:29 executing program 4 (fault-call:3 fault-nth:0): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 238.614368] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 238.692563] FAULT_INJECTION: forcing a failure. [ 238.692563] name failslab, interval 1, probability 0, space 0, times 0 [ 238.704235] xt_addrtype: ipv6 does not support BROADCAST matching [ 238.741493] FAULT_INJECTION: forcing a failure. [ 238.741493] name failslab, interval 1, probability 0, space 0, times 0 [ 238.744453] CPU: 0 PID: 15078 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 238.760659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.770025] Call Trace: [ 238.772629] dump_stack+0x1b2/0x281 [ 238.776266] should_fail.cold+0x10a/0x149 [ 238.780463] should_failslab+0xd6/0x130 [ 238.784446] __kmalloc_track_caller+0x2bc/0x400 [ 238.789123] ? v9fs_session_init+0x98/0x1540 [ 238.793544] ? trace_hardirqs_on+0x10/0x10 [ 238.797789] kstrdup+0x36/0x70 [ 238.801039] v9fs_session_init+0x98/0x1540 [ 238.805284] ? pcpu_alloc+0xbe0/0xf50 [ 238.809094] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 238.813944] ? v9fs_show_options+0x6b0/0x6b0 [ 238.818474] ? v9fs_mount+0x54/0x860 [ 238.822193] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 238.827647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 238.832668] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 238.837536] v9fs_mount+0x73/0x860 [ 238.841090] ? alloc_pages_current+0x15d/0x260 [ 238.845685] ? __lockdep_init_map+0x100/0x560 [ 238.850186] mount_fs+0x92/0x2a0 [ 238.853556] vfs_kern_mount.part.0+0x5b/0x470 [ 238.858051] do_mount+0xe53/0x2a00 [ 238.861731] ? copy_mount_string+0x40/0x40 [ 238.865983] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 238.871005] ? copy_mnt_ns+0xa30/0xa30 [ 238.874924] ? copy_mount_options+0x1fa/0x2f0 [ 238.879427] ? copy_mnt_ns+0xa30/0xa30 [ 238.883347] SyS_mount+0xa8/0x120 [ 238.886803] ? copy_mnt_ns+0xa30/0xa30 00:38:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 238.890750] do_syscall_64+0x1d5/0x640 [ 238.895348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 238.900571] RIP: 0033:0x4665f9 [ 238.903760] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 238.912050] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 238.919690] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 238.927006] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 238.934286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.941584] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 238.948870] CPU: 1 PID: 15093 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 238.956881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.966237] Call Trace: [ 238.968844] dump_stack+0x1b2/0x281 [ 238.972498] should_fail.cold+0x10a/0x149 [ 238.976665] should_failslab+0xd6/0x130 [ 238.980661] __kmalloc_track_caller+0x2bc/0x400 [ 238.985348] ? strndup_user+0x5b/0xf0 [ 238.989163] memdup_user+0x22/0xa0 [ 238.992708] strndup_user+0x5b/0xf0 [ 238.996360] ? copy_mnt_ns+0xa30/0xa30 [ 239.000251] SyS_mount+0x39/0x120 [ 239.003708] ? copy_mnt_ns+0xa30/0xa30 [ 239.007608] do_syscall_64+0x1d5/0x640 [ 239.011506] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 239.016722] RIP: 0033:0x4665f9 [ 239.019912] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 239.027721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 239.035368] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 239.042739] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 239.050019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.057651] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 00:38:30 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:32 executing program 4 (fault-call:3 fault-nth:1): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:32 executing program 2 (fault-call:3 fault-nth:8): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:32 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 241.589148] FAULT_INJECTION: forcing a failure. [ 241.589148] name failslab, interval 1, probability 0, space 0, times 0 [ 241.617180] CPU: 0 PID: 15133 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 241.625105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.628268] FAULT_INJECTION: forcing a failure. [ 241.628268] name failslab, interval 1, probability 0, space 0, times 0 [ 241.634465] Call Trace: [ 241.634492] dump_stack+0x1b2/0x281 [ 241.634515] should_fail.cold+0x10a/0x149 [ 241.634528] should_failslab+0xd6/0x130 [ 241.634543] kmem_cache_alloc_trace+0x29a/0x3d0 [ 241.634554] ? copy_mnt_ns+0xa30/0xa30 [ 241.634570] copy_mount_options+0x59/0x2f0 [ 241.673670] ? copy_mnt_ns+0xa30/0xa30 [ 241.677570] SyS_mount+0x84/0x120 [ 241.681026] ? copy_mnt_ns+0xa30/0xa30 [ 241.684938] do_syscall_64+0x1d5/0x640 [ 241.688838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 241.694033] RIP: 0033:0x4665f9 [ 241.697227] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.704943] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 241.711567] xt_addrtype: ipv6 does not support BROADCAST matching [ 241.712216] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 241.726178] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 00:38:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000280)=0x80) getsockopt$inet6_opts(r2, 0x29, 0xc, &(0x7f00000002c0)=""/61, &(0x7f0000000300)=0x3d) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000000c0)={{0xd000, 0x0, 0x8, 0x7, 0x3f, 0x5, 0x8, 0x2, 0xa4, 0x7, 0x4, 0x4}, {0x1000, 0x5000, 0xd, 0x43, 0xbc, 0x6, 0xe1, 0x3, 0x8, 0x4, 0x0, 0x7f}, {0x10000, 0x1, 0x4, 0x3, 0x8, 0x40, 0x3f, 0x3, 0x80, 0x9}, {0x1000, 0x1000, 0x1d, 0x2, 0x81, 0x3, 0x1, 0x2, 0x7, 0x4, 0x3f, 0xd5}, {0x0, 0x4, 0xd, 0xba, 0x33, 0xc2, 0x3, 0x1f, 0x3f, 0x40, 0x3, 0x2}, {0x0, 0xf000, 0x0, 0x1, 0x1f, 0x0, 0x9, 0x1, 0x6, 0x40, 0x7f, 0x7}, {0xf000, 0x1000, 0xb, 0xec, 0x80, 0x40, 0x1, 0x9, 0x9c, 0x81, 0x1f}, {0x10000, 0x6000, 0xb, 0x3, 0x20, 0x0, 0x4, 0x3, 0x6, 0x7, 0x5, 0x8}, {0x6000, 0x1}, {0x2000, 0x3ff}, 0x40031, 0x0, 0x0, 0x14, 0x2, 0xc000, 0x1000, [0x4f, 0x2, 0xb501, 0x2]}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x1, r6}) dup2(r4, r5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 241.733454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.740731] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 241.748019] CPU: 1 PID: 15139 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 241.756791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.766238] Call Trace: [ 241.768836] dump_stack+0x1b2/0x281 [ 241.772572] should_fail.cold+0x10a/0x149 [ 241.776804] should_failslab+0xd6/0x130 [ 241.780814] __kmalloc_track_caller+0x2bc/0x400 [ 241.785532] ? v9fs_session_init+0xd1/0x1540 00:38:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 241.789964] kstrdup+0x36/0x70 [ 241.793170] v9fs_session_init+0xd1/0x1540 [ 241.797427] ? pcpu_alloc+0xbe0/0xf50 [ 241.801250] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 241.806116] ? v9fs_show_options+0x6b0/0x6b0 [ 241.810584] ? v9fs_mount+0x54/0x860 [ 241.814316] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 241.819786] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 241.824825] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 241.829683] v9fs_mount+0x73/0x860 [ 241.833225] ? alloc_pages_current+0x15d/0x260 00:38:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 241.837816] ? __lockdep_init_map+0x100/0x560 [ 241.842324] mount_fs+0x92/0x2a0 [ 241.845702] vfs_kern_mount.part.0+0x5b/0x470 [ 241.850316] do_mount+0xe53/0x2a00 [ 241.853867] ? retint_kernel+0x2d/0x2d [ 241.857762] ? copy_mount_string+0x40/0x40 [ 241.862134] ? audit_kill_trees+0x230/0x230 [ 241.866464] ? copy_mount_options+0x1fa/0x2f0 [ 241.870967] ? copy_mnt_ns+0xa30/0xa30 [ 241.874861] SyS_mount+0xa8/0x120 [ 241.878314] ? copy_mnt_ns+0xa30/0xa30 [ 241.882232] do_syscall_64+0x1d5/0x640 00:38:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x13c) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x20, 0x8, 0x3f, 0x40, @local, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x40, 0x8000, 0x8c54, 0x7ded8af6}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:32 executing program 4 (fault-call:3 fault-nth:2): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 241.886123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 241.891310] RIP: 0033:0x4665f9 [ 241.894492] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.903333] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 241.910610] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 241.917892] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 241.925354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.932637] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:32 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) close(r0) 00:38:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 242.002817] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.035937] FAULT_INJECTION: forcing a failure. [ 242.035937] name failslab, interval 1, probability 0, space 0, times 0 [ 242.052614] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.073866] CPU: 1 PID: 15168 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 242.081801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.094749] Call Trace: [ 242.097363] dump_stack+0x1b2/0x281 [ 242.101124] should_fail.cold+0x10a/0x149 [ 242.105920] should_failslab+0xd6/0x130 [ 242.110000] kmem_cache_alloc+0x28e/0x3c0 [ 242.114250] getname_flags+0xc8/0x550 [ 242.118094] user_path_at_empty+0x2a/0x50 [ 242.122272] do_mount+0x118/0x2a00 [ 242.125864] ? copy_mount_string+0x40/0x40 [ 242.130118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 242.135145] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 242.139994] ? copy_mnt_ns+0xa30/0xa30 [ 242.143889] ? copy_mount_options+0x1fa/0x2f0 [ 242.148388] ? copy_mnt_ns+0xa30/0xa30 [ 242.152298] SyS_mount+0xa8/0x120 [ 242.155754] ? copy_mnt_ns+0xa30/0xa30 [ 242.159663] do_syscall_64+0x1d5/0x640 [ 242.163561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 242.168753] RIP: 0033:0x4665f9 [ 242.171950] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.179672] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 242.187300] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 242.194594] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 00:38:33 executing program 2 (fault-call:3 fault-nth:9): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3, 0x3, &(0x7f0000000300)=[{&(0x7f00000001c0)="a90abfb2883afaed1d6fe6d926ebd7a406eb57a1679ce4d3033eb260c3bef177cd61d8f8de3115f505f2ded94efc48fc4f9331d56b22763c9d9bca32fa1e78594dccb28c8d57673c5c", 0x49, 0x10000}, {&(0x7f0000000240)='\t', 0x1, 0x4}, {&(0x7f0000000280)="fb5e3de9ba3534b0c79326500ce7c99680b16dab298862042ae5b691619c817e10cd8114b86472d6326072ecefcd7f6e86bad4c3b8eacf9bfd9ac97fc5c8fecc214a0e415b813b2091228db6", 0x4c, 0x7fffffff}], 0x182020, &(0x7f0000000380)={[{'SET\x00'}, {'/proc/crypto\x00'}, {'batadv0\x00'}, {'./cgroup.cpu/syz1\x00'}, {'filter\x00'}], [{@subj_user={'subj_user', 0x3d, ',)+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, 'cgroup\x00'}}, {@appraise_type}]}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x50, r1, 0x4e174000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x3f, 0x5, 0x100, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x10, 0x10, 0x0, 0x6}}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 4 (fault-call:3 fault-nth:3): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 242.201870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.209144] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 00:38:33 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) close(r0) 00:38:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 242.314986] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.328928] FAULT_INJECTION: forcing a failure. [ 242.328928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.329971] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.340793] CPU: 1 PID: 15195 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 242.340802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.340806] Call Trace: [ 242.340832] dump_stack+0x1b2/0x281 [ 242.340848] should_fail.cold+0x10a/0x149 [ 242.340866] __alloc_pages_nodemask+0x22c/0x2720 [ 242.340877] ? __save_stack_trace+0x63/0x160 [ 242.340893] ? is_bpf_text_address+0x91/0x150 [ 242.340908] ? __lock_acquire+0x5fc/0x3f20 [ 242.340920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 242.340931] ? kernel_text_address+0xbd/0xf0 [ 242.340939] ? __kernel_text_address+0x9/0x30 [ 242.340956] ? depot_save_stack+0x10d/0x3f0 [ 242.340972] ? kasan_kmalloc+0x139/0x160 00:38:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 242.340990] cache_grow_begin+0x91/0x700 [ 242.341006] ? fs_reclaim_release+0xd0/0x110 [ 242.341021] ? check_preemption_disabled+0x35/0x240 [ 242.341035] cache_alloc_refill+0x273/0x350 [ 242.341052] kmem_cache_alloc+0x333/0x3c0 [ 242.341077] getname_flags+0xc8/0x550 [ 242.341093] user_path_at_empty+0x2a/0x50 [ 242.341109] do_mount+0x118/0x2a00 [ 242.341126] ? copy_mount_string+0x40/0x40 [ 242.341142] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 242.341151] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 242.341167] ? copy_mnt_ns+0xa30/0xa30 [ 242.389828] FAULT_INJECTION: forcing a failure. [ 242.389828] name failslab, interval 1, probability 0, space 0, times 0 [ 242.392907] ? copy_mount_options+0x1fa/0x2f0 [ 242.392916] ? copy_mnt_ns+0xa30/0xa30 [ 242.392925] SyS_mount+0xa8/0x120 [ 242.392933] ? copy_mnt_ns+0xa30/0xa30 [ 242.392945] do_syscall_64+0x1d5/0x640 [ 242.392960] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 242.392968] RIP: 0033:0x4665f9 [ 242.392973] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.392983] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 242.392993] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 242.528520] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 242.535807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.543081] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 242.550546] CPU: 0 PID: 15200 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 242.558451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.567902] Call Trace: [ 242.570510] dump_stack+0x1b2/0x281 [ 242.574155] should_fail.cold+0x10a/0x149 [ 242.578314] should_failslab+0xd6/0x130 [ 242.582341] kmem_cache_alloc_trace+0x29a/0x3d0 [ 242.587037] p9_client_create+0x9c/0x12c0 [ 242.591197] ? fs_reclaim_release+0xd0/0x110 [ 242.595622] ? p9_client_flush+0x4c0/0x4c0 [ 242.599904] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 242.605364] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 242.610401] ? __lockdep_init_map+0x100/0x560 [ 242.614906] ? __raw_spin_lock_init+0x28/0x100 [ 242.619589] v9fs_session_init+0x1c5/0x1540 [ 242.623937] ? pcpu_alloc+0xbe0/0xf50 [ 242.627759] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 242.630895] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.632635] ? v9fs_show_options+0x6b0/0x6b0 [ 242.632650] ? v9fs_mount+0x54/0x860 [ 242.632662] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 242.632678] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 242.651688] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.652532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 242.652549] v9fs_mount+0x73/0x860 [ 242.652559] ? alloc_pages_current+0x15d/0x260 [ 242.652574] ? __lockdep_init_map+0x100/0x560 [ 242.681323] mount_fs+0x92/0x2a0 [ 242.684703] vfs_kern_mount.part.0+0x5b/0x470 [ 242.689207] do_mount+0xe53/0x2a00 [ 242.692755] ? copy_mount_string+0x40/0x40 [ 242.696996] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 242.702027] ? copy_mnt_ns+0xa30/0xa30 [ 242.706105] ? copy_mount_options+0x1fa/0x2f0 [ 242.710609] ? copy_mnt_ns+0xa30/0xa30 [ 242.714505] SyS_mount+0xa8/0x120 [ 242.715055] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.717962] ? copy_mnt_ns+0xa30/0xa30 [ 242.717978] do_syscall_64+0x1d5/0x640 [ 242.717995] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 242.718004] RIP: 0033:0x4665f9 [ 242.718009] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 242.740946] xt_addrtype: ipv6 does not support BROADCAST matching [ 242.748154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 00:38:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 0: ftruncate(0xffffffffffffffff, 0xa88d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x0, 0x4810, r2, 0x72541000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, 0x0, 0x0, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) preadv(r1, &(0x7f0000002a40)=[{&(0x7f0000000080)=""/140, 0x8c}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000380)=""/155, 0x9b}, {&(0x7f0000002940)=""/198, 0xc6}, {&(0x7f0000000440)=""/44, 0x2c}], 0x9, 0x4, 0x6) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$UHID_CREATE2(r3, &(0x7f0000002b00)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x2f, 0x9, 0x8, 0x8000, 0x80000001, 0x7fffffff, "5cfa017dd2ce1d49e3092f19f0b7f763f5869bf06062bf36be4e24836bc57ae1c597b7a054d30359006e5e019e78ab"}}, 0x147) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:33 executing program 2 (fault-call:3 fault-nth:10): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 242.748161] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 242.748166] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 242.748170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.748174] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:33 executing program 4 (fault-call:3 fault-nth:4): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) close(r0) [ 242.849234] FAULT_INJECTION: forcing a failure. [ 242.849234] name failslab, interval 1, probability 0, space 0, times 0 [ 242.876992] FAULT_INJECTION: forcing a failure. [ 242.876992] name failslab, interval 1, probability 0, space 0, times 0 [ 242.912367] CPU: 0 PID: 15231 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 242.920290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.929740] Call Trace: [ 242.932342] dump_stack+0x1b2/0x281 [ 242.935982] should_fail.cold+0x10a/0x149 [ 242.940251] should_failslab+0xd6/0x130 [ 242.944273] __kmalloc_track_caller+0x2bc/0x400 [ 242.948953] ? p9_client_create+0x2e3/0x12c0 [ 242.953390] kstrdup+0x36/0x70 [ 242.956603] p9_client_create+0x2e3/0x12c0 [ 242.960848] ? p9_client_flush+0x4c0/0x4c0 [ 242.965113] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 242.970582] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 242.975614] ? __lockdep_init_map+0x100/0x560 [ 242.980122] ? __raw_spin_lock_init+0x28/0x100 [ 242.984805] v9fs_session_init+0x1c5/0x1540 [ 242.989145] ? pcpu_alloc+0xbe0/0xf50 [ 242.992970] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 242.997838] ? v9fs_show_options+0x6b0/0x6b0 [ 243.002267] ? v9fs_mount+0x54/0x860 [ 243.005988] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 243.011588] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 243.013472] xt_addrtype: ipv6 does not support BROADCAST matching [ 243.016626] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 243.016642] v9fs_mount+0x73/0x860 [ 243.016653] ? alloc_pages_current+0x15d/0x260 [ 243.016663] ? __lockdep_init_map+0x100/0x560 [ 243.016674] mount_fs+0x92/0x2a0 [ 243.016695] vfs_kern_mount.part.0+0x5b/0x470 [ 243.048806] do_mount+0xe53/0x2a00 [ 243.052378] ? copy_mount_string+0x40/0x40 [ 243.056622] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 243.059815] xt_addrtype: ipv6 does not support BROADCAST matching [ 243.062446] ? copy_mnt_ns+0xa30/0xa30 [ 243.062457] ? copy_mount_options+0x1fa/0x2f0 [ 243.062465] ? copy_mnt_ns+0xa30/0xa30 [ 243.062476] SyS_mount+0xa8/0x120 [ 243.062485] ? copy_mnt_ns+0xa30/0xa30 [ 243.062499] do_syscall_64+0x1d5/0x640 [ 243.062516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 243.062525] RIP: 0033:0x4665f9 [ 243.062534] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x4, &(0x7f0000000280)=[{&(0x7f00000000c0)="efc679e26c8ab551d119e47ed6dbf0d3", 0x10, 0x100}, {&(0x7f0000000100)="335d9a5f551b096a8543cf2af96f205e410f233c60299bc2b48990a039c0151e1300aa81542ca38353be54df6d6d29d534f9b81278a663818bd3c2c61aa3cd75501a845511f873449b9880f6aa33c3a2c101ce8d28b08ae47abf73363d0278b24419283cc0cbfc383d2870122f26f4808120943c1b368adc29ca8eea60f2339f6d5210f4c1afb2e35c74192e054db8d2c077f666c4f13ca65a85786196b984f9ef6a0d2ed563e701fd0421c7ccaa5d952457a1c4616cebd3", 0xb8, 0x7}, {&(0x7f0000001940)="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", 0x1000, 0x7}, {&(0x7f00000001c0)="9e77147f5525946c8d9bbebd345ec225fe0dec63ac5cdb92200f6c56b922e31944b9773855936b08eae2ebab3910723c9aaed37d523d777e9dd9fe13e3fa222ee843342580bc7585ec2107a43e3f502a281cb14861a1884b0814c53afc92f0d8e9c2363d08c1abb6c4534726cac871bef60ca0acd4cf0584d4886b763662400222", 0x81, 0x3f}], 0x10, &(0x7f0000000300)={[{'SET\x00'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, '*$'}}, {@euid_eq={'euid', 0x3d, 0xee00}}]}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000003c0)={{r2}, 0xa, &(0x7f0000000340)=[0x100000001, 0x1, 0x81, 0x3, 0x3, 0x8ab, 0xfffffffffffffffe, 0xf72, 0x2, 0x4], 0xb9dc, 0x2, [0x1, 0x5, 0x80000001, 0x101]}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000100)=""/224, 0xe0}], 0x2, 0xd9d, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 243.109497] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 243.116785] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 243.124077] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 243.131389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.138667] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 243.148429] CPU: 1 PID: 15234 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 243.156331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.165690] Call Trace: [ 243.168295] dump_stack+0x1b2/0x281 [ 243.171944] should_fail.cold+0x10a/0x149 [ 243.176137] should_failslab+0xd6/0x130 [ 243.180130] kmem_cache_alloc+0x28e/0x3c0 [ 243.184407] alloc_vfsmnt+0x23/0x7f0 [ 243.188131] ? _raw_read_unlock+0x29/0x40 [ 243.192292] vfs_kern_mount.part.0+0x27/0x470 [ 243.196801] do_mount+0xe53/0x2a00 [ 243.200357] ? copy_mount_string+0x40/0x40 [ 243.204609] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 243.209652] ? copy_mnt_ns+0xa30/0xa30 [ 243.213558] ? copy_mount_options+0x1fa/0x2f0 [ 243.218165] ? copy_mnt_ns+0xa30/0xa30 [ 243.222108] SyS_mount+0xa8/0x120 [ 243.225583] ? copy_mnt_ns+0xa30/0xa30 [ 243.229490] do_syscall_64+0x1d5/0x640 [ 243.233397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 243.238611] RIP: 0033:0x4665f9 [ 243.241802] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.249526] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 243.256814] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 243.264219] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 243.271501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.278789] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 243.305294] xt_addrtype: ipv6 does not support BROADCAST matching [ 243.328456] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:34 executing program 2 (fault-call:3 fault-nth:11): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:34 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x58}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:34 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:34 executing program 4 (fault-call:3 fault-nth:5): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 243.477738] FAULT_INJECTION: forcing a failure. [ 243.477738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.485772] FAULT_INJECTION: forcing a failure. [ 243.485772] name failslab, interval 1, probability 0, space 0, times 0 [ 243.525853] xt_addrtype: ipv6 does not support BROADCAST matching [ 243.537919] CPU: 0 PID: 15285 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 243.546192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.555565] Call Trace: [ 243.558182] dump_stack+0x1b2/0x281 [ 243.561820] should_fail.cold+0x10a/0x149 [ 243.565979] should_failslab+0xd6/0x130 [ 243.569986] __kmalloc+0x2c1/0x400 [ 243.573526] ? match_strdup+0x58/0xa0 [ 243.577341] match_strdup+0x58/0xa0 [ 243.580995] p9_client_create+0x3ba/0x12c0 [ 243.585255] ? p9_client_flush+0x4c0/0x4c0 [ 243.589512] ? __lockdep_init_map+0x100/0x560 [ 243.594033] ? __raw_spin_lock_init+0x28/0x100 [ 243.598672] v9fs_session_init+0x1c5/0x1540 [ 243.603001] ? pcpu_alloc+0xbe0/0xf50 [ 243.606813] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 243.611690] ? v9fs_show_options+0x6b0/0x6b0 [ 243.616194] ? v9fs_mount+0x54/0x860 [ 243.619908] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 243.625361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 243.630479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 243.635330] v9fs_mount+0x73/0x860 [ 243.638992] ? alloc_pages_current+0x15d/0x260 [ 243.643579] ? __lockdep_init_map+0x100/0x560 [ 243.648111] mount_fs+0x92/0x2a0 [ 243.651485] vfs_kern_mount.part.0+0x5b/0x470 [ 243.656012] do_mount+0xe53/0x2a00 [ 243.659566] ? copy_mount_string+0x40/0x40 [ 243.663833] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 243.668864] ? copy_mnt_ns+0xa30/0xa30 [ 243.672804] ? copy_mount_options+0x1fa/0x2f0 [ 243.677306] ? copy_mnt_ns+0xa30/0xa30 [ 243.681199] SyS_mount+0xa8/0x120 [ 243.684666] ? copy_mnt_ns+0xa30/0xa30 [ 243.688614] do_syscall_64+0x1d5/0x640 [ 243.692520] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 243.697713] RIP: 0033:0x4665f9 [ 243.701083] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.708807] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 243.716088] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 243.723473] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 243.730780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.738063] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 243.745372] CPU: 1 PID: 15281 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 243.753301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.762683] Call Trace: [ 243.765291] dump_stack+0x1b2/0x281 [ 243.768946] should_fail.cold+0x10a/0x149 [ 243.773118] __alloc_pages_nodemask+0x22c/0x2720 [ 243.777905] ? trace_hardirqs_on+0x10/0x10 [ 243.782167] ? pcpu_alloc+0xbe0/0xf50 [ 243.785992] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 243.790889] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 243.796362] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 243.801481] alloc_pages_current+0x155/0x260 [ 243.805905] ? __lockdep_init_map+0x100/0x560 [ 243.810423] get_zeroed_page+0x19/0x50 [ 243.814317] mount_fs+0x1c7/0x2a0 [ 243.817785] vfs_kern_mount.part.0+0x5b/0x470 [ 243.822736] do_mount+0xe53/0x2a00 [ 243.826284] ? copy_mount_string+0x40/0x40 [ 243.830523] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 243.835563] ? copy_mnt_ns+0xa30/0xa30 [ 243.839466] ? copy_mount_options+0x1fa/0x2f0 [ 243.843986] ? copy_mnt_ns+0xa30/0xa30 [ 243.847996] SyS_mount+0xa8/0x120 [ 243.851573] ? copy_mnt_ns+0xa30/0xa30 [ 243.855493] do_syscall_64+0x1d5/0x640 [ 243.859806] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 243.865636] RIP: 0033:0x4665f9 [ 243.868855] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:34 executing program 2 (fault-call:3 fault-nth:12): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 243.876572] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 243.883838] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 243.891103] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 243.898370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.905652] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 00:38:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$FUSE(r0, &(0x7f0000001940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x21, 0x6596, 0x10030, 0x8000, 0xc5d2, 0x0, 0xffffffff}}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) mmap(&(0x7f00004c6000/0x1000)=nil, 0x1000, 0x2000000, 0x1fff, 0xffffffffffffffff, 0xe9732000) 00:38:34 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:34 executing program 4 (fault-call:3 fault-nth:6): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 243.992015] FAULT_INJECTION: forcing a failure. [ 243.992015] name failslab, interval 1, probability 0, space 0, times 0 [ 244.046715] xt_addrtype: ipv6 does not support BROADCAST matching [ 244.050806] CPU: 0 PID: 15315 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 244.060945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.068962] FAULT_INJECTION: forcing a failure. [ 244.068962] name failslab, interval 1, probability 0, space 0, times 0 [ 244.070333] Call Trace: [ 244.070357] dump_stack+0x1b2/0x281 [ 244.070374] should_fail.cold+0x10a/0x149 [ 244.070389] should_failslab+0xd6/0x130 [ 244.070415] __kmalloc+0x2c1/0x400 [ 244.092298] xt_addrtype: ipv6 does not support BROADCAST matching [ 244.096682] ? match_strdup+0x58/0xa0 [ 244.096697] match_strdup+0x58/0xa0 [ 244.096710] p9_client_create+0x3ba/0x12c0 [ 244.096724] ? p9_client_flush+0x4c0/0x4c0 [ 244.096740] ? __lockdep_init_map+0x100/0x560 [ 244.096753] ? __raw_spin_lock_init+0x28/0x100 [ 244.096771] v9fs_session_init+0x1c5/0x1540 [ 244.096786] ? pcpu_alloc+0xbe0/0xf50 [ 244.150071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 244.154946] ? v9fs_show_options+0x6b0/0x6b0 [ 244.159373] ? v9fs_mount+0x54/0x860 [ 244.163128] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 244.168565] xt_addrtype: ipv6 does not support BROADCAST matching [ 244.168628] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 244.181566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 244.186460] v9fs_mount+0x73/0x860 [ 244.190025] ? alloc_pages_current+0x15d/0x260 00:38:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{}, {r2, r3/1000+10000}}, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r0, r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f00001b6000/0x3000)=nil, 0x3000, 0x1000006, 0x12, r1, 0x2944c000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 244.194634] ? __lockdep_init_map+0x100/0x560 [ 244.199150] mount_fs+0x92/0x2a0 [ 244.202537] vfs_kern_mount.part.0+0x5b/0x470 [ 244.207599] do_mount+0xe53/0x2a00 [ 244.211446] ? do_raw_spin_unlock+0x164/0x220 [ 244.216229] ? copy_mount_string+0x40/0x40 [ 244.221966] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 244.227084] ? copy_mnt_ns+0xa30/0xa30 [ 244.231160] ? copy_mount_options+0x1fa/0x2f0 [ 244.235673] ? copy_mnt_ns+0xa30/0xa30 [ 244.239570] SyS_mount+0xa8/0x120 [ 244.243032] ? copy_mnt_ns+0xa30/0xa30 [ 244.247202] do_syscall_64+0x1d5/0x640 [ 244.249997] xt_addrtype: ipv6 does not support BROADCAST matching [ 244.252930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 244.252940] RIP: 0033:0x4665f9 [ 244.252944] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.252953] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 244.252958] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 244.252964] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 244.252969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.252976] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 244.316962] CPU: 1 PID: 15326 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 244.324869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.334234] Call Trace: [ 244.336833] dump_stack+0x1b2/0x281 [ 244.340497] should_fail.cold+0x10a/0x149 [ 244.344688] should_failslab+0xd6/0x130 [ 244.348870] kmem_cache_alloc_trace+0x29a/0x3d0 [ 244.353572] v9fs_mount+0x54/0x860 [ 244.357131] ? alloc_pages_current+0x15d/0x260 [ 244.361999] ? __lockdep_init_map+0x100/0x560 [ 244.366517] mount_fs+0x92/0x2a0 [ 244.369905] vfs_kern_mount.part.0+0x5b/0x470 [ 244.374437] do_mount+0xe53/0x2a00 [ 244.377996] ? retint_kernel+0x2d/0x2d [ 244.381980] ? copy_mount_string+0x40/0x40 [ 244.386231] ? copy_mount_options+0x185/0x2f0 [ 244.390739] ? copy_mount_options+0x18f/0x2f0 [ 244.395242] ? copy_mount_options+0x1fa/0x2f0 [ 244.401839] ? copy_mnt_ns+0xa30/0xa30 [ 244.405749] SyS_mount+0xa8/0x120 [ 244.409219] ? copy_mnt_ns+0xa30/0xa30 [ 244.413121] do_syscall_64+0x1d5/0x640 [ 244.417029] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 244.422230] RIP: 0033:0x4665f9 [ 244.425439] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.433262] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 244.440557] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 244.447842] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 244.455117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.462420] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 00:38:35 executing program 2 (fault-call:3 fault-nth:13): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:35 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 244.500327] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x6, &(0x7f0000002940)=[{&(0x7f00000000c0)="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", 0xfb, 0x8385}, {&(0x7f00000001c0)="099d46e18d92dba13caf28bba218b2c84075a47283d8d62bee1f23c41f4f85769086542a08b045108a95dc32166f3caae68dfd8ef8493e4d93503513d58939f65f17cec6eb4c63e106e35c4d1857b43a5b17fc2bd4", 0x55, 0x8}, {&(0x7f0000001940)="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", 0x1000, 0x8}, {&(0x7f0000000240)="de6e230b2e1cb979030d39ea57a113011777f0dd49ecbf3576b712c1ae70260f319b316ed57f8edf6202a0370f722e1fcb5c2248f1e7c0b1731c7410a7c7e195d0e7c68cc4399db5c9bb08b18f228f87b101bc0d", 0x54}, {&(0x7f00000002c0)="3e5d046284fc56b67417340d613ed9989e00469bb0db068d9c01850b5847d6b54aa1e19a5c9cfffa3ab5432d8cebacc5638365bf0e0b41727ce5ad8a53cbac1c3d7b531ceb63621b55ec9c6fbd50cf57664dfa565695ced89053b6926133ba98b3802f6749ec0ca63d6512b5fb437faee2c4898555a87c3236d357ab98415fbcc8a8f37e6c428f90dd1006803b6656b366ccb8f1516cdad927620b3b1ce04abc67b9beb2637c871b43e484dfd8ce021c0afbb3335f316292e455b5ededb90b93bd1597c26309d75bad682f22f95125395782126b2aa9f0d873b12e5f972974f388c00567be8b2d", 0xe7, 0x3}, {&(0x7f00000003c0)="379fe84a2710050964b30b23011160b191df06bbef29447420db4fb73d4ae265f43bcead7a48c2148b2e7e1ac7e7b6e3d3dd3cfe9eea456164bfca26076befbc36385d00bd0c8b4627de093eeac22915132882bd619973ee16e8cba17874f77370cfe178640e5bce03e921f727", 0x6d, 0x4}], 0x8, &(0x7f0000000440)={[{@order_strict}, {@snapshot={'snapshot', 0x3d, 0x1}}, {@norecovery}, {@nodiscard}, {@norecovery}, {@discard}, {@norecovery}, {}], [{@smackfsfloor}]}) mmap(&(0x7f0000242000/0x2000)=nil, 0x2000, 0x0, 0x1010, r4, 0xd05bc000) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 244.602326] FAULT_INJECTION: forcing a failure. [ 244.602326] name failslab, interval 1, probability 0, space 0, times 0 [ 244.632363] CPU: 1 PID: 15361 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 244.640288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.649682] Call Trace: [ 244.652300] dump_stack+0x1b2/0x281 [ 244.655940] should_fail.cold+0x10a/0x149 [ 244.660138] should_failslab+0xd6/0x130 [ 244.664136] kmem_cache_alloc_trace+0x29a/0x3d0 [ 244.668826] p9_idpool_create+0x3c/0x120 [ 244.672902] p9_client_create+0x57a/0x12c0 [ 244.677161] ? p9_client_flush+0x4c0/0x4c0 [ 244.681414] ? __lockdep_init_map+0x100/0x560 [ 244.685923] ? __raw_spin_lock_init+0x28/0x100 [ 244.690526] v9fs_session_init+0x1c5/0x1540 [ 244.694853] ? pcpu_alloc+0xbe0/0xf50 [ 244.697324] xt_addrtype: ipv6 does not support BROADCAST matching [ 244.698662] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 244.698679] ? v9fs_show_options+0x6b0/0x6b0 [ 244.698691] ? v9fs_mount+0x54/0x860 [ 244.717881] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 244.723374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 244.728505] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 244.733367] v9fs_mount+0x73/0x860 [ 244.736918] ? alloc_pages_current+0x15d/0x260 [ 244.741544] ? __lockdep_init_map+0x100/0x560 [ 244.746051] mount_fs+0x92/0x2a0 [ 244.749455] vfs_kern_mount.part.0+0x5b/0x470 [ 244.753962] do_mount+0xe53/0x2a00 [ 244.757510] ? copy_mount_string+0x40/0x40 [ 244.761744] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 244.766744] ? copy_mnt_ns+0xa30/0xa30 [ 244.770745] ? copy_mount_options+0x1fa/0x2f0 [ 244.775245] ? copy_mnt_ns+0xa30/0xa30 [ 244.779115] SyS_mount+0xa8/0x120 [ 244.782611] ? copy_mnt_ns+0xa30/0xa30 [ 244.786492] do_syscall_64+0x1d5/0x640 [ 244.790673] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 244.795859] RIP: 0033:0x4665f9 [ 244.799036] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.806742] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 244.814020] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 244.821294] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 244.828553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.836885] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:35 executing program 4 (fault-call:3 fault-nth:7): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:35 executing program 2 (fault-call:3 fault-nth:14): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:35 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(0xffffffffffffffff) [ 244.866007] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)={'syz1', "f3fee2a654de19a3eac2f5f08cc552e6f2c587fdfa6e54a6a9518f8f8885d928ce2d842b2ca5b0fdb18c09751f163d355cf503898ebeea5265861389fd19e32e065563474166fa91c4c09f627fa18a8706c82be61104b931258076457734"}, 0x62) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 244.963610] FAULT_INJECTION: forcing a failure. [ 244.963610] name failslab, interval 1, probability 0, space 0, times 0 [ 244.978485] FAULT_INJECTION: forcing a failure. [ 244.978485] name failslab, interval 1, probability 0, space 0, times 0 [ 245.012981] xt_addrtype: ipv6 does not support BROADCAST matching [ 245.041280] device ipvlan1 entered promiscuous mode [ 245.047656] CPU: 1 PID: 15389 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 245.055559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.064939] Call Trace: [ 245.067551] dump_stack+0x1b2/0x281 [ 245.071188] should_fail.cold+0x10a/0x149 [ 245.075347] should_failslab+0xd6/0x130 [ 245.079335] __kmalloc_track_caller+0x2bc/0x400 [ 245.084037] ? v9fs_session_init+0x98/0x1540 [ 245.089246] ? trace_hardirqs_on+0x10/0x10 [ 245.094808] kstrdup+0x36/0x70 [ 245.098938] v9fs_session_init+0x98/0x1540 [ 245.103194] ? pcpu_alloc+0xbe0/0xf50 [ 245.107286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 245.112157] ? v9fs_show_options+0x6b0/0x6b0 [ 245.116772] ? v9fs_mount+0x54/0x860 [ 245.120548] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 245.126021] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 245.131078] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 245.135944] v9fs_mount+0x73/0x860 [ 245.139500] ? alloc_pages_current+0x15d/0x260 [ 245.144141] ? __lockdep_init_map+0x100/0x560 [ 245.148932] mount_fs+0x92/0x2a0 [ 245.152304] vfs_kern_mount.part.0+0x5b/0x470 [ 245.156798] do_mount+0xe53/0x2a00 [ 245.160338] ? copy_mount_string+0x40/0x40 [ 245.164644] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 245.170355] ? copy_mnt_ns+0xa30/0xa30 [ 245.174245] ? copy_mount_options+0x1fa/0x2f0 [ 245.178829] ? copy_mnt_ns+0xa30/0xa30 [ 245.182735] SyS_mount+0xa8/0x120 [ 245.186553] ? copy_mnt_ns+0xa30/0xa30 [ 245.190443] do_syscall_64+0x1d5/0x640 [ 245.194772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 245.199983] RIP: 0033:0x4665f9 [ 245.203162] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 245.211075] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 245.218435] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 245.225710] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 245.232999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.240273] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 245.247569] CPU: 0 PID: 15390 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 245.255574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.264942] Call Trace: [ 245.267551] dump_stack+0x1b2/0x281 [ 245.271198] should_fail.cold+0x10a/0x149 [ 245.275367] should_failslab+0xd6/0x130 [ 245.279540] __kmalloc_track_caller+0x2bc/0x400 [ 245.284412] ? parse_opts.part.0+0x76/0x2d0 [ 245.288762] kstrdup+0x36/0x70 [ 245.293080] parse_opts.part.0+0x76/0x2d0 [ 245.297343] ? p9_fd_show_options+0x190/0x190 [ 245.301892] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 245.307030] ? fs_reclaim_release+0xd0/0x110 [ 245.311545] p9_fd_create+0x86/0x3b0 [ 245.315295] ? p9_fd_create_tcp+0x440/0x440 [ 245.319737] ? __raw_spin_lock_init+0x28/0x100 [ 245.324317] p9_client_create+0x5fd/0x12c0 [ 245.328637] ? p9_client_flush+0x4c0/0x4c0 [ 245.332921] ? __lockdep_init_map+0x100/0x560 [ 245.337417] ? __raw_spin_lock_init+0x28/0x100 [ 245.342163] v9fs_session_init+0x1c5/0x1540 [ 245.346484] ? pcpu_alloc+0xbe0/0xf50 [ 245.350286] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 245.356618] ? v9fs_show_options+0x6b0/0x6b0 [ 245.361048] ? v9fs_mount+0x54/0x860 [ 245.365559] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 245.371096] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 245.376117] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 245.380970] v9fs_mount+0x73/0x860 [ 245.385250] ? alloc_pages_current+0x15d/0x260 [ 245.389824] ? __lockdep_init_map+0x100/0x560 [ 245.394433] mount_fs+0x92/0x2a0 [ 245.398414] vfs_kern_mount.part.0+0x5b/0x470 [ 245.408858] do_mount+0xe53/0x2a00 [ 245.412873] ? copy_mount_string+0x40/0x40 [ 245.417126] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 245.424809] ? copy_mnt_ns+0xa30/0xa30 [ 245.428696] ? copy_mount_options+0x1fa/0x2f0 [ 245.433271] ? copy_mnt_ns+0xa30/0xa30 [ 245.437277] SyS_mount+0xa8/0x120 [ 245.440723] ? copy_mnt_ns+0xa30/0xa30 [ 245.444609] do_syscall_64+0x1d5/0x640 [ 245.448499] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 245.453693] RIP: 0033:0x4665f9 [ 245.456870] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) close(r2) 00:38:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:36 executing program 4 (fault-call:3 fault-nth:8): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f43", 0x5d, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 245.464749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 245.472103] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 245.479382] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 245.486732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 245.493997] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 245.567010] xt_addrtype: ipv6 does not support BROADCAST matching [ 245.575174] device ipvlan1 left promiscuous mode [ 245.624577] FAULT_INJECTION: forcing a failure. [ 245.624577] name failslab, interval 1, probability 0, space 0, times 0 [ 245.638020] xt_addrtype: ipv6 does not support BROADCAST matching [ 245.645228] CPU: 1 PID: 15426 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 245.653335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.662882] Call Trace: [ 245.665741] dump_stack+0x1b2/0x281 [ 245.669489] should_fail.cold+0x10a/0x149 [ 245.673746] should_failslab+0xd6/0x130 [ 245.677822] __kmalloc_track_caller+0x2bc/0x400 [ 245.682639] ? v9fs_session_init+0xd1/0x1540 [ 245.687160] kstrdup+0x36/0x70 [ 245.693764] v9fs_session_init+0xd1/0x1540 [ 245.698732] ? pcpu_alloc+0xbe0/0xf50 [ 245.702725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 245.707620] ? v9fs_show_options+0x6b0/0x6b0 [ 245.712108] ? v9fs_mount+0x54/0x860 [ 245.715837] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 245.721332] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 245.732381] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 245.738215] v9fs_mount+0x73/0x860 [ 245.741770] ? alloc_pages_current+0x15d/0x260 [ 245.747526] ? __lockdep_init_map+0x100/0x560 [ 245.757649] mount_fs+0x92/0x2a0 [ 245.761208] vfs_kern_mount.part.0+0x5b/0x470 [ 245.765453] 9pnet: Insufficient options for proto=fd [ 245.765711] do_mount+0xe53/0x2a00 [ 245.774365] ? copy_mount_string+0x40/0x40 [ 245.778991] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 245.784136] ? copy_mnt_ns+0xa30/0xa30 [ 245.788203] ? copy_mount_options+0x1fa/0x2f0 [ 245.792704] ? copy_mnt_ns+0xa30/0xa30 [ 245.796692] SyS_mount+0xa8/0x120 [ 245.800154] ? copy_mnt_ns+0xa30/0xa30 [ 245.804148] do_syscall_64+0x1d5/0x640 [ 245.808052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 245.813233] RIP: 0033:0x4665f9 [ 245.816416] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:36 executing program 2 (fault-call:3 fault-nth:15): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:36 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(0xffffffffffffffff) 00:38:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) preadv(r2, &(0x7f0000000380), 0x0, 0x200, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r4 = socket$inet6(0xa, 0xa, 0x7ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) sendto$inet6(r4, &(0x7f0000000140)="9247597e4717ffa0490f0c6ea65477a087117ded58b3b36325d8f9726f2b69ff71b5d43d535e6c9650912692b0341f22cc0d3793492fbef414eb8018ba2805e0dcbccd001a0162a6a3c98457581b795394", 0x51, 0x20004000, &(0x7f00000000c0)={0xa, 0x4e22, 0xb6, @loopback, 0xfffffffb}, 0x1c) 00:38:36 executing program 4 (fault-call:3 fault-nth:9): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 245.826565] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 245.833840] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 245.845115] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 245.852397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.859782] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 00:38:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 245.960396] FAULT_INJECTION: forcing a failure. [ 245.960396] name failslab, interval 1, probability 0, space 0, times 0 [ 245.965543] xt_addrtype: ipv6 does not support BROADCAST matching [ 245.987929] FAULT_INJECTION: forcing a failure. [ 245.987929] name failslab, interval 1, probability 0, space 0, times 0 [ 246.017514] device ipvlan1 entered promiscuous mode [ 246.038296] CPU: 0 PID: 15443 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 246.050081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.060098] Call Trace: [ 246.062890] dump_stack+0x1b2/0x281 [ 246.066640] should_fail.cold+0x10a/0x149 [ 246.070827] should_failslab+0xd6/0x130 [ 246.074824] kmem_cache_alloc_trace+0x29a/0x3d0 [ 246.077822] xt_addrtype: ipv6 does not support BROADCAST matching [ 246.079548] p9_client_create+0x9c/0x12c0 [ 246.079560] ? fs_reclaim_release+0xd0/0x110 [ 246.079573] ? p9_client_flush+0x4c0/0x4c0 [ 246.079588] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 246.079606] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 246.079626] ? __lockdep_init_map+0x100/0x560 [ 246.114830] ? __raw_spin_lock_init+0x28/0x100 [ 246.119521] v9fs_session_init+0x1c5/0x1540 [ 246.123855] ? pcpu_alloc+0xbe0/0xf50 [ 246.127675] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 246.132546] ? v9fs_show_options+0x6b0/0x6b0 [ 246.136973] ? v9fs_mount+0x54/0x860 [ 246.142135] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 246.147621] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 246.154579] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 246.155425] xt_addrtype: ipv6 does not support BROADCAST matching [ 246.159459] v9fs_mount+0x73/0x860 [ 246.159476] ? alloc_pages_current+0x15d/0x260 [ 246.159487] ? __lockdep_init_map+0x100/0x560 [ 246.159499] mount_fs+0x92/0x2a0 [ 246.159513] vfs_kern_mount.part.0+0x5b/0x470 00:38:37 executing program 0: sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="7a4297575135bc8d15404e4a797b87dfce21f39d021e207bb9869f225901bb5347e71fcdf2e5392db71b32b520755f7cb3a670c7fdf8a73948ba043e7d5f35923c6888bcfbd9fe4299d43abb6f183c7e38e4", 0x52, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @empty, 0xffffff81}, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x50, r0, 0x25da3000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfac", 0x8c, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000099000/0x4000)=nil, 0x4000, 0x1800003, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040), 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0xb0, 0x9, 0x0, 0x28, @dev={0xfe, 0x80, '\x00', 0x3b}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8, 0x1ff, 0x4c36}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 246.159525] do_mount+0xe53/0x2a00 [ 246.159540] ? copy_mount_string+0x40/0x40 [ 246.187242] xt_addrtype: ipv6 does not support BROADCAST matching [ 246.189840] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 246.189854] ? copy_mnt_ns+0xa30/0xa30 [ 246.189865] ? copy_mount_options+0x1fa/0x2f0 [ 246.189874] ? copy_mnt_ns+0xa30/0xa30 [ 246.189885] SyS_mount+0xa8/0x120 [ 246.189894] ? copy_mnt_ns+0xa30/0xa30 [ 246.189910] do_syscall_64+0x1d5/0x640 [ 246.228846] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 246.234131] RIP: 0033:0x4665f9 [ 246.237324] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 246.245042] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 246.252316] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 246.259598] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 246.266883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.274159] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 246.281453] CPU: 1 PID: 15449 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 246.289368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.298736] Call Trace: [ 246.301431] dump_stack+0x1b2/0x281 [ 246.305135] should_fail.cold+0x10a/0x149 [ 246.310509] should_failslab+0xd6/0x130 [ 246.314491] kmem_cache_alloc_trace+0x29a/0x3d0 [ 246.319178] p9_idpool_create+0x3c/0x120 [ 246.323268] p9_client_create+0x57a/0x12c0 [ 246.327518] ? p9_client_flush+0x4c0/0x4c0 [ 246.332002] ? __lockdep_init_map+0x100/0x560 [ 246.336546] ? __raw_spin_lock_init+0x28/0x100 [ 246.341146] v9fs_session_init+0x1c5/0x1540 [ 246.345472] ? pcpu_alloc+0xbe0/0xf50 [ 246.349289] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 246.354144] ? v9fs_show_options+0x6b0/0x6b0 [ 246.358587] ? v9fs_mount+0x54/0x860 [ 246.362320] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 246.367901] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 246.373124] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 246.377969] v9fs_mount+0x73/0x860 [ 246.381541] ? alloc_pages_current+0x15d/0x260 [ 246.386144] ? __lockdep_init_map+0x100/0x560 [ 246.390682] mount_fs+0x92/0x2a0 [ 246.394044] vfs_kern_mount.part.0+0x5b/0x470 [ 246.398573] do_mount+0xe53/0x2a00 [ 246.402307] ? do_raw_spin_unlock+0x164/0x220 [ 246.406804] ? copy_mount_string+0x40/0x40 [ 246.411063] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 246.416089] ? copy_mnt_ns+0xa30/0xa30 [ 246.419962] ? copy_mount_options+0x1fa/0x2f0 [ 246.424484] ? copy_mnt_ns+0xa30/0xa30 [ 246.428382] SyS_mount+0xa8/0x120 [ 246.431843] ? copy_mnt_ns+0xa30/0xa30 [ 246.435744] do_syscall_64+0x1d5/0x640 [ 246.439670] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 246.444857] RIP: 0033:0x4665f9 [ 246.448148] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 246.455847] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 246.463113] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 246.470367] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 246.477648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:38:37 executing program 2 (fault-call:3 fault-nth:16): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:37 executing program 0: r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xffffffffffffff81, 0x5, &(0x7f0000000380)=[{&(0x7f0000000140)="1c4cf50dff33273ce58bb0d9df7cc50a23c3fa3287d86c1c705ff7a5fc3362640679e3660bd2d78302176a89bf3c702c1f491d19ce0592dbe840efdd61e5a829244addb875e5ae2921be12658fd4b56dd72e48ac8f37947bb87e1c8cf866037f76af0e1866c61ac32174344ee472a76609a34954997007c5d38e056aef14c4ffc714a669711ea9f0255ae403a8eb62630c58a8c4f17ed517072d", 0x9a, 0x8}, {&(0x7f0000000200)="b313529d1ea2573c706ea3164081bcc30a9662ee02bcb8a36dd425373dd29460c47914cc1e6f76398aa74e8e70679ced233199e811311c605e03422f84f0331b8220ca51fbedb37b7db81df4702dd904a4d429604f09613e759a81710b3bcadcb1e176e768a22bfb8e27890f0557b1e86df562fdd65e76733705f27036cefac7b0d83a80d251e7a3502d19999a36818582336a062e2bd83e565e52a88c2e55664d01394b8325073a65f3954d29e2a1d15d", 0xb1}, {&(0x7f00000002c0)="b3fb7bed4bcf8f6b1ac71ce64aa6adb736b7013895f70fa56d7be9b8f09bc3c193b279208830a697f079496e9c475ef74e624b61a048e9240f840c3191e3f4d4ae6c686f4d781e60ed6550b56b4e5de060b9fb6627945cd6f73da29c31dd", 0x5e, 0x5}, {&(0x7f0000001940)="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", 0x1000, 0x1f}, {&(0x7f0000000340)="d7806acd8234d93093fc2b2ebb7b0929beeec028b46a380a4b578361e0ddff73a6419b1d2a0519ad63473bd40dffbfa69e58e2", 0x33, 0x5}], 0x804888, &(0x7f0000000400)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x1ffc0000000000}}, {@nobarrier}, {@compress_force}, {@subvol={'subvol', 0x3d, '!]#&!'}}], [{@smackfsdef={'smackfsdef', 0x3d, './cgroup.cpu/syz1\x00'}}, {@euid_gt={'euid>', 0xee01}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r0, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', 0xe0000, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) listen(r3, 0xffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x1}, 0x10) [ 246.484904] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 246.512805] device ipvlan1 left promiscuous mode [ 246.537934] FAULT_INJECTION: forcing a failure. [ 246.537934] name failslab, interval 1, probability 0, space 0, times 0 [ 246.549648] CPU: 1 PID: 15479 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 246.557571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.566937] Call Trace: [ 246.569582] dump_stack+0x1b2/0x281 [ 246.573223] should_fail.cold+0x10a/0x149 [ 246.577388] should_failslab+0xd6/0x130 [ 246.581372] __kmalloc+0x2c1/0x400 [ 246.583808] xt_addrtype: ipv6 does not support BROADCAST matching [ 246.584954] ? match_number+0x9d/0x200 [ 246.595072] match_number+0x9d/0x200 [ 246.598789] ? match_strdup+0xa0/0xa0 [ 246.599814] xt_addrtype: ipv6 does not support BROADCAST matching [ 246.602769] ? memcpy+0x35/0x50 [ 246.602784] parse_opts.part.0+0x1b5/0x2d0 [ 246.602794] ? p9_fd_show_options+0x190/0x190 [ 246.602805] ? fs_reclaim_release+0xd0/0x110 [ 246.602820] p9_fd_create+0x86/0x3b0 [ 246.602829] ? p9_fd_create_tcp+0x440/0x440 [ 246.602843] ? __raw_spin_lock_init+0x28/0x100 [ 246.602853] p9_client_create+0x5fd/0x12c0 [ 246.602866] ? p9_client_flush+0x4c0/0x4c0 [ 246.602879] ? __lockdep_init_map+0x100/0x560 [ 246.602890] ? __raw_spin_lock_init+0x28/0x100 [ 246.602905] v9fs_session_init+0x1c5/0x1540 [ 246.602919] ? pcpu_alloc+0xbe0/0xf50 [ 246.663752] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 246.668589] ? v9fs_show_options+0x6b0/0x6b0 [ 246.672984] ? v9fs_mount+0x54/0x860 [ 246.676695] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 246.682174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 246.687196] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 246.692031] v9fs_mount+0x73/0x860 [ 246.695581] ? alloc_pages_current+0x15d/0x260 [ 246.700151] ? __lockdep_init_map+0x100/0x560 [ 246.704721] mount_fs+0x92/0x2a0 [ 246.708080] vfs_kern_mount.part.0+0x5b/0x470 [ 246.712582] do_mount+0xe53/0x2a00 [ 246.716107] ? copy_mount_string+0x40/0x40 [ 246.720459] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 246.725505] ? copy_mnt_ns+0xa30/0xa30 [ 246.729375] ? copy_mount_options+0x1fa/0x2f0 [ 246.733854] ? copy_mnt_ns+0xa30/0xa30 [ 246.737728] SyS_mount+0xa8/0x120 [ 246.741431] ? copy_mnt_ns+0xa30/0xa30 [ 246.745311] do_syscall_64+0x1d5/0x640 [ 246.749186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 246.754359] RIP: 0033:0x4665f9 [ 246.757529] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 246.765232] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 246.772504] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 246.779759] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 00:38:37 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(0xffffffffffffffff) 00:38:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9f", 0xaf, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00000c8000/0x3000)=nil, 0x3000, 0x3000000, 0x20010, r1, 0x59764000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:37 executing program 4 (fault-call:3 fault-nth:10): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 246.787012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.794274] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e", 0xa3, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:37 executing program 2 (fault-call:3 fault-nth:17): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 246.839124] 9pnet: Insufficient options for proto=fd 00:38:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9f", 0xaf, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 246.894829] FAULT_INJECTION: forcing a failure. [ 246.894829] name failslab, interval 1, probability 0, space 0, times 0 [ 246.908175] device ipvlan1 entered promiscuous mode [ 246.923380] xt_addrtype: ipv6 does not support BROADCAST matching [ 246.937741] CPU: 1 PID: 15492 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 246.945663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.955035] Call Trace: [ 246.957639] dump_stack+0x1b2/0x281 [ 246.961283] should_fail.cold+0x10a/0x149 [ 246.965441] should_failslab+0xd6/0x130 [ 246.969427] kmem_cache_alloc_trace+0x29a/0x3d0 [ 246.974127] p9_idpool_create+0x3c/0x120 [ 246.978193] p9_client_create+0x1d4/0x12c0 [ 246.982435] ? fs_reclaim_release+0xd0/0x110 [ 246.986939] ? p9_client_flush+0x4c0/0x4c0 [ 246.991206] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 246.996670] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.001692] ? __lockdep_init_map+0x100/0x560 [ 247.006191] ? __raw_spin_lock_init+0x28/0x100 [ 247.010781] v9fs_session_init+0x1c5/0x1540 [ 247.015105] ? pcpu_alloc+0xbe0/0xf50 [ 247.018915] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 247.023773] ? v9fs_show_options+0x6b0/0x6b0 [ 247.028204] ? v9fs_mount+0x54/0x860 [ 247.031924] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.037508] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.042556] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 247.047503] v9fs_mount+0x73/0x860 [ 247.051055] ? alloc_pages_current+0x15d/0x260 [ 247.055744] ? __lockdep_init_map+0x100/0x560 [ 247.060242] mount_fs+0x92/0x2a0 [ 247.063617] vfs_kern_mount.part.0+0x5b/0x470 [ 247.068139] do_mount+0xe53/0x2a00 [ 247.071684] ? do_raw_spin_unlock+0x164/0x220 [ 247.076180] ? copy_mount_string+0x40/0x40 [ 247.078811] FAULT_INJECTION: forcing a failure. [ 247.078811] name failslab, interval 1, probability 0, space 0, times 0 [ 247.080438] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.080455] ? copy_mnt_ns+0xa30/0xa30 [ 247.100820] ? copy_mount_options+0x1fa/0x2f0 [ 247.105402] ? copy_mnt_ns+0xa30/0xa30 [ 247.109291] SyS_mount+0xa8/0x120 [ 247.112742] ? copy_mnt_ns+0xa30/0xa30 [ 247.116626] do_syscall_64+0x1d5/0x640 [ 247.120519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 247.125722] RIP: 0033:0x4665f9 [ 247.128939] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 247.136660] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 247.143942] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 247.151323] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 247.158603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.165883] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 247.173285] CPU: 0 PID: 15506 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 247.181184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.190754] Call Trace: [ 247.193361] dump_stack+0x1b2/0x281 [ 247.196999] should_fail.cold+0x10a/0x149 [ 247.201256] should_failslab+0xd6/0x130 [ 247.205244] kmem_cache_alloc_trace+0x47/0x3d0 [ 247.209870] p9_client_prepare_req.part.0+0x4ea/0xb60 [ 247.215079] p9_client_rpc+0x170/0x1520 [ 247.219074] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 247.224104] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 247.229478] ? p9_pollwait+0x18e/0x1f0 [ 247.233373] ? p9_conn_create+0x4b0/0x4b0 [ 247.237529] ? pipe_poll+0x24f/0x2c0 [ 247.241270] ? p9_fd_poll+0x237/0x2e0 [ 247.245078] ? p9_conn_create+0x3aa/0x4b0 [ 247.249247] ? p9_fd_create+0x293/0x3b0 [ 247.253365] ? p9_fd_create_tcp+0x440/0x440 [ 247.257708] p9_client_create+0x92f/0x12c0 [ 247.262132] ? p9_client_flush+0x4c0/0x4c0 [ 247.266380] ? __lockdep_init_map+0x100/0x560 [ 247.270888] ? __raw_spin_lock_init+0x28/0x100 [ 247.275484] v9fs_session_init+0x1c5/0x1540 [ 247.279814] ? pcpu_alloc+0xbe0/0xf50 [ 247.283661] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 247.284882] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9f", 0xaf, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9f", 0xaf, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000001940)={0x1, 0x8, @status={[0x1, 0x42f, 0x3, 0x1f, 0x4, 0x1]}, [0x403, 0x8000000000003, 0x400, 0x100, 0x1, 0x0, 0x200, 0x1, 0xff, 0x6fd079c5, 0x1, 0xff, 0x100000000, 0x4, 0xae42, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffffffffffc, 0x80, 0x80000001, 0x2, 0x100000000, 0x9, 0x937, 0x7, 0x4, 0x7, 0x81, 0xff, 0xec6, 0x9, 0x7, 0x7f, 0x24d, 0xa5, 0x4, 0x6, 0xd7e5, 0x5, 0x9, 0x240000, 0x3, 0xcc, 0x100, 0x7, 0x800, 0x8, 0x1, 0x1f, 0x0, 0x6d7, 0x1, 0x8f34, 0x100, 0x6, 0x2, 0x0, 0x9, 0x9, 0x5, 0x4, 0x1bd, 0x2006]}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getaddr={0x14, 0x16, 0x200, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x1) 00:38:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd", 0xb5, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 247.288520] ? v9fs_show_options+0x6b0/0x6b0 [ 247.288535] ? v9fs_mount+0x54/0x860 [ 247.288548] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.288560] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.288577] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 247.299188] xt_addrtype: ipv6 does not support BROADCAST matching [ 247.299256] v9fs_mount+0x73/0x860 [ 247.328023] ? alloc_pages_current+0x15d/0x260 [ 247.332742] ? __lockdep_init_map+0x100/0x560 [ 247.337272] mount_fs+0x92/0x2a0 [ 247.340659] vfs_kern_mount.part.0+0x5b/0x470 [ 247.345202] do_mount+0xe53/0x2a00 [ 247.348854] ? copy_mount_string+0x40/0x40 [ 247.353114] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.358226] ? copy_mnt_ns+0xa30/0xa30 [ 247.362144] ? copy_mount_options+0x1fa/0x2f0 [ 247.366649] ? copy_mnt_ns+0xa30/0xa30 [ 247.370549] SyS_mount+0xa8/0x120 [ 247.374007] ? copy_mnt_ns+0xa30/0xa30 [ 247.377999] do_syscall_64+0x1d5/0x640 [ 247.381910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 247.387110] RIP: 0033:0x4665f9 [ 247.390322] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 247.398133] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 247.405415] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 247.412694] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 247.420170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.427452] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 247.434793] 9pnet: Couldn't grow tag array 00:38:38 executing program 4 (fault-call:3 fault-nth:11): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9f", 0xaf, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd", 0xb5, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000000)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="8800000c10000200000000000094d4ffa7acfed1b1fb8c00e22500000000", @ANYRES32=0x0, @ANYBLOB="f388833c00000000580012800e0001006970366772657461700000004400028014000700fc0000000000000000000000000000000800050049000000060011004e22000006000f00c60f000014000600fe8000000000000000000000000000bb080004000100010008000a00", @ANYRES32=r4, @ANYBLOB], 0x88}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f0000000000)) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x88, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8388f3}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x49}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfc6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x88}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f000000a380)={'ip6tnl0\x00', &(0x7f000000a300)={'sit0\x00', 0x0, 0x29, 0x3f, 0x5, 0x2, 0x6c, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8, 0x40, 0x1, 0x1}}) sendmsg$nl_route(r0, &(0x7f000000a4c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000a480)={&(0x7f000000a3c0)=@RTM_NEWMDB={0xb8, 0x54, 0x400, 0x70bd2b, 0x25dfdbfd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8add}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x4, {@ip4=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x3, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x3, {@ip4=@broadcast, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x2, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x86dd}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 247.451003] device ipvlan1 left promiscuous mode 00:38:38 executing program 2 (fault-call:3 fault-nth:18): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:38 executing program 5 (fault-call:9 fault-nth:0): write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd", 0xb5, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 247.539498] FAULT_INJECTION: forcing a failure. [ 247.539498] name failslab, interval 1, probability 0, space 0, times 0 [ 247.587823] CPU: 1 PID: 15536 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 247.595789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.598832] FAULT_INJECTION: forcing a failure. [ 247.598832] name failslab, interval 1, probability 0, space 0, times 0 [ 247.605365] Call Trace: [ 247.619254] dump_stack+0x1b2/0x281 [ 247.622900] should_fail.cold+0x10a/0x149 [ 247.627096] should_failslab+0xd6/0x130 [ 247.631092] __kmalloc_track_caller+0x2bc/0x400 [ 247.635780] ? p9_client_create+0x2e3/0x12c0 [ 247.640206] kstrdup+0x36/0x70 [ 247.643407] p9_client_create+0x2e3/0x12c0 [ 247.647649] ? p9_client_flush+0x4c0/0x4c0 [ 247.651901] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.657374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.662415] ? __lockdep_init_map+0x100/0x560 [ 247.667008] ? __raw_spin_lock_init+0x28/0x100 [ 247.671673] v9fs_session_init+0x1c5/0x1540 [ 247.676002] ? pcpu_alloc+0xbe0/0xf50 [ 247.679805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 247.684654] ? v9fs_show_options+0x6b0/0x6b0 [ 247.689068] ? v9fs_mount+0x54/0x860 [ 247.692780] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.698238] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.703276] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 247.708133] v9fs_mount+0x73/0x860 [ 247.711704] ? alloc_pages_current+0x15d/0x260 [ 247.716287] ? __lockdep_init_map+0x100/0x560 [ 247.720794] mount_fs+0x92/0x2a0 [ 247.724165] vfs_kern_mount.part.0+0x5b/0x470 [ 247.728688] do_mount+0xe53/0x2a00 [ 247.732250] ? copy_mount_string+0x40/0x40 [ 247.736516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.741548] ? copy_mnt_ns+0xa30/0xa30 [ 247.745472] ? copy_mount_options+0x1fa/0x2f0 [ 247.750155] ? copy_mnt_ns+0xa30/0xa30 [ 247.754753] SyS_mount+0xa8/0x120 [ 247.758202] ? copy_mnt_ns+0xa30/0xa30 [ 247.762102] do_syscall_64+0x1d5/0x640 [ 247.765992] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 247.771311] RIP: 0033:0x4665f9 [ 247.774506] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9f", 0xaf, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 247.782234] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 247.789506] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 247.796790] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 247.804083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.811359] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 247.818758] CPU: 0 PID: 15540 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 247.826754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.836113] Call Trace: [ 247.838821] dump_stack+0x1b2/0x281 [ 247.842714] should_fail.cold+0x10a/0x149 [ 247.846903] should_failslab+0xd6/0x130 [ 247.851151] kmem_cache_alloc_trace+0x47/0x3d0 [ 247.855749] p9_client_prepare_req.part.0+0x4ea/0xb60 [ 247.861395] p9_client_rpc+0x170/0x1520 [ 247.865501] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 247.870531] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 247.875899] ? p9_pollwait+0x18e/0x1f0 [ 247.879790] ? p9_conn_create+0x4b0/0x4b0 [ 247.883945] ? pipe_poll+0x24f/0x2c0 [ 247.887658] ? p9_fd_poll+0x237/0x2e0 [ 247.888749] xt_addrtype: ipv6 does not support BROADCAST matching [ 247.891456] ? p9_conn_create+0x3aa/0x4b0 [ 247.891467] ? p9_fd_create+0x293/0x3b0 [ 247.891476] ? p9_fd_create_tcp+0x440/0x440 [ 247.891490] p9_client_create+0x92f/0x12c0 [ 247.891503] ? p9_client_flush+0x4c0/0x4c0 [ 247.891522] ? __lockdep_init_map+0x100/0x560 [ 247.923159] ? __raw_spin_lock_init+0x28/0x100 [ 247.927768] v9fs_session_init+0x1c5/0x1540 [ 247.932121] ? pcpu_alloc+0xbe0/0xf50 00:38:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd", 0xb5, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 247.935952] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 247.940815] ? _find_next_bit+0xdb/0x100 [ 247.944898] ? v9fs_show_options+0x6b0/0x6b0 [ 247.949323] ? v9fs_mount+0x54/0x860 [ 247.953075] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.958547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.963612] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 247.968466] v9fs_mount+0x73/0x860 [ 247.972047] ? alloc_pages_current+0x15d/0x260 [ 247.976811] ? __lockdep_init_map+0x100/0x560 [ 247.981497] mount_fs+0x92/0x2a0 [ 247.984896] vfs_kern_mount.part.0+0x5b/0x470 00:38:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd", 0xb5, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 247.989399] do_mount+0xe53/0x2a00 [ 247.993039] ? copy_mount_string+0x40/0x40 [ 247.997285] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 248.002317] ? copy_mnt_ns+0xa30/0xa30 [ 248.006210] ? copy_mount_options+0x1fa/0x2f0 [ 248.010706] ? copy_mnt_ns+0xa30/0xa30 [ 248.014625] SyS_mount+0xa8/0x120 [ 248.018084] ? copy_mnt_ns+0xa30/0xa30 [ 248.021991] do_syscall_64+0x1d5/0x640 [ 248.025890] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 248.031080] RIP: 0033:0x4665f9 00:38:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477", 0xb8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:39 executing program 4 (fault-call:3 fault-nth:12): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 248.034306] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.042020] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 248.049329] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 248.056645] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 248.063923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.071201] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 248.078488] 9pnet: Couldn't grow tag array 00:38:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd", 0xb5, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 248.126473] FAULT_INJECTION: forcing a failure. [ 248.126473] name failslab, interval 1, probability 0, space 0, times 0 [ 248.138508] CPU: 0 PID: 15567 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 248.146411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.155769] Call Trace: [ 248.158368] dump_stack+0x1b2/0x281 [ 248.162032] should_fail.cold+0x10a/0x149 [ 248.166186] should_failslab+0xd6/0x130 [ 248.170171] __kmalloc+0x2c1/0x400 [ 248.173744] ? match_strdup+0x58/0xa0 [ 248.177564] match_strdup+0x58/0xa0 [ 248.181202] p9_client_create+0x3ba/0x12c0 [ 248.185446] ? p9_client_flush+0x4c0/0x4c0 [ 248.189697] ? __lockdep_init_map+0x100/0x560 [ 248.194207] ? __raw_spin_lock_init+0x28/0x100 [ 248.198812] v9fs_session_init+0x1c5/0x1540 [ 248.203147] ? pcpu_alloc+0xbe0/0xf50 [ 248.206965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 248.211856] ? v9fs_show_options+0x6b0/0x6b0 [ 248.216280] ? v9fs_mount+0x54/0x860 [ 248.220001] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 248.225463] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 248.230491] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 248.235348] v9fs_mount+0x73/0x860 [ 248.238898] ? alloc_pages_current+0x15d/0x260 [ 248.243483] ? __lockdep_init_map+0x100/0x560 [ 248.247984] mount_fs+0x92/0x2a0 [ 248.251386] vfs_kern_mount.part.0+0x5b/0x470 [ 248.255977] do_mount+0xe53/0x2a00 [ 248.259521] ? do_raw_spin_unlock+0x164/0x220 [ 248.264025] ? copy_mount_string+0x40/0x40 [ 248.268280] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 248.273309] ? copy_mnt_ns+0xa30/0xa30 00:38:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477", 0xb8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 248.277242] ? copy_mount_options+0x1fa/0x2f0 [ 248.281741] ? copy_mnt_ns+0xa30/0xa30 [ 248.285669] SyS_mount+0xa8/0x120 [ 248.289132] ? copy_mnt_ns+0xa30/0xa30 [ 248.293058] do_syscall_64+0x1d5/0x640 [ 248.296987] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 248.302181] RIP: 0033:0x4665f9 [ 248.305369] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.313092] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 248.320462] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477", 0xb8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 248.327732] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 248.335007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 248.342296] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 248.394305] device ipvlan1 entered promiscuous mode 00:38:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) socket$inet6_udp(0xa, 0x2, 0x0) 00:38:39 executing program 4 (fault-call:3 fault-nth:13): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:39 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000537000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477", 0xb8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:39 executing program 2 (fault-call:3 fault-nth:19): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477", 0xb8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x4000, 0x200, &(0x7f0000000080)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 248.503171] xt_addrtype: ipv6 does not support BROADCAST matching [ 248.503714] FAULT_INJECTION: forcing a failure. [ 248.503714] name failslab, interval 1, probability 0, space 0, times 0 [ 248.512707] xt_addrtype: ipv6 does not support BROADCAST matching [ 248.532950] device ipvlan1 left promiscuous mode [ 248.539206] CPU: 1 PID: 15605 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 248.547104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.556563] Call Trace: [ 248.559183] dump_stack+0x1b2/0x281 [ 248.562821] should_fail.cold+0x10a/0x149 [ 248.566979] should_failslab+0xd6/0x130 [ 248.570967] kmem_cache_alloc_trace+0x29a/0x3d0 [ 248.575648] p9_idpool_create+0x3c/0x120 [ 248.579714] p9_client_create+0x57a/0x12c0 [ 248.583991] ? p9_client_flush+0x4c0/0x4c0 [ 248.588932] ? __lockdep_init_map+0x100/0x560 [ 248.593438] ? __raw_spin_lock_init+0x28/0x100 [ 248.598139] v9fs_session_init+0x1c5/0x1540 00:38:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725", 0xb9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 248.602491] ? pcpu_alloc+0xbe0/0xf50 [ 248.603689] device ipvlan1 entered promiscuous mode [ 248.606306] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 248.606323] ? v9fs_show_options+0x6b0/0x6b0 [ 248.606340] ? v9fs_mount+0x54/0x860 [ 248.606351] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 248.606366] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 248.634861] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 248.639739] v9fs_mount+0x73/0x860 [ 248.643299] ? alloc_pages_current+0x15d/0x260 [ 248.647888] ? __lockdep_init_map+0x100/0x560 00:38:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725", 0xb9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 248.649662] xt_addrtype: ipv6 does not support BROADCAST matching [ 248.652406] mount_fs+0x92/0x2a0 [ 248.652423] vfs_kern_mount.part.0+0x5b/0x470 [ 248.652436] do_mount+0xe53/0x2a00 [ 248.652450] ? copy_mount_string+0x40/0x40 [ 248.652462] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 248.652471] ? copy_mnt_ns+0xa30/0xa30 [ 248.652481] ? copy_mount_options+0x1fa/0x2f0 [ 248.652489] ? copy_mnt_ns+0xa30/0xa30 [ 248.652499] SyS_mount+0xa8/0x120 [ 248.652511] ? copy_mnt_ns+0xa30/0xa30 [ 248.699517] do_syscall_64+0x1d5/0x640 00:38:39 executing program 0: getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@bridge_delneigh={0x50, 0x1d, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x0, 0x0, r3, 0x8, 0x8, 0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x9, 0xfff, 0x7}}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_SRC_VNI={0x8, 0xb, 0x8}, @NDA_IFINDEX={0x8}, @NDA_VNI={0x8, 0x7, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4048848) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000000)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x88, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8388f3}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x49}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfc6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x88}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@RTM_NEWMDB={0x78, 0x54, 0x800, 0x70bd25, 0x25dfdbfe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x1, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x1, {@ip4=@private=0xa010102, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x3, 0x1, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x8d7b9a3cb253c666) [ 248.703440] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 248.709088] RIP: 0033:0x4665f9 [ 248.712290] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.720020] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 248.728393] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 248.736905] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 248.744208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:38:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725", 0xb9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 248.754528] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 248.784352] xt_addrtype: ipv6 does not support BROADCAST matching [ 248.795809] FAULT_INJECTION: forcing a failure. 00:38:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477", 0xb8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 248.795809] name failslab, interval 1, probability 0, space 0, times 0 [ 248.844752] device ipvlan1 left promiscuous mode [ 248.846817] CPU: 0 PID: 15629 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 248.861661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.882362] Call Trace: [ 248.886148] dump_stack+0x1b2/0x281 [ 248.889782] should_fail.cold+0x10a/0x149 [ 248.893962] should_failslab+0xd6/0x130 [ 248.897971] kmem_cache_alloc_trace+0x29a/0x3d0 [ 248.902846] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 248.908050] p9_client_rpc+0x170/0x1520 [ 248.912042] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 248.917073] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 248.918822] FAULT_INJECTION: forcing a failure. [ 248.918822] name failslab, interval 1, probability 0, space 0, times 0 [ 248.922441] ? p9_pollwait+0x18e/0x1f0 [ 248.922451] ? p9_conn_create+0x4b0/0x4b0 [ 248.922465] ? pipe_poll+0x24f/0x2c0 [ 248.922475] ? p9_fd_poll+0x237/0x2e0 [ 248.922483] ? p9_conn_create+0x3aa/0x4b0 [ 248.922492] ? p9_fd_create+0x293/0x3b0 [ 248.922500] ? p9_fd_create_tcp+0x440/0x440 [ 248.922513] p9_client_create+0x92f/0x12c0 [ 248.922530] ? p9_client_flush+0x4c0/0x4c0 [ 248.970199] ? __lockdep_init_map+0x100/0x560 [ 248.974723] ? __raw_spin_lock_init+0x28/0x100 [ 248.979317] v9fs_session_init+0x1c5/0x1540 [ 248.983646] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 248.988657] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 248.993405] ? v9fs_show_options+0x6b0/0x6b0 [ 248.997809] ? retint_kernel+0x2d/0x2d [ 249.001701] v9fs_mount+0x73/0x860 [ 249.005236] ? alloc_pages_current+0x15d/0x260 [ 249.009817] ? __lockdep_init_map+0x100/0x560 [ 249.014311] mount_fs+0x92/0x2a0 [ 249.017676] vfs_kern_mount.part.0+0x5b/0x470 [ 249.022191] do_mount+0xe53/0x2a00 [ 249.025832] ? retint_kernel+0x2d/0x2d [ 249.029723] ? copy_mount_string+0x40/0x40 [ 249.033957] ? copy_mount_options+0x150/0x2f0 [ 249.038453] ? copy_mount_options+0x166/0x2f0 [ 249.042955] ? copy_mount_options+0x1fa/0x2f0 [ 249.047637] ? copy_mnt_ns+0xa30/0xa30 [ 249.051527] SyS_mount+0xa8/0x120 [ 249.054989] ? copy_mnt_ns+0xa30/0xa30 [ 249.058875] do_syscall_64+0x1d5/0x640 [ 249.062778] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 249.067982] RIP: 0033:0x4665f9 [ 249.071162] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.078867] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 249.086166] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725", 0xb9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:39 executing program 4 (fault-call:3 fault-nth:14): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 249.093464] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 249.101960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.110647] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 249.117955] CPU: 1 PID: 15644 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 249.125861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.135243] Call Trace: [ 249.137876] dump_stack+0x1b2/0x281 [ 249.141519] should_fail.cold+0x10a/0x149 [ 249.145692] should_failslab+0xd6/0x130 [ 249.149690] kmem_cache_alloc_trace+0x29a/0x3d0 [ 249.154415] p9_idpool_create+0x3c/0x120 [ 249.158514] p9_client_create+0x57a/0x12c0 [ 249.163221] ? p9_client_flush+0x4c0/0x4c0 [ 249.167461] ? __lockdep_init_map+0x100/0x560 [ 249.171989] ? __raw_spin_lock_init+0x28/0x100 [ 249.176589] v9fs_session_init+0x1c5/0x1540 [ 249.179446] 9pnet: Couldn't grow tag array [ 249.180996] ? pcpu_alloc+0xbe0/0xf50 [ 249.181012] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 249.181025] ? v9fs_show_options+0x6b0/0x6b0 [ 249.181037] ? v9fs_mount+0x54/0x860 [ 249.181050] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 249.181062] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 249.181074] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 249.181086] v9fs_mount+0x73/0x860 [ 249.220870] ? alloc_pages_current+0x15d/0x260 [ 249.225477] ? __lockdep_init_map+0x100/0x560 [ 249.229991] mount_fs+0x92/0x2a0 [ 249.233458] vfs_kern_mount.part.0+0x5b/0x470 [ 249.237985] do_mount+0xe53/0x2a00 [ 249.241549] ? copy_mount_string+0x40/0x40 [ 249.245815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 249.250848] ? copy_mnt_ns+0xa30/0xa30 [ 249.254773] ? copy_mount_options+0x1fa/0x2f0 [ 249.259285] ? copy_mnt_ns+0xa30/0xa30 [ 249.263189] SyS_mount+0xa8/0x120 [ 249.266676] ? copy_mnt_ns+0xa30/0xa30 [ 249.270619] do_syscall_64+0x1d5/0x640 [ 249.274539] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 249.279728] RIP: 0033:0x4665f9 [ 249.282915] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.290622] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 249.297898] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 249.305195] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 249.312644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.319919] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 249.362226] xt_addrtype: ipv6 does not support BROADCAST matching [ 249.362865] device ipvlan1 entered promiscuous mode 00:38:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725", 0xb9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:40 executing program 2 (fault-call:3 fault-nth:20): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:40 executing program 4 (fault-call:3 fault-nth:15): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 249.431289] device ipvlan1 left promiscuous mode 00:38:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f00000019c0)=[{&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/205, 0xcd}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000001940)=""/66, 0x42}], 0x5, 0x1800, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getdents(r1, &(0x7f0000000040)=""/248, 0xf8) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) fallocate(r0, 0x30, 0x5, 0xff) 00:38:40 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x400400, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'netdevsim0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'team0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fchown(r4, r5, 0xee00) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @link_local}, 0x10) close(r0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800002, 0x20010, r0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000140)) creat(&(0x7f0000000280)='./file0\x00', 0x186) pwritev(r6, &(0x7f0000000440)=[{&(0x7f00000002c0)="b981d6c5ba7418864d144d4da3b62185f293176fc7b89d5c529c4acf83f8f04414bdbac7b223e88fcf0521706163614a5d6e51a5b5834a884eec8ca406ce9df8", 0x40}, {&(0x7f0000000300)="f427e043d7284739fb1deff9e931aba9e461462a1f853e3e5eaf34e0ac6cd6cf37b00241b9994891936cd4a354a4010ce716b6fd45aca23963d182ad77a046759bc1090c6149ad65b3ba643cd383350340", 0x51}, {&(0x7f0000000380)="0dfa1a09a42f04029d766b2a0129c8eb315eda1427692de26dc0c703a4c8ef3126eabbb149957b61c7e559fe916fc5f331a082bce281b17c38b403e775824c753d9661874a2e5cc99eca6ffa4729692a0a09c1c2662769670a7c800e93caf0df8204c864061fde48049fe2002741cd9b67cb2cb7f774c07872809d46bc0ff2e3493e2c027462ea0b", 0x88}], 0x3, 0x0, 0x6) [ 249.484275] FAULT_INJECTION: forcing a failure. [ 249.484275] name failslab, interval 1, probability 0, space 0, times 0 [ 249.511520] FAULT_INJECTION: forcing a failure. [ 249.511520] name failslab, interval 1, probability 0, space 0, times 0 [ 249.537776] CPU: 1 PID: 15667 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 249.542870] device macvtap0 entered promiscuous mode [ 249.545704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.545711] Call Trace: [ 249.545736] dump_stack+0x1b2/0x281 [ 249.545756] should_fail.cold+0x10a/0x149 [ 249.558591] device macvtap0 left promiscuous mode [ 249.560305] should_failslab+0xd6/0x130 [ 249.560322] __kmalloc+0x2c1/0x400 [ 249.574615] xt_addrtype: ipv6 does not support BROADCAST matching [ 249.575484] ? match_number+0x9d/0x200 [ 249.575497] match_number+0x9d/0x200 [ 249.575510] ? match_strdup+0xa0/0xa0 [ 249.586230] xt_addrtype: ipv6 does not support BROADCAST matching [ 249.589330] ? memcpy+0x35/0x50 [ 249.589347] parse_opts.part.0+0x1b5/0x2d0 [ 249.589360] ? p9_fd_show_options+0x190/0x190 [ 249.618968] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 249.624081] ? fs_reclaim_release+0xd0/0x110 [ 249.628515] p9_fd_create+0x86/0x3b0 [ 249.632245] ? p9_fd_create_tcp+0x440/0x440 [ 249.636576] ? __raw_spin_lock_init+0x28/0x100 [ 249.641167] p9_client_create+0x5fd/0x12c0 [ 249.645420] ? p9_client_flush+0x4c0/0x4c0 [ 249.650368] ? __lockdep_init_map+0x100/0x560 [ 249.654873] ? __raw_spin_lock_init+0x28/0x100 [ 249.659691] v9fs_session_init+0x1c5/0x1540 [ 249.664022] ? pcpu_alloc+0xbe0/0xf50 [ 249.667852] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 249.672703] ? v9fs_show_options+0x6b0/0x6b0 [ 249.677123] ? v9fs_mount+0x54/0x860 [ 249.680854] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 249.686314] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 249.691380] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 249.696236] v9fs_mount+0x73/0x860 [ 249.699781] ? alloc_pages_current+0x15d/0x260 [ 249.704376] ? __lockdep_init_map+0x100/0x560 [ 249.709054] mount_fs+0x92/0x2a0 [ 249.712435] vfs_kern_mount.part.0+0x5b/0x470 [ 249.716958] do_mount+0xe53/0x2a00 [ 249.720528] ? copy_mount_string+0x40/0x40 [ 249.724888] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 249.729926] ? copy_mnt_ns+0xa30/0xa30 [ 249.733846] ? copy_mount_options+0x1fa/0x2f0 [ 249.738340] ? copy_mnt_ns+0xa30/0xa30 [ 249.742268] SyS_mount+0xa8/0x120 [ 249.745741] ? copy_mnt_ns+0xa30/0xa30 [ 249.749653] do_syscall_64+0x1d5/0x640 [ 249.753545] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 249.758735] RIP: 0033:0x4665f9 [ 249.761919] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.769636] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 249.776912] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f47725", 0xb9, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 249.784186] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 249.791459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.798738] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 249.820572] CPU: 0 PID: 15670 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 249.828490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.837852] Call Trace: [ 249.840453] dump_stack+0x1b2/0x281 [ 249.844096] should_fail.cold+0x10a/0x149 [ 249.848384] should_failslab+0xd6/0x130 [ 249.852373] __kmalloc+0x2c1/0x400 [ 249.855918] ? p9_fcall_alloc+0x19/0x90 [ 249.859900] ? __lockdep_init_map+0x100/0x560 [ 249.864411] p9_fcall_alloc+0x19/0x90 [ 249.868264] p9_client_prepare_req.part.0+0x86c/0xb60 [ 249.873509] p9_client_rpc+0x170/0x1520 [ 249.877503] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 249.882538] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 249.887925] ? p9_pollwait+0x18e/0x1f0 [ 249.891837] ? p9_conn_create+0x4b0/0x4b0 [ 249.896001] ? pipe_poll+0x24f/0x2c0 [ 249.899759] ? p9_fd_poll+0x237/0x2e0 [ 249.903581] ? p9_conn_create+0x3aa/0x4b0 [ 249.907749] ? p9_fd_create+0x293/0x3b0 [ 249.911742] ? p9_fd_create_tcp+0x440/0x440 [ 249.916090] p9_client_create+0x92f/0x12c0 [ 249.920364] ? p9_client_flush+0x4c0/0x4c0 [ 249.924605] ? __lockdep_init_map+0x100/0x560 [ 249.929137] ? __raw_spin_lock_init+0x28/0x100 [ 249.933730] v9fs_session_init+0x1c5/0x1540 [ 249.938058] ? pcpu_alloc+0xbe0/0xf50 [ 249.941869] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 249.946732] ? v9fs_show_options+0x6b0/0x6b0 [ 249.951174] ? v9fs_mount+0x54/0x860 [ 249.954893] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 249.960354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 249.965374] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 249.970249] v9fs_mount+0x73/0x860 [ 249.973826] ? alloc_pages_current+0x15d/0x260 [ 249.978412] ? __lockdep_init_map+0x100/0x560 [ 249.982955] mount_fs+0x92/0x2a0 [ 249.986332] vfs_kern_mount.part.0+0x5b/0x470 [ 249.990843] do_mount+0xe53/0x2a00 [ 249.994435] ? copy_mount_string+0x40/0x40 [ 249.998689] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.003723] ? copy_mnt_ns+0xa30/0xa30 [ 250.007626] ? copy_mount_options+0x1fa/0x2f0 [ 250.012135] ? copy_mnt_ns+0xa30/0xa30 [ 250.016038] SyS_mount+0xa8/0x120 [ 250.019520] ? copy_mnt_ns+0xa30/0xa30 [ 250.023420] do_syscall_64+0x1d5/0x640 [ 250.027319] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 250.032518] RIP: 0033:0x4665f9 00:38:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:40 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 250.035709] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.043614] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 250.050886] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 250.058340] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 250.065624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.072940] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 250.092444] device macvtap0 entered promiscuous mode [ 250.099214] device macvtap0 left promiscuous mode 00:38:41 executing program 2 (fault-call:3 fault-nth:21): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 250.136004] 9pnet: Couldn't grow tag array [ 250.182539] FAULT_INJECTION: forcing a failure. [ 250.182539] name failslab, interval 1, probability 0, space 0, times 0 [ 250.198262] CPU: 1 PID: 15705 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 250.206182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.215550] Call Trace: [ 250.218157] dump_stack+0x1b2/0x281 [ 250.221816] should_fail.cold+0x10a/0x149 [ 250.225986] should_failslab+0xd6/0x130 [ 250.229986] __kmalloc+0x2c1/0x400 [ 250.233541] ? p9_fcall_alloc+0x19/0x90 [ 250.237527] p9_fcall_alloc+0x19/0x90 [ 250.241337] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 250.246543] p9_client_rpc+0x170/0x1520 [ 250.250537] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 250.252903] 9pnet: Insufficient options for proto=fd [ 250.255554] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 250.255565] ? p9_pollwait+0x18e/0x1f0 [ 250.255579] ? p9_conn_create+0x4b0/0x4b0 [ 250.274059] ? pipe_poll+0x24f/0x2c0 [ 250.277867] ? p9_fd_poll+0x237/0x2e0 [ 250.281937] ? p9_conn_create+0x3aa/0x4b0 [ 250.286263] ? p9_fd_create+0x293/0x3b0 [ 250.290268] ? p9_fd_create_tcp+0x440/0x440 [ 250.294684] p9_client_create+0x92f/0x12c0 [ 250.298926] ? p9_client_flush+0x4c0/0x4c0 [ 250.303206] ? __lockdep_init_map+0x100/0x560 [ 250.307711] ? __raw_spin_lock_init+0x28/0x100 [ 250.312305] v9fs_session_init+0x1c5/0x1540 [ 250.316629] ? pcpu_alloc+0xbe0/0xf50 [ 250.320459] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 250.325320] ? v9fs_show_options+0x6b0/0x6b0 [ 250.329737] ? v9fs_mount+0x54/0x860 [ 250.333476] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 250.333575] FAULT_INJECTION: forcing a failure. [ 250.333575] name failslab, interval 1, probability 0, space 0, times 0 [ 250.338938] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.338952] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 250.338967] v9fs_mount+0x73/0x860 [ 250.338977] ? alloc_pages_current+0x15d/0x260 [ 250.338986] ? __lockdep_init_map+0x100/0x560 [ 250.339005] mount_fs+0x92/0x2a0 [ 250.376001] vfs_kern_mount.part.0+0x5b/0x470 [ 250.380523] do_mount+0xe53/0x2a00 [ 250.384067] ? copy_mount_string+0x40/0x40 [ 250.388307] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.393323] ? copy_mnt_ns+0xa30/0xa30 [ 250.397209] ? copy_mount_options+0x1fa/0x2f0 [ 250.401707] ? copy_mnt_ns+0xa30/0xa30 [ 250.405589] SyS_mount+0xa8/0x120 [ 250.409036] ? copy_mnt_ns+0xa30/0xa30 [ 250.413020] do_syscall_64+0x1d5/0x640 [ 250.417001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 250.422187] RIP: 0033:0x4665f9 [ 250.425367] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:41 executing program 4 (fault-call:3 fault-nth:16): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000003bc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000004bc0)={{r2, 0x97, 0x2d3, 0x800, 0x9, 0x6, 0x2, 0x4, 0xfffffffd, 0x1, 0xffffe668, 0x1, 0x0, 0x1ff, 0x6}, 0x10, [0x0, 0x0]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) preadv(r4, &(0x7f0000003b00)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f00000002c0)=""/2, 0x2}, {&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/98, 0x62}, {&(0x7f0000002940)=""/178, 0xb2}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/98, 0x62}, {&(0x7f0000003a80)=""/117, 0x75}], 0x9, 0x80000000, 0x7fff) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r6, 0x105, 0x0, 0x0, {{0x5f}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r6, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7f}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x34d}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:41 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000100)={r3}) recvmsg$can_raw(r4, &(0x7f00000016c0)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/28, 0x1c}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/226, 0xe2}, {&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000500)=""/55, 0x37}], 0x7, &(0x7f0000001600)=""/191, 0xbf}, 0xe8db53b1d2804078) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 250.433078] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 250.440354] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 250.447626] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 250.454925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.462205] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:41 executing program 2 (fault-call:3 fault-nth:22): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 250.487707] device ipvlan1 entered promiscuous mode [ 250.488099] CPU: 0 PID: 15718 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 250.500664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.510025] Call Trace: [ 250.510915] 9pnet: Couldn't grow tag array [ 250.512620] dump_stack+0x1b2/0x281 [ 250.512636] should_fail.cold+0x10a/0x149 [ 250.512650] should_failslab+0xd6/0x130 [ 250.528599] __kmalloc_track_caller+0x2bc/0x400 [ 250.533276] ? parse_opts.part.0+0x76/0x2d0 [ 250.537608] kstrdup+0x36/0x70 [ 250.540814] parse_opts.part.0+0x76/0x2d0 [ 250.544971] ? p9_fd_show_options+0x190/0x190 [ 250.549481] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 250.554591] ? fs_reclaim_release+0xd0/0x110 [ 250.559578] p9_fd_create+0x86/0x3b0 [ 250.563322] ? p9_fd_create_tcp+0x440/0x440 [ 250.567654] ? __raw_spin_lock_init+0x28/0x100 [ 250.568583] FAULT_INJECTION: forcing a failure. [ 250.568583] name failslab, interval 1, probability 0, space 0, times 0 [ 250.572275] p9_client_create+0x5fd/0x12c0 [ 250.572292] ? p9_client_flush+0x4c0/0x4c0 [ 250.572306] ? __lockdep_init_map+0x100/0x560 [ 250.572316] ? __raw_spin_lock_init+0x28/0x100 [ 250.572332] v9fs_session_init+0x1c5/0x1540 [ 250.572348] ? pcpu_alloc+0xbe0/0xf50 [ 250.609207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 250.614070] ? v9fs_show_options+0x6b0/0x6b0 [ 250.618490] ? v9fs_mount+0x54/0x860 [ 250.622212] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 250.627676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.632732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 250.637590] v9fs_mount+0x73/0x860 [ 250.641135] ? alloc_pages_current+0x15d/0x260 [ 250.645725] ? __lockdep_init_map+0x100/0x560 [ 250.650232] mount_fs+0x92/0x2a0 [ 250.653603] vfs_kern_mount.part.0+0x5b/0x470 [ 250.658105] do_mount+0xe53/0x2a00 [ 250.661649] ? do_raw_spin_unlock+0x164/0x220 [ 250.666158] ? copy_mount_string+0x40/0x40 [ 250.670409] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.675421] ? copy_mnt_ns+0xa30/0xa30 [ 250.679304] ? copy_mount_options+0x1fa/0x2f0 [ 250.683795] ? copy_mnt_ns+0xa30/0xa30 [ 250.687711] SyS_mount+0xa8/0x120 [ 250.691159] ? copy_mnt_ns+0xa30/0xa30 [ 250.695068] do_syscall_64+0x1d5/0x640 [ 250.698952] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 250.704157] RIP: 0033:0x4665f9 [ 250.707348] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.715064] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 250.722435] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 250.729712] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 250.737012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.744314] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 250.751630] CPU: 1 PID: 15731 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 250.759562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.762603] 9pnet: Insufficient options for proto=fd [ 250.769027] Call Trace: [ 250.769059] dump_stack+0x1b2/0x281 [ 250.769097] should_fail.cold+0x10a/0x149 [ 250.769113] should_failslab+0xd6/0x130 [ 250.788659] __kmalloc+0x2c1/0x400 [ 250.792214] ? p9pdu_readf+0x345/0x1970 [ 250.796202] p9pdu_readf+0x345/0x1970 [ 250.800036] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 250.805420] ? p9pdu_writef+0xd0/0xd0 [ 250.809228] ? p9_fd_poll+0x237/0x2e0 [ 250.813130] ? p9_fd_create+0x293/0x3b0 [ 250.817204] ? p9_fd_create_tcp+0x440/0x440 [ 250.821541] p9_client_create+0x9b2/0x12c0 [ 250.825815] ? p9_client_flush+0x4c0/0x4c0 [ 250.830065] ? __lockdep_init_map+0x100/0x560 [ 250.834592] ? __raw_spin_lock_init+0x28/0x100 [ 250.839231] v9fs_session_init+0x1c5/0x1540 [ 250.843684] ? pcpu_alloc+0xbe0/0xf50 [ 250.847505] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 250.853177] ? v9fs_show_options+0x6b0/0x6b0 [ 250.857604] ? v9fs_mount+0x54/0x860 [ 250.861361] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 250.863506] xt_addrtype: ipv6 does not support BROADCAST matching [ 250.866949] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.866964] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 250.866979] v9fs_mount+0x73/0x860 [ 250.866991] ? alloc_pages_current+0x15d/0x260 [ 250.867006] ? __lockdep_init_map+0x100/0x560 [ 250.896713] mount_fs+0x92/0x2a0 [ 250.900090] vfs_kern_mount.part.0+0x5b/0x470 [ 250.904950] do_mount+0xe53/0x2a00 [ 250.910947] ? copy_mount_string+0x40/0x40 [ 250.915192] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.920253] ? copy_mnt_ns+0xa30/0xa30 [ 250.924149] ? copy_mount_options+0x1fa/0x2f0 [ 250.928646] ? copy_mnt_ns+0xa30/0xa30 [ 250.932537] SyS_mount+0xa8/0x120 [ 250.935993] ? copy_mnt_ns+0xa30/0xa30 00:38:41 executing program 4 (fault-call:3 fault-nth:17): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), 0x0, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 250.939896] do_syscall_64+0x1d5/0x640 [ 250.943889] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 250.949094] RIP: 0033:0x4665f9 [ 250.952290] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.960046] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 250.967359] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 250.974666] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 250.981957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:38:41 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 250.989237] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 251.028345] FAULT_INJECTION: forcing a failure. 00:38:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x142, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 251.028345] name failslab, interval 1, probability 0, space 0, times 0 [ 251.029626] xt_addrtype: ipv6 does not support BROADCAST matching [ 251.047634] CPU: 1 PID: 15749 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 251.055531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.064913] Call Trace: [ 251.067529] dump_stack+0x1b2/0x281 [ 251.071167] should_fail.cold+0x10a/0x149 [ 251.075332] should_failslab+0xd6/0x130 [ 251.079363] kmem_cache_alloc_trace+0x29a/0x3d0 [ 251.084243] p9_fd_create+0x135/0x3b0 00:38:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 251.088157] ? p9_fd_create_tcp+0x440/0x440 [ 251.092785] ? __raw_spin_lock_init+0x28/0x100 [ 251.097477] p9_client_create+0x5fd/0x12c0 [ 251.102225] ? p9_client_flush+0x4c0/0x4c0 [ 251.106475] ? __lockdep_init_map+0x100/0x560 [ 251.111276] ? __raw_spin_lock_init+0x28/0x100 [ 251.115971] v9fs_session_init+0x1c5/0x1540 [ 251.122561] ? pcpu_alloc+0xbe0/0xf50 [ 251.126392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 251.131349] ? v9fs_show_options+0x6b0/0x6b0 [ 251.135820] ? v9fs_mount+0x54/0x860 [ 251.139544] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 251.145011] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 251.150047] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 251.154958] v9fs_mount+0x73/0x860 [ 251.158602] ? alloc_pages_current+0x15d/0x260 [ 251.163202] ? __lockdep_init_map+0x100/0x560 [ 251.167710] mount_fs+0x92/0x2a0 [ 251.171126] vfs_kern_mount.part.0+0x5b/0x470 [ 251.175634] do_mount+0xe53/0x2a00 [ 251.179335] ? copy_mount_string+0x40/0x40 [ 251.183589] ? rcu_read_lock_sched_held+0x16c/0x1d0 00:38:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$ax25_int(r1, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 251.188620] ? copy_mnt_ns+0xa30/0xa30 [ 251.192551] ? copy_mount_options+0x1fa/0x2f0 [ 251.197055] ? copy_mnt_ns+0xa30/0xa30 [ 251.200953] SyS_mount+0xa8/0x120 [ 251.204410] ? copy_mnt_ns+0xa30/0xa30 [ 251.208303] do_syscall_64+0x1d5/0x640 [ 251.212199] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 251.217475] RIP: 0033:0x4665f9 [ 251.220686] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.228408] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 251.235694] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 251.242981] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 251.250288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.257599] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 251.281828] device ipvlan1 left promiscuous mode [ 251.306551] xt_addrtype: ipv6 does not support BROADCAST matching [ 251.327493] device ipvlan1 entered promiscuous mode 00:38:42 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) mmap(&(0x7f0000216000/0x2000)=nil, 0x2000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x4, 0x1f, 0xbb, 0x4c, 0x1, @mcast1, @mcast1, 0x8, 0x1, 0xffffffff, 0x3}}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x8, r4, 0x1, 0x9, 0x6, @broadcast}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:42 executing program 2 (fault-call:3 fault-nth:23): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:42 executing program 4 (fault-call:3 fault-nth:18): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:42 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x8010, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r3 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x5, &(0x7f0000000440)=[{&(0x7f0000000100)="9ec61ad7886539104cbeb16d1bdceace2a43ed430e011ca5c53aace21c0fd020f50aa2a38c5f3200a4b84ec32ec1888933e0b96de995161c64963d480826810edf1b614ad7263a7829624c48d29baadfc5971da7f635ff8e6e51c9a50d4e092c3b3781dc179ece949d2a242ff5172ff2d88a3bd2bba913306565e98e2c3b6431778a70f340822c46", 0x88, 0x9}, {&(0x7f00000001c0)="7801f397eaba835c8b6d5a12e638495a5816cbaec5483dd557c16ded1c30460cc4cb4d4c273be20b2e4beb19aba966cb037c960b44d7d8ea95ab3fc82aab", 0x3e, 0x8000}, {&(0x7f0000000200)="cff9fa9269fe84fed10d297b223cce447ee0d01a88bb1fd9578ffa2f5dc0040623a531761fe8d949120861b4dd4c0ffc24cee99108b593ffa4a5c219b44d55d05474c9e95cc9dfa3ab25777c20c84b23a9730fefb9d2300d9734d33d9930bb9ab0e3901a6839b107410b46f7dcc03d315e5d612fe2ff59f1b69b099da36e6ff62b9137ef4645e632e6cbf5ffaff8ad84330cffd888d428caaa99815b44d79be9e5ee2a4414f903c9d5625fcc6bf5f7296b7b7199", 0xb4, 0x5}, {&(0x7f00000002c0)="8ef2de6ccf527e978dccf56eff06a55b4994d4dc75d544dc6074fa94d54f093ceef72a9b27f3112154b48afaf509df3853fe97f7c3138ea57cfac39c2056ed0fe465440d2a5a32e8f1f712347af7f9b5715d108f57fd847b7db6b4fc689600c7dfac4bc47e211dbe409d86adcd5eff6b597fe10e1dbe0ea891f6c5b78dc870b4f990dd54bece23fb72c9a5bec5badec0ea96a2667e0eebd0c24f0663", 0x9c, 0x86}, {&(0x7f0000000380)="94c937d9f889b6008e0432411e21480a0d3230ffbb84519fd45f253c1b17269ba3965a183a4bd779556124752cd4a8077850e85d6221d100110fe342bdfac92af846abbaa5e4f9ea9fa424ffd136ceea89a6790842ba8b530942183a548b0e45d011aee21cfd1672cbe1fed9c905a6487ce1e3d69f9018decb3d78f18b09dc034496a50582489e018a41beca0fc86abc903c4683aaa229e8e26a7425ba410bf378f38f", 0xa3, 0x4}], 0x348001, &(0x7f0000001c00)=ANY=[@ANYBLOB='acl,grpjquota=,jqfmt=vfsold,active_logs=2,noquota,prjjquota=./cgroup.cpu/syz1\x00,context=system_u,defcontext=unconfined_u,subj_user=./cgroup.cpu/syz1\x00,measure,seclabel,fscontext=root,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="2c4ad2f635a43cb1bfef", @ANYRESDEC=0xee00, @ANYBLOB=',smackfshat=cgroup\x00,mask=^MAY_EXEC,\x00']) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x45) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000001ac0)={0x1, 0x10, [0x5, 0x2, 0x9, 0x3], &(0x7f0000001a80)=[0x0, 0x0]}) [ 251.372133] device ipvlan1 left promiscuous mode 00:38:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 251.437712] FAULT_INJECTION: forcing a failure. [ 251.437712] name failslab, interval 1, probability 0, space 0, times 0 [ 251.447974] FAULT_INJECTION: forcing a failure. [ 251.447974] name failslab, interval 1, probability 0, space 0, times 0 [ 251.451531] xt_addrtype: ipv6 does not support BROADCAST matching [ 251.460149] CPU: 1 PID: 15786 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 251.460176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.460180] Call Trace: 00:38:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 251.460209] dump_stack+0x1b2/0x281 [ 251.460228] should_fail.cold+0x10a/0x149 [ 251.460246] should_failslab+0xd6/0x130 [ 251.498644] kmem_cache_alloc_trace+0x47/0x3d0 [ 251.503236] p9_client_prepare_req.part.0+0x4ea/0xb60 [ 251.508461] p9_client_rpc+0x170/0x1520 [ 251.512621] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 251.517642] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 251.523019] ? p9_pollwait+0x18e/0x1f0 [ 251.526923] ? p9_conn_create+0x4b0/0x4b0 [ 251.531190] ? pipe_poll+0x24f/0x2c0 [ 251.534925] ? p9_fd_poll+0x237/0x2e0 [ 251.538743] ? p9_conn_create+0x3aa/0x4b0 [ 251.542902] ? p9_fd_create+0x293/0x3b0 [ 251.546891] ? p9_fd_create_tcp+0x440/0x440 [ 251.551230] p9_client_create+0x92f/0x12c0 [ 251.551418] device ipvlan1 entered promiscuous mode [ 251.555473] ? p9_client_flush+0x4c0/0x4c0 [ 251.555490] ? __lockdep_init_map+0x100/0x560 [ 251.555504] ? __raw_spin_lock_init+0x28/0x100 [ 251.555527] v9fs_session_init+0x1c5/0x1540 [ 251.555541] ? pcpu_alloc+0xbe0/0xf50 [ 251.582038] ? gfp_pfmemalloc_allowed+0x150/0x150 00:38:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 251.586900] ? v9fs_show_options+0x6b0/0x6b0 [ 251.591344] ? v9fs_mount+0x54/0x860 [ 251.595062] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 251.600518] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 251.605566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 251.610424] v9fs_mount+0x73/0x860 [ 251.613973] ? alloc_pages_current+0x15d/0x260 [ 251.618561] ? __lockdep_init_map+0x100/0x560 [ 251.623081] mount_fs+0x92/0x2a0 [ 251.624340] xt_addrtype: ipv6 does not support BROADCAST matching [ 251.626641] vfs_kern_mount.part.0+0x5b/0x470 00:38:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 251.626655] do_mount+0xe53/0x2a00 [ 251.626672] ? copy_mount_string+0x40/0x40 [ 251.626686] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 251.626698] ? copy_mnt_ns+0xa30/0xa30 [ 251.654081] ? copy_mount_options+0x1fa/0x2f0 [ 251.658596] ? copy_mnt_ns+0xa30/0xa30 [ 251.662499] SyS_mount+0xa8/0x120 [ 251.665982] ? copy_mnt_ns+0xa30/0xa30 [ 251.669874] do_syscall_64+0x1d5/0x640 [ 251.673796] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 251.678987] RIP: 0033:0x4665f9 00:38:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 251.682178] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.689893] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 251.697196] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 251.704566] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 251.711942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.719228] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 251.726551] 9pnet: Couldn't grow tag array [ 251.730127] CPU: 0 PID: 15783 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 251.738807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.748175] Call Trace: [ 251.750784] dump_stack+0x1b2/0x281 [ 251.754424] should_fail.cold+0x10a/0x149 [ 251.758584] should_failslab+0xd6/0x130 [ 251.762569] __kmalloc_track_caller+0x2bc/0x400 [ 251.767251] ? v9fs_session_init+0x387/0x1540 [ 251.771755] kstrdup+0x36/0x70 [ 251.774952] v9fs_session_init+0x387/0x1540 [ 251.779320] ? v9fs_show_options+0x6b0/0x6b0 [ 251.783744] ? v9fs_mount+0x54/0x860 [ 251.787469] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 251.792933] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 251.797960] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 251.802823] v9fs_mount+0x73/0x860 [ 251.806371] ? alloc_pages_current+0x15d/0x260 [ 251.810963] ? __lockdep_init_map+0x100/0x560 [ 251.815476] mount_fs+0x92/0x2a0 [ 251.818856] vfs_kern_mount.part.0+0x5b/0x470 [ 251.823363] do_mount+0xe53/0x2a00 [ 251.826918] ? assoc_array_gc+0x10e1/0x1110 [ 251.831253] ? retint_kernel+0x2d/0x2d [ 251.835154] ? copy_mount_string+0x40/0x40 [ 251.839405] ? __sanitizer_cov_trace_pc+0x34/0x50 [ 251.844388] ? copy_mount_options+0x1fa/0x2f0 [ 251.848887] ? copy_mnt_ns+0xa30/0xa30 [ 251.852879] SyS_mount+0xa8/0x120 [ 251.856331] ? copy_mnt_ns+0xa30/0xa30 [ 251.860248] do_syscall_64+0x1d5/0x640 [ 251.864147] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 251.869333] RIP: 0033:0x4665f9 [ 251.872508] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.880220] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 00:38:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 251.887484] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 251.894762] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 251.902042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.909300] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:43 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x2, "d8ad82a5b0e359bb72b219a257cda36b"}, 0x12, 0x1) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @link_local}, 0x10) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @empty}, &(0x7f0000000140)=0xc) close(r1) 00:38:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000), 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:43 executing program 4 (fault-call:3 fault-nth:19): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) mmap(&(0x7f00000e7000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0xb2520000) 00:38:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(0x0, &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:43 executing program 2 (fault-call:3 fault-nth:24): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 251.994264] device ipvlan1 left promiscuous mode [ 252.001577] device ipvlan1 entered promiscuous mode [ 252.006954] device ipvlan1 left promiscuous mode 00:38:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(0x0, &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:43 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x48) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r1, &(0x7f0000001cc0)=""/4096, 0x1000, 0xde05b7317380978b, 0x0, 0x0) vmsplice(r0, &(0x7f0000001c40)=[{&(0x7f0000000280)="7836c37ccfcd64eb5a323189522d92a8c3a110c467ea90c4792812a9ac690f990a361a068f18844b1624629c8b0fa6731d2f2cc277da55f56f18fba0c2b3e55ddb0f1398ddf7aa6082ed3a60b0de98d07d8bc12f331967791f2c597ef495233c01c215f48fe7be244f4238d31d66fe94cae5dffe22c4ce49be2752cbca1705c1e2397d425c510df466d9a8c0ea3d0bd761a5e732a670a000ad517f4587e33e0a45e0067e40425c327a00fab3c723ea9b8aed", 0xb2}, {&(0x7f0000000340)="3975fde4c3f6a3398ef59f6ffc526ade7af422d878b84e77ddc6a07342dee4dac7c4983a7bd28512df759aca1c8c6463caf4d6c2b679319f62c9b299c51713c255803f556edabd3ca7897fae3433057ffac8990205d6e5c7620e877ff34f94e39cd572e5734cf793388c839fc2e5dd365bb9ceeb7fe0eaf2b77dfd2cbcea314e49e496712a42a5fa1048ade4de2733642ae487e68d7470a338a8c9087fd94aa3c7c8a020c0272bfed26c9ad195b9bb42bb237a19fddd9a6fbc3eaca5cb4c6081626fb2db5eeca33c579c2d42a1aa3e265957aaf0a37e1effae4e0521c0cc785523d3db544f039cec13", 0xe9}, {&(0x7f0000001940)="55ca4ce8a32648ede385e3304579d8f67d9e755892c6b2f9ae0d24c958d0b1005bc3da79b01117b94a95604f139bdddd2ae52ceb8a32f8617b7e48d2ea2d6321055d64beed19acb93c8d9c0a14c338c088e915a9470171b03ef133eb7b22633384e90328c19f8196b88aec06e5df469bc04fd860d754f503d7fddc01764f5ce08a0d94e8dbade3401ff41cfcf1984e39343670417ffe4d224f26eef8b2ca0f268241a37caee12be7809495fc0a0930074998f11b4cd7ac1bc9f2f42b94ea2100ccfba91807b222d251497958917a303be15a21a5d37f9da22ba689037f5549e2bfd2dc7805ad85d63efa78", 0xeb}, {&(0x7f0000001a40)="b95d6e6421197b4fc6c2eb4341d2e40b2a153559a96fff8456c88eb0b37b84e3372ead85fd65501c45744661797953827b9b0b712e5d17b616f531822b8ac7ed9b97e05ae59e48f9cf3f0b15607755d47e165a6d427df87e98d1093b6885dec28f08083803d45feec6fe3881157f481f0819c6072a5706797c71aaf2b856d516ad503c67d33d9ebe83448d5cc37bfb854e43ee2a2d5354fa2d6dbb2675bac817c39ebf6ee85cad73e85f12a406fb728c636ac5989a3a3556c1049b81c651c26564d43d9503f9fded379a", 0xca}, {&(0x7f0000001b40)="3c8689b7653a4e18ece4e6d9b2f1aeb9563a1c6a155060de45ed7a98961f49ddb2e4151af221bf907c5ea26a1d82169841817c8206ccf020265d9c1eb019e3f488fb90ae9884a2c94bfe033554375ce77a7bae13a9ef7ffc70379fa416f0baaf85e81fb4cce868c8b889ca364351e0d136b8ff2746e86cf291ccca9274e1d5be8227f42f3d411f803ef5f2ea73be2a150ec65af53fe2d2c26650d4d3e8d4a6287b3f80ade5d35420a7fba7dba9841cb15af9211685b83c60bc1eb8732a7fcebb11278717081416e1834eb677cddaedabd6", 0xd1}, {&(0x7f0000000440)="79281a15b8854c5ba8ec04f95fe82b38c9fc232cd5755a2c25ecafaf1bbeaa4dec54db42e13ca706fff5ce6c41732599e8be40bec5987e84f024ae44b61bcd2578b413aef041d9eab1afceb030a697fdf422e449baf3d1bbb78b3c45cf4b334e4e29", 0x62}], 0x6, 0x9) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x22800, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@deltaction={0x110, 0x31, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x41801}, 0x4000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 252.087310] FAULT_INJECTION: forcing a failure. [ 252.087310] name failslab, interval 1, probability 0, space 0, times 0 [ 252.107078] device ipvlan1 entered promiscuous mode [ 252.117062] FAULT_INJECTION: forcing a failure. [ 252.117062] name failslab, interval 1, probability 0, space 0, times 0 00:38:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(0x0, &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 252.157335] CPU: 1 PID: 15833 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 252.165274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.174651] Call Trace: [ 252.177618] dump_stack+0x1b2/0x281 [ 252.181298] should_fail.cold+0x10a/0x149 [ 252.185535] should_failslab+0xd6/0x130 [ 252.189545] kmem_cache_alloc_trace+0x29a/0x3d0 [ 252.194238] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 252.199456] p9_client_rpc+0x170/0x1520 00:38:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(0x0, &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 252.203463] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 252.208491] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 252.213868] ? p9_pollwait+0x18e/0x1f0 [ 252.217769] ? p9_conn_create+0x4b0/0x4b0 [ 252.221934] ? pipe_poll+0x24f/0x2c0 [ 252.225671] ? p9_fd_poll+0x237/0x2e0 [ 252.229491] ? p9_conn_create+0x3aa/0x4b0 [ 252.233670] ? p9_fd_create+0x293/0x3b0 [ 252.237752] ? p9_fd_create_tcp+0x440/0x440 [ 252.242096] p9_client_create+0x92f/0x12c0 [ 252.246346] ? p9_client_flush+0x4c0/0x4c0 [ 252.250591] ? __lockdep_init_map+0x100/0x560 00:38:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(0x0, &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), 0x0, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 252.255106] ? __raw_spin_lock_init+0x28/0x100 [ 252.259713] v9fs_session_init+0x1c5/0x1540 [ 252.264062] ? pcpu_alloc+0xbe0/0xf50 [ 252.268059] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 252.273185] ? v9fs_show_options+0x6b0/0x6b0 [ 252.277795] ? v9fs_mount+0x54/0x860 [ 252.281528] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 252.287009] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 252.292054] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 252.296931] v9fs_mount+0x73/0x860 [ 252.300502] ? alloc_pages_current+0x15d/0x260 [ 252.305109] ? __lockdep_init_map+0x100/0x560 [ 252.309638] mount_fs+0x92/0x2a0 [ 252.313030] vfs_kern_mount.part.0+0x5b/0x470 [ 252.317548] do_mount+0xe53/0x2a00 [ 252.321114] ? copy_mount_string+0x40/0x40 [ 252.323241] xt_addrtype: ipv6 does not support BROADCAST matching [ 252.325401] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 252.325415] ? copy_mnt_ns+0xa30/0xa30 [ 252.325426] ? copy_mount_options+0x1fa/0x2f0 [ 252.325440] ? copy_mnt_ns+0xa30/0xa30 [ 252.349102] SyS_mount+0xa8/0x120 [ 252.352563] ? copy_mnt_ns+0xa30/0xa30 [ 252.356483] do_syscall_64+0x1d5/0x640 [ 252.360380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 252.365608] RIP: 0033:0x4665f9 [ 252.368800] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.376519] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 252.383801] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 252.391095] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 252.398377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.406005] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 252.417716] CPU: 1 PID: 15834 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 252.427365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.436909] Call Trace: [ 252.439514] dump_stack+0x1b2/0x281 [ 252.443156] should_fail.cold+0x10a/0x149 [ 252.447333] should_failslab+0xd6/0x130 [ 252.451495] __kmalloc+0x2c1/0x400 [ 252.455045] ? match_number+0x9d/0x200 [ 252.458952] match_number+0x9d/0x200 [ 252.462685] ? match_strdup+0xa0/0xa0 [ 252.466507] ? memcpy+0x35/0x50 [ 252.469815] v9fs_session_init+0x901/0x1540 [ 252.474199] ? v9fs_show_options+0x6b0/0x6b0 [ 252.478951] ? v9fs_mount+0x54/0x860 [ 252.482689] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 252.487753] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 252.492626] v9fs_mount+0x73/0x860 [ 252.496204] ? alloc_pages_current+0x15d/0x260 [ 252.498181] 9pnet: Couldn't grow tag array [ 252.500810] ? __lockdep_init_map+0x100/0x560 [ 252.500825] mount_fs+0x92/0x2a0 [ 252.500841] vfs_kern_mount.part.0+0x5b/0x470 [ 252.500853] do_mount+0xe53/0x2a00 [ 252.500866] ? copy_mount_string+0x40/0x40 [ 252.500878] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 252.500886] ? copy_mnt_ns+0xa30/0xa30 [ 252.500896] ? copy_mount_options+0x1fa/0x2f0 [ 252.500904] ? copy_mnt_ns+0xa30/0xa30 [ 252.500913] SyS_mount+0xa8/0x120 [ 252.500924] ? copy_mnt_ns+0xa30/0xa30 [ 252.550428] do_syscall_64+0x1d5/0x640 [ 252.554420] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 252.559632] RIP: 0033:0x4665f9 [ 252.562905] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.570623] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 252.578076] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 252.585344] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 252.592606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.600255] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 252.636623] device ipvlan1 left promiscuous mode [ 252.655448] device ipvlan1 entered promiscuous mode 00:38:43 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000840)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1, 0x6, &(0x7f0000000500)=[{&(0x7f0000000180)="307680aa44df5b8439d638cf9ce75089f16dc13739eb1fb78f1f5909ccd054d3370f50781dd2b5d06454817bf7d2c9f7605e392de6a4949e051eb79f4d166c3f6f6d2b4655b70ea7c32d79954932cbbae1502965985d935c0fd689cfc4facf883c5132f47c03ebde0f48854f553733d2c74481f4f683a5f22ade58ec278b01ad3168301d7d6e9420f276782b1745da9746251ff86aaf28b6096252702962056d2c9c0f2f7769dc5a8e84ebd955d0c7f85974bc35250208e73f231177c28119708413950973cbed556cdc199a", 0xcc, 0x101}, {&(0x7f0000000280)="07901f18f5579303136b9b94b46373b0bdf7de322b220b44307f5729936e5719b976bb0a92ce079f2ac98455380e9cdef1c10c90da4fed0681abe4df70774d98d4211c99ed7e6e60aa84e9f5adfcc1c936883cd90f189c3e59edf8d63ca6d8498364265c22be", 0x66, 0xff0}, {&(0x7f0000000300)="a6c2d2028d6d1643476a682e7cd723d63d9015bd4053db9106d9ca7e6f943140be7103d33d9bc93d9d93dbc2d0857c6a4a1a88fcc450fadeb4fa676901e691364ad791a9c6dfe1ed364c9459434009d2fcea337ff292aa3fcdf2a836bbf73ed0c3e617f463f15cd8e2b0ea6fc4be5e3a2451c07613f226fb821d459d41a38a57558317418c6512ab45c73160e0ff5fa235b54b87f5675495b287741e98deea21c3ddc36eae22feb6234566dc20b9c01cf69dadb64dfafe5748d3c74fecf3a0d424c81621ca1f5b86bb4374d65ce519e6ba50fa206987d193b765059f522291efefa2c4", 0xe3, 0xa4}, {&(0x7f0000000400)="568e6256f2ededec80497aa5a87b15e87018a6a7a3354760b53e", 0x1a, 0x4}, {&(0x7f0000000440)="8073d94d40ce1c7885da0658139bdeaf261c0231c2caebf60ff0c2e290cb373fa6ce1d5f7600222c4768999271caea1349a34e201a7edc7d3f48cda7ab5ac6a32ecc36cbe8dcaf60652df85a76bb01848a96c0e0a4ad61f988dcdd0b87d3f96020909b631ff6ee7e33b657a86bed3ca2b83a6125036008fc63475e2f55e4891e359a0efc48adf69a798d9dacf2f99990fe7cce3755a8c1", 0x97, 0x1}, {&(0x7f0000000600)="9a3e9048994a7ae625c11e4c60bb907103eb503129f9502c32a1264fcf1e402c3b0b2118a2dc0c073a3241e2dc9f2cc8876c6558e4d310bdd639033665251082da72f58998800fbabae02c12ecac7713777ec93e1f4ed020180f8c8dab2500a4a857c7315f1d5f40d92ebdde266f63dd4656345f649a59d1a96b668b5cb23cf30c56fdbef0244e5cb76a656f9a46cb867833017004a69b4f103bc985c1878b470791ec9227b34676a09b39c033153bd33267271173f99deb6a1c77a97463c2a538d9a760d451f661edb4d41ae2", 0xcd}], 0x1023001, &(0x7f0000000700)={[{@nr_blocks={'nr_blocks', 0x3d, [0x31]}}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}) ioctl(r1, 0x6, &(0x7f00000007c0)="d59a54aa604b8b178088927c610c80626f4a171df72f11a60035c1498b557ab9c74025c822d2ec63dd6dde96796e26f44d949f44ec27a4d18ca986cb088e9a1e98b23d8d98e9ed9a2f1ab95c174d76437d69dcdee23631125334313ee635bdfc866d130de3d57eec4f90") getdents(r4, &(0x7f0000000740)=""/108, 0x6c) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(0x0, &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), 0x0, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:43 executing program 2 (fault-call:3 fault-nth:25): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:43 executing program 4 (fault-call:3 fault-nth:20): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 252.711341] device ipvlan1 left promiscuous mode 00:38:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), 0x0, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 252.763362] FAULT_INJECTION: forcing a failure. [ 252.763362] name failslab, interval 1, probability 0, space 0, times 0 [ 252.788560] FAULT_INJECTION: forcing a failure. [ 252.788560] name failslab, interval 1, probability 0, space 0, times 0 [ 252.811366] CPU: 1 PID: 15879 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 252.819658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.829042] Call Trace: [ 252.831645] dump_stack+0x1b2/0x281 [ 252.835382] should_fail.cold+0x10a/0x149 [ 252.839694] should_failslab+0xd6/0x130 [ 252.843696] kmem_cache_alloc_trace+0x29a/0x3d0 [ 252.848478] p9_fid_create+0x47/0x3a0 [ 252.852333] p9_client_attach+0x6d/0x750 [ 252.856580] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 00:38:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), 0x0, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 252.862134] ? v9fs_session_init+0xad1/0x1540 [ 252.866652] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 252.871690] v9fs_session_init+0xc03/0x1540 [ 252.876028] ? v9fs_show_options+0x6b0/0x6b0 [ 252.880457] ? v9fs_mount+0x54/0x860 [ 252.884179] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 252.889217] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 252.894190] v9fs_mount+0x73/0x860 [ 252.897913] ? alloc_pages_current+0x15d/0x260 [ 252.902553] ? __lockdep_init_map+0x100/0x560 [ 252.907192] mount_fs+0x92/0x2a0 [ 252.910574] vfs_kern_mount.part.0+0x5b/0x470 [ 252.915091] do_mount+0xe53/0x2a00 [ 252.918654] ? retint_kernel+0x2d/0x2d [ 252.922564] ? copy_mount_string+0x40/0x40 [ 252.926910] ? copy_mount_options+0x185/0x2f0 [ 252.932905] ? copy_mount_options+0x18f/0x2f0 [ 252.937427] ? copy_mount_options+0x1fa/0x2f0 [ 252.941944] ? copy_mnt_ns+0xa30/0xa30 [ 252.945852] SyS_mount+0xa8/0x120 [ 252.949862] ? copy_mnt_ns+0xa30/0xa30 [ 252.953768] do_syscall_64+0x1d5/0x640 [ 252.957765] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 252.962968] RIP: 0033:0x4665f9 [ 252.966164] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.973910] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 252.981187] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 252.988467] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 252.995744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.003047] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 253.012469] device ipvlan1 entered promiscuous mode [ 253.028277] CPU: 0 PID: 15883 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 253.036759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.046564] Call Trace: [ 253.049187] dump_stack+0x1b2/0x281 [ 253.052835] should_fail.cold+0x10a/0x149 [ 253.057003] should_failslab+0xd6/0x130 [ 253.061068] __kmalloc+0x2c1/0x400 [ 253.064629] ? p9_fcall_alloc+0x19/0x90 [ 253.068617] ? __lockdep_init_map+0x100/0x560 [ 253.073132] p9_fcall_alloc+0x19/0x90 [ 253.076974] p9_client_prepare_req.part.0+0x86c/0xb60 [ 253.082210] p9_client_rpc+0x170/0x1520 [ 253.086476] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 253.091457] FAULT_INJECTION: forcing a failure. [ 253.091457] name failslab, interval 1, probability 0, space 0, times 0 [ 253.092474] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 253.092493] ? p9_pollwait+0x18e/0x1f0 [ 253.113404] ? p9_conn_create+0x4b0/0x4b0 [ 253.117908] ? pipe_poll+0x24f/0x2c0 [ 253.121614] ? p9_fd_poll+0x237/0x2e0 [ 253.125425] ? p9_conn_create+0x3aa/0x4b0 [ 253.129652] ? p9_fd_create+0x293/0x3b0 [ 253.133614] ? p9_fd_create_tcp+0x440/0x440 [ 253.138899] p9_client_create+0x92f/0x12c0 [ 253.143133] ? p9_client_flush+0x4c0/0x4c0 [ 253.147389] ? __lockdep_init_map+0x100/0x560 [ 253.151915] ? __raw_spin_lock_init+0x28/0x100 [ 253.156495] v9fs_session_init+0x1c5/0x1540 [ 253.160845] ? pcpu_alloc+0xbe0/0xf50 [ 253.164666] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 253.169509] ? v9fs_show_options+0x6b0/0x6b0 [ 253.173950] ? v9fs_mount+0x54/0x860 [ 253.177654] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 253.183180] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 253.188202] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 253.193066] v9fs_mount+0x73/0x860 [ 253.196608] ? alloc_pages_current+0x15d/0x260 [ 253.201183] ? __lockdep_init_map+0x100/0x560 [ 253.205678] mount_fs+0x92/0x2a0 [ 253.209082] vfs_kern_mount.part.0+0x5b/0x470 [ 253.213604] do_mount+0xe53/0x2a00 [ 253.217141] ? retint_kernel+0x2d/0x2d [ 253.221019] ? copy_mount_string+0x40/0x40 [ 253.225253] ? audit_kill_trees+0x230/0x230 [ 253.229576] ? copy_mount_options+0x1fa/0x2f0 [ 253.234072] ? copy_mnt_ns+0xa30/0xa30 [ 253.237960] SyS_mount+0xa8/0x120 [ 253.241414] ? copy_mnt_ns+0xa30/0xa30 [ 253.245306] do_syscall_64+0x1d5/0x640 [ 253.249203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 253.254406] RIP: 0033:0x4665f9 [ 253.257641] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) mmap(&(0x7f000014a000/0x4000)=nil, 0x4000, 0x0, 0x1010, r2, 0x5212d000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x810, r1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), 0x0, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:44 executing program 2 (fault-call:3 fault-nth:26): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 253.265414] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 253.272696] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 253.279993] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 253.287297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.294568] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 253.301861] CPU: 1 PID: 15905 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 253.309749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.319132] Call Trace: [ 253.321730] dump_stack+0x1b2/0x281 [ 253.325364] should_fail.cold+0x10a/0x149 [ 253.329530] should_failslab+0xd6/0x130 [ 253.333513] kmem_cache_alloc+0x40/0x3c0 [ 253.337620] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 253.343782] radix_tree_extend+0x158/0x3e0 [ 253.344723] xt_addrtype: ipv6 does not support BROADCAST matching [ 253.348039] idr_get_free_cmn+0x650/0x8d0 [ 253.348059] idr_alloc_cmn+0xe8/0x1e0 [ 253.348072] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 253.367188] ? lock_acquire+0x170/0x3f0 [ 253.371176] p9_idpool_get+0x80/0xf0 [ 253.374887] ? p9_idpool_destroy+0x20/0x20 [ 253.379120] ? __lock_acquire+0x5fc/0x3f20 [ 253.383370] p9_client_prepare_req.part.0+0x65/0xb60 [ 253.388473] ? trace_hardirqs_on+0x10/0x10 [ 253.392710] ? idr_get_free_cmn+0x562/0x8d0 [ 253.397035] p9_client_rpc+0x170/0x1520 [ 253.401014] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 253.406386] ? lock_acquire+0x170/0x3f0 [ 253.407203] 9pnet: Couldn't grow tag array [ 253.410377] ? lock_downgrade+0x740/0x740 [ 253.410391] ? lock_acquire+0x170/0x3f0 [ 253.410400] ? lock_downgrade+0x740/0x740 [ 253.410412] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 253.410422] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 253.410436] p9_client_attach+0x137/0x750 [ 253.410447] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 253.410459] ? v9fs_session_init+0xad1/0x1540 [ 253.410468] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 253.410481] v9fs_session_init+0xc03/0x1540 00:38:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 253.410499] ? v9fs_show_options+0x6b0/0x6b0 [ 253.410512] ? v9fs_mount+0x54/0x860 [ 253.471961] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 253.476996] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 253.481862] v9fs_mount+0x73/0x860 [ 253.485411] ? alloc_pages_current+0x15d/0x260 [ 253.489997] ? __lockdep_init_map+0x100/0x560 [ 253.494500] mount_fs+0x92/0x2a0 [ 253.497880] vfs_kern_mount.part.0+0x5b/0x470 [ 253.502380] do_mount+0xe53/0x2a00 [ 253.505929] ? copy_mount_string+0x40/0x40 [ 253.510170] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 253.515200] ? copy_mnt_ns+0xa30/0xa30 [ 253.519098] ? copy_mount_options+0x1fa/0x2f0 [ 253.523603] ? copy_mnt_ns+0xa30/0xa30 [ 253.527503] SyS_mount+0xa8/0x120 [ 253.530975] ? copy_mnt_ns+0xa30/0xa30 [ 253.534878] do_syscall_64+0x1d5/0x640 [ 253.538780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 253.543978] RIP: 0033:0x4665f9 [ 253.547177] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.554890] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 253.562168] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 253.569599] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 253.576861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.584127] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 253.596483] print_req_error: I/O error, dev loop5, sector 0 [ 253.616902] device ipvlan1 left promiscuous mode 00:38:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), 0x0, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:44 executing program 4 (fault-call:3 fault-nth:21): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:44 executing program 2 (fault-call:3 fault-nth:27): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:44 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0xa4000, 0x92) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001940)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:44 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'virt_wifi0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x602200, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000003c0)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/78, 0x4e}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000280)=""/206, 0xce}], 0x3, 0xfffffffa, 0x9) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 253.693182] print_req_error: I/O error, dev loop5, sector 0 00:38:44 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 253.770791] FAULT_INJECTION: forcing a failure. [ 253.770791] name failslab, interval 1, probability 0, space 0, times 0 [ 253.777964] device ipvlan1 entered promiscuous mode [ 253.789513] FAULT_INJECTION: forcing a failure. [ 253.789513] name failslab, interval 1, probability 0, space 0, times 0 [ 253.824134] CPU: 1 PID: 15942 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 253.832060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.841429] Call Trace: [ 253.844039] dump_stack+0x1b2/0x281 [ 253.847691] should_fail.cold+0x10a/0x149 [ 253.851951] should_failslab+0xd6/0x130 [ 253.855948] __kmalloc+0x2c1/0x400 [ 253.859505] ? p9pdu_readf+0x345/0x1970 [ 253.863497] p9pdu_readf+0x345/0x1970 [ 253.867307] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 253.872705] ? p9pdu_writef+0xd0/0xd0 [ 253.876510] ? p9_fd_poll+0x237/0x2e0 [ 253.880718] ? p9_fd_create+0x293/0x3b0 [ 253.884694] ? p9_fd_create_tcp+0x440/0x440 [ 253.889023] p9_client_create+0x9b2/0x12c0 [ 253.893260] ? p9_client_flush+0x4c0/0x4c0 [ 253.897506] ? __lockdep_init_map+0x100/0x560 [ 253.902205] ? __raw_spin_lock_init+0x28/0x100 [ 253.906796] v9fs_session_init+0x1c5/0x1540 [ 253.911156] ? pcpu_alloc+0xbe0/0xf50 [ 253.914971] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 253.919825] ? v9fs_show_options+0x6b0/0x6b0 [ 253.924375] ? v9fs_mount+0x54/0x860 [ 253.928110] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 253.933568] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 253.938674] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 253.943532] v9fs_mount+0x73/0x860 [ 253.947097] ? alloc_pages_current+0x15d/0x260 [ 253.951967] ? __lockdep_init_map+0x100/0x560 [ 253.956483] mount_fs+0x92/0x2a0 [ 253.959867] vfs_kern_mount.part.0+0x5b/0x470 [ 253.964361] do_mount+0xe53/0x2a00 [ 253.967905] ? copy_mount_string+0x40/0x40 00:38:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 253.972142] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 253.977160] ? copy_mnt_ns+0xa30/0xa30 [ 253.981052] ? copy_mount_options+0x1fa/0x2f0 [ 253.985552] ? copy_mnt_ns+0xa30/0xa30 [ 253.989474] SyS_mount+0xa8/0x120 [ 253.992923] ? copy_mnt_ns+0xa30/0xa30 [ 253.996817] do_syscall_64+0x1d5/0x640 [ 254.000711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.005924] RIP: 0033:0x4665f9 [ 254.009115] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.017283] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 254.024594] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 254.031886] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 254.039951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.047245] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 254.054547] CPU: 0 PID: 15943 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 254.062452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.071901] Call Trace: 00:38:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000100)={r1, 0x1ff, 0xffff, 0x8}) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x3, 0x4, {0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x32) [ 254.074949] dump_stack+0x1b2/0x281 [ 254.078588] should_fail.cold+0x10a/0x149 [ 254.083242] should_failslab+0xd6/0x130 [ 254.088847] kmem_cache_alloc_trace+0x29a/0x3d0 [ 254.093640] p9_fid_create+0x47/0x3a0 [ 254.097314] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.097474] p9_client_attach+0x6d/0x750 [ 254.097487] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 254.097500] ? v9fs_session_init+0xad1/0x1540 [ 254.097518] ? trace_hardirqs_on_caller+0x3a8/0x580 00:38:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x110) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(0xffffffffffffffff, 0x16, 0x2, 0x100000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 254.107136] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.108458] v9fs_session_init+0xc03/0x1540 [ 254.108480] ? v9fs_show_options+0x6b0/0x6b0 [ 254.108499] ? v9fs_mount+0x54/0x860 [ 254.142579] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.143549] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 254.143565] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 254.143586] v9fs_mount+0x73/0x860 [ 254.153186] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.154878] ? alloc_pages_current+0x15d/0x260 [ 254.154891] ? __lockdep_init_map+0x100/0x560 [ 254.154902] mount_fs+0x92/0x2a0 [ 254.154920] vfs_kern_mount.part.0+0x5b/0x470 [ 254.186633] do_mount+0xe53/0x2a00 [ 254.188780] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.190216] ? do_raw_spin_unlock+0x164/0x220 [ 254.190234] ? copy_mount_string+0x40/0x40 [ 254.190248] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 254.190261] ? copy_mnt_ns+0xa30/0xa30 [ 254.199698] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.200998] ? copy_mount_options+0x1fa/0x2f0 [ 254.201007] ? copy_mnt_ns+0xa30/0xa30 [ 254.201018] SyS_mount+0xa8/0x120 [ 254.201028] ? copy_mnt_ns+0xa30/0xa30 [ 254.201041] do_syscall_64+0x1d5/0x640 [ 254.201069] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.245109] RIP: 0033:0x4665f9 [ 254.248298] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.256013] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 254.263308] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 254.270584] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 254.277924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.285183] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 254.313200] device ipvlan1 left promiscuous mode [ 254.346987] device ipvlan1 entered promiscuous mode 00:38:45 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000100)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x0, 0x9, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:45 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e23, 0x6a1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xcd8}, {0xa, 0x4e20, 0x80000000, @empty, 0xdee}, 0xff, [0x2, 0x1ff, 0x4, 0xadf9, 0xfffffffa, 0x0, 0x7, 0x2]}, 0x5c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:45 executing program 2 (fault-call:3 fault-nth:28): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:45 executing program 4 (fault-call:3 fault-nth:22): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 254.386369] device ipvlan1 left promiscuous mode [ 254.435798] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.451771] device ipvlan1 entered promiscuous mode [ 254.457895] FAULT_INJECTION: forcing a failure. [ 254.457895] name failslab, interval 1, probability 0, space 0, times 0 [ 254.467332] FAULT_INJECTION: forcing a failure. [ 254.467332] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.469302] CPU: 0 PID: 15991 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 254.488990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.498363] Call Trace: [ 254.500981] dump_stack+0x1b2/0x281 [ 254.504639] should_fail.cold+0x10a/0x149 [ 254.508985] should_failslab+0xd6/0x130 [ 254.512978] kmem_cache_alloc+0x40/0x3c0 [ 254.517080] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 254.522710] radix_tree_extend+0x158/0x3e0 [ 254.526940] idr_get_free_cmn+0x650/0x8d0 [ 254.531085] idr_alloc_cmn+0xe8/0x1e0 [ 254.535019] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 254.539867] ? lock_acquire+0x170/0x3f0 [ 254.543860] p9_idpool_get+0x80/0xf0 [ 254.547579] ? p9_idpool_destroy+0x20/0x20 [ 254.551815] ? __lock_acquire+0x5fc/0x3f20 [ 254.556055] p9_client_prepare_req.part.0+0x65/0xb60 [ 254.561178] ? trace_hardirqs_on+0x10/0x10 [ 254.566473] ? idr_get_free_cmn+0x562/0x8d0 [ 254.570795] p9_client_rpc+0x170/0x1520 [ 254.574771] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 254.580147] ? lock_acquire+0x170/0x3f0 [ 254.584127] ? lock_downgrade+0x740/0x740 [ 254.588276] ? lock_acquire+0x170/0x3f0 [ 254.592248] ? lock_downgrade+0x740/0x740 [ 254.596415] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 254.604751] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 254.609797] p9_client_attach+0x137/0x750 [ 254.614018] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 254.619584] ? v9fs_session_init+0xad1/0x1540 [ 254.625313] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 254.630337] v9fs_session_init+0xc03/0x1540 [ 254.634711] ? v9fs_show_options+0x6b0/0x6b0 [ 254.639144] ? v9fs_mount+0x54/0x860 [ 254.642883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 254.647904] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 254.652749] v9fs_mount+0x73/0x860 [ 254.656370] ? alloc_pages_current+0x15d/0x260 [ 254.660965] ? __lockdep_init_map+0x100/0x560 [ 254.665978] mount_fs+0x92/0x2a0 [ 254.669634] vfs_kern_mount.part.0+0x5b/0x470 [ 254.674211] do_mount+0xe53/0x2a00 [ 254.677751] ? copy_mount_string+0x40/0x40 [ 254.681997] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 254.687023] ? copy_mnt_ns+0xa30/0xa30 [ 254.690933] ? copy_mount_options+0x1fa/0x2f0 [ 254.695420] ? copy_mnt_ns+0xa30/0xa30 [ 254.699302] SyS_mount+0xa8/0x120 [ 254.702749] ? copy_mnt_ns+0xa30/0xa30 [ 254.706638] do_syscall_64+0x1d5/0x640 [ 254.710621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.715805] RIP: 0033:0x4665f9 [ 254.718991] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.726717] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 254.733999] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 254.741390] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 254.748657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.755930] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 254.763578] CPU: 1 PID: 15996 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 254.771480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.772371] xt_addrtype: ipv6 does not support BROADCAST matching [ 254.780841] Call Trace: [ 254.780869] dump_stack+0x1b2/0x281 [ 254.780885] should_fail.cold+0x10a/0x149 [ 254.780895] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.780909] __alloc_pages_nodemask+0x22c/0x2720 [ 254.780921] ? depot_save_stack+0x10d/0x3f0 [ 254.780935] ? kasan_kmalloc+0xeb/0x160 [ 254.780943] ? __kmalloc+0x15a/0x400 [ 254.780951] ? p9_fcall_alloc+0x19/0x90 [ 254.780958] ? p9_client_prepare_req.part.0+0x86c/0xb60 [ 254.780964] ? p9_client_rpc+0x170/0x1520 [ 254.780970] ? p9_client_create+0x92f/0x12c0 [ 254.780982] ? v9fs_session_init+0x1c5/0x1540 [ 254.780994] ? v9fs_mount+0x73/0x860 [ 254.846075] ? mount_fs+0x92/0x2a0 [ 254.849630] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 254.854500] ? do_syscall_64+0x1d5/0x640 [ 254.858561] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.863932] ? do_syscall_64+0x1d5/0x640 [ 254.868006] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.873422] ? trace_hardirqs_on+0x10/0x10 [ 254.877687] cache_grow_begin+0x91/0x700 [ 254.881852] ? check_preemption_disabled+0x35/0x240 [ 254.886932] cache_alloc_refill+0x273/0x350 [ 254.891290] __kmalloc+0x378/0x400 [ 254.895181] ? p9_fcall_alloc+0x19/0x90 [ 254.899166] p9_fcall_alloc+0x19/0x90 [ 254.902980] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 254.908322] p9_client_rpc+0x170/0x1520 [ 254.912695] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 254.918337] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 254.923715] ? p9_pollwait+0x18e/0x1f0 [ 254.927729] ? p9_conn_create+0x4b0/0x4b0 [ 254.931918] ? pipe_poll+0x24f/0x2c0 [ 254.935641] ? p9_fd_poll+0x237/0x2e0 [ 254.939453] ? p9_conn_create+0x3aa/0x4b0 [ 254.943621] ? p9_fd_create+0x293/0x3b0 [ 254.947608] ? p9_fd_create_tcp+0x440/0x440 [ 254.951940] p9_client_create+0x92f/0x12c0 [ 254.956217] ? p9_client_flush+0x4c0/0x4c0 [ 254.960469] ? __lockdep_init_map+0x100/0x560 [ 254.964995] ? __raw_spin_lock_init+0x28/0x100 [ 254.969595] v9fs_session_init+0x1c5/0x1540 [ 254.973935] ? pcpu_alloc+0xbe0/0xf50 [ 254.977755] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 254.982610] ? v9fs_show_options+0x6b0/0x6b0 00:38:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:45 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 254.987033] ? v9fs_mount+0x54/0x860 [ 254.990759] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 254.996230] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 255.001363] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 255.006316] v9fs_mount+0x73/0x860 [ 255.009877] ? alloc_pages_current+0x15d/0x260 [ 255.014495] ? __lockdep_init_map+0x100/0x560 [ 255.021298] mount_fs+0x92/0x2a0 [ 255.024685] vfs_kern_mount.part.0+0x5b/0x470 [ 255.029201] do_mount+0xe53/0x2a00 [ 255.032887] ? copy_mount_string+0x40/0x40 [ 255.037148] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 255.042186] ? copy_mnt_ns+0xa30/0xa30 [ 255.046117] ? copy_mount_options+0x1fa/0x2f0 [ 255.050626] ? copy_mnt_ns+0xa30/0xa30 [ 255.054535] SyS_mount+0xa8/0x120 [ 255.058035] ? copy_mnt_ns+0xa30/0xa30 [ 255.061942] do_syscall_64+0x1d5/0x640 [ 255.065861] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 255.071068] RIP: 0033:0x4665f9 [ 255.074272] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.082027] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 255.089398] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 255.098878] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 255.106429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.113807] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 255.202887] device ipvlan1 left promiscuous mode 00:38:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000040)) 00:38:46 executing program 2 (fault-call:3 fault-nth:29): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:46 executing program 4 (fault-call:3 fault-nth:23): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:46 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4000010, r3, 0x4000) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, 0x10000, 0x800) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001840)={r2, 0x1, 0x6}, 0x10) preadv(r3, &(0x7f0000001700)=[{&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000000300)=""/22, 0x16}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/146, 0x92}, {&(0x7f00000016c0)=""/39, 0x27}], 0x9, 0x7ff, 0x6ad) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) syz_mount_image$ufs(&(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x6, 0x7, &(0x7f0000001ec0)=[{&(0x7f0000001980)="250887456c0597e82b5fd61eb91030edc03d04e9aaffadcde1a6b34eda9dcf36eca7bdd2c4227c6a90f5c5511e109e75049402132a3242f3237a4678fb157f7aad7e25474909e2dd8ceb1db8111a0281ad941305fc4777bd843a8a2984a879ee0a2a2abbf3e5b72d07431dfb4a94e81676ffa9a1a66f996647fe096871dde1d698b1037721b18b18d162a2203b1001bb1a24f8cf90fcff48e81953a1b069223fe8bd8ce0130c791857ba6ae83a00f1eec78c5bea35f50d3ce6ad8721b7f821ea356d61ee06a185793afd642a4831c358", 0xd0, 0x8}, {&(0x7f0000001a80)="3a3e3e4af7936c214fcd13871064d666455686783b1fffb48d4583393a667b3b9e902983a79d0fea3baf7c6483aa9064962bcbf5b452b8f005f7b46a1ee3363db6c05b718d87b4ed149e554587dfd2bef191dd931d7fedf7a2e1288ee080d64ca503fec4cb6d444e9153d41cb9cca176060c09e7c11e2fb4533193919d5c03b7b54796721a135c349a42daeef0c1991803f8777486a3900a8c2a31ec8e024a94c153af28a1bf0ca5391dc630411b67fc4177a974b6f16ed3dfb4559e639c3997b7", 0xc1, 0x7}, {&(0x7f0000001b80)="b7a16e94116adaa95f91431d75e71893fa355b502464742acf02d1cd666e275d2091ac00b39ed945bea5116a256ff72ead948cb533a34445c33f5e54cdc1c3e6a034ae2e3ab9bca490034e1798e1f2429cb11135befb6bbdc9ebd018259b1ad4b2b3286338733a7f17ede8f71a9f3a18e891e0d01f747f4e49fac8cfea82673c770f855d7b2d57c9624484cf3e9b913adcff75d7c19979aef39e5b12eaa0ba21541ad61c49ad1e1a3fc5a0581d7494554cf50549ccdbec78fa86f3d924aa6cffda5bb8d9fea3f4ebe2141db52b2a434a", 0xd0, 0x7f}, {&(0x7f0000001c80)="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", 0xfa, 0x7}, {&(0x7f0000001d80)="86ab3ce01858e84a1dcea36bae60f8d73dc8453c1b15a71ec3c88387fc25b7237be46e8b00efd67eebdaa6fcea646728a37f409f81c31a14ef77f9eb2434", 0x3e, 0x1f}, {&(0x7f0000001dc0)="583ba4362971e490a50ea2103128ed31cf12ee198f9ede", 0x17, 0x2}, {&(0x7f0000001e00)="905b9a507c6a0e1f79b63632656b4ad631821bfcfba0107ce63df3ea6a1fe2ae7a2070593fe899e01896d0c7cbd7e095fd6786ab6256bdf64586e751bc277b83ad9a4840c1b17273401b772f9a79a7416eb8db0b26721b06bc38e79b2cb4da03e6f50f98c114bb297f9456b9275c55ed5a9219254582a656c8aad5923c334cbd07fb8f3a8c85bd4300aa936063e730464761e59979fe73ab897d6c94662a9419", 0xa0}], 0x0, &(0x7f0000001f80)={[{'/dev/btrfs-control\x00'}, {'/dev/btrfs-control\x00'}, {'syzkaller1\x00'}, {')&@-),;(},-\xdc\xb5'}, {'/dev/net/tun\x00'}], [{@obj_user={'obj_user', 0x3d, '\x00'}}, {@appraise_type}, {@subj_type={'subj_type', 0x3d, '/'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/btrfs-control\x00'}}]}) splice(r0, &(0x7f0000001880)=0x1f, r4, &(0x7f00000018c0)=0x1c, 0xffffffffffffffff, 0xa) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x40a202, 0x0) connect$tipc(r5, &(0x7f0000001800)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x3}}, 0x10) close(r3) [ 255.324909] FAULT_INJECTION: forcing a failure. [ 255.324909] name failslab, interval 1, probability 0, space 0, times 0 [ 255.325659] xt_addrtype: ipv6 does not support BROADCAST matching [ 255.358718] FAULT_INJECTION: forcing a failure. [ 255.358718] name failslab, interval 1, probability 0, space 0, times 0 [ 255.371109] CPU: 0 PID: 16047 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 255.379026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.388939] Call Trace: [ 255.391538] dump_stack+0x1b2/0x281 [ 255.395377] should_fail.cold+0x10a/0x149 [ 255.399535] should_failslab+0xd6/0x130 [ 255.403523] kmem_cache_alloc+0x40/0x3c0 [ 255.407591] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 255.413226] radix_tree_extend+0x158/0x3e0 [ 255.417465] idr_get_free_cmn+0x650/0x8d0 [ 255.421619] idr_alloc_cmn+0xe8/0x1e0 [ 255.425431] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 255.430278] ? lock_acquire+0x170/0x3f0 [ 255.434266] p9_idpool_get+0x80/0xf0 [ 255.437988] ? p9_idpool_destroy+0x20/0x20 [ 255.442226] ? __lock_acquire+0x5fc/0x3f20 [ 255.446469] p9_client_prepare_req.part.0+0x65/0xb60 [ 255.451704] ? trace_hardirqs_on+0x10/0x10 [ 255.455961] ? idr_get_free_cmn+0x562/0x8d0 [ 255.460310] p9_client_rpc+0x170/0x1520 [ 255.464300] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 255.469772] ? lock_acquire+0x170/0x3f0 [ 255.473767] ? lock_downgrade+0x740/0x740 [ 255.478030] ? lock_acquire+0x170/0x3f0 [ 255.482203] ? lock_downgrade+0x740/0x740 [ 255.486365] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 255.491773] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 255.497197] p9_client_attach+0x137/0x750 [ 255.501588] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 255.507173] ? v9fs_session_init+0xad1/0x1540 [ 255.511691] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 255.516729] v9fs_session_init+0xc03/0x1540 [ 255.521073] ? v9fs_show_options+0x6b0/0x6b0 [ 255.527085] ? v9fs_mount+0x54/0x860 [ 255.530984] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 255.536017] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 255.540898] v9fs_mount+0x73/0x860 [ 255.544465] ? alloc_pages_current+0x15d/0x260 [ 255.549153] ? __lockdep_init_map+0x100/0x560 [ 255.553682] mount_fs+0x92/0x2a0 [ 255.557078] vfs_kern_mount.part.0+0x5b/0x470 [ 255.561597] do_mount+0xe53/0x2a00 [ 255.565160] ? copy_mount_string+0x40/0x40 [ 255.569527] ? rcu_read_lock_sched_held+0x16c/0x1d0 00:38:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x92280, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x52b9e000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 255.574595] ? copy_mnt_ns+0xa30/0xa30 [ 255.578506] ? copy_mount_options+0x1fa/0x2f0 [ 255.583017] ? copy_mnt_ns+0xa30/0xa30 [ 255.586925] SyS_mount+0xa8/0x120 [ 255.590401] ? copy_mnt_ns+0xa30/0xa30 [ 255.590586] xt_addrtype: ipv6 does not support BROADCAST matching [ 255.594316] do_syscall_64+0x1d5/0x640 [ 255.594336] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 255.594345] RIP: 0033:0x4665f9 [ 255.594349] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.620620] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 255.627891] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 255.635177] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 255.642545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.649180] xt_addrtype: ipv6 does not support BROADCAST matching [ 255.650075] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 255.689766] device ipvlan1 entered promiscuous mode [ 255.695018] CPU: 0 PID: 16044 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 255.703011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.712375] Call Trace: [ 255.713692] ufs: ufs was compiled with read-only support, can't be mounted as read-write [ 255.714981] dump_stack+0x1b2/0x281 [ 255.714998] should_fail.cold+0x10a/0x149 [ 255.733770] should_failslab+0xd6/0x130 [ 255.737762] __kmalloc+0x2c1/0x400 [ 255.741310] ? p9_fcall_alloc+0x19/0x90 [ 255.746542] p9_fcall_alloc+0x19/0x90 [ 255.750368] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 255.755588] p9_client_rpc+0x170/0x1520 [ 255.759589] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 255.764632] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 255.770622] ? p9_pollwait+0x18e/0x1f0 [ 255.774528] ? p9_conn_create+0x4b0/0x4b0 [ 255.778695] ? pipe_poll+0x24f/0x2c0 [ 255.782419] ? p9_fd_poll+0x237/0x2e0 [ 255.786234] ? p9_conn_create+0x3aa/0x4b0 [ 255.790404] ? p9_fd_create+0x293/0x3b0 [ 255.794395] ? p9_fd_create_tcp+0x440/0x440 [ 255.799085] p9_client_create+0x92f/0x12c0 [ 255.803431] ? p9_client_flush+0x4c0/0x4c0 [ 255.807686] ? __lockdep_init_map+0x100/0x560 [ 255.812198] ? __raw_spin_lock_init+0x28/0x100 [ 255.816930] v9fs_session_init+0x1c5/0x1540 [ 255.821276] ? pcpu_alloc+0xbe0/0xf50 [ 255.825105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 255.829990] ? v9fs_show_options+0x6b0/0x6b0 [ 255.834763] ? v9fs_mount+0x54/0x860 [ 255.838614] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 255.844098] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 255.849228] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 255.854402] v9fs_mount+0x73/0x860 [ 255.857949] ? alloc_pages_current+0x15d/0x260 [ 255.862530] ? __lockdep_init_map+0x100/0x560 [ 255.867111] mount_fs+0x92/0x2a0 [ 255.870498] vfs_kern_mount.part.0+0x5b/0x470 [ 255.875049] do_mount+0xe53/0x2a00 [ 255.878667] ? copy_mount_string+0x40/0x40 [ 255.882905] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 255.887962] ? copy_mnt_ns+0xa30/0xa30 [ 255.891848] ? copy_mount_options+0x1fa/0x2f0 [ 255.896338] ? copy_mnt_ns+0xa30/0xa30 [ 255.900226] SyS_mount+0xa8/0x120 [ 255.903693] ? copy_mnt_ns+0xa30/0xa30 [ 255.907589] do_syscall_64+0x1d5/0x640 [ 255.911792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 255.917005] RIP: 0033:0x4665f9 [ 255.920198] RSP: 002b:00007f8ae10b9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.928086] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 00:38:46 executing program 2 (fault-call:3 fault-nth:30): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 255.935366] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 255.943586] RBP: 00007f8ae10b91d0 R08: 00000000200002c0 R09: 0000000000000000 [ 255.951020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.958290] R13: 00007ffc7b63a66f R14: 00007f8ae10b9300 R15: 0000000000022000 [ 255.967139] 9pnet: Couldn't grow tag array 00:38:47 executing program 4 (fault-call:3 fault-nth:24): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 256.044807] FAULT_INJECTION: forcing a failure. [ 256.044807] name failslab, interval 1, probability 0, space 0, times 0 [ 256.056445] device ipvlan1 left promiscuous mode [ 256.066402] CPU: 1 PID: 16093 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 256.074338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.083714] Call Trace: [ 256.086316] dump_stack+0x1b2/0x281 [ 256.090146] should_fail.cold+0x10a/0x149 [ 256.095097] should_failslab+0xd6/0x130 [ 256.097807] device ipvlan1 entered promiscuous mode [ 256.099175] kmem_cache_alloc_trace+0x29a/0x3d0 [ 256.099194] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 256.114449] p9_client_rpc+0x170/0x1520 [ 256.118474] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 256.123874] ? lock_acquire+0x170/0x3f0 [ 256.127874] ? lock_downgrade+0x740/0x740 [ 256.129114] ufs: ufs was compiled with read-only support, can't be mounted as read-write [ 256.132034] ? lock_acquire+0x170/0x3f0 [ 256.132045] ? lock_downgrade+0x740/0x740 [ 256.132058] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 256.132068] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 256.132083] p9_client_attach+0x137/0x750 [ 256.132094] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 256.132106] ? v9fs_session_init+0xad1/0x1540 [ 256.132116] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 256.132126] v9fs_session_init+0xc03/0x1540 [ 256.132148] ? v9fs_show_options+0x6b0/0x6b0 [ 256.188009] ? v9fs_mount+0x54/0x860 [ 256.191764] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 256.196804] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 256.201672] v9fs_mount+0x73/0x860 [ 256.205240] ? alloc_pages_current+0x15d/0x260 [ 256.209855] ? __lockdep_init_map+0x100/0x560 [ 256.214367] mount_fs+0x92/0x2a0 [ 256.219217] vfs_kern_mount.part.0+0x5b/0x470 [ 256.223773] do_mount+0xe53/0x2a00 [ 256.227395] ? copy_mount_string+0x40/0x40 [ 256.232219] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 256.237689] ? copy_mnt_ns+0xa30/0xa30 [ 256.241607] ? copy_mount_options+0x1fa/0x2f0 [ 256.246292] ? copy_mnt_ns+0xa30/0xa30 [ 256.250181] SyS_mount+0xa8/0x120 [ 256.253671] ? copy_mnt_ns+0xa30/0xa30 [ 256.260904] do_syscall_64+0x1d5/0x640 [ 256.264845] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 256.270055] RIP: 0033:0x4665f9 [ 256.273436] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.281178] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 256.288541] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 256.295823] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 256.303098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.310394] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 256.334772] 9pnet: Couldn't grow tag array 00:38:47 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FIOCLEX(r4, 0x5451) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) 00:38:47 executing program 2 (fault-call:3 fault-nth:31): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:47 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newnexthop={0x44, 0x68, 0x200, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x20}, [@NHA_GROUP_TYPE={0x6}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x2}}, @NHA_GATEWAY={0x14, 0x6, @ip4=@rand_addr=0x64010102}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8051) r1 = dup(r0) write$P9_RSETATTR(r0, &(0x7f0000000240)={0x7, 0x1b, 0x1}, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x440, 0x0) syz_mount_image$ocfs2(&(0x7f0000000240), 0x0, 0x7, 0x3, &(0x7f0000001740)=[{&(0x7f0000000480)="b12f9a9d94df6b8cd70e64037975b485ee97a21f1da452bff5d7d043fa0a6a8f2f81aa4b0e28dd96bf4dc076d238341f297d7b31de85702d213a4ac327304f590f2aba6b95682534f5bfafabe8ae6f66ad5d6b73830e6297a7a8e8d356ed3500da51b280d1f2ac1e95dea9bac2f26d4cab422be65111", 0x76, 0xd8e}, {&(0x7f0000000580)="247567a3bc630d7608a1fefbb6504f0a6cfc50f504a73dc6942d93d7cb3ad28795ef679d1aad0c0e4ca955dd854549862f882e64c7bf85b581b7582a7402e545cc0d3b75a7d0ce076481b8defcf9c5937790eff5f034481baa5ae4f19cf7a09f2cd7a579c1b99fd1e2eb6fe9fad0835f1dc751d66a63ddbb93a090d28832621c960abb81c94a1293eaec3cd6910fc26c8d7f9cbc1f18fc7c7d9febb9170ddbb1be0a926c2c2602372e1c1367a1792f1dc8a1398bbaebcc6c311d528282c5c501fa618d160b970936fd71221df5a8e086012da3dace27c8b25706", 0xda, 0x1f}, {&(0x7f0000000680)="16782025c1403cecd24404f6d02d6bca729247a99795f1c65b87dfc391ec5370a2be50c6bc082e60da4e36171f37b03cada8cc174f5c67ee0ee6fbfc034fe2d25a2d975fc83016369c1973925474bbb980a3790d1e9f01d52058daf2cbd37cfaa8018357e38b4157d067834051deec77bd6556c9530b248c12e9a19d89be7723b58cfa4762ebf5", 0x87}], 0x4c080, &(0x7f00000002c0)={[{'/dev/ubi_ctrl\x00'}], [{@obj_user={'obj_user', 0x3d, '}1%\'\\-.-'}}]}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000500), 0xa401, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x47, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="14ba4fdec098a67dc3bf8f03f1a48a01638c8b8e5cf0d1c9ad3a8217b22238c1d126", @ANYRESDEC=r5, @ANYBLOB="1d43fddd59670a5f12614e201c4e9271821a4c06bc4471d3457f115d91bb35"], 0x0, 0x4, 0xaa, &(0x7f0000000040)=""/170, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x1}, 0x10}, 0x78) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x800049, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_client}], [{@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel}, {@appraise}, {@euid_lt={'euid<', r5}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 256.363450] device ipvlan1 left promiscuous mode 00:38:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 256.444722] FAULT_INJECTION: forcing a failure. [ 256.444722] name failslab, interval 1, probability 0, space 0, times 0 [ 256.460726] xt_addrtype: ipv6 does not support BROADCAST matching [ 256.492061] device ipvlan1 entered promiscuous mode [ 256.492085] xt_addrtype: ipv6 does not support BROADCAST matching [ 256.513199] CPU: 1 PID: 16123 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 256.521128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.530488] Call Trace: [ 256.533120] dump_stack+0x1b2/0x281 [ 256.536757] should_fail.cold+0x10a/0x149 [ 256.540914] should_failslab+0xd6/0x130 [ 256.544895] __kmalloc+0x2c1/0x400 [ 256.548449] ? p9_fcall_alloc+0x19/0x90 [ 256.552413] ? __lockdep_init_map+0x100/0x560 [ 256.561019] p9_fcall_alloc+0x19/0x90 [ 256.565033] p9_client_prepare_req.part.0+0x86c/0xb60 [ 256.570240] p9_client_rpc+0x170/0x1520 [ 256.574226] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 256.579613] ? lock_acquire+0x170/0x3f0 [ 256.583610] ? lock_downgrade+0x740/0x740 [ 256.587775] ? lock_acquire+0x170/0x3f0 [ 256.592585] ? lock_downgrade+0x740/0x740 [ 256.596748] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 256.601864] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 256.606893] p9_client_attach+0x137/0x750 [ 256.611147] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 256.616701] ? v9fs_session_init+0xad1/0x1540 [ 256.621214] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 256.626764] v9fs_session_init+0xc03/0x1540 [ 256.631114] ? v9fs_show_options+0x6b0/0x6b0 [ 256.635573] ? v9fs_mount+0x54/0x860 [ 256.639305] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 256.644330] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 256.649188] v9fs_mount+0x73/0x860 [ 256.652751] ? alloc_pages_current+0x15d/0x260 [ 256.657353] ? __lockdep_init_map+0x100/0x560 [ 256.662223] mount_fs+0x92/0x2a0 [ 256.665620] vfs_kern_mount.part.0+0x5b/0x470 [ 256.670123] do_mount+0xe53/0x2a00 [ 256.673686] ? copy_mount_string+0x40/0x40 [ 256.677923] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 256.682951] ? copy_mnt_ns+0xa30/0xa30 [ 256.686846] ? copy_mount_options+0x1fa/0x2f0 [ 256.691480] ? copy_mnt_ns+0xa30/0xa30 [ 256.695382] SyS_mount+0xa8/0x120 [ 256.698824] ? copy_mnt_ns+0xa30/0xa30 [ 256.702733] do_syscall_64+0x1d5/0x640 [ 256.706636] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 256.711912] RIP: 0033:0x4665f9 [ 256.715092] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.722987] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 256.730263] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 00:38:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:47 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0xda0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 256.737625] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 256.744887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.752162] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 256.782350] print_req_error: I/O error, dev loop4, sector 0 [ 256.788078] 9pnet: Couldn't grow tag array 00:38:47 executing program 2 (fault-call:3 fault-nth:32): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 256.831867] device ipvlan1 left promiscuous mode [ 256.832278] xt_addrtype: ipv6 does not support BROADCAST matching [ 256.861960] device ipvlan1 entered promiscuous mode [ 256.906789] FAULT_INJECTION: forcing a failure. [ 256.906789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.918772] CPU: 0 PID: 16153 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 256.926674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.936059] Call Trace: [ 256.938669] dump_stack+0x1b2/0x281 [ 256.942307] should_fail.cold+0x10a/0x149 [ 256.946640] __alloc_pages_nodemask+0x22c/0x2720 [ 256.951437] ? depot_save_stack+0x10d/0x3f0 [ 256.955765] ? kasan_kmalloc+0x139/0x160 [ 256.958107] xt_addrtype: ipv6 does not support BROADCAST matching [ 256.959850] ? kasan_kmalloc+0xeb/0x160 [ 256.959863] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 256.959874] ? p9_client_prepare_req.part.0+0x8ce/0xb60 [ 256.959881] ? p9_client_rpc+0x170/0x1520 [ 256.959890] ? p9_client_attach+0x137/0x750 [ 256.959905] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 256.993813] ? vfs_kern_mount.part.0+0x5b/0x470 [ 256.998489] ? do_mount+0xe53/0x2a00 [ 257.002241] ? SyS_mount+0xa8/0x120 [ 257.005872] ? do_syscall_64+0x1d5/0x640 [ 257.009941] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 257.015328] ? node_tag_clear+0x6c/0x170 [ 257.019403] cache_grow_begin+0x91/0x700 [ 257.023584] ? check_preemption_disabled+0x35/0x240 [ 257.028642] cache_alloc_refill+0x273/0x350 [ 257.033099] __kmalloc+0x378/0x400 [ 257.036764] ? p9_fcall_alloc+0x19/0x90 [ 257.040759] p9_fcall_alloc+0x19/0x90 [ 257.044575] p9_client_prepare_req.part.0+0x86c/0xb60 [ 257.049773] p9_client_rpc+0x170/0x1520 [ 257.053884] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 257.059307] ? lock_acquire+0x170/0x3f0 [ 257.063290] ? lock_downgrade+0x740/0x740 [ 257.067692] ? lock_acquire+0x170/0x3f0 [ 257.071667] ? lock_downgrade+0x740/0x740 [ 257.075857] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 257.081336] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 257.086358] p9_client_attach+0x137/0x750 [ 257.090978] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 257.096544] ? v9fs_session_init+0xad1/0x1540 [ 257.101388] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 257.106679] v9fs_session_init+0xc03/0x1540 [ 257.111865] ? v9fs_show_options+0x6b0/0x6b0 [ 257.116747] ? v9fs_mount+0x54/0x860 [ 257.120565] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 257.125592] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 257.130468] v9fs_mount+0x73/0x860 [ 257.134028] ? alloc_pages_current+0x15d/0x260 [ 257.138616] ? __lockdep_init_map+0x100/0x560 [ 257.143101] mount_fs+0x92/0x2a0 [ 257.146484] vfs_kern_mount.part.0+0x5b/0x470 [ 257.151128] do_mount+0xe53/0x2a00 [ 257.154676] ? copy_mount_string+0x40/0x40 [ 257.159022] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 257.164035] ? copy_mnt_ns+0xa30/0xa30 [ 257.167909] ? copy_mount_options+0x1fa/0x2f0 [ 257.172394] ? copy_mnt_ns+0xa30/0xa30 [ 257.176290] SyS_mount+0xa8/0x120 [ 257.179745] ? copy_mnt_ns+0xa30/0xa30 [ 257.183638] do_syscall_64+0x1d5/0x640 [ 257.187522] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 257.192701] RIP: 0033:0x4665f9 [ 257.195872] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 257.203570] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 257.210832] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 257.218197] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 257.225472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.232818] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c63000004630440030000001063084000000000000000000f630c4001000000000000000000009c19ed74b7383a15044654000563044002000000096310400300000000000000001a00000000002dc3ae10323a"], 0x8d, 0x0, &(0x7f0000000140)="47807189475b970f151499c71ab103a3fdc1d4afb294ee47423bce5bcd2f4dfe43489a6838ffdaeafcb231b52a9bcd107b9159817658024e307b4c14488212f53dedcd2a2b7797fbab17199c008d909f2f759e425e8bd24c7e6e4ce7a86befe27bbd72d71efbb002244487894b77896eb3e224b9d903f90178685fd9bb10b3b35625ea41a181e8d990da62c0cf"}) bind$bt_rfcomm(r0, &(0x7f0000000380)={0x1f, @any, 0x1}, 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x2, 0xa, &(0x7f0000001d40)=[{&(0x7f00000002c0)="8b08a5c7cd86c83504", 0x9, 0xfffffffffffffffa}, {&(0x7f0000000300)="fc02a3791d519257588c177e3403528028fc039a1908f8781f628c6f", 0x1c, 0xff}, {&(0x7f0000001f00)="6db41566346684743dc66a47931d976e25d5942e2e7b258587b46e5dc1c94f18c06294c5b03fa862ab83b38f1f277e103b2a0a3b31f52d76438a4c5d63e65cc42f49dbcc8ac40a2a6053e20b5b83c289af1d521287e74dddf9c98d6548b35c32557ed40baba5c3b9df98c75a4fb86a162a180436ab6a38ff1a432d4604ecfff88af4b76a449f95b312ca0514237480e18ddb841c1cd8c5", 0x97, 0x6}, {&(0x7f0000000400)="91f5e598543d4b69649cc692e80e09ea3164554b72c65c872b08f07bbaa62b32fd99e2e502b918ba9b376f187f99849bcfbdde", 0x33, 0x775f}, {&(0x7f0000001940)="06f73bd74ce49ec850e9e58da3dfce0451ef1eb613375def50386eef8a0c7b1602c22ddf87832ab2e7fd0da02411b5dac4d9423dbfe498224f522c0d210b6751c58f03d744d05b2d28e29b5a1e2ed13540a33d0ccfc14fc481defeba96d40b3f0436fc199eeb166c43634a0d54acd1f8cb15152c09cdad52069bedac038fe64388ca2d152d92c803b087e240f495ff45e6d032a6bb947d479af4db69a7ef37028f63a2c19c3ba7ce9c449b9c4ff35774e20d72900bcf81feebb528dc0ea9da1b29bc3b9b92907e81ddf18778ab8526477f8a8f5f2533979886e6d29d9ba07ce4", 0xe0, 0x7ff}, {&(0x7f0000000440)="b609a161f3c9ea217746451bff060000e5e4c6ae061369f65e5b2bb09d37d04a6f0db2164ef297c4b56d0c4e53dfe3433bc61a86c3c1048953e2f249d8786a2e9ca611d274f248f3840ef47f611ce8f03a3680d7d13faf", 0x57, 0x2}, {&(0x7f0000001a40)="96aee4a15ede69ffdb8688cc7d1d20b98537b3ea4022ecb4996b453658d84a8b782a9edb015e0ff15dd15b8e89311c201abfc48c4710eec5d9f0443477b87868f7cd99c4381f251b54f79d31617bb10706ca1acf755d8c03251b7bfef208505a2d87425786ed5b7e56290e74ddeba776d9c3c9badf269b51ba5b3ed2a2dae69c0cc3f5e0892ff1b5359eeb45ebb8e5a306692acf804138eb6ffadbbce4ddf93e423d4a9fb23663fbcc9c2b50c974045908588fb623e48e3acdd62170d139d25e1ede3b98f7", 0xc5, 0x6}, {&(0x7f0000001b40)="c5abcf8b2a8adc6689766ef92940e048c57b97791284eb5f87967162ebdc7b3dcdb5a0630398fd7de3c3ad2b39267cfa7ecdf2f44f3a7308aec7a1a66fe184e3787f8f8d7645e81d84806d4a05d2c1601861bce8096e1d418d20f0f106888afc4a98558f363adcb1998e650dd926f320fe3b150c5bce0717cc65b159c6c98a", 0x7f, 0x9}, {&(0x7f0000001bc0)="faa7e6448677e0e4fa757532d6df2fe96575eda42fc144c85887ceb45814dc0c86fcee5bf99a828d262712c90214ba3c0ed60f8bf8931dd0706adb708739a2a7b0a1e31816343d00cc00", 0x4a, 0xffffffff}, {&(0x7f0000001c40)="15417ed13f2c8278795a40d93718b447a16e658a303fecec051cd3f64cf32c06173b031cdb49b17ca1bbd14ad40717a7a06ccf45f2dacc12552a50681c1154120e9c1178b3cf3f6df8122ffff85688fb28125523267cd63df0128ebab9a19fded78d984db16dc11672a8329a341f3ab7b4dacc570c19552ee78d41a4c4387fe13aee799958b2a4a45428d76ecc2f21cae103e33adf00f42be735470c50a3e281ea1bcda555bce72b5043dba6d9567c86be440b7fb14c458de021e74a9beb5985504361", 0xc3, 0xfff}], 0x8, &(0x7f00000020c0)=ANY=[@ANYBLOB="6e6f646f74732c6e6f646f74732c6e6f646fe227e0ca74732c636f6e746578743d73797374656d5f752c6f626a5f757365723d2a252c6d61736b3d4d41595f57524954452c6170707261697365454354002c0fe3d3415a114198682c7065726d69745f646972656374696f2c66756e633d4649524d57b3ab455f434845434b2c636f6e746578743d756e636f6e66696e65645f752c00"/164]) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x646d, @default, @rose={'rose', 0x0}, 0x5, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) open(&(0x7f0000000340)='./file0\x00', 0x12000, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001fc0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x4e20, 0x91b, 0x4e21, 0x4, 0x2, 0x47b66cfdb8fed54e, 0x0, 0x2c, 0x0, 0xee01}, {0x1, 0x20, 0x101, 0x9, 0x4, 0x7, 0x2, 0x1000}, {0x3, 0x101, 0x0, 0x9}, 0x80000000, 0x6e6bb2, 0x2, 0x1, 0x674b98b9567591cd, 0x2}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in=@multicast1, 0x3500, 0x2, 0x2, 0x3, 0xfffffffc, 0xeffffffd, 0x80}}, 0xe8) [ 257.270614] device ipvlan1 left promiscuous mode 00:38:48 executing program 2 (fault-call:3 fault-nth:33): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:48 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000010) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000000)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x88, 0x10, 0x401, 0x400000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8388f3}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_OKEY={0x8, 0x5, 0x49}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfc6}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}, @IFLA_MTU={0x8, 0x4, 0x10001}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x88}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x93b, 0x20, 0x1, 0x100, 0x6, 0x10020, r5}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, 0x0, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 257.363705] xt_addrtype: ipv6 does not support BROADCAST matching [ 257.373970] FAULT_INJECTION: forcing a failure. [ 257.373970] name failslab, interval 1, probability 0, space 0, times 0 [ 257.427938] xt_addrtype: ipv6 does not support BROADCAST matching [ 257.437958] CPU: 1 PID: 16184 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 257.445875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.455252] Call Trace: [ 257.457856] dump_stack+0x1b2/0x281 [ 257.461518] should_fail.cold+0x10a/0x149 [ 257.465683] should_failslab+0xd6/0x130 [ 257.469689] __kmalloc+0x2c1/0x400 [ 257.473233] ? p9_fcall_alloc+0x19/0x90 [ 257.477211] p9_fcall_alloc+0x19/0x90 [ 257.481013] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 257.486215] p9_client_rpc+0x170/0x1520 [ 257.490197] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 257.495571] ? lock_acquire+0x170/0x3f0 [ 257.499640] ? lock_downgrade+0x740/0x740 [ 257.503815] ? lock_acquire+0x170/0x3f0 [ 257.507794] ? lock_downgrade+0x740/0x740 [ 257.511956] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 257.517091] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 257.522138] p9_client_attach+0x137/0x750 [ 257.526309] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 257.531874] ? v9fs_session_init+0xad1/0x1540 [ 257.536477] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 257.541525] v9fs_session_init+0xc03/0x1540 [ 257.545902] ? v9fs_show_options+0x6b0/0x6b0 [ 257.552774] ? v9fs_mount+0x54/0x860 [ 257.556506] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 257.562324] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 257.567214] v9fs_mount+0x73/0x860 [ 257.570869] ? alloc_pages_current+0x15d/0x260 [ 257.575455] ? __lockdep_init_map+0x100/0x560 [ 257.579956] mount_fs+0x92/0x2a0 [ 257.583371] vfs_kern_mount.part.0+0x5b/0x470 [ 257.587876] do_mount+0xe53/0x2a00 [ 257.591439] ? copy_mount_string+0x40/0x40 [ 257.595680] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 257.600708] ? copy_mnt_ns+0xa30/0xa30 [ 257.604609] ? copy_mount_options+0x1fa/0x2f0 [ 257.609986] ? copy_mnt_ns+0xa30/0xa30 [ 257.613881] SyS_mount+0xa8/0x120 [ 257.617334] ? copy_mnt_ns+0xa30/0xa30 [ 257.621226] do_syscall_64+0x1d5/0x640 00:38:48 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_mount_image$ocfs2(&(0x7f0000000240), 0x0, 0x7, 0x3, &(0x7f0000001740)=[{&(0x7f0000000480)="b12f9a9d94df6b8cd70e64037975b485ee97a21f1da452bff5d7d043fa0a6a8f2f81aa4b0e28dd96bf4dc076d238341f297d7b31de85702d213a4ac327304f590f2aba6b95682534f5bfafabe8ae6f66ad5d6b73830e6297a7a8e8d356ed3500da51b280d1f2ac1e95dea9bac2f26d4cab422be65111", 0x76, 0xd8e}, {&(0x7f0000000580)="247567a3bc630d7608a1fefbb6504f0a6cfc50f504a73dc6942d93d7cb3ad28795ef679d1aad0c0e4ca955dd854549862f882e64c7bf85b581b7582a7402e545cc0d3b75a7d0ce076481b8defcf9c5937790eff5f034481baa5ae4f19cf7a09f2cd7a579c1b99fd1e2eb6fe9fad0835f1dc751d66a63ddbb93a090d28832621c960abb81c94a1293eaec3cd6910fc26c8d7f9cbc1f18fc7c7d9febb9170ddbb1be0a926c2c2602372e1c1367a1792f1dc8a1398bbaebcc6c311d528282c5c501fa618d160b970936fd71221df5a8e086012da3dace27c8b25706", 0xda, 0x1f}, {&(0x7f0000000680)="16782025c1403cecd24404f6d02d6bca729247a99795f1c65b87dfc391ec5370a2be50c6bc082e60da4e36171f37b03cada8cc174f5c67ee0ee6fbfc034fe2d25a2d975fc83016369c1973925474bbb980a3790d1e9f01d52058daf2cbd37cfaa8018357e38b4157d067834051deec77bd6556c9530b248c12e9a19d89be7723b58cfa4762ebf5", 0x87}], 0x4c080, &(0x7f00000002c0)={[{'/dev/ubi_ctrl\x00'}], [{@obj_user={'obj_user', 0x3d, '}1%\'\\-.-'}}]}) fstat(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x47, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="14ba4fdec098a67dc3bf8f03f1a48a01638c8b8e5cf0d1c9ad3a8217b22238c1d126", @ANYRESDEC=r5, @ANYBLOB="1d43fddd59670a5f12614e201c4e9271821a4c06bc4471d3457f115d91bb35"], 0x0, 0x4, 0xaa, &(0x7f0000000040)=""/170, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x1}, 0x10}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0xff0f, 0x43408) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x1, 0x3, 0x6, 0x5, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @exit, @generic={0x8, 0x2, 0x6, 0x2, 0x8}, @exit, @alu={0xc, 0x0, 0x4, 0x9, 0x4, 0x100, 0xfffffffffffffffc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0xd5, &(0x7f0000000900)=""/213, 0x41100, 0x8, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xd, 0x9, 0x807}, 0x10, 0x0, r6}, 0xd042658642b02e8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x7, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x57c}, [@call={0x85, 0x0, 0x0, 0x9a}, @ldst={0x3, 0x0, 0x2, 0xa, 0x8, 0x20, 0x1}, @map_val={0x18, 0xa9d5aa4199d9abe0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000001}]}, &(0x7f0000000500)='GPL\x00', 0x9, 0x7a, &(0x7f0000000740)=""/122, 0x40f00, 0x10, '\x00', 0x0, 0x19, r3, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xb, 0x6, 0x8}, 0x10}, 0x78) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1000000, &(0x7f0000000280)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x71}}, {@afid={'afid', 0x3d, 0x7}}, {@cache_mmap}, {@nodevmap}, {@posixacl}, {@access_any}, {@cachetag={'cachetag', 0x3d, '`'}}, {@cachetag={'cachetag', 0x3d, '#\x00'}}, {@cachetag={'cachetag', 0x3d, '#-^'}}, {@cache_loose}], [{@subj_type={'subj_type', 0x3d, 'ipvlan1\x00'}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r5}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) getsockname$packet(r1, &(0x7f0000000140), &(0x7f0000000180)=0x14) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2dc000, 0x0) 00:38:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000080)=""/28, 0x1c}], 0x2, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4, 0x200, 0xfffffffb], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x101}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcaf0}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000850) socket$inet6_udp(0xa, 0x2, 0x0) [ 257.625125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 257.630312] RIP: 0033:0x4665f9 [ 257.633497] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 257.641207] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 257.648502] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 257.655776] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 257.663051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.670326] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 257.695316] 9pnet: Couldn't grow tag array 00:38:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:48 executing program 2 (fault-call:3 fault-nth:34): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 257.726382] device ipvlan1 entered promiscuous mode 00:38:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 257.795291] FAULT_INJECTION: forcing a failure. [ 257.795291] name failslab, interval 1, probability 0, space 0, times 0 00:38:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, 0x0) [ 257.835709] device ipvlan1 left promiscuous mode [ 257.842643] CPU: 0 PID: 16226 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 257.850561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.860457] Call Trace: [ 257.863147] dump_stack+0x1b2/0x281 [ 257.866798] should_fail.cold+0x10a/0x149 [ 257.870985] should_failslab+0xd6/0x130 [ 257.874980] __kmalloc+0x2c1/0x400 [ 257.878554] ? p9_fcall_alloc+0x19/0x90 [ 257.882561] p9_fcall_alloc+0x19/0x90 [ 257.886385] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 257.891600] p9_client_rpc+0x170/0x1520 [ 257.895596] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 257.901232] ? lock_acquire+0x170/0x3f0 [ 257.905217] ? lock_downgrade+0x740/0x740 [ 257.909581] ? lock_acquire+0x170/0x3f0 [ 257.913580] ? lock_downgrade+0x740/0x740 [ 257.917764] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 257.923002] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 257.928038] p9_client_attach+0x137/0x750 [ 257.932246] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 257.937906] ? v9fs_session_init+0xad1/0x1540 [ 257.942431] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 257.947470] v9fs_session_init+0xc03/0x1540 [ 257.951809] ? v9fs_show_options+0x6b0/0x6b0 [ 257.956228] ? v9fs_mount+0x54/0x860 [ 257.959952] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 257.965035] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 257.969904] v9fs_mount+0x73/0x860 [ 257.973453] ? alloc_pages_current+0x15d/0x260 [ 257.978123] ? __lockdep_init_map+0x100/0x560 [ 257.982752] mount_fs+0x92/0x2a0 [ 257.986125] vfs_kern_mount.part.0+0x5b/0x470 [ 257.990636] do_mount+0xe53/0x2a00 [ 257.994194] ? do_raw_spin_unlock+0x164/0x220 [ 257.998711] ? copy_mount_string+0x40/0x40 [ 258.002955] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 258.008010] ? copy_mnt_ns+0xa30/0xa30 [ 258.011899] ? copy_mount_options+0x1fa/0x2f0 [ 258.016564] ? copy_mnt_ns+0xa30/0xa30 [ 258.020453] SyS_mount+0xa8/0x120 [ 258.023905] ? copy_mnt_ns+0xa30/0xa30 [ 258.027795] do_syscall_64+0x1d5/0x640 00:38:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) accept4(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x80, 0x56f266be124a49a7) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000180)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 258.031683] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 258.037145] RIP: 0033:0x4665f9 [ 258.040349] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.048067] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 258.055360] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 258.062633] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 258.069919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.077206] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 258.117307] 9pnet: Couldn't grow tag array [ 258.124478] device ipvlan1 entered promiscuous mode 00:38:49 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:49 executing program 2 (fault-call:3 fault-nth:35): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 258.169340] xt_addrtype: ipv6 does not support BROADCAST matching [ 258.197746] xt_addrtype: ipv6 does not support BROADCAST matching [ 258.208446] device ipvlan1 left promiscuous mode 00:38:49 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x400, 0x120) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, 0x0) 00:38:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000451000/0x1000)=nil, 0x1000, 0xc, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 258.281853] FAULT_INJECTION: forcing a failure. [ 258.281853] name failslab, interval 1, probability 0, space 0, times 0 [ 258.350015] xt_addrtype: ipv6 does not support BROADCAST matching [ 258.355050] CPU: 0 PID: 16262 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 258.364213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.372054] xt_addrtype: ipv6 does not support BROADCAST matching [ 258.373566] Call Trace: [ 258.373590] dump_stack+0x1b2/0x281 [ 258.373606] should_fail.cold+0x10a/0x149 [ 258.373621] should_failslab+0xd6/0x130 [ 258.394170] kmem_cache_alloc_trace+0x29a/0x3d0 00:38:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)={{0x0, 0x10001, 0x6, 0x1, 0x8, 0xff, 0x1, 0x4, 0x1, 0x8000, 0x0, 0x3, 0x80, 0x1, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) open(&(0x7f0000000100)='./file0\x00', 0x48a00, 0x8) [ 258.398847] ? v9fs_session_init+0xad1/0x1540 [ 258.403348] v9fs_cache_session_get_cookie+0x103/0x1c0 [ 258.408642] v9fs_session_init+0xc92/0x1540 [ 258.412999] ? v9fs_show_options+0x6b0/0x6b0 [ 258.417134] 9pnet: Insufficient options for proto=fd [ 258.417434] ? v9fs_mount+0x54/0x860 [ 258.426256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 258.431319] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 258.436180] v9fs_mount+0x73/0x860 [ 258.439146] device ipvlan1 entered promiscuous mode [ 258.439731] ? alloc_pages_current+0x15d/0x260 00:38:49 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}, {@aname={'aname', 0x3d, '\xac'}}, {@cache_fscache}, {@cache_loose}], [], 0x6b}}) [ 258.439743] ? __lockdep_init_map+0x100/0x560 [ 258.439755] mount_fs+0x92/0x2a0 [ 258.439769] vfs_kern_mount.part.0+0x5b/0x470 [ 258.461683] do_mount+0xe53/0x2a00 [ 258.465233] ? copy_mount_string+0x40/0x40 [ 258.470605] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 258.473439] 9pnet: Insufficient options for proto=fd [ 258.475661] ? copy_mnt_ns+0xa30/0xa30 [ 258.475674] ? copy_mount_options+0x1fa/0x2f0 [ 258.475690] ? copy_mnt_ns+0xa30/0xa30 [ 258.475700] SyS_mount+0xa8/0x120 [ 258.475714] ? copy_mnt_ns+0xa30/0xa30 [ 258.500419] do_syscall_64+0x1d5/0x640 [ 258.504328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 258.509534] RIP: 0033:0x4665f9 [ 258.512723] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.520525] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 258.527816] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 258.535118] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 258.542478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:38:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, 0x0) 00:38:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, 0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:49 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a4000000000000002c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="17b166cede2e25a41291afb7f38d6421"]) open(&(0x7f0000000100)='./file0/../file0\x00', 0x440000, 0x130) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) unlink(&(0x7f0000000280)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000380)={{r5}, "ac617b9913f24788870f03e8486a690f7fa2e49ae92137405ebda11b6f81adede37a0bb9580fd686b71eb054bfdddcaf682ada5a7ecf38138b9d8f9ce1da65cba4da03bd90d962f3f84f6ad4767cff737d2ee71fbdb2bd6b5d31188ab8bd972f12c77517d19b2c7cf773e6b7409d53b8980ae635f4313edd899266c2cf4e062c670c609b2df3b357d8ef4391c8d9ba512a51f64cdc3d1ce230b82a91f33e3cc2f9a565557b22defd435c3a9848c8b1c584f13621ef9f56fe3b531b147a82893e1ee5bdb6e49dfc8a16e7029c25b00323680e62f3d2dd027ba12349fa0c1aff1746fe9aac54a051553241b497f8bea1bb2f30b5dd2848c4b072f210368ba9cd41816376a4f1d2b8a7c5fc49512029155de7bbb8e552f652f3380660654adf82c53f41bd99df5434a61a58d9e033ea82051c15f6948c4d2fb7f0d6c0c3385c0a3d52ce9f34b9a2791e8d1f8c4923a81065ef828306a82978b99fad914834e0b2085868a8ffabf3e0e2c3326adc1ce03e83b9a315cf68c3e64581e4840880f4dc3f7648e508de807d884aa329a8574386860847d846c94c6c5a3bae58a45841346a48321da198a0dd87b774d0752c64e7210d5a69eabc61a2a7fda7bf2722b6e79fe22d950c15bc386cce3afd29fc3d5e6c7f149ac619d583e7b16e00d6b6dcb54a807704b0d7e3eddc707da76bad2c0194295c45a0039301a12ac021cb0362ae211bdd3cca15a00e36363adb6f40eedfea5282c683771962b86429e621f79803324edb1c5115ed0c7e2109191f53ae9bac8f035b5bbdfb0d4a0d5146ab44edaa8e26622cd74edd914cf2f83d89b282a6b2add8e43eaa40837ccd6b5fb4c6b704bdc76b1c96f8efb2ffc8a296dab29def31aa3d029221e2343f9f644dd95dcace21fec45c6dde3e4a9e643139446950a363d817930926da3f0b82bd0e2b600c0469202b3f6ca9a583cf2058b5b2992f51da53560c3bb8cffe8932c393f9e983723b85e8dd9a1be35f00c5766e80a9c8638a3e549ac1ff34fdcc77026ac578e0afc8b9cc2c5bd7f5ffc9b0702ddf9c77c4e0edf4c61d949a0e9aa9eaeffb398eb1c1c3e19045fe64586994b428321252fe2c696b9f498a524e55f1ca2dfdcf0f38ab2073a478a067c50cd2fabc6c40b1ceef2e1769aea26b04263a53c5e2ab29afaffc0e503f8bc2e93e69e6a9d9bedb405420138d043e022fc83280c32816247cd51163e8497817bd7fdddb14ec797f516f8d4be3ea062807e0b935632e7368d6e2e656884f97784580c3e0d0aa37f559e9bb0ef63b7524f471a1f09bf51309845c0651362129b32463b49223feade412ac9398e5df123beeb7b0d2600e1a422ffdce3438d06d22ac1b6970474c9dfe52daff6b2d5e7fa0ecdff4a1b5e5c88ed1410abcdce46528dc5510fd89720c512679142526680a3099580be5db7612b9185d81cb7b7e91650f3afe900cfc55a3796d2265898dedbd8b7a207c530a60a85e14e8a2d86d84877b4a934f36ad116ad55180a45b55e7a03e7be887443de34562a6d31bf3d92c49d6b2523ce8ee3ef1cab343fdb07b00ac8deca01707c5b7faa655f52e4ac33f1a726fb6116a15aadca7f4ef731b4c725f38b418e10e63c796d1665c9aca05f320485b8e55e2f231cec494ddf4a096a0de24896e6e6ef64d63cca7c64d5ae933b2aea7f447a348cdf7482f9d89ce048d8867ea1ab850ea69c97a0a9c4598ad82a815a1559f040b4b1dd450df0273d835bafb09e538924511fa6c311949099290b8e4d33d97e51f366cf2a9599ec503bfa5335f131f28ea7f11ba47a5548ad00e8e00b9b0c09775a664946cb38d06344e90ee42fe928af57fc7dffe560000a4714cbe50f08ffcfdd2c3329d688263d7a28254f34dfd15af8dc1338f1dad00324be769eeec1667e0b4a826509a993988733ae37f9c4137227defb28d94d343aedf581622a1c84a1918b62710c19477d4168d706339e40f3a25e287c86894ecbbb4386b0aafd44e4e159685ff7dc5486c70f74682af53378d1ce17ec0a32e332b588a1c8d7018482dd28eb8ecbb545299ec637ae127b770b96d4acd599285d3461b4a0745c62fa4c96aba38085680309fd68a88cfd6b8cd777321ffbba768510b517a3bbfe9b523c93a6be4283f0f857eb7852985c3d88df829bbc8f8fb8fbfeeb6e308e7f2361dd6ce91bd4edf8a349d0cfc46b08c11ceb1b7d56163a0eb5d7457faab58b245df28f4d2a2de69845f7f445d2bb2f2a674c58ba3053d594567c8ff7fd764f1d6702201b43a48b544160a62e44074d3c88c799acc05a71b1618caed8375e210a83e8cc5f65dd4f31d60306c6bd3369ef4d3aac177ca0fb29902fb5b91d803b3709121a4fb34086dc3ead35cf2b45392f3113194773c581b709f74b646a999be9742757fe694c2be53a934d8e676bda477ddff2878e4ae1b051791b35ed231f292cd1a96153ebccdaed245a654ff2026d4926c5f3b2095a2208524bf1ee51724b8aaff4637b6dcaf47fff2e97504aa2d58ac702d0712ab759af8b931652d1dcd67215bf071ea6582c9934d771ece23a0422086a0499c5a937837b645229d9b4f901d1ace8b26416614c3922f53039190458bf1226103bb287316ef372931684ad8c6aa317e4d5edb1e48266e33deeb831ac0ef33bcfbdf9d40152499629ef0346b3d32dd2f38b835224b665bdcc574749b9dbd54a4f5b3d5f3c2d17c2abcc3c69bf2a56df41433921671a47daf852600c8201ee2d88a52b66df535bac5e1a06afad4c6d9bbc8d7f254f912af9ac646dbf5b9c065317429950102898cee091785ee91f5b54f88a54292da2d1f24c10c1602ccf2fd1edda650b96a877e115faef57523a703e53b9e5beb8cf51c06a1956b5b46c7e1c5f8590be373587d060274c275857effe6f4ceffc833e41cab4755d53d208ea5bdca7deb5510af977f639452450c8b41d951f2dac3170e40cef174541d07903ccd46cda9b820140c6a12ed47b40ec65c078943caadf2cd7561aff441d7d1ef65f97649ee9b0dfe0a761bd021a0f08f80f00adb6ad1dd2221df132b02031cf4083e92d9a49297a260063478b954c39290f6835f373472072fa8ddaf6a3a607e4972396d78f9df7124551476fc70ea21d31d204097cc775819fb39b569f6736f93df62e3ee0a1fe695257cd7ee19827eb7c3066747f5326ff55f25a70c5999536c805f3a3f458e35bff728747da72371ed31264a6a3b8cc6793265f1a207a6b71f403d560ffa60433bc69f602caed1c5ae7587b6adb5174b3ef3c3a7eb9f75aef7e3940fd41659e743eedd3ae7a258b7a3e47a982bbe9ab603979f8a69e5b16bc7626ef4125fe8d62d26e6152dff1d4ec8f2aaf515a9aa0a8910144046f3243ccd6fb2ffddc3662333a27f7c5c6233c161505ff81282e9841cd899bb13422791d81d4a9d53a2882344bf7b62bb1f1deb7f2f80f9ed6824c6f56498c5bd4445e6f394b1abd24e24aa306011278730e591fc97d10d8bc1204da403409790bd601dddcefdbd80acf010bbb8ec6e20a629519fcb97970639717ac35b99f1728cd7d723ad76db5b09c7af9ab223eb42fefe064780b3f150b1ea0ce5441d293d9dc606497884ddb76070478c5bd3cfeb77cd8072e7172faa080d0fdd020c7a56e56f36f7229f1cb8af3fa33a480b49967d952afd7f89d7a2ae44780c05fbf33cb39555d5818bcb51964519c8624594ff8c8db4500201cae09f5404ddcebb517173c6fe14c14bb6d9880128108c85d7b6cc712422c23db1c711a882cf7bf754ba7cf0d97e2ccd4b4d23318003806cec001fcd696a2a0f24616bb0c9f23533cf7fc3b059b8c6fc29b10d7c31310752df79cc0aa1ee7cd77c58c51c9a0bdf5552ff58204b8b72e0bfa998bf2ac3bfd36238814ce10ee8a9678f5ecf11f0cee3ee723d9a329031a53c2a9edbd281f7d35345361e67cea60cae10ce10f75777618d26a27d487878ed2beb2f220e62fabb1a9a27bf99246ab91ba92fb98a43c6103cc65fe66060d5cb063ac9efa33559d9fb93d96427fafd8ae612eb1e340360ef17a22fd002aa5cbac91c30e40470347a799b60248387fccbf506de5cbe4b2d53e79ba644acf58e5810c440e290ca7c2fe800423974749b77f86bf0d3401bd33370762b7a6807b6d111c820f8eb71acb5def7123393bdf9c4f909e8da3418a30ad5d1b28b94ccd91f22844942ddf0d84b60cf9d11794c63bc12d35c180642464898d29e08d810a07bb53fbfe8503c8b5cb1b43219819cea6bf341921ddc025d7ae6a4601225fe5985fd09178113d06b319f0d90281a61102b92a44f64d03719bd91978b1d11fb7f52dffc35784158689fe8be0c3479e04a8579ec0b7cc611a2924bd8fa459d6821283ac89a4074422f3531e2efb0852cf76dd240ab43b2fecf4b4b886bb088d470d9e5f0da9ab9e7264b3216a13517835e4e0b7a063cc9498e5db71761666efc0cd983557626e81a1ffd3f5e6827b7940dbe0218d250c092d7f685cd6f79309713b830a8ab930e88271ccaee0c5678e8918d74c00d9904f06d9ff1928d68091448c4158f4e02a2975d3709625e67dc97cda3ffc2d94e1facac2abdd4959b263a9719959ad4842893c71dfe6544c22a9a4e5243c6e741b7cb34e0162ea50b98ae6936b9177312215c6f497b0672ca7c500e7ee768b9e07349043bb162beeae1e05e3adca0218195d889f9375da22d0b8ed3fcaaa418cf8420aebb9e41df58bfebc0092e12ac364086e505cacd25db53851288b89897ab3143261da76e7d2241b7d13498701b7ec4aad1229081a7d27e2fe01fe9b401d1f13048b472d593e9ae90718a393a9c159ec404a8f7dfd6fb8bd9b52782b30e0069ae2a5bc39e45c9878d5f13f8cb077585196cd28a5f3196732e21facb1bc7e0976e783ebef9be0e01d5a25aa9a4a41109396ae63a51b710ef05e03dcaf4eb0d4dd0eb45d2b0a60a5c6aefdd683fa569189bdb942a000e0a10c1b29085856e159ffbc638942adfadcae06c601a64bfd3b2648013d8296239c99272633fa2f1a82ac467451a2d9107965670310231aa97d04c95650b4e743736449d700d38b828c3dc2122cbd5657a3eab0a893b6a8c690c0f7c5f70d15a61f4aa57b44bc13089399e01ccaa2bdf4adaac0b0f92cf1aab7c9d74c52b3896978351e264d8e7d4ecb5de6763ba1c9eb9cefe81bf1c1e2c422a5acf30727e090dcaf815ea7745b7632641565081f2247463ac02eff01cf4834398e35b3eb34fcbf57efb3253a40fba735464b75bf50fba6ae40707eaa5b580c7bdbaaa55602fd5915f23add5b0e16e5b979622fd9cb8260cfbde6493411ad4276dcd2aa33bd75e8d6928f1f63a8f65fcef926161997a3fa1237ae23831197c9dc6189026a08058965b6ee02027fdc4c3200471a665916b4d115688f28ea4943f88fb71a779946e9e63fa6ff4db7fc9437c76523aa0e99a71ce5e320ae2bce1bb8bf91f8710988f158cfd4d5023ab443440f0938e15ddf30f5de010cbbfd351e5a8e87cd21df65c9be92af2784cb08df481d82528e9227878e28cbe05fa696ac53ed79fc05c49aa47a1fb2c6335eeb162d8156e7152d6c8f98a0244fd237bf8e90c47211da6ce78f97535ba8888c825c66ab68bcabcd59082c6b393a26f22d3644577f53902c88ee94b04f1bbeb77a7b00f712c7fe94add6503e95de872c580325f408e01d49843ffc2236018a242848352c991c9e9045eebff7c21bdfeaf157f68c21dc09330ee6ec31e45fe0011b0ea00"}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=ANY=[@ANYBLOB="1800000032000500000000ffff0004000100a05349abf95c235ee4b879f75cdc82c48d4a67be637081ed18b20ff65ea9b454c8bdf14ea68581c020b2bd67fe154dee03a964248db20b1a2d2322e381d98ae6e3739c2159bc155299f7be222c46e661a37525d78755522b3696f09efac1df38853fccb3cb4af93ea2052dadb596ead8f14cfdf1a8250485c78aa23345c23b30e1c3615359e2652b8c7b77cdfcb607318218d8bb978d6a0a2010e82da1018040e4ab89f614d67bed60a2a0d5ecc2"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) [ 258.549780] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 258.571930] xt_addrtype: ipv6 does not support BROADCAST matching 00:38:49 executing program 2 (fault-call:3 fault-nth:36): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, 0x0) [ 258.631326] xt_addrtype: ipv6 does not support BROADCAST matching [ 258.639179] device ipvlan1 left promiscuous mode 00:38:49 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r4) fcntl$setstatus(r4, 0x4, 0x2c00) r5 = gettid() fcntl$setown(r4, 0x8, r5) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xff, 0x80, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x260, 0x80000000, 0x8, 0x0, 0x1000200000, 0x4, 0x1, 0x0, 0x80000000, 0x0, 0x6}, r5, 0x10, r3, 0x2) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={0x0}) [ 258.695100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:38:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, 0x0) [ 258.740469] FAULT_INJECTION: forcing a failure. [ 258.740469] name failslab, interval 1, probability 0, space 0, times 0 [ 258.753249] tc_ctl_action: received NO action attribs [ 258.791288] device ipvlan1 entered promiscuous mode [ 258.792216] CPU: 0 PID: 16315 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 258.804253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.813610] Call Trace: [ 258.816209] dump_stack+0x1b2/0x281 [ 258.819846] should_fail.cold+0x10a/0x149 [ 258.824001] should_failslab+0xd6/0x130 [ 258.827989] kmem_cache_alloc+0x28e/0x3c0 [ 258.832166] __fscache_acquire_cookie+0xd6/0x420 [ 258.837044] v9fs_cache_session_get_cookie+0x95/0x1c0 [ 258.842241] v9fs_session_init+0xc92/0x1540 [ 258.846597] ? v9fs_show_options+0x6b0/0x6b0 [ 258.851036] ? v9fs_mount+0x54/0x860 [ 258.854761] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 258.859792] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 258.864852] v9fs_mount+0x73/0x860 [ 258.868428] ? alloc_pages_current+0x15d/0x260 [ 258.873019] ? __lockdep_init_map+0x100/0x560 [ 258.877556] mount_fs+0x92/0x2a0 [ 258.880948] vfs_kern_mount.part.0+0x5b/0x470 [ 258.885462] do_mount+0xe53/0x2a00 [ 258.889022] ? copy_mount_string+0x40/0x40 [ 258.893279] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 258.898316] ? copy_mnt_ns+0xa30/0xa30 [ 258.902227] ? copy_mount_options+0x1fa/0x2f0 [ 258.906745] ? copy_mnt_ns+0xa30/0xa30 [ 258.910652] SyS_mount+0xa8/0x120 [ 258.914123] ? copy_mnt_ns+0xa30/0xa30 [ 258.918027] do_syscall_64+0x1d5/0x640 [ 258.921936] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 258.927130] RIP: 0033:0x4665f9 [ 258.930334] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 00:38:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={0x0}) 00:38:49 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d660104007e2d000000db7b83817d4f93e36397b2c45f335571", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) 00:38:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, 0x0) [ 258.938057] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 258.945610] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 258.952890] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 258.960179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.967480] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 00:38:50 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={0x0}) 00:38:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={0x0}) 00:38:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) sendto$inet6(r1, &(0x7f0000000040)="63df44cd41fd35ae799e3bca9ac6c500c1cfe4e540e506f7c28ee668c9d9904259fe14e4464f7fec87c54c0fd4a57d20e5edd1b259ed4a6c2a66c9b8a6789bec397b1d912aa4b0007bd87d632a07154128287c62b02823e27ba19097a66b6efbfdeb66705927db27ff7d40f7dca34b48115a7f162f752cbaad3c0900ab1721eef517073bbd800c3180236440bcabd45a32fef099eb86e36e7b483b0a58dbd3888652c3125f86bf570f13886aefa912b663ebb324967bc991d124e857eb1ca6710de933fada0ca5ef7dcce89696085e7b01b3f68e28223f6f524176487879fbaba75b9dfe2c747c1a64d6", 0xea, 0x20040000, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @private0, 0x5}, 0x1c) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r2) fcntl$setstatus(r2, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r2, 0x8, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat$incfs(r0, &(0x7f0000000480)='.pending_reads\x00', 0xe00, 0x19) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044090}, 0x881) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) sendmsg$unix(r0, &(0x7f00000019c0)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)="77f5e89a7e82864b3c8d8ee694da12cd8ce2f75fe5c268b24f08bccd53dbc6a492d58790562dccedb04e", 0x2a}, {&(0x7f0000000240)="640140bff51b5211ff14da294d4f16c55fbcbdb2673317860da0f9e02c08adbe62af8a075de78e3e70cf591eb86f11350bb99d9e3cf6662f24ba91da4f0b4da987b99709d7a491d8b5ff3f158238c7aeac64a081b952a193ace546f9a168fa3bb600a92f5f5d8d21d47e688fec77bc06caa4a1225f6b1619685fcf84a176e2b4fea127af15d069ef192086fdceb4f6e7f96210a01b55ec44bbad835bf487617cfeeebd5a1e37ef31cef4cff12dae183cab2bf1b38e2160dad80efb8e47413df11a09a8ce787bf0017892e264a390bd2d28788f597c0da291936d0de178e61f5bbb202f70d705ab", 0xe7}, {&(0x7f0000000340)="33b710d40e312dc8afdcee0277c24a1c73546f2442876e0f1c0aed231a0fbbf5a6d8132ef41b296236ee3894561dacc5d9daea1d34fc0645c3b575f619804fe6303b392a1c9204b12e768f23349e12164c7a03a541c48ef80409c9a3c01fd59c557e14ca28dfd32b699885af21f503bc15813eaab52a5ed48783fd5ae23939185341f78dce6b94dddcd02fdc9d85fd78cab0a046f6d3353fd15bd09c7416c58081be7ab87e1d727eae592f3835aaacc5f4e130cda490d37f467f1c6490f69d97800be2464a73db85ae156931c059207807865418623cd226f48385b20ab7c6f5b46d9b307438cb26ae984c4563879881f15d6556", 0xf4}], 0x3, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r4, r1, r0, r0, r5, r6, r0]}}], 0x50, 0x4000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 259.011774] device ipvlan1 left promiscuous mode [ 259.048636] device ipvlan1 entered promiscuous mode 00:38:50 executing program 3 (fault-call:6 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 259.079394] 9pnet: Could not find request transport: f [ 259.094984] xt_addrtype: ipv6 does not support BROADCAST matching [ 259.121084] device ipvlan1 left promiscuous mode [ 259.144680] FAULT_INJECTION: forcing a failure. [ 259.144680] name failslab, interval 1, probability 0, space 0, times 0 [ 259.173574] CPU: 0 PID: 16360 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 259.181508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.190873] Call Trace: [ 259.193486] dump_stack+0x1b2/0x281 [ 259.197124] should_fail.cold+0x10a/0x149 [ 259.201317] should_failslab+0xd6/0x130 [ 259.205605] __kmalloc_track_caller+0x2bc/0x400 [ 259.210287] ? strndup_user+0x5b/0xf0 [ 259.214099] memdup_user+0x22/0xa0 [ 259.217648] strndup_user+0x5b/0xf0 [ 259.221314] __keyctl_dh_compute+0x193/0x1350 [ 259.225824] ? lock_downgrade+0x740/0x740 [ 259.229988] ? dh_data_from_key+0x250/0x250 [ 259.234324] ? get_pid_task+0xb8/0x130 [ 259.238220] ? proc_fail_nth_write+0x7b/0x180 [ 259.242739] ? __might_fault+0x104/0x1b0 [ 259.246843] ? lock_acquire+0x170/0x3f0 [ 259.250822] ? lock_downgrade+0x740/0x740 [ 259.254990] ? __might_fault+0x177/0x1b0 [ 259.259071] keyctl_dh_compute+0x98/0xe0 [ 259.263139] ? __keyctl_dh_compute+0x1350/0x1350 [ 259.268008] ? vfs_write+0x319/0x4d0 [ 259.271714] ? SyS_write+0x14d/0x210 [ 259.275436] ? SyS_read+0x210/0x210 [ 259.279066] SyS_keyctl+0xe0/0x390 [ 259.282607] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 259.287535] do_syscall_64+0x1d5/0x640 [ 259.291434] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 259.296634] RIP: 0033:0x4665f9 [ 259.299823] RSP: 002b:00007f82595d4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 259.307535] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 259.314810] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 259.322082] RBP: 00007f82595d41d0 R08: 0000000020000840 R09: 0000000000000000 [ 259.329346] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 259.336633] R13: 00007fff0410c05f R14: 00007f82595d4300 R15: 0000000000022000 00:38:50 executing program 2 (fault-call:3 fault-nth:37): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) socket$netlink(0x10, 0x3, 0xa) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472617e733d66642c7246646e6f3d0e80d94c78220c77017cf068a9bc05000000a18329d3ea013a2fd3ce73c959754de4e25be6ac86dfc56c46411db806000000d44e982696b1f79de9e0f804d6fbcec44e5dfe043adb59251f9d3f29acfc3ec30940adebf643f79d77b9284fff4738c7", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',k']) 00:38:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={0x0}) 00:38:50 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x10002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) 00:38:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0xfffffffffffffffa, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x76, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r3, 0x3}, 0x8) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:50 executing program 3 (fault-call:6 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={0x0}) 00:38:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000200), 0x1, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 259.441194] FAULT_INJECTION: forcing a failure. [ 259.441194] name failslab, interval 1, probability 0, space 0, times 0 [ 259.463270] device ipvlan1 entered promiscuous mode [ 259.479306] FAULT_INJECTION: forcing a failure. [ 259.479306] name failslab, interval 1, probability 0, space 0, times 0 00:38:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7405616e733d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB="7f0066646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) [ 259.506748] xt_addrtype: ipv6 does not support BROADCAST matching [ 259.510391] CPU: 0 PID: 16382 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 259.520907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.530288] Call Trace: [ 259.532891] dump_stack+0x1b2/0x281 [ 259.536536] should_fail.cold+0x10a/0x149 [ 259.540778] should_failslab+0xd6/0x130 [ 259.544785] __kmalloc+0x2c1/0x400 [ 259.548338] ? crypto_create_tfm+0x79/0x2d0 [ 259.552665] ? up_read+0x17/0x30 00:38:50 executing program 1 (fault-call:6 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 259.556036] crypto_create_tfm+0x79/0x2d0 [ 259.560187] crypto_alloc_tfm+0x11a/0x250 [ 259.564351] __keyctl_dh_compute+0x1bb/0x1350 [ 259.568861] ? lock_downgrade+0x740/0x740 [ 259.573033] ? dh_data_from_key+0x250/0x250 [ 259.577372] ? get_pid_task+0xb8/0x130 [ 259.581296] ? proc_fail_nth_write+0x7b/0x180 [ 259.585810] ? __might_fault+0x104/0x1b0 [ 259.589974] ? lock_acquire+0x170/0x3f0 [ 259.593964] ? lock_downgrade+0x740/0x740 [ 259.598144] ? __might_fault+0x177/0x1b0 [ 259.598164] FAULT_INJECTION: forcing a failure. [ 259.598164] name failslab, interval 1, probability 0, space 0, times 0 [ 259.602243] keyctl_dh_compute+0x98/0xe0 [ 259.602258] ? __keyctl_dh_compute+0x1350/0x1350 [ 259.602268] ? vfs_write+0x319/0x4d0 [ 259.602280] ? SyS_write+0x14d/0x210 [ 259.602290] ? SyS_read+0x210/0x210 [ 259.602302] SyS_keyctl+0xe0/0x390 [ 259.602310] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 259.602321] do_syscall_64+0x1d5/0x640 [ 259.602335] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 259.602344] RIP: 0033:0x4665f9 [ 259.602356] RSP: 002b:00007f82595d4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 259.661902] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 259.669175] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 259.676456] RBP: 00007f82595d41d0 R08: 0000000020000840 R09: 0000000000000000 [ 259.683739] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 259.691018] R13: 00007fff0410c05f R14: 00007f82595d4300 R15: 0000000000022000 [ 259.698314] CPU: 1 PID: 16400 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 259.706220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.715709] Call Trace: [ 259.718305] dump_stack+0x1b2/0x281 [ 259.721948] should_fail.cold+0x10a/0x149 [ 259.726104] should_failslab+0xd6/0x130 [ 259.730089] __kmalloc_track_caller+0x2bc/0x400 [ 259.734760] ? strndup_user+0x5b/0xf0 [ 259.738561] memdup_user+0x22/0xa0 [ 259.742102] strndup_user+0x5b/0xf0 [ 259.745761] __keyctl_dh_compute+0x193/0x1350 [ 259.750278] ? lock_downgrade+0x740/0x740 [ 259.754432] ? dh_data_from_key+0x250/0x250 [ 259.758750] ? get_pid_task+0xb8/0x130 [ 259.762655] ? proc_fail_nth_write+0x7b/0x180 [ 259.767173] ? __might_fault+0x104/0x1b0 [ 259.771239] ? lock_acquire+0x170/0x3f0 [ 259.775206] ? lock_downgrade+0x740/0x740 [ 259.779360] ? __might_fault+0x177/0x1b0 [ 259.783420] keyctl_dh_compute+0x98/0xe0 [ 259.787488] ? __keyctl_dh_compute+0x1350/0x1350 [ 259.792322] ? vfs_write+0x319/0x4d0 [ 259.796203] ? SyS_write+0x14d/0x210 [ 259.800002] ? SyS_read+0x210/0x210 [ 259.803626] SyS_keyctl+0xe0/0x390 [ 259.807177] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 259.812101] do_syscall_64+0x1d5/0x640 [ 259.816004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 259.821184] RIP: 0033:0x4665f9 [ 259.824369] RSP: 002b:00007f1f9610a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 259.832114] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 259.839397] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 259.846712] RBP: 00007f1f9610a1d0 R08: 0000000020000840 R09: 0000000000000000 [ 259.854194] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 259.861593] R13: 00007ffdac46952f R14: 00007f1f9610a300 R15: 0000000000022000 [ 259.868973] CPU: 0 PID: 16383 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 259.876913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.886754] Call Trace: [ 259.889985] dump_stack+0x1b2/0x281 [ 259.890507] device ipvlan1 left promiscuous mode [ 259.893733] should_fail.cold+0x10a/0x149 [ 259.893749] should_failslab+0xd6/0x130 [ 259.893764] kmem_cache_alloc+0x28e/0x3c0 [ 259.910772] __fscache_acquire_cookie+0xd6/0x420 [ 259.915548] v9fs_cache_session_get_cookie+0x95/0x1c0 [ 259.920756] v9fs_session_init+0xc92/0x1540 [ 259.925104] ? v9fs_show_options+0x6b0/0x6b0 [ 259.929556] ? v9fs_mount+0x54/0x860 [ 259.933285] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 259.938760] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 259.942988] FAULT_INJECTION: forcing a failure. [ 259.942988] name failslab, interval 1, probability 0, space 0, times 0 [ 259.943615] v9fs_mount+0x73/0x860 [ 259.943629] ? alloc_pages_current+0x15d/0x260 [ 259.943640] ? __lockdep_init_map+0x100/0x560 [ 259.943660] mount_fs+0x92/0x2a0 [ 259.970812] vfs_kern_mount.part.0+0x5b/0x470 [ 259.975342] do_mount+0xe53/0x2a00 [ 259.978902] ? copy_mount_string+0x40/0x40 [ 259.983152] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 259.988205] ? copy_mnt_ns+0xa30/0xa30 [ 259.992124] ? copy_mount_options+0x1fa/0x2f0 [ 259.997027] ? copy_mnt_ns+0xa30/0xa30 [ 260.000929] SyS_mount+0xa8/0x120 [ 260.004383] ? copy_mnt_ns+0xa30/0xa30 [ 260.008368] do_syscall_64+0x1d5/0x640 [ 260.012285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 260.017472] RIP: 0033:0x4665f9 [ 260.020654] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.028498] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 260.035791] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 260.043156] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 260.050525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 00:38:50 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) r4 = syz_mount_image$sysv(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x6, 0x7, &(0x7f0000001540)=[{&(0x7f00000000c0)="115cb4fa7e27732626372038369ddba3b18368318544088cbf8224038d211c", 0x1f, 0x200}, {&(0x7f0000000100)="4b6991bca28059fde1f68debd9f2a13c3af934d168e566a8c62b3b636f8120b397fa1dea6f37b454a6246f", 0x2b, 0x4b06}, {&(0x7f0000000240)="7796df19e43fa46f4051759918288b7b005d40c0511d1fe7fcd44fdafafced43d6971e8fc7837e44b6d61ffc80ce4ade4a8546691975a6ccbf347ffc8e2ebeaaf3f2ac799fbd1165b5123575db398fe2d2ef66736a25b13ce8097c93f2f7f87b1deec9d1b6c09a2cbd27f70f647206", 0x6f, 0x1}, {&(0x7f0000000340)="b9ca1a1a2958e254d64586c3189712d7b8f97b64783a5b440bc61d0d3193a35bdbe7629abcfb37f92b668f0bf60f38320b7f905a952f69037523966e996c7e779327fcbd6fb6149be53a5678c99119b8c33be940c41e815174ed1837839117b6dca6a6a9e6df9e6618aa4ef0cbe9d7155e396915e564acd42f5d329980cbad7520", 0x81, 0x8}, {&(0x7f0000000400)="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", 0x1000, 0xffff}, {&(0x7f0000001400)="c6d4a4376bed2ce49a2b935cddb9c5bb2b50af0ffa6e39036dddd330b9f0e2770c7fce19da3e1deac52be55c460eea9b489ebbfb492b834f45c1751ddd554c8ae3f9234c69fbc0fc51e67dd9057dbace8b3cbba388b5557396310be198c84b6a0944e2f3ec1954ed1ec2b3d2a30e33de8c17d3090e810e913b141b7613dc796eb1380ea6511ca6ba40c8983e5e9b11fc419607a55b2dfcb22fc7c99635f2c8e1f149cb63042e5aeae4f2c51c83bacd01cbd46d603ba8b1794275ec7dd5c7bf", 0xbf, 0x1}, {&(0x7f00000014c0)="31e63b9837210ce3ac978aed342ca466f465fc8710744f89a4f85c3e3f1b1a9a05e0b016c05a77a6c6cebaa0a96204c85ff1127922b0b12e7355687f9dfd5e7b3c4e756b6815e710eddd57", 0x4b, 0x1f}], 0x34000, &(0x7f0000001600)={[{'rfdno'}, {'(}$'}], [{@obj_role={'obj_role', 0x3d, '^^'}}, {@uid_gt={'uid>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x40}}, {@measure}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@pcr={'pcr', 0x3d, 0x11}}]}) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000001740)='./file0\x00', 0x101, 0x7, &(0x7f0000003a40)=[{&(0x7f0000001780)="fc20275a6c89ef4a94282fcaf52b744a73", 0x11, 0x1}, {&(0x7f00000017c0)="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", 0x1000, 0x2}, {&(0x7f00000027c0)="0faa0649049bce19a46ce847ab7dc84fe16cf80e20dc995a12d3d30bb38c77ba120147778823143033abcd25fab10d08a71bf7cf8c5123260174f394ff74176ea17a96142240f9107d5014e2b44d095127dbab88522534a249b9d7182894aa646bfc50503409e6ed35265c27a6730ab38863c85e617426cdf909eb224c505231109f7f3ed3550216e03cf8c12a", 0x8d, 0x6}, {&(0x7f0000002880)="2ee0ddf6f1b512ef0c111517e0415a0fb465bd34892f7422e82d5783c968ea60a69e4c15648f1dccef03f3b38e790f9d9c50af6fb94db9421706eaf4711436ec81da960513e40bec686d6fd9e8f5e2ea000761df1176c51f8613c5760948aacfc297e490b076229068aa7a02d17d8a68", 0x70, 0x77a}, {&(0x7f0000002900)="190f4453961512b963961924988fb9c217a024c54dbec151752ca060725cf93be3c59fb8f1df7c3937748df9bd14dd1801a21b12ce6f7dbb472d3ff636e614358f03", 0x42, 0x1f}, {&(0x7f0000002980)="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", 0x1000, 0x4}, {&(0x7f0000003980)="98d99a0d88905fd349fa229660e2a614c3707915789a261a0e74f71a2d16ce3f176f257972d6c8e36525f12a99c3eb4f8663a42b942a3a41992d6f32ff5282981e6af28cf147b653c894f5a0ebf1604b6351beca867a8ec750361e6e19bfe05df62b38703fb832403d8d48a76bd987501e462e5c28996a5bbae2067a07eea9e9b087e8e1a0", 0x85, 0x95ce}], 0x1a8051, &(0x7f0000003b00)={[{@uid={'uid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, 0xee01}}, {@nr_blocks}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '^^'}}, {@obj_user={'obj_user', 0x3d, '{(\xed.\'\\]{!.!'}}]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) poll(&(0x7f00000016c0)=[{r2}, {r3, 0x2029}, {r0, 0x4}, {r4, 0x8100}, {r0, 0x8100}, {r1, 0x8}, {r2, 0x50}, {r5, 0x40c0}, {r2, 0x4}], 0x9, 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="ac6b02f55b713a8780db69c36928ddaa2da6b7c23f88788999610790a3febb7b35888d268a26740bb520fbc4aac3a123d037d12a39d680fb2159a86d4ad7d857e02e2a09782be89b61f1e46f076c994e57d63b45694de89aa515"]) 00:38:50 executing program 1 (fault-call:6 fault-nth:1): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 260.057800] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 260.066700] CPU: 1 PID: 16407 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 260.074606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.084713] Call Trace: [ 260.087492] dump_stack+0x1b2/0x281 [ 260.091235] should_fail.cold+0x10a/0x149 [ 260.096002] should_failslab+0xd6/0x130 [ 260.100117] __kmalloc+0x2c1/0x400 [ 260.103753] ? crypto_create_tfm+0x79/0x2d0 [ 260.108602] ? up_read+0x17/0x30 [ 260.111989] crypto_create_tfm+0x79/0x2d0 [ 260.116193] crypto_alloc_tfm+0x11a/0x250 [ 260.120358] __keyctl_dh_compute+0x1bb/0x1350 [ 260.124872] ? lock_downgrade+0x740/0x740 [ 260.129041] ? dh_data_from_key+0x250/0x250 [ 260.133484] ? get_pid_task+0xb8/0x130 [ 260.137385] ? proc_fail_nth_write+0x7b/0x180 [ 260.141901] ? __might_fault+0x104/0x1b0 [ 260.144336] could not allocate digest TFM handle sha3-512 [ 260.146085] ? lock_acquire+0x170/0x3f0 [ 260.146095] ? lock_downgrade+0x740/0x740 [ 260.146109] ? __might_fault+0x177/0x1b0 [ 260.163837] keyctl_dh_compute+0x98/0xe0 [ 260.167930] ? __keyctl_dh_compute+0x1350/0x1350 [ 260.172708] ? vfs_write+0x319/0x4d0 [ 260.176555] ? SyS_write+0x14d/0x210 [ 260.180295] ? SyS_read+0x210/0x210 [ 260.184026] SyS_keyctl+0xe0/0x390 [ 260.187596] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 260.192550] do_syscall_64+0x1d5/0x640 [ 260.195658] device ipvlan1 entered promiscuous mode [ 260.197241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 260.197254] RIP: 0033:0x4665f9 [ 260.210779] RSP: 002b:00007f1f9610a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 260.218593] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 260.226480] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 260.234061] RBP: 00007f1f9610a1d0 R08: 0000000020000840 R09: 0000000000000000 [ 260.241922] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 260.249189] R13: 00007ffdac46952f R14: 00007f1f9610a300 R15: 0000000000022000 [ 260.263400] could not allocate digest TFM handle sha3-512 00:38:51 executing program 3 (fault-call:6 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:51 executing program 1 (fault-call:6 fault-nth:2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:51 executing program 2 (fault-call:3 fault-nth:38): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 260.320889] device ipvlan1 left promiscuous mode 00:38:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x7fffffff, 0x80000001}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) 00:38:51 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000726000/0x2000)=nil, 0x2000, 0x2000009, 0x10, r4, 0x691e9000) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 260.360044] FAULT_INJECTION: forcing a failure. [ 260.360044] name failslab, interval 1, probability 0, space 0, times 0 [ 260.393260] FAULT_INJECTION: forcing a failure. [ 260.393260] name failslab, interval 1, probability 0, space 0, times 0 00:38:51 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000000c0)={@multicast1, @multicast2, @loopback}, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x40, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x10001}}, {@mode={'mode', 0x3d, 0xa80}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0xe3}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x800}}], [{@pcr={'pcr', 0x3d, 0x34}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'rfdno'}}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, 'rfdno'}}, {@subj_user={'subj_user', 0x3d, 'trans=fd,'}}]}) [ 260.405960] print_req_error: I/O error, dev loop4, sector 0 [ 260.431151] FAULT_INJECTION: forcing a failure. [ 260.431151] name failslab, interval 1, probability 0, space 0, times 0 [ 260.433619] xt_addrtype: ipv6 does not support BROADCAST matching [ 260.447907] CPU: 1 PID: 16442 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 260.457494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.466976] Call Trace: [ 260.469580] dump_stack+0x1b2/0x281 [ 260.473235] should_fail.cold+0x10a/0x149 [ 260.477399] should_failslab+0xd6/0x130 [ 260.481372] __kmalloc+0x2c1/0x400 [ 260.484931] ? __keyctl_dh_compute+0x25e/0x1350 [ 260.489600] __keyctl_dh_compute+0x25e/0x1350 [ 260.494102] ? lock_downgrade+0x740/0x740 [ 260.498250] ? dh_data_from_key+0x250/0x250 [ 260.502666] ? get_pid_task+0xb8/0x130 [ 260.506556] ? proc_fail_nth_write+0x7b/0x180 [ 260.511071] ? __might_fault+0x104/0x1b0 [ 260.515140] ? lock_acquire+0x170/0x3f0 [ 260.519114] ? lock_downgrade+0x740/0x740 [ 260.523270] ? __might_fault+0x177/0x1b0 [ 260.527352] keyctl_dh_compute+0x98/0xe0 [ 260.531418] ? __keyctl_dh_compute+0x1350/0x1350 [ 260.536268] ? vfs_write+0x319/0x4d0 [ 260.540003] ? SyS_write+0x14d/0x210 [ 260.543718] ? SyS_read+0x210/0x210 [ 260.547344] SyS_keyctl+0xe0/0x390 [ 260.551001] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 260.555934] do_syscall_64+0x1d5/0x640 [ 260.559822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 260.565006] RIP: 0033:0x4665f9 [ 260.568192] RSP: 002b:00007f1f9610a188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 260.575901] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 260.583165] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 260.590431] RBP: 00007f1f9610a1d0 R08: 0000000020000840 R09: 0000000000000000 [ 260.597708] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 260.604986] R13: 00007ffdac46952f R14: 00007f1f9610a300 R15: 0000000000022000 [ 260.622984] CPU: 1 PID: 16443 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 260.630896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.640281] Call Trace: [ 260.642883] dump_stack+0x1b2/0x281 [ 260.646525] should_fail.cold+0x10a/0x149 [ 260.650691] should_failslab+0xd6/0x130 [ 260.654676] __kmalloc+0x2c1/0x400 [ 260.658226] ? __keyctl_dh_compute+0x25e/0x1350 [ 260.662902] __keyctl_dh_compute+0x25e/0x1350 [ 260.667407] ? lock_downgrade+0x740/0x740 [ 260.671565] ? dh_data_from_key+0x250/0x250 [ 260.675914] ? get_pid_task+0xb8/0x130 [ 260.679810] ? proc_fail_nth_write+0x7b/0x180 [ 260.684314] ? __might_fault+0x104/0x1b0 [ 260.688384] ? lock_acquire+0x170/0x3f0 [ 260.692372] ? lock_downgrade+0x740/0x740 [ 260.696532] ? __might_fault+0x177/0x1b0 [ 260.700635] keyctl_dh_compute+0x98/0xe0 [ 260.704708] ? __keyctl_dh_compute+0x1350/0x1350 [ 260.709474] ? vfs_write+0x319/0x4d0 [ 260.713197] ? SyS_write+0x14d/0x210 [ 260.716924] ? SyS_read+0x210/0x210 [ 260.720565] SyS_keyctl+0xe0/0x390 [ 260.724118] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 260.729065] do_syscall_64+0x1d5/0x640 [ 260.732970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 260.738255] RIP: 0033:0x4665f9 [ 260.741443] RSP: 002b:00007f82595d4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 260.749160] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 260.756791] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 260.764067] RBP: 00007f82595d41d0 R08: 0000000020000840 R09: 0000000000000000 [ 260.767459] device ipvlan1 entered promiscuous mode [ 260.771443] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 260.771449] R13: 00007fff0410c05f R14: 00007f82595d4300 R15: 0000000000022000 [ 260.774751] CPU: 1 PID: 16445 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 260.799704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.809062] Call Trace: [ 260.811702] dump_stack+0x1b2/0x281 [ 260.815557] should_fail.cold+0x10a/0x149 [ 260.819716] should_failslab+0xd6/0x130 [ 260.823720] __kmalloc+0x2c1/0x400 [ 260.827275] ? __list_lru_init+0x67/0x710 [ 260.831425] __list_lru_init+0x67/0x710 [ 260.835435] sget_userns+0x504/0xc10 [ 260.839142] ? v9fs_kill_super+0x90/0x90 [ 260.843202] ? v9fs_kill_super+0x90/0x90 [ 260.847267] sget+0xd1/0x110 [ 260.850294] v9fs_mount+0x9e/0x860 [ 260.853855] ? alloc_pages_current+0x15d/0x260 [ 260.858444] ? __lockdep_init_map+0x100/0x560 [ 260.862959] mount_fs+0x92/0x2a0 [ 260.866331] vfs_kern_mount.part.0+0x5b/0x470 [ 260.870830] do_mount+0xe53/0x2a00 [ 260.874383] ? copy_mount_string+0x40/0x40 [ 260.878624] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 260.883641] ? copy_mnt_ns+0xa30/0xa30 [ 260.887511] ? copy_mount_options+0x1fa/0x2f0 [ 260.892112] ? copy_mnt_ns+0xa30/0xa30 [ 260.895982] SyS_mount+0xa8/0x120 [ 260.899434] ? copy_mnt_ns+0xa30/0xa30 [ 260.903307] do_syscall_64+0x1d5/0x640 [ 260.907200] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 260.912478] RIP: 0033:0x4665f9 [ 260.915666] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.923389] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 00:38:51 executing program 3 (fault-call:6 fault-nth:3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:51 executing program 2 (fault-call:3 fault-nth:39): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 260.930692] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 260.937983] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 260.945263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.952548] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 261.003364] FAULT_INJECTION: forcing a failure. [ 261.003364] name failslab, interval 1, probability 0, space 0, times 0 [ 261.016646] CPU: 1 PID: 16473 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 261.022410] device ipvlan1 left promiscuous mode [ 261.024546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.038644] Call Trace: [ 261.041246] dump_stack+0x1b2/0x281 [ 261.044887] should_fail.cold+0x10a/0x149 [ 261.049824] should_failslab+0xd6/0x130 [ 261.053806] __kmalloc_track_caller+0x2bc/0x400 [ 261.058505] ? dh_data_from_key+0x146/0x250 [ 261.062848] kmemdup+0x23/0x50 [ 261.066046] dh_data_from_key+0x146/0x250 [ 261.070202] __keyctl_dh_compute+0x2ef/0x1350 [ 261.074708] ? lock_downgrade+0x740/0x740 [ 261.079076] ? dh_data_from_key+0x250/0x250 [ 261.083435] ? get_pid_task+0xb8/0x130 [ 261.087346] ? proc_fail_nth_write+0x7b/0x180 [ 261.092296] ? __might_fault+0x104/0x1b0 [ 261.096492] ? lock_acquire+0x170/0x3f0 [ 261.101017] ? lock_downgrade+0x740/0x740 [ 261.105173] ? __might_fault+0x177/0x1b0 [ 261.109340] keyctl_dh_compute+0x98/0xe0 [ 261.113426] ? __keyctl_dh_compute+0x1350/0x1350 [ 261.118197] ? vfs_write+0x319/0x4d0 [ 261.121948] ? SyS_write+0x14d/0x210 [ 261.125844] ? SyS_read+0x210/0x210 [ 261.128000] FAULT_INJECTION: forcing a failure. [ 261.128000] name failslab, interval 1, probability 0, space 0, times 0 [ 261.129574] SyS_keyctl+0xe0/0x390 [ 261.129594] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 261.129630] do_syscall_64+0x1d5/0x640 [ 261.153459] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 261.158651] RIP: 0033:0x4665f9 [ 261.161835] RSP: 002b:00007f82595d4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 261.169548] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 261.176836] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 261.184109] RBP: 00007f82595d41d0 R08: 0000000020000840 R09: 0000000000000000 [ 261.191444] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 00:38:52 executing program 4: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) 00:38:52 executing program 1 (fault-call:6 fault-nth:3): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) 00:38:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x238, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"f0c8", 0x1}}, @common=@inet=@udp={{0x30}, {[0x4e21, 0x4e21], [0x4e23, 0x4e24], 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4b, 0x2, "77ed94613087d8f3f2e4ca2280eb2ae9b7b30b903e2171e06c113ebdfe1d"}}}, {{@ipv6={@mcast1, @empty, [0x0, 0xffffff00], [], '\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x4, 0x1, 0x4}}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x0, 0x100}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 00:38:52 executing program 3 (fault-call:6 fault-nth:4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 261.198728] R13: 00007fff0410c05f R14: 00007f82595d4300 R15: 0000000000022000 [ 261.206114] CPU: 0 PID: 16483 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 261.214025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.223486] Call Trace: [ 261.226188] dump_stack+0x1b2/0x281 [ 261.230467] should_fail.cold+0x10a/0x149 [ 261.234634] should_failslab+0xd6/0x130 [ 261.238710] __kmalloc+0x2c1/0x400 [ 261.243146] ? register_shrinker+0x1ab/0x220 [ 261.247569] register_shrinker+0x1ab/0x220 00:38:52 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x800, 0xa4) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x108080, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@aname={'aname', 0x3d, '/{:!:\\./\x14}#!-\x86!*'}}, {@cache_fscache}, {@noextend}, {@aname={'aname', 0x3d, '{]/\xad'}}, {@msize={'msize', 0x3d, 0x2400000000000000}}, {@version_u}, {@access_uid={'access', 0x3d, r4}}], [{@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@obj_type={'obj_type', 0x3d, '[(!'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_user={'subj_user', 0x3d, '9p\x00'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '\'%)\xda'}}, {@euid_gt={'euid>', r5}}]}}) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB='?k']) [ 261.251845] sget_userns+0x9aa/0xc10 [ 261.255580] ? v9fs_kill_super+0x90/0x90 [ 261.259671] ? v9fs_kill_super+0x90/0x90 [ 261.263738] sget+0xd1/0x110 [ 261.266769] v9fs_mount+0x9e/0x860 [ 261.270614] ? alloc_pages_current+0x15d/0x260 [ 261.273902] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 261.276592] ? __lockdep_init_map+0x100/0x560 [ 261.276606] mount_fs+0x92/0x2a0 [ 261.276622] vfs_kern_mount.part.0+0x5b/0x470 [ 261.276634] do_mount+0xe53/0x2a00 [ 261.276650] ? copy_mount_string+0x40/0x40 [ 261.299460] FAULT_INJECTION: forcing a failure. [ 261.299460] name failslab, interval 1, probability 0, space 0, times 0 [ 261.315011] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 261.320248] ? copy_mnt_ns+0xa30/0xa30 [ 261.321886] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 261.324137] ? copy_mount_options+0x1fa/0x2f0 [ 261.324147] ? copy_mnt_ns+0xa30/0xa30 [ 261.324159] SyS_mount+0xa8/0x120 [ 261.324168] ? copy_mnt_ns+0xa30/0xa30 [ 261.324180] do_syscall_64+0x1d5/0x640 00:38:52 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$CHAR_RAW_SECDISCARD(r0, 0x127d, &(0x7f00000000c0)=0x2) ioctl$CHAR_RAW_HDIO_GETGEO(r0, 0x301, &(0x7f0000000300)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) syz_mount_image$gfs2meta(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x400, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="462a7063626cefb14069265d334aafef39c9563c7c8a0479c73606d58c6fa91a0bb9f45afe4b4df9e7e2862538f573300e23f9cfa17555634d24e32f2a4ae05c5ae1304e8b0608fd3ab6ec16b06629cd65a74429b7e781ec579ff8d0fc46f3c78f1635681211f54a32b1f22d97216a418c62afd72ac4804e87e934d6b7530e64f105f0887b2bc11fc7786db722a16fcc33595352e9c63b405531be75f388813304df78256f1961c9463cba55cbabdf28e2bb3aef2a8853095c3a37529922f6c8d6e474", 0xc3, 0x4}], 0x42, &(0x7f00000002c0)={[{}, {}, {']#'}, {'$'}, {}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@pcr={'pcr', 0x3d, 0x36}}]}) [ 261.324196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 261.356470] RIP: 0033:0x4665f9 [ 261.359773] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.367520] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 261.374804] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 261.382179] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 261.389478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.397198] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 261.404503] CPU: 1 PID: 16491 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 261.412440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.422404] Call Trace: [ 261.425013] dump_stack+0x1b2/0x281 [ 261.428761] should_fail.cold+0x10a/0x149 [ 261.432920] should_failslab+0xd6/0x130 [ 261.436915] __kmalloc_track_caller+0x2bc/0x400 [ 261.441596] ? dh_data_from_key+0x146/0x250 [ 261.445927] kmemdup+0x23/0x50 [ 261.449262] dh_data_from_key+0x146/0x250 [ 261.453455] __keyctl_dh_compute+0x42d/0x1350 [ 261.458051] ? lock_downgrade+0x740/0x740 [ 261.462212] ? dh_data_from_key+0x250/0x250 [ 261.466534] ? get_pid_task+0xb8/0x130 [ 261.470434] ? proc_fail_nth_write+0x7b/0x180 [ 261.474941] ? __might_fault+0x104/0x1b0 [ 261.479031] ? lock_acquire+0x170/0x3f0 [ 261.483027] ? lock_downgrade+0x740/0x740 [ 261.487200] ? __might_fault+0x177/0x1b0 [ 261.491320] keyctl_dh_compute+0x98/0xe0 [ 261.495405] ? __keyctl_dh_compute+0x1350/0x1350 [ 261.498179] FAULT_INJECTION: forcing a failure. [ 261.498179] name failslab, interval 1, probability 0, space 0, times 0 [ 261.500181] ? vfs_write+0x319/0x4d0 [ 261.500195] ? SyS_write+0x14d/0x210 [ 261.500203] ? SyS_read+0x210/0x210 [ 261.500216] SyS_keyctl+0xe0/0x390 [ 261.500225] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 261.500237] do_syscall_64+0x1d5/0x640 [ 261.500252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 261.500260] RIP: 0033:0x4665f9 [ 261.500265] RSP: 002b:00007f82595d4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 261.500275] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 261.500289] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 261.565451] RBP: 00007f82595d41d0 R08: 0000000020000840 R09: 0000000000000000 [ 261.572820] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 261.580083] R13: 00007fff0410c05f R14: 00007f82595d4300 R15: 0000000000022000 [ 261.587372] CPU: 0 PID: 16502 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 261.595290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 00:38:52 executing program 3 (fault-call:6 fault-nth:5): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000002340), &(0x7f0000000700)={'syz', 0x0}, &(0x7f00000006c0)="9c", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r1, r2}, &(0x7f0000000540)=""/236, 0xec, &(0x7f0000000840)={&(0x7f0000000240)={'sha3-512\x00'}}) [ 261.604698] Call Trace: [ 261.607298] dump_stack+0x1b2/0x281 [ 261.610940] should_fail.cold+0x10a/0x149 [ 261.615142] should_failslab+0xd6/0x130 [ 261.619134] __kmalloc_track_caller+0x2bc/0x400 [ 261.623810] ? dh_data_from_key+0x146/0x250 [ 261.628147] kmemdup+0x23/0x50 [ 261.628150] xt_addrtype: ipv6 does not support BROADCAST matching [ 261.633469] xt_addrtype: ipv6 does not support BROADCAST matching [ 261.637594] dh_data_from_key+0x146/0x250 [ 261.637609] __keyctl_dh_compute+0x2ef/0x1350 [ 261.637626] ? lock_downgrade+0x740/0x740 [ 261.637640] ? dh_data_from_key+0x250/0x250 [ 261.637652] ? get_pid_task+0xb8/0x130 [ 261.664851] ? proc_fail_nth_write+0x7b/0x180 [ 261.669457] ? __might_fault+0x104/0x1b0 [ 261.673545] ? lock_acquire+0x170/0x3f0 [ 261.677545] ? lock_downgrade+0x740/0x740 [ 261.681716] ? __might_fault+0x177/0x1b0 [ 261.685801] keyctl_dh_compute+0x98/0xe0 [ 261.689882] ? __keyctl_dh_compute+0x1350/0x1350 [ 261.694677] ? vfs_write+0x319/0x4d0 [ 261.698407] ? SyS_write+0x14d/0x210 [ 261.702137] ? SyS_read+0x210/0x210 [ 261.705826] SyS_keyctl+0xe0/0x390 [ 261.709384] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 261.714334] do_syscall_64+0x1d5/0x640 [ 261.718247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 261.722490] FAULT_INJECTION: forcing a failure. [ 261.722490] name failslab, interval 1, probability 0, space 0, times 0 [ 261.723443] RIP: 0033:0x4665f9 [ 261.723449] RSP: 002b:00007f1f960e9188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 261.723461] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 261.723467] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 [ 261.723473] RBP: 00007f1f960e91d0 R08: 0000000020000840 R09: 0000000000000000 [ 261.723478] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 261.723483] R13: 00007ffdac46952f R14: 00007f1f960e9300 R15: 0000000000022000 [ 261.735368] device ipvlan1 entered promiscuous mode 00:38:52 executing program 5: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @link_local}, 0x10) close(r0) [ 261.806532] device ipvlan1 left promiscuous mode [ 261.823513] 9pnet: Found fid 0 not clunked [ 261.828433] ================================================================== [ 261.836005] BUG: KASAN: use-after-free in p9_client_clunk+0x1fc/0x240 [ 261.842349] CPU: 1 PID: 16512 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 261.842596] Read of size 8 at addr ffff8880a1d23a00 by task syz-executor.2/16483 [ 261.850481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.858083] [ 261.869067] Call Trace: [ 261.871660] dump_stack+0x1b2/0x281 [ 261.875281] should_fail.cold+0x10a/0x149 [ 261.879422] should_failslab+0xd6/0x130 [ 261.883393] __kmalloc_track_caller+0x2bc/0x400 [ 261.888108] ? dh_data_from_key+0x146/0x250 [ 261.892427] kmemdup+0x23/0x50 [ 261.895640] dh_data_from_key+0x146/0x250 [ 261.899794] __keyctl_dh_compute+0x454/0x1350 [ 261.904288] ? lock_downgrade+0x740/0x740 [ 261.908454] ? dh_data_from_key+0x250/0x250 [ 261.912794] ? get_pid_task+0xb8/0x130 [ 261.916705] ? proc_fail_nth_write+0x7b/0x180 [ 261.921202] ? __might_fault+0x104/0x1b0 [ 261.925275] ? lock_acquire+0x170/0x3f0 [ 261.930205] ? lock_downgrade+0x740/0x740 [ 261.934346] ? __might_fault+0x177/0x1b0 [ 261.938587] keyctl_dh_compute+0x98/0xe0 [ 261.942664] ? __keyctl_dh_compute+0x1350/0x1350 [ 261.947429] ? vfs_write+0x319/0x4d0 [ 261.951164] ? SyS_write+0x14d/0x210 [ 261.954882] ? SyS_read+0x210/0x210 [ 261.958522] SyS_keyctl+0xe0/0x390 [ 261.962066] ? keyctl_restrict_keyring+0x1b0/0x1b0 [ 261.967003] do_syscall_64+0x1d5/0x640 [ 261.971011] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 261.976202] RIP: 0033:0x4665f9 [ 261.979381] RSP: 002b:00007f82595d4188 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 261.987109] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 261.994380] RDX: 0000000020000540 RSI: 0000000020000140 RDI: 0000000000000017 00:38:53 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) getpeername(r2, &(0x7f0000000080)=@nl=@unspec, &(0x7f0000000100)=0x80) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='-wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) 00:38:53 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'virt_wifi0\x00'}) r0 = syz_mount_image$afs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x3, 0x1, &(0x7f0000000340)=[{&(0x7f0000000300)="34f57874f5a9ce46dccd6f76ab92b826c07b7dccddb3f5eadc7ba5076762b5507a322dc4b880b33f647ad11ef3d3007bbd347600", 0x34, 0x8d0}], 0x802080, &(0x7f0000001940)={[{@flock_strict}, {}, {@flock_openafs}, {@dyn}, {@flock_local}, {}], [{@fowner_gt={'fowner>', 0xee01}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fsname={'fsname', 0x3d, '(\\:'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'filter\x00'}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@obj_user={'obj_user', 0x3d, '{&\xec\xf7$[*+][!]/'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001a40)="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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f0000000240), 0x0, 0x7, 0x3, &(0x7f0000001740)=[{&(0x7f0000000480)="b12f9a9d94df6b8cd70e64037975b485ee97a21f1da452bff5d7d043fa0a6a8f2f81aa4b0e28dd96bf4dc076d238341f297d7b31de85702d213a4ac327304f590f2aba6b95682534f5bfafabe8ae6f66ad5d6b73830e6297a7a8e8d356ed3500da51b280d1f2ac1e95dea9bac2f26d4cab422be65111", 0x76, 0xd8e}, {&(0x7f0000000580)="247567a3bc630d7608a1fefbb6504f0a6cfc50f504a73dc6942d93d7cb3ad28795ef679d1aad0c0e4ca955dd854549862f882e64c7bf85b581b7582a7402e545cc0d3b75a7d0ce076481b8defcf9c5937790eff5f034481baa5ae4f19cf7a09f2cd7a579c1b99fd1e2eb6fe9fad0835f1dc751d66a63ddbb93a090d28832621c960abb81c94a1293eaec3cd6910fc26c8d7f9cbc1f18fc7c7d9febb9170ddbb1be0a926c2c2602372e1c1367a1792f1dc8a1398bbaebcc6c311d528282c5c501fa618d160b970936fd71221df5a8e086012da3dace27c8b25706", 0xda, 0x1f}, {&(0x7f0000000680)="16782025c1403cecd24404f6d02d6bca729247a99795f1c65b87dfc391ec5370a2be50c6bc082e60da4e36171f37b03cada8cc174f5c67ee0ee6fbfc034fe2d25a2d975fc83016369c1973925474bbb980a3790d1e9f01d52058daf2cbd37cfaa8018357e38b4157d067834051deec77bd6556c9530b248c12e9a19d89be7723b58cfa4762ebf5", 0x87}], 0x4c080, &(0x7f00000002c0)={[{'/dev/ubi_ctrl\x00'}], [{@obj_user={'obj_user', 0x3d, '}1%\'\\-.-'}}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@deltaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) fstat(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x47, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES64, @ANYBLOB="14ba4fdec098a67dc3bf8f03f1a48a01638c8b8e5cf0d1c9ad3a8217b22238c1d126", @ANYRESDEC=r4, @ANYBLOB="1d43fddd59670a5f12614e201c4e9271821a4c06bc4471d3457f115d91bb35"], 0x0, 0x4, 0xaa, &(0x7f0000000040)=""/170, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4, 0x1}, 0x10}, 0x78) quotactl(0x80000000, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)="06d2700e38189af759a4e79ddb9b9283a6df8afa6987bbfb0aa13d938daa091f099981a2a4d532dcee2ea4cb2c806eaffb0a06bd58da2e08b99aa7de9e7557c044e0475de5b802821f0528c002106cd9c9dbe9cf3294a901c05596b44177dbb66614b2c625afa2e6355873f9358ee1da0abd07dc1fd0ac2329779393fb955e16f0d7214d62790ee4bade109deb8a5dcdb88a60") setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x13e8, 0xffffffff, 0x138, 0x1238, 0x138, 0xffffffff, 0xffffffff, 0x1318, 0x1318, 0x1318, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private2, @remote, [], [], 'batadv0\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x9}}, @common=@inet=@length={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@mcast1, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1448) [ 262.001659] RBP: 00007f82595d41d0 R08: 0000000020000840 R09: 0000000000000000 [ 262.008924] R10: 00000000000000ec R11: 0000000000000246 R12: 0000000000000001 [ 262.016191] R13: 00007fff0410c05f R14: 00007f82595d4300 R15: 0000000000022000 [ 262.023482] CPU: 0 PID: 16483 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 262.032162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.041553] Call Trace: [ 262.044181] dump_stack+0x1b2/0x281 [ 262.047913] print_address_description.cold+0x54/0x1d3 [ 262.053207] kasan_report_error.cold+0x8a/0x191 [ 262.057885] ? p9_client_clunk+0x1fc/0x240 [ 262.062128] __asan_report_load8_noabort+0x68/0x70 [ 262.067064] ? p9_client_clunk+0x1fc/0x240 [ 262.071309] p9_client_clunk+0x1fc/0x240 [ 262.073508] 9pnet: Insufficient options for proto=fd [ 262.075383] v9fs_mount+0x69f/0x860 [ 262.075397] ? alloc_pages_current+0x15d/0x260 [ 262.075408] ? __lockdep_init_map+0x100/0x560 [ 262.075419] mount_fs+0x92/0x2a0 [ 262.075435] vfs_kern_mount.part.0+0x5b/0x470 [ 262.102662] do_mount+0xe53/0x2a00 00:38:53 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid}], [], 0x6b}}) [ 262.106560] ? copy_mount_string+0x40/0x40 [ 262.111782] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 262.116825] ? copy_mnt_ns+0xa30/0xa30 [ 262.120737] ? copy_mount_options+0x1fa/0x2f0 [ 262.125259] ? copy_mnt_ns+0xa30/0xa30 [ 262.129169] SyS_mount+0xa8/0x120 [ 262.132642] ? copy_mnt_ns+0xa30/0xa30 [ 262.136555] do_syscall_64+0x1d5/0x640 [ 262.140482] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 262.145690] RIP: 0033:0x4665f9 [ 262.148893] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 262.156625] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 262.163905] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 262.171179] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 262.178462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.185739] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 262.193026] [ 262.194680] Allocated by task 16483: [ 262.198400] kasan_kmalloc+0xeb/0x160 [ 262.202209] kmem_cache_alloc_trace+0x131/0x3d0 [ 262.206880] p9_fid_create+0x47/0x3a0 [ 262.210682] p9_client_attach+0x6d/0x750 [ 262.214747] v9fs_session_init+0xc03/0x1540 [ 262.219073] v9fs_mount+0x73/0x860 [ 262.222705] mount_fs+0x92/0x2a0 [ 262.226081] vfs_kern_mount.part.0+0x5b/0x470 [ 262.230589] do_mount+0xe53/0x2a00 [ 262.234130] SyS_mount+0xa8/0x120 [ 262.237591] do_syscall_64+0x1d5/0x640 [ 262.241525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 262.242355] xt_addrtype: ipv6 does not support BROADCAST matching [ 262.246706] [ 262.246712] Freed by task 16483: [ 262.246726] kasan_slab_free+0xc3/0x1a0 [ 262.246738] kfree+0xc9/0x250 [ 262.246748] p9_client_destroy.cold+0x67/0xaa [ 262.246763] v9fs_session_close+0x45/0x2c0 [ 262.258224] xt_addrtype: ipv6 does not support BROADCAST matching [ 262.262036] v9fs_kill_super+0x49/0x90 [ 262.262048] deactivate_locked_super+0x6c/0xd0 [ 262.262056] sget_userns+0x9c4/0xc10 [ 262.262064] sget+0xd1/0x110 [ 262.262070] v9fs_mount+0x9e/0x860 [ 262.262076] mount_fs+0x92/0x2a0 [ 262.262084] vfs_kern_mount.part.0+0x5b/0x470 [ 262.262090] do_mount+0xe53/0x2a00 [ 262.262096] SyS_mount+0xa8/0x120 [ 262.262105] do_syscall_64+0x1d5/0x640 [ 262.262115] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 262.262123] [ 262.324383] The buggy address belongs to the object at ffff8880a1d23a00 [ 262.324383] which belongs to the cache kmalloc-96 of size 96 [ 262.337058] The buggy address is located 0 bytes inside of [ 262.337058] 96-byte region [ffff8880a1d23a00, ffff8880a1d23a60) [ 262.348704] The buggy address belongs to the page: [ 262.353639] page:ffffea00028748c0 count:1 mapcount:0 mapping:ffff8880a1d23000 index:0x0 [ 262.361794] flags: 0xfff00000000100(slab) [ 262.366068] raw: 00fff00000000100 ffff8880a1d23000 0000000000000000 0000000100000020 [ 262.373951] raw: ffffea00028671a0 ffffea0002858e60 ffff88813fe804c0 0000000000000000 [ 262.381829] page dumped because: kasan: bad access detected [ 262.384257] device ipvlan1 entered promiscuous mode [ 262.387547] [ 262.387551] Memory state around the buggy address: [ 262.387561] ffff8880a1d23900: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 262.387568] ffff8880a1d23980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 262.387575] >ffff8880a1d23a00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 262.387579] ^ [ 262.387589] ffff8880a1d23a80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 262.431916] ffff8880a1d23b00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 262.439959] ================================================================== [ 262.447327] Disabling lock debugging due to kernel taint [ 262.456666] Kernel panic - not syncing: panic_on_warn set ... [ 262.456666] [ 262.464068] CPU: 1 PID: 16483 Comm: syz-executor.2 Tainted: G B 4.14.232-syzkaller #0 [ 262.473164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.482516] Call Trace: [ 262.485123] dump_stack+0x1b2/0x281 [ 262.489108] panic+0x1f9/0x42d [ 262.492441] ? add_taint.cold+0x16/0x16 [ 262.496447] ? ___preempt_schedule+0x16/0x18 [ 262.500838] kasan_end_report+0x43/0x49 [ 262.504794] kasan_report_error.cold+0xa7/0x191 [ 262.509818] ? p9_client_clunk+0x1fc/0x240 [ 262.514142] __asan_report_load8_noabort+0x68/0x70 [ 262.519067] ? p9_client_clunk+0x1fc/0x240 [ 262.523284] p9_client_clunk+0x1fc/0x240 [ 262.527336] v9fs_mount+0x69f/0x860 [ 262.530948] ? alloc_pages_current+0x15d/0x260 [ 262.535531] ? __lockdep_init_map+0x100/0x560 [ 262.540008] mount_fs+0x92/0x2a0 [ 262.543361] vfs_kern_mount.part.0+0x5b/0x470 [ 262.547838] do_mount+0xe53/0x2a00 [ 262.551358] ? copy_mount_string+0x40/0x40 [ 262.555586] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 262.560690] ? copy_mnt_ns+0xa30/0xa30 [ 262.564559] ? copy_mount_options+0x1fa/0x2f0 [ 262.569136] ? copy_mnt_ns+0xa30/0xa30 [ 262.573024] SyS_mount+0xa8/0x120 [ 262.576571] ? copy_mnt_ns+0xa30/0xa30 [ 262.580459] do_syscall_64+0x1d5/0x640 [ 262.584370] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 262.589543] RIP: 0033:0x4665f9 [ 262.592730] RSP: 002b:00007fa32da9b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 262.600565] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 262.607836] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 262.615090] RBP: 00007fa32da9b1d0 R08: 00000000200002c0 R09: 0000000000000000 [ 262.622343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.629604] R13: 00007ffe5485c20f R14: 00007fa32da9b300 R15: 0000000000022000 [ 262.637501] Kernel Offset: disabled [ 262.641119] Rebooting in 86400 seconds..