, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0xd00000000000000, 0x8}, 0x18) 00:04:21 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x800) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000100)={{r2}, 0x0, 0xa, @inherit={0x78, &(0x7f0000001100)=ANY=[@ANYBLOB="0000000000f7be0006000000000000800900000005000000ac300000000000004a000000000000010000000600000000000000040000000000000000000000000020000500000000000000ff0100000000000005000000000000002284000000000000faffffffffa2b99dd9ead0a69728f9ea908aafafdc5ad5bb1feb94"]}, @name="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"}) (async) read(r0, 0x0, 0x0) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x9000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) recvfrom$packet(r2, &(0x7f0000000100)=""/165, 0xa5, 0x10020, &(0x7f0000000240)={0x11, 0x1e, r1, 0x1, 0x20, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) (async, rerun: 64) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="0300bbbbbbbb000000de86377f1ed936544cafa4d47d4a7d5ed6593ed5be6aa72727cb1225eb847a39c58748d2c59993ade3ae8dcaf59214d213935f2b565ce2bb"], 0x0) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0xe00000000000000, 0x8}, 0x18) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xa000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x1000000000000000, 0x8}, 0x18) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xb000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(0xffffffffffffffff, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r6, &(0x7f0000000300)={@void, [{' ', r7}, {' ', r8}, {}]}, 0x3f) r9 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r9, &(0x7f0000000300)={@void, [{' ', r10}, {' ', r11}, {}]}, 0x3f) r12 = getpgid(0x0) write$damon_target_ids(0xffffffffffffffff, &(0x7f0000000080)={@void, [{}, {}, {' ', r1}, {' ', r5}, {' ', r7}, {' ', r11}, {' ', r12}]}, 0x93) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 00:04:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300cabbbbbb000010de860d7f5e"], 0x0) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xc000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x1100000000000000, 0x8}, 0x18) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xd000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x1200000000000000, 0x8}, 0x18) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xe000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(0xffffffffffffffff, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) (async) r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) (async) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r6, &(0x7f0000000300)={@void, [{' ', r7}, {' ', r8}, {}]}, 0x3f) (async) r9 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r9, &(0x7f0000000300)={@void, [{' ', r10}, {' ', r11}, {}]}, 0x3f) (async) r12 = getpgid(0x0) write$damon_target_ids(0xffffffffffffffff, &(0x7f0000000080)={@void, [{}, {}, {' ', r1}, {' ', r5}, {' ', r7}, {' ', r11}, {' ', r12}]}, 0x93) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) read(r0, 0x0, 0x0) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x2500000000000000, 0x8}, 0x18) 00:04:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300cabbbbbb000010de860d7f5e"], 0x0) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x10000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff01800000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(0xffffffffffffffff, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) (async) r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) (async) r6 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r6, &(0x7f0000000300)={@void, [{' ', r7}, {' ', r8}, {}]}, 0x3f) (async) r9 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r9, &(0x7f0000000300)={@void, [{' ', r10}, {' ', r11}, {}]}, 0x3f) (async) r12 = getpgid(0x0) write$damon_target_ids(0xffffffffffffffff, &(0x7f0000000080)={@void, [{}, {}, {' ', r1}, {' ', r5}, {' ', r7}, {' ', r11}, {' ', r12}]}, 0x93) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) (async) read(r0, 0x0, 0x0) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x5c00000000000000, 0x8}, 0x18) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x11000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x12000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:21 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:21 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0xffffff7f00000000, 0x8}, 0x18) 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300cabbbbbb000010de860d7f5e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300cabbbbbb000010de860d7f5e"], 0x0) (async) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x210e0000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0xffffffff00000000, 0x8}, 0x18) 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x18}, 0x18) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x220e0000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r2, &(0x7f0000000300)={@void, [{' ', r3}, {' ', r4}, {}]}, 0x3f) write$damon_target_ids(r0, &(0x7f0000000080)={@val, [{' ', r1}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', r3}]}, 0x71) [ 262.111767][T17715] 9pnet_fd: Insufficient options for proto=fd 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x80) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x25000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0001bbbbbbbb000000da2b7f028079de860d7f1e"], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100e0, 0x204}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x100) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x2c020000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x80) 00:04:22 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) write$damon_target_ids(r2, &(0x7f0000000300)={@void, [{' ', r3}, {' ', r4}, {}]}, 0x3f) write$damon_target_ids(r0, &(0x7f0000000080)={@val, [{' ', r1}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', r3}]}, 0x71) [ 262.260628][T17733] 9pnet_fd: Insufficient options for proto=fd 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x32030000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x80) (async) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x3c000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 262.314921][T17761] 9pnet_fd: Insufficient options for proto=fd 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x208800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r2, 0x10001}) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x48000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0001bbbbbbbb000000da2b7f028079de860d7f1e"], 0x0) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (rerun: 32) openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100e0, 0x204}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x100) 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async) r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async, rerun: 64) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x208800) (rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r2, 0x10001}) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r2, &(0x7f0000000300)={@void, [{' ', r3}, {' ', r4}, {}]}, 0x3f) write$damon_target_ids(r0, &(0x7f0000000080)={@val, [{' ', r1}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', r3}]}, 0x71) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) read(r0, 0x0, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$damon_target_ids(r2, &(0x7f0000000300)={@void, [{' ', r3}, {' ', r4}, {}]}, 0x3f) (async) write$damon_target_ids(r0, &(0x7f0000000080)={@val, [{' ', r1}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}, {' ', r3}]}, 0x71) (async) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x4b030000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x208800) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r2, 0x10001}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) (async) openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x208800) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={0x0, 0x0, r2, 0x10001}) (async) 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0001bbbbbbbb000000da2b7f028079de860d7f1e"], 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100e0, 0x204}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x100) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x4c000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x50010000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de862d7f1e"], 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendmmsg(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@llc={0x1a, 0x13, 0x3, 0x80, 0x3, 0xa6, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="722ffde2ca619192ff2dee37123c55c029784f0fe82222e6b73097d9e4d028049083eedbdebe7d0fed5fd044dc884e0d5fa530fbf77ae801fa2b08187b2bf9f949d7a37b129354b843cd0c4d5c8625fc1b685c6182", 0x55}, {&(0x7f0000000240)="af6dec5c95bcf786fe8b5273f55e916bae04a9b0af8c7a085ef8e49259f175ccd149d945859339ce1146f1ddf15e8164614f8d202c6adfcc6a4ccf5ab537336e46abb51e7662fb1f3ac1a0d58a439201bacd69e6a382cf6e", 0x58}], 0x3, &(0x7f0000000300)=[{0x98, 0x29, 0xffffffe1, "f4dc4a9a9e216b27539d0994768ccc8c1b17bfcfd6ecf9dab6787a8139c5aa8153fec202644d3fa11059eb00482db887eb0279b4f3f875714444c2d640a2458bafd34aa78eb11f094bb4b826785e5be2199a869b6987aaf5cbf28e8167c1a0251581b74c50253bb05f3daa921476a759c34537cf0ba630e3f729e749594fd3e0d94c75723c"}], 0x98}}], 0x1, 0x1) 00:04:22 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x10) read(r0, 0x0, 0x0) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x68000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de862d7f1e"], 0x0) (async) r2 = socket$phonet(0x23, 0x2, 0x1) sendmmsg(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@llc={0x1a, 0x13, 0x3, 0x80, 0x3, 0xa6, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="722ffde2ca619192ff2dee37123c55c029784f0fe82222e6b73097d9e4d028049083eedbdebe7d0fed5fd044dc884e0d5fa530fbf77ae801fa2b08187b2bf9f949d7a37b129354b843cd0c4d5c8625fc1b685c6182", 0x55}, {&(0x7f0000000240)="af6dec5c95bcf786fe8b5273f55e916bae04a9b0af8c7a085ef8e49259f175ccd149d945859339ce1146f1ddf15e8164614f8d202c6adfcc6a4ccf5ab537336e46abb51e7662fb1f3ac1a0d58a439201bacd69e6a382cf6e", 0x58}], 0x3, &(0x7f0000000300)=[{0x98, 0x29, 0xffffffe1, "f4dc4a9a9e216b27539d0994768ccc8c1b17bfcfd6ecf9dab6787a8139c5aa8153fec202644d3fa11059eb00482db887eb0279b4f3f875714444c2d640a2458bafd34aa78eb11f094bb4b826785e5be2199a869b6987aaf5cbf28e8167c1a0251581b74c50253bb05f3daa921476a759c34537cf0ba630e3f729e749594fd3e0d94c75723c"}], 0x98}}], 0x1, 0x1) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x10) read(r0, 0x0, 0x0) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x6c000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 262.838878][T17892] 9pnet_fd: Insufficient options for proto=fd 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de862d7f1e"], 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendmmsg(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@llc={0x1a, 0x13, 0x3, 0x80, 0x3, 0xa6, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="722ffde2ca619192ff2dee37123c55c029784f0fe82222e6b73097d9e4d028049083eedbdebe7d0fed5fd044dc884e0d5fa530fbf77ae801fa2b08187b2bf9f949d7a37b129354b843cd0c4d5c8625fc1b685c6182", 0x55}, {&(0x7f0000000240)="af6dec5c95bcf786fe8b5273f55e916bae04a9b0af8c7a085ef8e49259f175ccd149d945859339ce1146f1ddf15e8164614f8d202c6adfcc6a4ccf5ab537336e46abb51e7662fb1f3ac1a0d58a439201bacd69e6a382cf6e", 0x58}], 0x3, &(0x7f0000000300)=[{0x98, 0x29, 0xffffffe1, "f4dc4a9a9e216b27539d0994768ccc8c1b17bfcfd6ecf9dab6787a8139c5aa8153fec202644d3fa11059eb00482db887eb0279b4f3f875714444c2d640a2458bafd34aa78eb11f094bb4b826785e5be2199a869b6987aaf5cbf28e8167c1a0251581b74c50253bb05f3daa921476a759c34537cf0ba630e3f729e749594fd3e0d94c75723c"}], 0x98}}], 0x1, 0x1) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 2: r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x10) read(r0, 0x0, 0x0) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x74000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x7a000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2}, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:22 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) 00:04:22 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x7fffffff, 0x400040) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={r4, 0x0, r0, 0x3f, 0x80000}) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 262.946521][T17911] 9pnet_fd: Insufficient options for proto=fd 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x7c000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:22 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) 00:04:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x88000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 263.005973][T17923] 9pnet_fd: Insufficient options for proto=fd 00:04:23 executing program 2: read(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) (async) 00:04:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x8a030000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2}, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2}, 0x4) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) (async) 00:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (fail_nth: 1) 00:04:23 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4804) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x7fffffff, 0x400040) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={r4, 0x0, r0, 0x3f, 0x80000}) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4804) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x7fffffff, 0x400040) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={r4}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={r4, 0x0, r0, 0x3f, 0x80000}) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x98000000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (fail_nth: 2) 00:04:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2}, 0x4) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) [ 263.794705][T17947] FAULT_INJECTION: forcing a failure. [ 263.794705][T17947] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:04:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xcc010000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 263.818553][T17947] CPU: 0 PID: 17947 Comm: syz-executor.2 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 263.821117][T17947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 263.823666][T17947] Call trace: [ 263.824487][T17947] dump_backtrace+0x1c4/0x1f0 [ 263.825650][T17947] show_stack+0x2c/0x54 [ 263.826711][T17947] dump_stack_lvl+0x104/0x16c [ 263.827894][T17947] dump_stack+0x1c/0x58 [ 263.828952][T17947] should_fail+0x1dc/0x200 [ 263.830061][T17947] should_fail_usercopy+0x20/0x30 [ 263.831355][T17947] _copy_to_iter+0xdc/0x76c [ 263.832485][T17947] seq_read_iter+0x514/0x5e0 [ 263.833598][T17947] vfs_read+0x2d4/0x448 [ 263.834661][T17947] ksys_read+0xb4/0x160 [ 263.835730][T17947] __arm64_sys_read+0x24/0x34 [ 263.836873][T17947] el0_svc_common+0x138/0x220 [ 263.838066][T17947] do_el0_svc+0x48/0x164 [ 263.839080][T17947] el0_svc+0x58/0x150 [ 263.840051][T17947] el0t_64_sync_handler+0x84/0xf0 [ 263.841335][T17947] el0t_64_sync+0x18c/0x190 00:04:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xf6020000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (fail_nth: 3) 00:04:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 263.918846][T17965] FAULT_INJECTION: forcing a failure. [ 263.918846][T17965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.921978][T17965] CPU: 0 PID: 17965 Comm: syz-executor.2 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 263.924504][T17965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 263.926980][T17965] Call trace: [ 263.927834][T17965] dump_backtrace+0x1c4/0x1f0 [ 263.929015][T17965] show_stack+0x2c/0x54 [ 263.930064][T17965] dump_stack_lvl+0x104/0x16c [ 263.931282][T17965] dump_stack+0x1c/0x58 [ 263.932316][T17965] should_fail+0x1dc/0x200 [ 263.933440][T17965] should_fail_usercopy+0x20/0x30 [ 263.934686][T17965] simple_read_from_buffer+0xc0/0x1cc [ 263.936034][T17965] proc_fail_nth_read+0xf4/0x164 [ 263.937253][T17965] vfs_read+0x19c/0x448 [ 263.938294][T17965] ksys_read+0xb4/0x160 [ 263.939335][T17965] __arm64_sys_read+0x24/0x34 [ 263.940525][T17965] el0_svc_common+0x138/0x220 [ 263.941676][T17965] do_el0_svc+0x48/0x164 [ 263.942731][T17965] el0_svc+0x58/0x150 [ 263.943772][T17965] el0t_64_sync_handler+0x84/0xf0 [ 263.945031][T17965] el0t_64_sync+0x18c/0x190 00:04:23 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4804) (async) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x7fffffff, 0x400040) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={r4}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000040)={r4, 0x0, r0, 0x3f, 0x80000}) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0xffffe000, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:23 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:23 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbbc11e2c4d860d7f1e"], 0x0) 00:04:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:23 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:23 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x2, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbbc11e2c4d860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbbc11e2c4d860d7f1e"], 0x0) (async) 00:04:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x3, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x21) 00:04:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:24 executing program 5: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xaed) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="5efb9b9d02048a67504346c3726ae1d42c3042739c6d9ba4b904f1b37e26128fea83692044e852aa87b23404df145b19f4c3bd2fedff66a9bc480ceee250cc737110bf8deab8e7cf74e3b2e08b0863edeab16633f168eb52a59d48847b897fac1129a22a82c39de8fd1705a9825c96d383e334982731d308a59210352365222a30bbf37b569ba4f3670e", 0x8a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="88d5b48b1451d89b6f0198fa54d44848871b8240fe29c83edb3f77d472872c217e3e1bb91df652cbca679d7a60d5e2df5843f0499e24730f10789f5988f67c48f194a4f5d2c0fcf0fd2d1e30f3729987e35420c3b57d044f59f080efb896b889a7b9da551e895568adf996fa5390bcb85fe7c4963c0c390f90b350df40d0e23745f4fe498a525bbd36a1092491eb31", 0x8f}, {&(0x7f0000000380)="315b1be896e8f32ea7122a6307a83a4ccaa6057f11e4a639d7a0fe05151a47f2b124b7d334bf275b861a23e724886a8fa226c31a194ee1f5b89e270af8235ddf9d12ccd676b9f518e91aba43b19d2faeec00f03dc0ba817a54edada970917ebe9da2b976fa4a5be63217a94b545b324e36a150878c9f2b857cf27e8208b8a64adf5540d8880e6a780cf1d8067518bf01d4b80eac851b5aa5f661006b6afe8febf05a29a5c071ab2947cbac46ec1a53d7dc0cac22998d53ecc24d20fcf514fadecb1cf6e66d9cc115f829945b36ff1917f0cc69ee1f30ab2215b5241d1235bf2eb1d5be11c8eb1a3c8c57b212da91e3d7e34d32635feb368813811682", 0xfc}, {&(0x7f0000000480)="7cc31f38f98747dd4913b0a8f6fdf92888af16017d0a6c35f09876fc13bc62c8052fa0472765b9a12c6e1e6d987ca6b39c8ade826aee39f759bcadcdb4718384062da42b4e816a9127b92a0909de2454a052397f677b2fbde6cc6740cdd39b2099cf31e942e8476cb57e340108c265553bee8aa21f1fb79268d5146776bfc56bf2db215a37570183dd66", 0x8a}], 0x5, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010101}}}], 0x50}, 0x20000080) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbbc11e2c4d860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbbc11e2c4d860d7f1e"], 0x0) (async) [ 264.852766][T18012] tcpmss_tg4_check: 66 callbacks suppressed [ 264.852775][T18012] xt_TCPMSS: Only works on TCP SYN packets 00:04:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x5, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x71) [ 264.879262][T18017] xt_TCPMSS: Only works on TCP SYN packets [ 264.881692][T18019] xt_TCPMSS: Only works on TCP SYN packets 00:04:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x6, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:24 executing program 5: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xaed) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="5efb9b9d02048a67504346c3726ae1d42c3042739c6d9ba4b904f1b37e26128fea83692044e852aa87b23404df145b19f4c3bd2fedff66a9bc480ceee250cc737110bf8deab8e7cf74e3b2e08b0863edeab16633f168eb52a59d48847b897fac1129a22a82c39de8fd1705a9825c96d383e334982731d308a59210352365222a30bbf37b569ba4f3670e", 0x8a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="88d5b48b1451d89b6f0198fa54d44848871b8240fe29c83edb3f77d472872c217e3e1bb91df652cbca679d7a60d5e2df5843f0499e24730f10789f5988f67c48f194a4f5d2c0fcf0fd2d1e30f3729987e35420c3b57d044f59f080efb896b889a7b9da551e895568adf996fa5390bcb85fe7c4963c0c390f90b350df40d0e23745f4fe498a525bbd36a1092491eb31", 0x8f}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="7cc31f38f98747dd4913b0a8f6fdf92888af16017d0a6c35f09876fc13bc62c8052fa0472765b9a12c6e1e6d987ca6b39c8ade826aee39f759bcadcdb4718384062da42b4e816a9127b92a0909de2454a052397f677b2fbde6cc6740cdd39b2099cf31e942e8476cb57e340108c265553bee8aa21f1fb79268d5146776bfc56bf2db215a37570183dd66", 0x8a}], 0x5, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010101}}}], 0x50}, 0x20000080) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) (async) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r2, 0x10, 0x0, 0x800) (async) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xaed) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="5efb9b9d02048a67504346c3726ae1d42c3042739c6d9ba4b904f1b37e26128fea83692044e852aa87b23404df145b19f4c3bd2fedff66a9bc480ceee250cc737110bf8deab8e7cf74e3b2e08b0863edeab16633f168eb52a59d48847b897fac1129a22a82c39de8fd1705a9825c96d383e334982731d308a59210352365222a30bbf37b569ba4f3670e", 0x8a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="88d5b48b1451d89b6f0198fa54d44848871b8240fe29c83edb3f77d472872c217e3e1bb91df652cbca679d7a60d5e2df5843f0499e24730f10789f5988f67c48f194a4f5d2c0fcf0fd2d1e30f3729987e35420c3b57d044f59f080efb896b889a7b9da551e895568adf996fa5390bcb85fe7c4963c0c390f90b350df40d0e23745f4fe498a525bbd36a1092491eb31", 0x8f}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="7cc31f38f98747dd4913b0a8f6fdf92888af16017d0a6c35f09876fc13bc62c8052fa0472765b9a12c6e1e6d987ca6b39c8ade826aee39f759bcadcdb4718384062da42b4e816a9127b92a0909de2454a052397f677b2fbde6cc6740cdd39b2099cf31e942e8476cb57e340108c265553bee8aa21f1fb79268d5146776bfc56bf2db215a37570183dd66", 0x8a}], 0x5, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010101}}}], 0x50}, 0x20000080) (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 264.932398][T18028] xt_TCPMSS: Only works on TCP SYN packets [ 264.936771][T18038] xt_TCPMSS: Only works on TCP SYN packets 00:04:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:24 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:24 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xb4) 00:04:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:24 executing program 5: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) (async) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xaed) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="5efb9b9d02048a67504346c3726ae1d42c3042739c6d9ba4b904f1b37e26128fea83692044e852aa87b23404df145b19f4c3bd2fedff66a9bc480ceee250cc737110bf8deab8e7cf74e3b2e08b0863edeab16633f168eb52a59d48847b897fac1129a22a82c39de8fd1705a9825c96d383e334982731d308a59210352365222a30bbf37b569ba4f3670e", 0x8a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="88d5b48b1451d89b6f0198fa54d44848871b8240fe29c83edb3f77d472872c217e3e1bb91df652cbca679d7a60d5e2df5843f0499e24730f10789f5988f67c48f194a4f5d2c0fcf0fd2d1e30f3729987e35420c3b57d044f59f080efb896b889a7b9da551e895568adf996fa5390bcb85fe7c4963c0c390f90b350df40d0e23745f4fe498a525bbd36a1092491eb31", 0x8f}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="7cc31f38f98747dd4913b0a8f6fdf92888af16017d0a6c35f09876fc13bc62c8052fa0472765b9a12c6e1e6d987ca6b39c8ade826aee39f759bcadcdb4718384062da42b4e816a9127b92a0909de2454a052397f677b2fbde6cc6740cdd39b2099cf31e942e8476cb57e340108c265553bee8aa21f1fb79268d5146776bfc56bf2db215a37570183dd66", 0x8a}], 0x5, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010101}}}], 0x50}, 0x20000080) (async, rerun: 32) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (rerun: 32) 00:04:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 265.014685][T18050] xt_TCPMSS: Only works on TCP SYN packets 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x8, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x8000, 0x7, 0x8000, 0x4, {{0x1a, 0x4, 0x3, 0x3c, 0x68, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x17, 0x1, [{0x0, 0x7, "bada3389de"}, {0x0, 0x3, "88"}, {0x6, 0x7, "b3c1c94b99"}]}, @timestamp_prespec={0x44, 0x24, 0xae, 0x3, 0xb, [{@loopback, 0x7}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x41}, {@loopback, 0x9}]}, @timestamp={0x44, 0x10, 0xa0, 0x0, 0x7, [0x20, 0x7, 0x7ff]}, @rr={0x7, 0x7, 0x6c, [@private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x20fd18ec46f7eaa1) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030a32065c91423513471f2d0ea5"], 0x0) 00:04:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:25 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x800) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000ac0)={{r0}, "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"}) r2 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) [ 265.049694][T18057] xt_TCPMSS: Only works on TCP SYN packets 00:04:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xe2) 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x9, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 265.097459][T18066] xt_TCPMSS: Only works on TCP SYN packets 00:04:25 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x800) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000ac0)={{r0}, "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"}) (async) r2 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) 00:04:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x103) 00:04:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xa, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 265.139313][T18072] xt_TCPMSS: Only works on TCP SYN packets 00:04:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x8000, 0x7, 0x8000, 0x4, {{0x1a, 0x4, 0x3, 0x3c, 0x68, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x17, 0x1, [{0x0, 0x7, "bada3389de"}, {0x0, 0x3, "88"}, {0x6, 0x7, "b3c1c94b99"}]}, @timestamp_prespec={0x44, 0x24, 0xae, 0x3, 0xb, [{@loopback, 0x7}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x41}, {@loopback, 0x9}]}, @timestamp={0x44, 0x10, 0xa0, 0x0, 0x7, [0x20, 0x7, 0x7ff]}, @rr={0x7, 0x7, 0x6c, [@private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x20fd18ec46f7eaa1) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030a32065c91423513471f2d0ea5"], 0x0) 00:04:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x135) 00:04:25 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x800) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000ac0)={{r0}, "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"}) (async) r2 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fsetxattr$trusted_overlay_origin(r3, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xb, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 265.193677][T18086] xt_TCPMSS: Only works on TCP SYN packets 00:04:25 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x15601) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x81}, {r0, 0x4010}, {r1, 0x802}, {}], 0x4, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={[0x6]}, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') write$binfmt_aout(r4, &(0x7f00000001c0)={{0x108, 0x7, 0x4, 0x2f4, 0x33e, 0x4, 0x30a, 0x1}, "3e1d6de7865317bf8ecc7de0943de578a44ff51e843b26a35495e65cb453bab7aab92309bc865e440b7af638078a481e996f01f8e5f032825519d0f88df1e663c9a223a5f932816363ef42ab0cd1970a6f540d4b8eafbe40fa57d86e6c81a2899dd136e6033ed6e62440bfbc0e28182d8361a610512c1405787e0a7d469f946058fd16620ca34a093186bce3411a3126a5cd068f924375125478f5d2530347b41b7f858b8a0bdd42c885", ['\x00']}, 0x1ca) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x40040, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x8, 0x10, r5, 0x83000000) openat2(r4, &(0x7f0000000000)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xc, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, 0x0, 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x170) 00:04:25 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', r2, 0x8000, 0x7, 0x8000, 0x4, {{0x1a, 0x4, 0x3, 0x3c, 0x68, 0x65, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x17, 0x1, [{0x0, 0x7, "bada3389de"}, {0x0, 0x3, "88"}, {0x6, 0x7, "b3c1c94b99"}]}, @timestamp_prespec={0x44, 0x24, 0xae, 0x3, 0xb, [{@loopback, 0x7}, {@multicast1, 0x3}, {@rand_addr=0x64010100, 0x41}, {@loopback, 0x9}]}, @timestamp={0x44, 0x10, 0xa0, 0x0, 0x7, [0x20, 0x7, 0x7ff]}, @rr={0x7, 0x7, 0x6c, [@private=0xa010102]}]}}}}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c1}, 0x20fd18ec46f7eaa1) (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030a32065c91423513471f2d0ea5"], 0x0) 00:04:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xd, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xe, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:25 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x1a5) 00:04:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x10, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x11, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd28, 0x25dfdbfc, {0x7, r1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80841}, 0x41) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bb1e00000004000000000000"], 0x0) syz_emit_ethernet(0x15f, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x15601) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x81}, {r0, 0x4010}, {r1, 0x802}, {}], 0x4, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={[0x6]}, 0x8) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') write$binfmt_aout(r4, &(0x7f00000001c0)={{0x108, 0x7, 0x4, 0x2f4, 0x33e, 0x4, 0x30a, 0x1}, "3e1d6de7865317bf8ecc7de0943de578a44ff51e843b26a35495e65cb453bab7aab92309bc865e440b7af638078a481e996f01f8e5f032825519d0f88df1e663c9a223a5f932816363ef42ab0cd1970a6f540d4b8eafbe40fa57d86e6c81a2899dd136e6033ed6e62440bfbc0e28182d8361a610512c1405787e0a7d469f946058fd16620ca34a093186bce3411a3126a5cd068f924375125478f5d2530347b41b7f858b8a0bdd42c885", ['\x00']}, 0x1ca) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x40040, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x8, 0x10, r5, 0x83000000) (async) openat2(r4, &(0x7f0000000000)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x1d5) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x12, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x20e) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x25, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x15601) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x81}, {r0, 0x4010}, {r1, 0x802}, {}], 0x4, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={[0x6]}, 0x8) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') write$binfmt_aout(r4, &(0x7f00000001c0)={{0x108, 0x7, 0x4, 0x2f4, 0x33e, 0x4, 0x30a, 0x1}, "3e1d6de7865317bf8ecc7de0943de578a44ff51e843b26a35495e65cb453bab7aab92309bc865e440b7af638078a481e996f01f8e5f032825519d0f88df1e663c9a223a5f932816363ef42ab0cd1970a6f540d4b8eafbe40fa57d86e6c81a2899dd136e6033ed6e62440bfbc0e28182d8361a610512c1405787e0a7d469f946058fd16620ca34a093186bce3411a3126a5cd068f924375125478f5d2530347b41b7f858b8a0bdd42c885", ['\x00']}, 0x1ca) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x40040, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x8, 0x10, r5, 0x83000000) (async) openat2(r4, &(0x7f0000000000)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x3c, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd28, 0x25dfdbfc, {0x7, r1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80841}, 0x41) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bb1e00000004000000000000"], 0x0) syz_emit_ethernet(0x15f, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd28, 0x25dfdbfc, {0x7, r1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80841}, 0x41) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bb1e00000004000000000000"], 0x0) (async) syz_emit_ethernet(0x15f, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) (async) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x23b) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 5: prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x6, 0x201}, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x1ff) r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') prlimit64(0x0, 0xc, &(0x7f0000000080)={0x81, 0x9}, &(0x7f00000000c0)) openat2(r6, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getrlimit(0xc, &(0x7f00000001c0)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x800}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x48, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x25f) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4c, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 5: prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x6, 0x201}, &(0x7f0000000040)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x1ff) (async) r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) prlimit64(0x0, 0xc, &(0x7f0000000080)={0x81, 0x9}, &(0x7f00000000c0)) openat2(r6, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) getrlimit(0xc, &(0x7f00000001c0)) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x800}) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x68, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_GETMDB={0x18, 0x56, 0x2, 0x70bd28, 0x25dfdbfc, {0x7, r1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x80841}, 0x41) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bb1e00000004000000000000"], 0x0) (async) syz_emit_ethernet(0x15f, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x293) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x6c, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 5: prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000000)={0x6, 0x201}, &(0x7f0000000040)) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x1ff) (async) r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) (async) sched_setaffinity(r5, 0x8, &(0x7f0000000180)=0x9) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) prlimit64(0x0, 0xc, &(0x7f0000000080)={0x81, 0x9}, &(0x7f00000000c0)) openat2(r6, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) getrlimit(0xc, &(0x7f00000001c0)) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x800}) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x74, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2b3) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7a, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x10000) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7c, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2f4) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x10000) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x10000) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x88, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES64=r3], 0x48}}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r7], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x120, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x301) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x98, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x10000) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00') (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) (async) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x10000) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) [ 266.645694][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x315) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x150, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80), 0x18) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x1002, &(0x7f0000001ac0)="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", 0x9a, 0x0, &(0x7f0000000040)="719ff2070a1a703237d90b058a9b4e6c7b5068bed3fc07cd2b538f962ce112497c7f7b95b38521b153d053cb5e40d700b58d324adbd3244b2a21906880354593c347ec1573c95d62fc0d7a5fc88d57cc32b390419bb72e9a9904e65c504f729c02083e9762f68f2ee15c1722b4b2969697e87ad0a4fa4bf866b1df63669e8f50f6966f70cc60bfd1019eb128e80f0d576cc25d4bdb0b3c399b80"}) 00:04:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) (rerun: 32) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES64=r3], 0x48}}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r4], 0x44}}, 0x0) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r7], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x120, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x1cc, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80), 0x18) (async) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x1002, &(0x7f0000001ac0)="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", 0x9a, 0x0, &(0x7f0000000040)="719ff2070a1a703237d90b058a9b4e6c7b5068bed3fc07cd2b538f962ce112497c7f7b95b38521b153d053cb5e40d700b58d324adbd3244b2a21906880354593c347ec1573c95d62fc0d7a5fc88d57cc32b390419bb72e9a9904e65c504f729c02083e9762f68f2ee15c1722b4b2969697e87ad0a4fa4bf866b1df63669e8f50f6966f70cc60bfd1019eb128e80f0d576cc25d4bdb0b3c399b80"}) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x34c) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x22c, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80), 0x18) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x1002, &(0x7f0000001ac0)="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", 0x9a, 0x0, &(0x7f0000000040)="719ff2070a1a703237d90b058a9b4e6c7b5068bed3fc07cd2b538f962ce112497c7f7b95b38521b153d053cb5e40d700b58d324adbd3244b2a21906880354593c347ec1573c95d62fc0d7a5fc88d57cc32b390419bb72e9a9904e65c504f729c02083e9762f68f2ee15c1722b4b2969697e87ad0a4fa4bf866b1df63669e8f50f6966f70cc60bfd1019eb128e80f0d576cc25d4bdb0b3c399b80"}) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x2f6, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x37c) 00:04:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) (rerun: 32) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYRES64=r3], 0x48}}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r4], 0x44}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r7], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x120, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000054}, 0x4000) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x1, 0xa}, 0x18) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x300, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x3c6) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x1, 0xa}, 0x18) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x332, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x34b, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030071bbbbbb000000de860d7f1e"], 0x0) 00:04:26 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x1, 0xa}, 0x18) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x417) 00:04:26 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:26 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bind$rxrpc(r2, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3ff, @empty, 0x9}}, 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x10) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x38a, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:26 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x44f) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x500, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bind$rxrpc(r2, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3ff, @empty, 0x9}}, 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x10) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030071bbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030071bbbbbb000000de860d7f1e"], 0x0) (async) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x600, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) (async) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bind$rxrpc(r2, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x3ff, @empty, 0x9}}, 0x24) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_batadv\x00', 0x10) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x4e0) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x700, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 5: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe20c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x91) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xe02) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x900, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030071bbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="030071bbbbbb000000de860d7f1e"], 0x0) (async) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xa00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x1503) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 5: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe20c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x91) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x4) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe20c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x91) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xb00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xc00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 267.272765][T18396] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x1704) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 5: r0 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x4) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe20c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200400c0}, 0x91) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="0300bbbb000f0000000000007f1e06ae8f21420351bfd9ecaebe4e03104744b84f1f42a207a8bca562293bf4ecce55251359f0e981"], 0x0) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xd00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 00:04:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x11a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) ppoll(&(0x7f0000000040)=[{r1, 0x1}, {r0, 0x10}, {r0, 0x34}, {r2, 0x1004}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x501]}, 0x8) openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x40000, 0x0, 0x8}, 0x96) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2026) [ 267.468853][T18413] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xe00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 00:04:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x11a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) ppoll(&(0x7f0000000040)=[{r1, 0x1}, {r0, 0x10}, {r0, 0x34}, {r2, 0x1004}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x501]}, 0x8) openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x40000, 0x0, 0x8}, 0x96) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x11a) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r2, 0x10, 0x0, 0x800) (async) ppoll(&(0x7f0000000040)=[{r1, 0x1}, {r0, 0x10}, {r0, 0x34}, {r2, 0x1004}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x501]}, 0x8) (async) openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x40000, 0x0, 0x8}, 0x96) (async) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2100) [ 267.517042][T18430] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xe21, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="0300bbbb000f0000000000007f1e06ae8f21420351bfd9ecaebe4e03104744b84f1f42a207a8bca562293bf4ecce55251359f0e981"], 0x0) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 00:04:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x11a) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) (async) ppoll(&(0x7f0000000040)=[{r1, 0x1}, {r0, 0x10}, {r0, 0x34}, {r2, 0x1004}], 0x4, &(0x7f0000000080), &(0x7f00000000c0)={[0x501]}, 0x8) (async) openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x40000, 0x0, 0x8}, 0x96) [ 267.562393][T18444] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x3501) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xe22, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 00:04:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) fsetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73795f74656d2ecdd890a232faf50863077d80352d85b9cd67ef4aa866bb6b186d9d"], &(0x7f0000000040)=',,^*\x00', 0x5, 0x1) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x1100, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 267.617167][T18457] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x3b02) [ 267.636274][T18462] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 00:04:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="0300bbbb000f0000000000007f1e06ae8f21420351bfd9ecaebe4e03104744b84f1f42a207a8bca562293bf4ecce55251359f0e981"], 0x0) (rerun: 32) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x1200, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) fsetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73795f74656d2ecdd890a232faf50863077d80352d85b9cd67ef4aa866bb6b186d9d"], &(0x7f0000000040)=',,^*\x00', 0x5, 0x1) [ 267.667930][T18468] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 00:04:27 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) fsetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73795f74656d2ecdd890a232faf50863077d80352d85b9cd67ef4aa866bb6b186d9d"], &(0x7f0000000040)=',,^*\x00', 0x5, 0x1) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x4c03) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x210e, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 267.706954][T18477] 9pnet_fd: Insufficient options for proto=fd [ 267.724983][T18480] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x220e, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x700, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r0, 0x10, 0x0, 0x800) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) close_range(r2, r1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) [ 267.782711][T18492] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746894e4d077683d598ae137b291efdda738e8e710070b56bec6334b4b89f1e46ec60837e97f46e7e9be69adb6d78b507b43ccd9b6651b359711184296c1c5c8fae56747ad35a1d0806b84f527997259fe2ae57b2c7892e278bdb0"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r3], 0x44}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="00008000"}, 0x14) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bind(r5, &(0x7f0000000380)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x2500, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2f4) 00:04:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x10, 0x0, 0x800) (async) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) (async) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) close_range(r2, r1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x4f04) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x2c02, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 267.853635][T18507] 9pnet_fd: Insufficient options for proto=fd [ 267.854225][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x5f02) 00:04:27 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r0, 0x10, 0x0, 0x800) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) close_range(r2, r1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x10, 0x0, 0x800) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r2, 0x10, 0x0, 0x800) (async) close_range(r2, r1, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}}) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x3203, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 267.929804][T18529] 9pnet_fd: Insufficient options for proto=fd 00:04:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746894e4d077683d598ae137b291efdda738e8e710070b56bec6334b4b89f1e46ec60837e97f46e7e9be69adb6d78b507b43ccd9b6651b359711184296c1c5c8fae56747ad35a1d0806b84f527997259fe2ae57b2c7892e278bdb0"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r3], 0x44}}, 0x0) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="00008000"}, 0x14) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) bind(r5, &(0x7f0000000380)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x7001) 00:04:27 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe00"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:27 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) r3 = syz_open_procfs(r2, &(0x7f0000000100)='attr\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x9}, 0x18) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x3c00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:27 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x1a5) [ 267.999897][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4800, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x7100) 00:04:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) r3 = syz_open_procfs(r2, &(0x7f0000000100)='attr\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x9}, 0x18) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) (async) syz_open_procfs(r2, &(0x7f0000000100)='attr\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x9}, 0x18) (async) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x7001) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4b03, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746894e4d077683d598ae137b291efdda738e8e710070b56bec6334b4b89f1e46ec60837e97f46e7e9be69adb6d78b507b43ccd9b6651b359711184296c1c5c8fae56747ad35a1d0806b84f527997259fe2ae57b2c7892e278bdb0"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r3], 0x44}}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="00008000"}, 0x14) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bind(r5, &(0x7f0000000380)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746894e4d077683d598ae137b291efdda738e8e710070b56bec6334b4b89f1e46ec60837e97f46e7e9be69adb6d78b507b43ccd9b6651b359711184296c1c5c8fae56747ad35a1d0806b84f527997259fe2ae57b2c7892e278bdb0"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r3], 0x44}}, 0x0) (async) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00'}) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000080)=0x6, 0x4) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="00008000"}, 0x14) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) bind(r5, &(0x7f0000000380)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) (async) 00:04:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x7c03) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4c00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 268.105317][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:04:28 executing program 4: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) write$binfmt_elf32(r2, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xaed) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) sendmsg$inet(r3, &(0x7f0000000640)={&(0x7f0000000140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="5efb9b9d02048a67504346c3726ae1d42c3042739c6d9ba4b904f1b37e26128fea83692044e852aa87b23404df145b19f4c3bd2fedff66a9bc480ceee250cc737110bf8deab8e7cf74e3b2e08b0863edeab16633f168eb52a59d48847b897fac1129a22a82c39de8fd1705a9825c96d383e334982731d308a59210352365222a30bbf37b569ba4f3670e", 0x8a}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="88d5b48b1451d89b6f0198fa54d44848871b8240fe29c83edb3f77d472872c217e3e1bb91df652cbca679d7a60d5e2df5843f0499e24730f10789f5988f67c48f194a4f5d2c0fcf0fd2d1e30f3729987e35420c3b57d044f59f080efb896b889a7b9da551e895568adf996fa5390bcb85fe7c4963c0c390f90b350df40d0e23745f4fe498a525bbd36a1092491eb31", 0x8f}, {&(0x7f0000000380)="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", 0xfc}, {&(0x7f0000000480)="7cc31f38f98747dd4913b0a8f6fdf92888af16017d0a6c35f09876fc13bc62c8052fa0472765b9a12c6e1e6d987ca6b39c8ade826aee39f759bcadcdb4718384062da42b4e816a9127b92a0909de2454a052397f677b2fbde6cc6740cdd39b2099cf31e942e8476cb57e340108c265553bee8aa21f1fb79268d5146776bfc56bf2db215a37570183dd66", 0x8a}], 0x5, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010101}}}], 0x50}, 0x20000080) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x5001, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x9302) 00:04:28 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) r3 = syz_open_procfs(r2, &(0x7f0000000100)='attr\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x9}, 0x18) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$damon_target_ids(r0, &(0x7f0000000300)={@void, [{' ', r1}, {' ', r2}, {}]}, 0x3f) (async) syz_open_procfs(r2, &(0x7f0000000100)='attr\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r4, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x9}, 0x18) (async) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x6800, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 1) 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 1) 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xa501) 00:04:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) bind$packet(r2, &(0x7f0000000080)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x6c00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 2) 00:04:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x8020, 0x0, 0x8}, 0x18) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fea000/0x14000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) openat2(r1, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 2) 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xb302) [ 268.327022][T18624] FAULT_INJECTION: forcing a failure. [ 268.327022][T18624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.333253][T18622] FAULT_INJECTION: forcing a failure. [ 268.333253][T18622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.342279][T18624] CPU: 0 PID: 18624 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7400, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 268.344732][T18624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 268.347268][T18624] Call trace: [ 268.348107][T18624] dump_backtrace+0x1c4/0x1f0 [ 268.349342][T18624] show_stack+0x2c/0x54 [ 268.350423][T18624] dump_stack_lvl+0x104/0x16c [ 268.351612][T18624] dump_stack+0x1c/0x58 [ 268.352684][T18624] should_fail+0x1dc/0x200 [ 268.353787][T18624] should_fail_usercopy+0x20/0x30 [ 268.355049][T18624] memdup_user+0x9c/0x1a8 [ 268.356171][T18624] strndup_user+0x78/0xb0 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xb400) [ 268.357278][T18624] __arm64_sys_mount+0x60/0x3c4 [ 268.358521][T18624] el0_svc_common+0x138/0x220 [ 268.359812][T18624] do_el0_svc+0x48/0x164 [ 268.360930][T18624] el0_svc+0x58/0x150 [ 268.361969][T18624] el0t_64_sync_handler+0x84/0xf0 [ 268.363334][T18624] el0t_64_sync+0x18c/0x190 [ 268.365490][T18622] CPU: 1 PID: 18622 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 268.368129][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 268.370620][T18622] Call trace: [ 268.371426][T18622] dump_backtrace+0x1c4/0x1f0 [ 268.372565][T18622] show_stack+0x2c/0x54 [ 268.373568][T18622] dump_stack_lvl+0x104/0x16c [ 268.374759][T18622] dump_stack+0x1c/0x58 [ 268.375762][T18622] should_fail+0x1dc/0x200 [ 268.376877][T18622] should_fail_usercopy+0x20/0x30 [ 268.378164][T18622] memdup_user+0x9c/0x1a8 [ 268.379268][T18622] strndup_user+0x78/0xb0 [ 268.380330][T18622] __arm64_sys_mount+0x60/0x3c4 [ 268.381525][T18622] el0_svc_common+0x138/0x220 [ 268.382685][T18622] do_el0_svc+0x48/0x164 [ 268.383775][T18622] el0_svc+0x58/0x150 [ 268.384808][T18622] el0t_64_sync_handler+0x84/0xf0 [ 268.386110][T18622] el0t_64_sync+0x18c/0x190 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7a00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x8020, 0x0, 0x8}, 0x18) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fea000/0x14000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) openat2(r1, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x8020, 0x0, 0x8}, 0x18) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fea000/0x14000)=nil}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) openat2(r1, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 3) 00:04:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 3) 00:04:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) bind$packet(r2, &(0x7f0000000080)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) bind$packet(r2, &(0x7f0000000080)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) (async) 00:04:28 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x8020, 0x0, 0x8}, 0x18) (async) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000fea000/0x14000)=nil}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) openat2(r1, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7c00, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xc603) 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 4) 00:04:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 4) [ 268.505497][T18658] FAULT_INJECTION: forcing a failure. [ 268.505497][T18658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.506818][T18657] FAULT_INJECTION: forcing a failure. [ 268.506818][T18657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.513685][T18657] CPU: 0 PID: 18657 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 268.516232][T18657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 268.518724][T18657] Call trace: [ 268.519502][T18657] dump_backtrace+0x1c4/0x1f0 [ 268.520798][T18657] show_stack+0x2c/0x54 [ 268.521824][T18657] dump_stack_lvl+0x104/0x16c [ 268.522980][T18657] dump_stack+0x1c/0x58 [ 268.524036][T18657] should_fail+0x1dc/0x200 [ 268.525101][T18657] should_fail_usercopy+0x20/0x30 [ 268.526358][T18657] __arm64_sys_mount+0x104/0x3c4 [ 268.527547][T18657] el0_svc_common+0x138/0x220 [ 268.528672][T18657] do_el0_svc+0x48/0x164 [ 268.529756][T18657] el0_svc+0x58/0x150 [ 268.530789][T18657] el0t_64_sync_handler+0x84/0xf0 [ 268.532029][T18657] el0t_64_sync+0x18c/0x190 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x8800, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 268.537047][T18658] CPU: 0 PID: 18658 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 268.539626][T18658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 268.542281][T18658] Call trace: [ 268.543100][T18658] dump_backtrace+0x1c4/0x1f0 [ 268.544308][T18658] show_stack+0x2c/0x54 [ 268.545376][T18658] dump_stack_lvl+0x104/0x16c [ 268.546573][T18658] dump_stack+0x1c/0x58 [ 268.547629][T18658] should_fail+0x1dc/0x200 [ 268.548803][T18658] should_fail_usercopy+0x20/0x30 [ 268.550111][T18658] __arm64_sys_mount+0x104/0x3c4 [ 268.551414][T18658] el0_svc_common+0x138/0x220 [ 268.552675][T18658] do_el0_svc+0x48/0x164 [ 268.553777][T18658] el0_svc+0x58/0x150 [ 268.554799][T18658] el0t_64_sync_handler+0x84/0xf0 [ 268.556122][T18658] el0t_64_sync+0x18c/0x190 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xd501) 00:04:28 executing program 5: syz_usb_connect(0x5, 0x48c, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0xae, 0x61, 0x8, 0x8, 0x57c, 0x8401, 0x61ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47a, 0x1, 0x2, 0x9a, 0x80, 0x7f, [{{0x9, 0x4, 0x41, 0x3, 0x7, 0x6e, 0x5d, 0x28, 0x7, [@uac_as, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "138b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x3, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0xfff, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x2}, @mdlm_detail={0xbf, 0x24, 0x13, 0x4, "a9d6d05e7542430c9d4ebf3ae41452e0bca97b507f07df935a947011e4e4319318cf4ee1faaaf3528333d5569c864ca734609fd3c03f3253e01c93f2427643a3047e60ea6633d539160da967dae2836aa4ca03832f42f40953b85b024a6c21f66e0fae8e9ea749e42296959ab19491c2b0490586a84df8c7e68a91b93ca897361641e4dcb83b9a3521ecdd7fe7119ed1f4a45e11ab863e49aa2442fb2edf7e40c746d001de6c08516ebf3a385347948597889618592df262d6af46"}, @obex={0x5, 0x24, 0x15, 0xffff}]}], [{{0x9, 0x5, 0xa, 0x1, 0x8, 0xab, 0x5b, 0x1f}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xb7, 0x8, 0x3c}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x1f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2c, 0xfffb}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x1, 0x1, 0x20, [@generic={0xc1, 0x1, "960c476df624c143708f1e4a3cdc51abcc4994b58b09a618e9a626714bc0d66f624e6dc22a0b1d5968ed9f3700be3e215edb83d0a2a8ffc6511700fe4ef393a16a3d62f360308a8aa879ed783f3469d47cdd532ec85aaafbc2033d8fd4a6133b75cc32ad379e936ef4a6f7e9eb461d16539ebdb0573e8603af10becf5a073928df2b708021758b98543cada7f8f91c1258438d7de1541f0a791cabeb20b15ebd39a2e62e073298c3b11e11d4a1d3731ae56117669b0464edbda57ae777e758"}, @generic={0x9d, 0x2, "d8768061008e408b1ea0bf68db78dc983543205d605ba3abea3d20e737cae223d08901f61cfe441ecbe959e15ad7c3bd07b3b2b5f5a8189fd87c7056b0b52034d244b65b62066ff0ac6916f3590cc71865a2813aa588858676edc7787433cbd0ece9ea85937a9c2f96aa9ba2b456b0a2a6ef8046cd2a6295ee68917281efc41dac2fbea54c57b9b408cde36b04932efaa148fa6635f9a7f3fc536d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x3, 0x1, 0x3f, [@generic={0x72, 0xa, "6c7a11dd3e835556db86c58fa6e698a7a5b279784688db0870fd41568f7a6c8c98699e65df297b7186875e086c146afd48d2dc2c40e30b3be8053a537ee2c35087131d72f0e0f3e05bf8df798b6dda2f6ec95e7f3210db354e7f51d994c7094fdb3fd9da656127617a65836c3ded87f5"}, @generic={0x69, 0x30, "770be5552947c9a83e8b65e190c05bf7496dab84b5afedc9ad010f37cacc117062d718674739620a654e7707b592c0e8d4feba67a413b8706428f4a643435e9fe68faff0edc570e1a3c1155eceb398309885784e4c086fb05c9f7f25f84f572adf1c17454a1514"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x6a, 0x1, 0x5, [@generic={0xeb, 0x22, "5b8c7c55b793c03bf37ba53039e66a147ad72f568454a5cf1a66fae4498b07d63c0321bf765348a56716d36dce9b54f2149a27e3660a462d9b997d38471834e6654a21e6dbf5272f2250a71da074a8c5992022009ec23b63320858b6dd5a50e454f7d46fbd832d489b6431d7558631305ee354820c13822cc441a6e0d3b6fdb84f80f67ff889514b7eff3b8b5e304443f0539e363a436e30c5cb84bcc8d466a857e7ae4a2d12fea362360807a23e8341e7ac4bd5ef214377aaa4a5c4fbf03a464cc430453a7b9e2bae7bda47a7cbb9677f1c1280688ed8b12550cabc5e1f657dd35169aeaaba314f0c"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x2, 0x2, 0x20, 0x20, 0x56}, 0x213, &(0x7f0000000700)={0x5, 0xf, 0x213, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "e337a2bbd52f322607edfcd1ac5e8323"}, @generic={0xf0, 0x10, 0x2, "4c1b25ab4df09863694018f866a86a131641d921d00b4f0a4d695e1a5568facc637ca657a981767707bde60ceeb9a3d8a478577a4900f3d8eef15e830cc95d9b7fb0772e816f9f2adf9e64edf0d0953d0ccff4929ae135305510dd1b89d9e4906401bbe08e8c9efde2ffdbe64362b6e0339117963b4ea951385fec369ec5288af78a7f7c91507df7fe11567e7d5c1c4d0d73376a86c6e4e7912dba81a8f88badabe4f5b1878380d8c2a4f0e6561e4810dd6d78b1fb8436daffb7860b2174b49d1e7b1e0d914ab754fd116c6ebcd430f74dd4d43e0b86903dd4faf822844aa947a1b4eb11c6b5cf98f850010397"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3f, 0x7, 0x8}, @generic={0x100, 0x10, 0x3, "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"}]}, 0x1, [{0xd9, &(0x7f0000000940)=@string={0xd9, 0x3, "d9b82ebd2879c12cf1545885e068adb9522f356c17e4f0d4fa479f20f428441db179b27274bd9fcd8a637ee0544afc7a80538f98c02bfa795bcc889bca0c859c9c2a27199980a050b16c4cefb3b0a5a062491780fefa94ab450f40c91cc8b77e7bfdbb87831e97a0658627e403018e613d4fb52750394b9e53ed4645f36699c606788e3cac71e38f1c6458934d3341895743194c3fc3ad209ccc7a5e9ca5816d911e89de83e884fbd29b0365bb3e071797e027a4785dafec358a12881983fe2ab3dc0254ed67c81f6d2eeb7fd1b21ece4bccf08eee04a7"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ftruncate(r0, 0x101) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'attr\x00'}, &(0x7f0000000140)=""/255, 0xff) [ 268.574232][T18670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.577683][T18670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 5) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x8a03, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 5) 00:04:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) bind$packet(r2, &(0x7f0000000080)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:28 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 6) 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xe004) 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x9800, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 6) [ 268.687690][T18691] FAULT_INJECTION: forcing a failure. [ 268.687690][T18691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.691708][T18686] FAULT_INJECTION: forcing a failure. [ 268.691708][T18686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.698838][T18691] CPU: 0 PID: 18691 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 00:04:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xcc01, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 268.701429][T18691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 268.704013][T18691] Call trace: [ 268.704895][T18691] dump_backtrace+0x1c4/0x1f0 [ 268.706104][T18691] show_stack+0x2c/0x54 [ 268.707214][T18691] dump_stack_lvl+0x104/0x16c [ 268.708452][T18691] dump_stack+0x1c/0x58 [ 268.709536][T18691] should_fail+0x1dc/0x200 [ 268.710669][T18691] should_fail_usercopy+0x20/0x30 [ 268.711991][T18691] strncpy_from_user+0x44/0x3d8 [ 268.713253][T18691] getname_flags+0x84/0x278 [ 268.714458][T18691] user_path_at_empty+0x40/0x114 [ 268.715730][T18691] __arm64_sys_mount+0x28c/0x3c4 [ 268.716963][T18691] el0_svc_common+0x138/0x220 [ 268.718215][T18691] do_el0_svc+0x48/0x164 [ 268.719344][T18691] el0_svc+0x58/0x150 [ 268.720407][T18691] el0t_64_sync_handler+0x84/0xf0 [ 268.721710][T18691] el0t_64_sync+0x18c/0x190 [ 268.722887][T18686] CPU: 1 PID: 18686 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 268.725575][T18686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 00:04:28 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xe200) [ 268.728050][T18686] Call trace: [ 268.728854][T18686] dump_backtrace+0x1c4/0x1f0 [ 268.730117][T18686] show_stack+0x2c/0x54 [ 268.731210][T18686] dump_stack_lvl+0x104/0x16c [ 268.732427][T18686] dump_stack+0x1c/0x58 [ 268.733497][T18686] should_fail+0x1dc/0x200 [ 268.734631][T18686] should_fail_usercopy+0x20/0x30 [ 268.735947][T18686] strncpy_from_user+0x44/0x3d8 [ 268.737288][T18686] getname_flags+0x84/0x278 [ 268.738425][T18686] user_path_at_empty+0x40/0x114 [ 268.739658][T18686] __arm64_sys_mount+0x28c/0x3c4 [ 268.740905][T18686] el0_svc_common+0x138/0x220 [ 268.742105][T18686] do_el0_svc+0x48/0x164 [ 268.743189][T18686] el0_svc+0x58/0x150 [ 268.744192][T18686] el0t_64_sync_handler+0x84/0xf0 [ 268.745418][T18686] el0t_64_sync+0x18c/0x190 00:04:28 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 7) 00:04:29 executing program 5: syz_usb_connect(0x5, 0x48c, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0xae, 0x61, 0x8, 0x8, 0x57c, 0x8401, 0x61ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47a, 0x1, 0x2, 0x9a, 0x80, 0x7f, [{{0x9, 0x4, 0x41, 0x3, 0x7, 0x6e, 0x5d, 0x28, 0x7, [@uac_as, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "138b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x3, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0xfff, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x2}, @mdlm_detail={0xbf, 0x24, 0x13, 0x4, "a9d6d05e7542430c9d4ebf3ae41452e0bca97b507f07df935a947011e4e4319318cf4ee1faaaf3528333d5569c864ca734609fd3c03f3253e01c93f2427643a3047e60ea6633d539160da967dae2836aa4ca03832f42f40953b85b024a6c21f66e0fae8e9ea749e42296959ab19491c2b0490586a84df8c7e68a91b93ca897361641e4dcb83b9a3521ecdd7fe7119ed1f4a45e11ab863e49aa2442fb2edf7e40c746d001de6c08516ebf3a385347948597889618592df262d6af46"}, @obex={0x5, 0x24, 0x15, 0xffff}]}], [{{0x9, 0x5, 0xa, 0x1, 0x8, 0xab, 0x5b, 0x1f}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xb7, 0x8, 0x3c}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x1f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2c, 0xfffb}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x1, 0x1, 0x20, [@generic={0xc1, 0x1, "960c476df624c143708f1e4a3cdc51abcc4994b58b09a618e9a626714bc0d66f624e6dc22a0b1d5968ed9f3700be3e215edb83d0a2a8ffc6511700fe4ef393a16a3d62f360308a8aa879ed783f3469d47cdd532ec85aaafbc2033d8fd4a6133b75cc32ad379e936ef4a6f7e9eb461d16539ebdb0573e8603af10becf5a073928df2b708021758b98543cada7f8f91c1258438d7de1541f0a791cabeb20b15ebd39a2e62e073298c3b11e11d4a1d3731ae56117669b0464edbda57ae777e758"}, @generic={0x9d, 0x2, "d8768061008e408b1ea0bf68db78dc983543205d605ba3abea3d20e737cae223d08901f61cfe441ecbe959e15ad7c3bd07b3b2b5f5a8189fd87c7056b0b52034d244b65b62066ff0ac6916f3590cc71865a2813aa588858676edc7787433cbd0ece9ea85937a9c2f96aa9ba2b456b0a2a6ef8046cd2a6295ee68917281efc41dac2fbea54c57b9b408cde36b04932efaa148fa6635f9a7f3fc536d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x3, 0x1, 0x3f, [@generic={0x72, 0xa, "6c7a11dd3e835556db86c58fa6e698a7a5b279784688db0870fd41568f7a6c8c98699e65df297b7186875e086c146afd48d2dc2c40e30b3be8053a537ee2c35087131d72f0e0f3e05bf8df798b6dda2f6ec95e7f3210db354e7f51d994c7094fdb3fd9da656127617a65836c3ded87f5"}, @generic={0x69, 0x30, "770be5552947c9a83e8b65e190c05bf7496dab84b5afedc9ad010f37cacc117062d718674739620a654e7707b592c0e8d4feba67a413b8706428f4a643435e9fe68faff0edc570e1a3c1155eceb398309885784e4c086fb05c9f7f25f84f572adf1c17454a1514"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x6a, 0x1, 0x5, [@generic={0xeb, 0x22, "5b8c7c55b793c03bf37ba53039e66a147ad72f568454a5cf1a66fae4498b07d63c0321bf765348a56716d36dce9b54f2149a27e3660a462d9b997d38471834e6654a21e6dbf5272f2250a71da074a8c5992022009ec23b63320858b6dd5a50e454f7d46fbd832d489b6431d7558631305ee354820c13822cc441a6e0d3b6fdb84f80f67ff889514b7eff3b8b5e304443f0539e363a436e30c5cb84bcc8d466a857e7ae4a2d12fea362360807a23e8341e7ac4bd5ef214377aaa4a5c4fbf03a464cc430453a7b9e2bae7bda47a7cbb9677f1c1280688ed8b12550cabc5e1f657dd35169aeaaba314f0c"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x2, 0x2, 0x20, 0x20, 0x56}, 0x213, &(0x7f0000000700)={0x5, 0xf, 0x213, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "e337a2bbd52f322607edfcd1ac5e8323"}, @generic={0xf0, 0x10, 0x2, "4c1b25ab4df09863694018f866a86a131641d921d00b4f0a4d695e1a5568facc637ca657a981767707bde60ceeb9a3d8a478577a4900f3d8eef15e830cc95d9b7fb0772e816f9f2adf9e64edf0d0953d0ccff4929ae135305510dd1b89d9e4906401bbe08e8c9efde2ffdbe64362b6e0339117963b4ea951385fec369ec5288af78a7f7c91507df7fe11567e7d5c1c4d0d73376a86c6e4e7912dba81a8f88badabe4f5b1878380d8c2a4f0e6561e4810dd6d78b1fb8436daffb7860b2174b49d1e7b1e0d914ab754fd116c6ebcd430f74dd4d43e0b86903dd4faf822844aa947a1b4eb11c6b5cf98f850010397"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3f, 0x7, 0x8}, @generic={0x100, 0x10, 0x3, "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"}]}, 0x1, [{0xd9, &(0x7f0000000940)=@string={0xd9, 0x3, "d9b82ebd2879c12cf1545885e068adb9522f356c17e4f0d4fa479f20f428441db179b27274bd9fcd8a637ee0544afc7a80538f98c02bfa795bcc889bca0c859c9c2a27199980a050b16c4cefb3b0a5a062491780fefa94ab450f40c91cc8b77e7bfdbb87831e97a0658627e403018e613d4fb52750394b9e53ed4645f36699c606788e3cac71e38f1c6458934d3341895743194c3fc3ad209ccc7a5e9ca5816d911e89de83e884fbd29b0365bb3e071797e027a4785dafec358a12881983fe2ab3dc0254ed67c81f6d2eeb7fd1b21ece4bccf08eee04a7"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ftruncate(r0, 0x101) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'attr\x00'}, &(0x7f0000000140)=""/255, 0xff) syz_usb_connect(0x5, 0x48c, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0xae, 0x61, 0x8, 0x8, 0x57c, 0x8401, 0x61ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47a, 0x1, 0x2, 0x9a, 0x80, 0x7f, [{{0x9, 0x4, 0x41, 0x3, 0x7, 0x6e, 0x5d, 0x28, 0x7, [@uac_as, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "138b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x3, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0xfff, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x2}, @mdlm_detail={0xbf, 0x24, 0x13, 0x4, "a9d6d05e7542430c9d4ebf3ae41452e0bca97b507f07df935a947011e4e4319318cf4ee1faaaf3528333d5569c864ca734609fd3c03f3253e01c93f2427643a3047e60ea6633d539160da967dae2836aa4ca03832f42f40953b85b024a6c21f66e0fae8e9ea749e42296959ab19491c2b0490586a84df8c7e68a91b93ca897361641e4dcb83b9a3521ecdd7fe7119ed1f4a45e11ab863e49aa2442fb2edf7e40c746d001de6c08516ebf3a385347948597889618592df262d6af46"}, @obex={0x5, 0x24, 0x15, 0xffff}]}], [{{0x9, 0x5, 0xa, 0x1, 0x8, 0xab, 0x5b, 0x1f}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xb7, 0x8, 0x3c}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x1f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2c, 0xfffb}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x1, 0x1, 0x20, [@generic={0xc1, 0x1, "960c476df624c143708f1e4a3cdc51abcc4994b58b09a618e9a626714bc0d66f624e6dc22a0b1d5968ed9f3700be3e215edb83d0a2a8ffc6511700fe4ef393a16a3d62f360308a8aa879ed783f3469d47cdd532ec85aaafbc2033d8fd4a6133b75cc32ad379e936ef4a6f7e9eb461d16539ebdb0573e8603af10becf5a073928df2b708021758b98543cada7f8f91c1258438d7de1541f0a791cabeb20b15ebd39a2e62e073298c3b11e11d4a1d3731ae56117669b0464edbda57ae777e758"}, @generic={0x9d, 0x2, "d8768061008e408b1ea0bf68db78dc983543205d605ba3abea3d20e737cae223d08901f61cfe441ecbe959e15ad7c3bd07b3b2b5f5a8189fd87c7056b0b52034d244b65b62066ff0ac6916f3590cc71865a2813aa588858676edc7787433cbd0ece9ea85937a9c2f96aa9ba2b456b0a2a6ef8046cd2a6295ee68917281efc41dac2fbea54c57b9b408cde36b04932efaa148fa6635f9a7f3fc536d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x3, 0x1, 0x3f, [@generic={0x72, 0xa, "6c7a11dd3e835556db86c58fa6e698a7a5b279784688db0870fd41568f7a6c8c98699e65df297b7186875e086c146afd48d2dc2c40e30b3be8053a537ee2c35087131d72f0e0f3e05bf8df798b6dda2f6ec95e7f3210db354e7f51d994c7094fdb3fd9da656127617a65836c3ded87f5"}, @generic={0x69, 0x30, "770be5552947c9a83e8b65e190c05bf7496dab84b5afedc9ad010f37cacc117062d718674739620a654e7707b592c0e8d4feba67a413b8706428f4a643435e9fe68faff0edc570e1a3c1155eceb398309885784e4c086fb05c9f7f25f84f572adf1c17454a1514"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x6a, 0x1, 0x5, [@generic={0xeb, 0x22, "5b8c7c55b793c03bf37ba53039e66a147ad72f568454a5cf1a66fae4498b07d63c0321bf765348a56716d36dce9b54f2149a27e3660a462d9b997d38471834e6654a21e6dbf5272f2250a71da074a8c5992022009ec23b63320858b6dd5a50e454f7d46fbd832d489b6431d7558631305ee354820c13822cc441a6e0d3b6fdb84f80f67ff889514b7eff3b8b5e304443f0539e363a436e30c5cb84bcc8d466a857e7ae4a2d12fea362360807a23e8341e7ac4bd5ef214377aaa4a5c4fbf03a464cc430453a7b9e2bae7bda47a7cbb9677f1c1280688ed8b12550cabc5e1f657dd35169aeaaba314f0c"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x2, 0x2, 0x20, 0x20, 0x56}, 0x213, &(0x7f0000000700)={0x5, 0xf, 0x213, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "e337a2bbd52f322607edfcd1ac5e8323"}, @generic={0xf0, 0x10, 0x2, "4c1b25ab4df09863694018f866a86a131641d921d00b4f0a4d695e1a5568facc637ca657a981767707bde60ceeb9a3d8a478577a4900f3d8eef15e830cc95d9b7fb0772e816f9f2adf9e64edf0d0953d0ccff4929ae135305510dd1b89d9e4906401bbe08e8c9efde2ffdbe64362b6e0339117963b4ea951385fec369ec5288af78a7f7c91507df7fe11567e7d5c1c4d0d73376a86c6e4e7912dba81a8f88badabe4f5b1878380d8c2a4f0e6561e4810dd6d78b1fb8436daffb7860b2174b49d1e7b1e0d914ab754fd116c6ebcd430f74dd4d43e0b86903dd4faf822844aa947a1b4eb11c6b5cf98f850010397"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3f, 0x7, 0x8}, @generic={0x100, 0x10, 0x3, "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"}]}, 0x1, [{0xd9, &(0x7f0000000940)=@string={0xd9, 0x3, "d9b82ebd2879c12cf1545885e068adb9522f356c17e4f0d4fa479f20f428441db179b27274bd9fcd8a637ee0544afc7a80538f98c02bfa795bcc889bca0c859c9c2a27199980a050b16c4cefb3b0a5a062491780fefa94ab450f40c91cc8b77e7bfdbb87831e97a0658627e403018e613d4fb52750394b9e53ed4645f36699c606788e3cac71e38f1c6458934d3341895743194c3fc3ad209ccc7a5e9ca5816d911e89de83e884fbd29b0365bb3e071797e027a4785dafec358a12881983fe2ab3dc0254ed67c81f6d2eeb7fd1b21ece4bccf08eee04a7"}}]}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ftruncate(r0, 0x101) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'attr\x00'}, &(0x7f0000000140)=""/255, 0xff) (async) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xf602, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 8) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 7) 00:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0xf402) 00:04:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) [ 269.115653][T18713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.118791][T18711] ERROR: Out of memory at tomoyo_realpath_from_path. 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 8) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x40000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 9) [ 269.138535][T18713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.157755][T18713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xe0ffff, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 269.169574][T18725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.170877][T18726] ERROR: Out of memory at tomoyo_realpath_from_path. [ 269.177269][T18713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x7ffff000) 00:04:29 executing program 5: syz_usb_connect(0x5, 0x48c, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0xae, 0x61, 0x8, 0x8, 0x57c, 0x8401, 0x61ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47a, 0x1, 0x2, 0x9a, 0x80, 0x7f, [{{0x9, 0x4, 0x41, 0x3, 0x7, 0x6e, 0x5d, 0x28, 0x7, [@uac_as, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "138b"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x3, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0xfff, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x2}, @mdlm_detail={0xbf, 0x24, 0x13, 0x4, "a9d6d05e7542430c9d4ebf3ae41452e0bca97b507f07df935a947011e4e4319318cf4ee1faaaf3528333d5569c864ca734609fd3c03f3253e01c93f2427643a3047e60ea6633d539160da967dae2836aa4ca03832f42f40953b85b024a6c21f66e0fae8e9ea749e42296959ab19491c2b0490586a84df8c7e68a91b93ca897361641e4dcb83b9a3521ecdd7fe7119ed1f4a45e11ab863e49aa2442fb2edf7e40c746d001de6c08516ebf3a385347948597889618592df262d6af46"}, @obex={0x5, 0x24, 0x15, 0xffff}]}], [{{0x9, 0x5, 0xa, 0x1, 0x8, 0xab, 0x5b, 0x1f}}, {{0x9, 0x5, 0xa, 0x4, 0x400, 0xb7, 0x8, 0x3c}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x1f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xffff}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x9, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2c, 0xfffb}]}}, {{0x9, 0x5, 0x80, 0x3, 0x8, 0x1, 0x1, 0x20, [@generic={0xc1, 0x1, "960c476df624c143708f1e4a3cdc51abcc4994b58b09a618e9a626714bc0d66f624e6dc22a0b1d5968ed9f3700be3e215edb83d0a2a8ffc6511700fe4ef393a16a3d62f360308a8aa879ed783f3469d47cdd532ec85aaafbc2033d8fd4a6133b75cc32ad379e936ef4a6f7e9eb461d16539ebdb0573e8603af10becf5a073928df2b708021758b98543cada7f8f91c1258438d7de1541f0a791cabeb20b15ebd39a2e62e073298c3b11e11d4a1d3731ae56117669b0464edbda57ae777e758"}, @generic={0x9d, 0x2, "d8768061008e408b1ea0bf68db78dc983543205d605ba3abea3d20e737cae223d08901f61cfe441ecbe959e15ad7c3bd07b3b2b5f5a8189fd87c7056b0b52034d244b65b62066ff0ac6916f3590cc71865a2813aa588858676edc7787433cbd0ece9ea85937a9c2f96aa9ba2b456b0a2a6ef8046cd2a6295ee68917281efc41dac2fbea54c57b9b408cde36b04932efaa148fa6635f9a7f3fc536d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x0, 0x3, 0x1, 0x3f, [@generic={0x72, 0xa, "6c7a11dd3e835556db86c58fa6e698a7a5b279784688db0870fd41568f7a6c8c98699e65df297b7186875e086c146afd48d2dc2c40e30b3be8053a537ee2c35087131d72f0e0f3e05bf8df798b6dda2f6ec95e7f3210db354e7f51d994c7094fdb3fd9da656127617a65836c3ded87f5"}, @generic={0x69, 0x30, "770be5552947c9a83e8b65e190c05bf7496dab84b5afedc9ad010f37cacc117062d718674739620a654e7707b592c0e8d4feba67a413b8706428f4a643435e9fe68faff0edc570e1a3c1155eceb398309885784e4c086fb05c9f7f25f84f572adf1c17454a1514"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x6a, 0x1, 0x5, [@generic={0xeb, 0x22, "5b8c7c55b793c03bf37ba53039e66a147ad72f568454a5cf1a66fae4498b07d63c0321bf765348a56716d36dce9b54f2149a27e3660a462d9b997d38471834e6654a21e6dbf5272f2250a71da074a8c5992022009ec23b63320858b6dd5a50e454f7d46fbd832d489b6431d7558631305ee354820c13822cc441a6e0d3b6fdb84f80f67ff889514b7eff3b8b5e304443f0539e363a436e30c5cb84bcc8d466a857e7ae4a2d12fea362360807a23e8341e7ac4bd5ef214377aaa4a5c4fbf03a464cc430453a7b9e2bae7bda47a7cbb9677f1c1280688ed8b12550cabc5e1f657dd35169aeaaba314f0c"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x2, 0x2, 0x20, 0x20, 0x56}, 0x213, &(0x7f0000000700)={0x5, 0xf, 0x213, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "e337a2bbd52f322607edfcd1ac5e8323"}, @generic={0xf0, 0x10, 0x2, "4c1b25ab4df09863694018f866a86a131641d921d00b4f0a4d695e1a5568facc637ca657a981767707bde60ceeb9a3d8a478577a4900f3d8eef15e830cc95d9b7fb0772e816f9f2adf9e64edf0d0953d0ccff4929ae135305510dd1b89d9e4906401bbe08e8c9efde2ffdbe64362b6e0339117963b4ea951385fec369ec5288af78a7f7c91507df7fe11567e7d5c1c4d0d73376a86c6e4e7912dba81a8f88badabe4f5b1878380d8c2a4f0e6561e4810dd6d78b1fb8436daffb7860b2174b49d1e7b1e0d914ab754fd116c6ebcd430f74dd4d43e0b86903dd4faf822844aa947a1b4eb11c6b5cf98f850010397"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3f, 0x7, 0x8}, @generic={0x100, 0x10, 0x3, "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"}]}, 0x1, [{0xd9, &(0x7f0000000940)=@string={0xd9, 0x3, "d9b82ebd2879c12cf1545885e068adb9522f356c17e4f0d4fa479f20f428441db179b27274bd9fcd8a637ee0544afc7a80538f98c02bfa795bcc889bca0c859c9c2a27199980a050b16c4cefb3b0a5a062491780fefa94ab450f40c91cc8b77e7bfdbb87831e97a0658627e403018e613d4fb52750394b9e53ed4645f36699c606788e3cac71e38f1c6458934d3341895743194c3fc3ad209ccc7a5e9ca5816d911e89de83e884fbd29b0365bb3e071797e027a4785dafec358a12881983fe2ab3dc0254ed67c81f6d2eeb7fd1b21ece4bccf08eee04a7"}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ftruncate(r0, 0x101) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (rerun: 32) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', 'attr\x00'}, &(0x7f0000000140)=""/255, 0xff) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 10) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 9) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x1000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 269.222602][T18736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.234789][T18736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x1000000000000) [ 269.243605][T18737] ERROR: Out of memory at tomoyo_realpath_from_path. 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 11) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x2000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 10) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 12) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 11) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x3000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r0, 0x10, 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x800) close_range(r1, r0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fsmount(r1, 0x1, 0x70) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000024c0), 0x101080, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r3, 0x10, 0x0, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x6}, 0x7) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5a11"], 0x138) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'mounts\x00'}}, {@fsname={'fsname', 0x3d, '[:-{]##-#$\xc2)#^#'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@seclabel}]}}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$cgroup_pressure(r6, &(0x7f0000002440)='cpu.pressure\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) r8 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x8, 0x400000) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000002480)={0x5, 0x5, 0x1}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f00000023c0)={0x0, &(0x7f0000002380)="014387413267f4c3d263d32b2adaf51642ab4792d806937a4772b722bc95aa6d4738e93c730a", 0x26}) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 12) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 13) 00:04:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fsmount(r1, 0x1, 0x70) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000024c0), 0x101080, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r3, 0x10, 0x0, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x6}, 0x7) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5a11"], 0x138) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'mounts\x00'}}, {@fsname={'fsname', 0x3d, '[:-{]##-#$\xc2)#^#'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@seclabel}]}}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$cgroup_pressure(r6, &(0x7f0000002440)='cpu.pressure\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) r8 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x8, 0x400000) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000002480)={0x5, 0x5, 0x1}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f00000023c0)={0x0, &(0x7f0000002380)="014387413267f4c3d263d32b2adaf51642ab4792d806937a4772b722bc95aa6d4738e93c730a", 0x26}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) fsmount(r1, 0x1, 0x70) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000024c0), 0x101080, 0x0) (async) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r3, 0x10, 0x0, 0x800) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x6}, 0x7) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5a11"], 0x138) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'mounts\x00'}}, {@fsname={'fsname', 0x3d, '[:-{]##-#$\xc2)#^#'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@seclabel}]}}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r6, &(0x7f0000002440)='cpu.pressure\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) (async) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x8, 0x400000) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000002480)={0x5, 0x5, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f00000023c0)={0x0, &(0x7f0000002380)="014387413267f4c3d263d32b2adaf51642ab4792d806937a4772b722bc95aa6d4738e93c730a", 0x26}) (async) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 14) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x5000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 13) 00:04:29 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r0, 0x10, 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x800) close_range(r1, r0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 269.866238][T18775] tcpmss_tg4_check: 68 callbacks suppressed [ 269.866247][T18775] xt_TCPMSS: Only works on TCP SYN packets 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x6000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 15) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 14) 00:04:29 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r0, 0x10, 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x800) (async) close_range(r1, r0, 0x2) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 269.914743][T18800] xt_TCPMSS: Only works on TCP SYN packets 00:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fsmount(r1, 0x1, 0x70) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000024c0), 0x101080, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r3, 0x10, 0x0, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x6}, 0x7) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5a11"], 0x138) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000140)=0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'mounts\x00'}}, {@fsname={'fsname', 0x3d, '[:-{]##-#$\xc2)#^#'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@seclabel}]}}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$cgroup_pressure(r6, &(0x7f0000002440)='cpu.pressure\x00', 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) r8 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x8, 0x400000) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000002480)={0x5, 0x5, 0x1}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f00000023c0)={0x0, &(0x7f0000002380)="014387413267f4c3d263d32b2adaf51642ab4792d806937a4772b722bc95aa6d4738e93c730a", 0x26}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) fsmount(r1, 0x1, 0x70) (async) openat$nullb(0xffffffffffffff9c, &(0x7f00000024c0), 0x101080, 0x0) (async) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r3, 0x10, 0x0, 0x800) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7, 0x21, 0x6}, 0x7) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5a11"], 0x138) (async) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000140)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'mounts\x00'}}, {@fsname={'fsname', 0x3d, '[:-{]##-#$\xc2)#^#'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@seclabel}]}}) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r6, &(0x7f0000002440)='cpu.pressure\x00', 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) (async) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x8, 0x400000) (async) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000002480)={0x5, 0x5, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f00000023c0)={0x0, &(0x7f0000002380)="014387413267f4c3d263d32b2adaf51642ab4792d806937a4772b722bc95aa6d4738e93c730a", 0x26}) (async) 00:04:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:29 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 15) 00:04:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 16) [ 269.985641][T18831] xt_TCPMSS: Only works on TCP SYN packets 00:04:29 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x54}}, 0x4088001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x100) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x8001, 0x52e) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:29 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup3(r1, r0, 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8}}, 0x18) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) [ 270.014530][T18811] xt_TCPMSS: Only works on TCP SYN packets 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x8000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 16) [ 270.031209][T18840] xt_TCPMSS: Only works on TCP SYN packets 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 17) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup3(r1, r0, 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8}}, 0x18) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x9000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x54}}, 0x4088001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x100) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x8001, 0x52e) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x54}}, 0x4088001) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x100) (async) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x8001, 0x52e) (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) [ 270.078845][T18851] xt_TCPMSS: Only works on TCP SYN packets 00:04:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) (async) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 18) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 17) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup3(r1, r0, 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8}}, 0x18) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) (async, rerun: 64) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xa000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x54}}, 0x4088001) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x100) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x8001, 0x52e) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x4, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x54}}, 0x4088001) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x201, 0x100) (async) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/43, 0x2b}], 0x1, 0x8001, 0x52e) (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 19) [ 270.136993][T18871] xt_TCPMSS: Only works on TCP SYN packets 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) sendto$rose(r2, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x40) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x82400, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={0x1, @default, @bpq0, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xb000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 270.154370][T18868] xt_TCPMSS: Only works on TCP SYN packets 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 18) [ 270.161910][T18879] 9pnet_fd: Insufficient options for proto=fd 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 270.179889][T18885] xt_TCPMSS: Only works on TCP SYN packets 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 20) [ 270.197383][T18868] xt_TCPMSS: Only works on TCP SYN packets [ 270.222977][T18895] 9pnet_fd: Insufficient options for proto=fd 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xc000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) sendto$rose(r2, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x40) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x82400, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={0x1, @default, @bpq0, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 19) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) (async) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 21) [ 270.337317][T18901] 9pnet_fd: Insufficient options for proto=fd 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xd000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 270.357423][T18903] 9pnet_fd: Insufficient options for proto=fd 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat2(0xffffffffffffffff, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 22) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 20) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) sendto$rose(r2, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x40) (async) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x82400, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={0x1, @default, @bpq0, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default]}) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xe000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_crypto(0x10, 0x3, 0x15) splice(0xffffffffffffffff, &(0x7f0000000000)=0x4, r0, &(0x7f0000000040)=0x8, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 23) [ 270.435267][T18927] 9pnet_fd: Insufficient options for proto=fd 00:04:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ff00bbbbbbbb000000de860d7f1e"], 0x0) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032b030302e4cceb4fa54759824b0e0526ea06748eeb8b6c353f5b4b994cec223f0451e64c5135408590d548eebd10d733311ef5743e9"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$AUDIT_USER(r2, &(0x7f0000002380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x68, 0x3ed, 0x100, 0x70bd25, 0x25dfdbfd, "e70e58c2a47fd3b306683f8d1def2ad17ed47474002959c7acafc0eb79f21f76317b9d4135783ef52041fc0f1c69e0ca43da8ea51e6c3ea11e82dc06d4011201d50674f97e7bb2f2909f43b97ebdec3c485026130b", ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 21) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 24) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x10000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) splice(0xffffffffffffffff, &(0x7f0000000000)=0x4, r0, &(0x7f0000000040)=0x8, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 270.539265][T18938] 9pnet_fd: Insufficient options for proto=fd 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_crypto(0x10, 0x3, 0x15) splice(0xffffffffffffffff, &(0x7f0000000000)=0x4, r0, &(0x7f0000000040)=0x8, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x11000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 25) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 22) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032b030302e4cceb4fa54759824b0e0526ea06748eeb8b6c353f5b4b994cec223f0451e64c5135408590d548eebd10d733311ef5743e9"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$AUDIT_USER(r2, &(0x7f0000002380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x68, 0x3ed, 0x100, 0x70bd25, 0x25dfdbfd, "e70e58c2a47fd3b306683f8d1def2ad17ed47474002959c7acafc0eb79f21f76317b9d4135783ef52041fc0f1c69e0ca43da8ea51e6c3ea11e82dc06d4011201d50674f97e7bb2f2909f43b97ebdec3c485026130b", ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032b030302e4cceb4fa54759824b0e0526ea06748eeb8b6c353f5b4b994cec223f0451e64c5135408590d548eebd10d733311ef5743e9"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) sendmsg$AUDIT_USER(r2, &(0x7f0000002380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x68, 0x3ed, 0x100, 0x70bd25, 0x25dfdbfd, "e70e58c2a47fd3b306683f8d1def2ad17ed47474002959c7acafc0eb79f21f76317b9d4135783ef52041fc0f1c69e0ca43da8ea51e6c3ea11e82dc06d4011201d50674f97e7bb2f2909f43b97ebdec3c485026130b", ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000001, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="487073b9315f255bd49ce8fbe2eab1e16f40cca678f1001862b1e1ac4a7a54bb0149695759eaad350a5200696abfd94a66eda9d3ec9ac24744302877ab054c7599ea8d0a261bf3dce6635121a61e74a832fd79df8fa93d16bb79b2b0bff97e", 0x5f}, {&(0x7f00000000c0)="052fe736a56a4cace7ef0bb79e1c3f258a7ec15cb12bba3cd9d22a9174f78c44", 0x20}, {&(0x7f0000000140)="f3e62809e0cb49b482be2c023ed9f4519ff4fb0926224acbb35e8cbfe4af3c77883bd0fa5caa2a397c28e6d9076a70e24b32f97d2721ee863de1a503a3e02ac7af8b9fbc047221014b57a0c99307ce6aa5219f2d7333c459efdb1c488bf9d79038cd1e734cfa36eeb0106c03c95d707e4cae51b1ce8c48b19c4c28e4cf1fee7954f9c37d2dda334c8384ba9e4572e74203ee87278d8272fd2c02bf30ee267793c661030c2eaaa30b31c0615113", 0xad}, {&(0x7f0000000200)="a64985efa5183a9e3a8d653ad1b2668bd973078be9d55c4d755b7ecae88099b5f5a8ffd26cddea7ac37737949bf02fde8d5e300b996d1f52a674b50de7efe5f1b41f981847cde45b511350af654f6328154d4a6b2ca3409e25", 0x59}, {&(0x7f0000000280)="6816184cc597547312e6c5f0d1baf6ea162c5f95db46a4fa248f05d374afab3b8a45eb317d2cbad0759d0a490819dda1202a3fd7fc2d58a8ac5cca4e637e7171b8d54ab95e632f94b4", 0x49}, {&(0x7f0000000300)="6ac992f3b68a5da44046e18a0c1d667c630aa66120d0cc2ca19d90f0ff9d765a65e2cbfa4901af0c818354af905145341b27388a2ff87e498b479574b54d45e57d4d8246977c3afe12bd675e6ccd0d2f8f93", 0x52}], 0x6, 0x3, 0x697e15ad) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ff00bbbbbbbb000000de860d7f1e"], 0x0) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff018000000800395032b030302e4cceb4fa54759824b0e0526ea06748eeb8b6c353f5b4b994cec223f0451e64c5135408590d548eebd10d733311ef5743e9"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (rerun: 32) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$AUDIT_USER(r2, &(0x7f0000002380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x68, 0x3ed, 0x100, 0x70bd25, 0x25dfdbfd, "e70e58c2a47fd3b306683f8d1def2ad17ed47474002959c7acafc0eb79f21f76317b9d4135783ef52041fc0f1c69e0ca43da8ea51e6c3ea11e82dc06d4011201d50674f97e7bb2f2909f43b97ebdec3c485026130b", ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 23) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x12000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 26) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000001, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="487073b9315f255bd49ce8fbe2eab1e16f40cca678f1001862b1e1ac4a7a54bb0149695759eaad350a5200696abfd94a66eda9d3ec9ac24744302877ab054c7599ea8d0a261bf3dce6635121a61e74a832fd79df8fa93d16bb79b2b0bff97e", 0x5f}, {&(0x7f00000000c0)="052fe736a56a4cace7ef0bb79e1c3f258a7ec15cb12bba3cd9d22a9174f78c44", 0x20}, {&(0x7f0000000140)="f3e62809e0cb49b482be2c023ed9f4519ff4fb0926224acbb35e8cbfe4af3c77883bd0fa5caa2a397c28e6d9076a70e24b32f97d2721ee863de1a503a3e02ac7af8b9fbc047221014b57a0c99307ce6aa5219f2d7333c459efdb1c488bf9d79038cd1e734cfa36eeb0106c03c95d707e4cae51b1ce8c48b19c4c28e4cf1fee7954f9c37d2dda334c8384ba9e4572e74203ee87278d8272fd2c02bf30ee267793c661030c2eaaa30b31c0615113", 0xad}, {&(0x7f0000000200)="a64985efa5183a9e3a8d653ad1b2668bd973078be9d55c4d755b7ecae88099b5f5a8ffd26cddea7ac37737949bf02fde8d5e300b996d1f52a674b50de7efe5f1b41f981847cde45b511350af654f6328154d4a6b2ca3409e25", 0x59}, {&(0x7f0000000280)="6816184cc597547312e6c5f0d1baf6ea162c5f95db46a4fa248f05d374afab3b8a45eb317d2cbad0759d0a490819dda1202a3fd7fc2d58a8ac5cca4e637e7171b8d54ab95e632f94b4", 0x49}, {&(0x7f0000000300)="6ac992f3b68a5da44046e18a0c1d667c630aa66120d0cc2ca19d90f0ff9d765a65e2cbfa4901af0c818354af905145341b27388a2ff87e498b479574b54d45e57d4d8246977c3afe12bd675e6ccd0d2f8f93", 0x52}], 0x6, 0x3, 0x697e15ad) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x100000001, 0x0) (async) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="487073b9315f255bd49ce8fbe2eab1e16f40cca678f1001862b1e1ac4a7a54bb0149695759eaad350a5200696abfd94a66eda9d3ec9ac24744302877ab054c7599ea8d0a261bf3dce6635121a61e74a832fd79df8fa93d16bb79b2b0bff97e", 0x5f}, {&(0x7f00000000c0)="052fe736a56a4cace7ef0bb79e1c3f258a7ec15cb12bba3cd9d22a9174f78c44", 0x20}, {&(0x7f0000000140)="f3e62809e0cb49b482be2c023ed9f4519ff4fb0926224acbb35e8cbfe4af3c77883bd0fa5caa2a397c28e6d9076a70e24b32f97d2721ee863de1a503a3e02ac7af8b9fbc047221014b57a0c99307ce6aa5219f2d7333c459efdb1c488bf9d79038cd1e734cfa36eeb0106c03c95d707e4cae51b1ce8c48b19c4c28e4cf1fee7954f9c37d2dda334c8384ba9e4572e74203ee87278d8272fd2c02bf30ee267793c661030c2eaaa30b31c0615113", 0xad}, {&(0x7f0000000200)="a64985efa5183a9e3a8d653ad1b2668bd973078be9d55c4d755b7ecae88099b5f5a8ffd26cddea7ac37737949bf02fde8d5e300b996d1f52a674b50de7efe5f1b41f981847cde45b511350af654f6328154d4a6b2ca3409e25", 0x59}, {&(0x7f0000000280)="6816184cc597547312e6c5f0d1baf6ea162c5f95db46a4fa248f05d374afab3b8a45eb317d2cbad0759d0a490819dda1202a3fd7fc2d58a8ac5cca4e637e7171b8d54ab95e632f94b4", 0x49}, {&(0x7f0000000300)="6ac992f3b68a5da44046e18a0c1d667c630aa66120d0cc2ca19d90f0ff9d765a65e2cbfa4901af0c818354af905145341b27388a2ff87e498b479574b54d45e57d4d8246977c3afe12bd675e6ccd0d2f8f93", 0x52}], 0x6, 0x3, 0x697e15ad) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x210e0000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000001, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="487073b9315f255bd49ce8fbe2eab1e16f40cca678f1001862b1e1ac4a7a54bb0149695759eaad350a5200696abfd94a66eda9d3ec9ac24744302877ab054c7599ea8d0a261bf3dce6635121a61e74a832fd79df8fa93d16bb79b2b0bff97e", 0x5f}, {&(0x7f00000000c0)="052fe736a56a4cace7ef0bb79e1c3f258a7ec15cb12bba3cd9d22a9174f78c44", 0x20}, {&(0x7f0000000140)="f3e62809e0cb49b482be2c023ed9f4519ff4fb0926224acbb35e8cbfe4af3c77883bd0fa5caa2a397c28e6d9076a70e24b32f97d2721ee863de1a503a3e02ac7af8b9fbc047221014b57a0c99307ce6aa5219f2d7333c459efdb1c488bf9d79038cd1e734cfa36eeb0106c03c95d707e4cae51b1ce8c48b19c4c28e4cf1fee7954f9c37d2dda334c8384ba9e4572e74203ee87278d8272fd2c02bf30ee267793c661030c2eaaa30b31c0615113", 0xad}, {&(0x7f0000000200)="a64985efa5183a9e3a8d653ad1b2668bd973078be9d55c4d755b7ecae88099b5f5a8ffd26cddea7ac37737949bf02fde8d5e300b996d1f52a674b50de7efe5f1b41f981847cde45b511350af654f6328154d4a6b2ca3409e25", 0x59}, {&(0x7f0000000280)="6816184cc597547312e6c5f0d1baf6ea162c5f95db46a4fa248f05d374afab3b8a45eb317d2cbad0759d0a490819dda1202a3fd7fc2d58a8ac5cca4e637e7171b8d54ab95e632f94b4", 0x49}, {&(0x7f0000000300)="6ac992f3b68a5da44046e18a0c1d667c630aa66120d0cc2ca19d90f0ff9d765a65e2cbfa4901af0c818354af905145341b27388a2ff87e498b479574b54d45e57d4d8246977c3afe12bd675e6ccd0d2f8f93", 0x52}], 0x6, 0x3, 0x697e15ad) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 24) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 27) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x400002, 0x1, 0x2}, 0x18) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x220e0000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0582"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 25) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x25000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ff00bbbbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ff00bbbbbbbb000000de860d7f1e"], 0x0) (async) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 28) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x400002, 0x1, 0x2}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x400002, 0x1, 0x2}, 0x18) (async) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x2c020000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 26) 00:04:30 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x400002, 0x1, 0x2}, 0x18) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 29) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0582"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x32030000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:30 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 30) 00:04:30 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="0582"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (rerun: 32) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:30 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x66, &(0x7f0000000200), &(0x7f0000000240)=""/102, 0xf1f, 0x0, 0x1000, 0x24, &(0x7f0000000ac0)="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", &(0x7f0000000540)="b0061ae946ae6a7b17ddfd94772fddc8b533c72bd5bcd67e157398c6a5dd283517465e2b", 0x1, 0xe0a}, 0x48) sendto$inet(r0, &(0x7f0000000140)="b4e665eddce87a21e676d80c0aa3d70c2cf5282f826ec3971a238f8dc75488184c6220f26931ed5370d37c83b48c994ff23cee4197fad061d48d0173def3bfaf70d40b335e0d77dea87cf4bc2443b8816504ca715a18208e2155d5240166809083c60c97c0c775bde5336a14a5983cf3fcae419b8c84cc2b324f1d3d4067116452fd6f5993034fa2129a9ac82ed6b851e1f5370266e2e37d9df95418985d7ae9e47d37dd", 0xa4, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x75) r3 = pidfd_getfd(r1, r1, 0x0) openat2(r3, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x201, 0x48}, 0x18) [ 271.021433][T19040] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 271.023404][T19040] CPU: 1 PID: 19040 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.025948][T19040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.028294][T19040] Call trace: [ 271.029181][T19040] dump_backtrace+0x1c4/0x1f0 [ 271.030373][T19040] show_stack+0x2c/0x54 [ 271.031434][T19040] dump_stack_lvl+0x104/0x16c [ 271.032622][T19040] dump_stack+0x1c/0x58 [ 271.033654][T19040] kmem_cache_create_usercopy+0x268/0x31c [ 271.035069][T19040] p9_client_create+0x618/0x758 [ 271.036269][T19040] v9fs_session_init+0xa4/0x9f0 [ 271.037551][T19040] v9fs_mount+0x6c/0x568 00:04:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbb3bb000000de860d7f1e"], 0x0) 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 27) 00:04:31 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x66, &(0x7f0000000200), &(0x7f0000000240)=""/102, 0xf1f, 0x0, 0x1000, 0x24, &(0x7f0000000ac0)="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", &(0x7f0000000540)="b0061ae946ae6a7b17ddfd94772fddc8b533c72bd5bcd67e157398c6a5dd283517465e2b", 0x1, 0xe0a}, 0x48) sendto$inet(r0, &(0x7f0000000140)="b4e665eddce87a21e676d80c0aa3d70c2cf5282f826ec3971a238f8dc75488184c6220f26931ed5370d37c83b48c994ff23cee4197fad061d48d0173def3bfaf70d40b335e0d77dea87cf4bc2443b8816504ca715a18208e2155d5240166809083c60c97c0c775bde5336a14a5983cf3fcae419b8c84cc2b324f1d3d4067116452fd6f5993034fa2129a9ac82ed6b851e1f5370266e2e37d9df95418985d7ae9e47d37dd", 0xa4, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x75) r3 = pidfd_getfd(r1, r1, 0x0) openat2(r3, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x201, 0x48}, 0x18) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x66, &(0x7f0000000200), &(0x7f0000000240)=""/102, 0xf1f, 0x0, 0x1000, 0x24, &(0x7f0000000ac0)="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", &(0x7f0000000540)="b0061ae946ae6a7b17ddfd94772fddc8b533c72bd5bcd67e157398c6a5dd283517465e2b", 0x1, 0xe0a}, 0x48) (async) sendto$inet(r0, &(0x7f0000000140)="b4e665eddce87a21e676d80c0aa3d70c2cf5282f826ec3971a238f8dc75488184c6220f26931ed5370d37c83b48c994ff23cee4197fad061d48d0173def3bfaf70d40b335e0d77dea87cf4bc2443b8816504ca715a18208e2155d5240166809083c60c97c0c775bde5336a14a5983cf3fcae419b8c84cc2b324f1d3d4067116452fd6f5993034fa2129a9ac82ed6b851e1f5370266e2e37d9df95418985d7ae9e47d37dd", 0xa4, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x75) (async) pidfd_getfd(r1, r1, 0x0) (async) openat2(r3, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x201, 0x48}, 0x18) (async) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x3c000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 271.038592][T19040] legacy_get_tree+0x30/0x74 [ 271.039690][T19040] vfs_get_tree+0x40/0x140 [ 271.040727][T19040] do_new_mount+0x1dc/0x4e4 [ 271.041881][T19040] path_mount+0x358/0x914 [ 271.042967][T19040] __arm64_sys_mount+0x2c4/0x3c4 [ 271.044118][T19040] el0_svc_common+0x138/0x220 [ 271.045287][T19040] do_el0_svc+0x48/0x164 [ 271.046293][T19040] el0_svc+0x58/0x150 [ 271.047295][T19040] el0t_64_sync_handler+0x84/0xf0 [ 271.048477][T19040] el0t_64_sync+0x18c/0x190 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x48000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x66, &(0x7f0000000200), &(0x7f0000000240)=""/102, 0xf1f, 0x0, 0x1000, 0x24, &(0x7f0000000ac0)="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", &(0x7f0000000540)="b0061ae946ae6a7b17ddfd94772fddc8b533c72bd5bcd67e157398c6a5dd283517465e2b", 0x1, 0xe0a}, 0x48) sendto$inet(r0, &(0x7f0000000140)="b4e665eddce87a21e676d80c0aa3d70c2cf5282f826ec3971a238f8dc75488184c6220f26931ed5370d37c83b48c994ff23cee4197fad061d48d0173def3bfaf70d40b335e0d77dea87cf4bc2443b8816504ca715a18208e2155d5240166809083c60c97c0c775bde5336a14a5983cf3fcae419b8c84cc2b324f1d3d4067116452fd6f5993034fa2129a9ac82ed6b851e1f5370266e2e37d9df95418985d7ae9e47d37dd", 0xa4, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x75) r3 = pidfd_getfd(r1, r1, 0x0) openat2(r3, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x201, 0x48}, 0x18) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x66, &(0x7f0000000200), &(0x7f0000000240)=""/102, 0xf1f, 0x0, 0x1000, 0x24, &(0x7f0000000ac0)="32350b4830ad359d76935934f00e5f95b50ec085c8377d14d76936cb8996419f06e86e162a4295bad43c1fb63b0e19a6935abe517d44e293821ef82ccb6df8a387c4073b3d49f12f39be56e6197453deabc46618bd4911ab76fc42d499c0ecfe1718a425da6257d17ba35a11127f243a5022b40b860ed6084c080ed34e1a00831d03256183404cc0aeb0c7d94616b71be7d67fd0bc983bec62db13882a8a6f6abb28a7e1e0e2a5c2298f2e3b6c04420c41f2dfc2253defa0ab6f90ec8b89ced03cf23cda65157cc00201e4c1258580646a599477d34e9115abd70b8abdb3e726ee84dd236b470e48ac0ff8cb6516e719455320109e564782abfb3f4211d90b378160f5e119f68bb72b10ba768205fdcca419d78f2885119dd231ebfa613aec772726995f7059d600fb081d2f0ea06b93746a3dbde85166dfd2ab4da5c6480cd60c6d43824ab2f77624999652631e3130a958dd0f307fb5461cce29ae27f182fedbb516dacba1e46ec1e77f4c810925aa48f28f9cc8a0555ee1ac44f94d03dd18da32c524af3bf43cf529f189f43591d89027a6fd6eaf3575ef301e8a70603946a9af2b07e909fb5bdecc0c01db9b5decee6fb54130d31e9404c18aff9d4191447f20e69e729612fbd4097d08cb3405c28d6035f55cca1a47315d1a055047da56896cc0150857149dac6b9f8147a2e7523b941d191667f650e33894c5f79866055685ba3274f054b6dc3ffe8ee42374a500af37ae32fbecc3b991f39ef31fff52e53d7652780d03497b3bc25d0943efada1f4a3061f5b53adac9ae48a807bc7d6d14ac91c3b718675fd77a323bfabfabe48c4d248e83165ad173da5477daeb66465b5a10dbd661d2bda750219bc8686370d9c3bdf1148b5bcd8f8b208e2c2a92b93b609badf5e5a299b0062800767a970739984436992cf775aed56bdf6edd8199c9863e4465fdf6e33461738ffc43ee50a0fc7e950fab5715820a1a6c1c899740492958fa388a59a385ed29c7ec17be266332c6cac489e5f04e3ddcb23cbb822c6b2c2b935a98ac9f7f836601c0762c22d083c7cae43437779c0f4ca0bb70ca27ae275fefbbc2a1fe0127400ca3aa4a8f73547e0706490ff266d2c8a17b2f3b0973c8a9dc3afbbefc59e53182474846aab7ab44aa00a22ae2187c67f11f06ade327e180f4e2da3ffbda5654aa068940c29f25a687282f431713db9b4fccae37b1f3ea5eb3f74e891bed2b3274d7b7b5b7d3d44ca93ce03ef5cc5706454a9feae5ea6fbab39e749b1c5f527c0a84e561e95d074f10b453e2dd5e8a529c9133db6deb61bcff56108f410f040badb281d81727aa79463fba6fc3d5cf43e2981c21a9b21ea928a35697659d86c23b0e772e167942e5d2ff9e686477c5720a05bd956152c58dba8a1849388f56cd200b4a4484a6daf30696a1e7af91683a7c1564e0b7159102586a99f224486c1cf6568a3fa112f23a6d11a502ee16a1111425c7e23c8ded4b97683606509a375f7bf1d758011cd31e767def6ed4ddfa3a360fecb0dd66b8fbca1b5a8cf1ac0080e21f842a57350972e77447e8738516a5de2066dea91e424cf58c639d0716fcb9ed77070e32b57ecd8e62b37a122b170a6474ccd6099f38fbdd796187e2b1f2379a744579fa302ad1a068c95f54ba97fa83c6f2528685fedaf6392bb3ca5790b65d5c3d2857ab0fe04005b0e1f31b638be68928c8336138764fa802680724076b0c5b0b9cfb6d601fbdb40f2416f0ce04fe659120598704e0dbc8a238286aafd5f8749cc4df09a6fc26e7719df81deb262bfd9ce41e0ae51f69049d951c0104e826b003b591b384261203b1bf742e52c8398fedda88da7bfc72f76b5888cb3068fd2bd3ee557f44b800214e26448e66f99c277403b33d3876690f2a7eee58340c0abc2c1f81613e83d00e52d218f0e8b13c62e9abd88e84e93eba1645e99ac51359786ae651fd9c49534e9c55f3d9dfae350cb200820b5f4b087a11bfc4076ca941bcbb778da4d3d2fc7f9453905f29e34691222891dbb11fb48aa8c529ab1f32010d07c4e1ac3c7603157c42c795f2d0730b93ef2c4209b3d78e8edccf1e4dd8539e4ee09c07bdd1a33fd708346e2a4cb5ac35f1776b2813be324f1b73697cc899d3c78a8d60c615a53fab8f96a2cd3c673c400aa030c696523766b29cfc2998e8add5b40bb8842b4f2364517aeb44f78042e1ad67b05cbcd9689b275cfaf09dd6b0be0443cbc04eec116fdfc05e4d4a6ebac145412b0d0f32286a86b5ab4b8704e66c08aa8e304f0d1ae6da104692b0116f9ce325226396ee79f0772a751def17c6a29acedac8f20ae3bcf45c8aabd939116aa7743f4933a18944ece03b394b900c54b32d6519c5c8f7e8e68dce4192a93e6d98de36a0adfe56fc95ffa0e00c02cacb895dab4ea8840c631c4a3050ed5277dbb0e333f9220266a28359c44fd0578a09c6949b1f88269b08a107d628b25d2064587fd4f38b4b14b7c9ca2695b4c0fb162021a23cd88c7791a3d60b63f09f9c264e008c4bbc5ec0e365d727591a989464a7b5b02106ac132969ce0078001201760915343ed3c3519b7b75725651428befed1ac7c01a60d88cb2281b0feef367e1178b58bcac079e49883a602435bf0b7fa04ee82723e6b3b652a4a0c1778491ca8a039f9da943aab002db253ec97015152ea6b94875aaa03964957d4d576f05a12b753ac73be9763c45cf9ce399051d0fc016c8e74954ffaf896b5724c573140017f065db82c4f366d74ec1da4c5ed54dfefa1cca80bc41291586e8522c6efc76a407e2948d529a525cb70f53aa65cd6e2dbe7f7d4c609ecca66d396284ed099a9bc1f3e61802485acca8648f7a6f1897e20d53b7f00aef684818e419ec55f323a7fbe2b1f153353cbb4ee54d74fd975117fa4cf24ed1cb13aafbda07dc162c8380e9bf7408953aefe8881be8db9e60e20210c315e203aa69dfe99fcf1bfd887d674832eb7e5cbff4002b94e3a9c2bae26e78417e51dbb31dd02af7ac8b720f062fd1158e896b5d66535ece39aa255a45c63297baecccb7fc2afe201cbf1c51c28cdf036611ee45d7866f960b14081d09e4e73589b34d4945fc940ce75243d66240eb13d82971cf765524a6de29bbef1cbaa620a4e8adbbcd871de181ebabebc873116da3b8faacb8438aa4d769e31187457ec0d49f611f8ebed752e89cbbc064e26cf7a32ec5b58bbcd19675028141ccb7f0ebb9bf1feb3ee89afa0738b8dca17628ae01a657077567f908e01cb7217c81434a8b360dc65186fbafd29fecd958344be36ef4b5845e6d7f4baa5f562ff3182bf9479aa39ddbe7cea0ce35fbf2b961d7145e60f6cb6423f68f54901713b8af09850b77f5ee53ca1b8f857335f908f2fac40dcd22cf28f5078412352fd6a6bbd0021c2a9c84b73453d6de5bbb9b636b0a616b8e4e6833719d54816f4afc3edd54af2dd6fa7af7ffa16f750e8be924854da3e1914196d1705cc832a66dc376a1391247cedd28222af5f62e52cb7669204a43d9f8835dbea8ac5cbaf200c11a6f2c59e35e5934115dc0c7fc466f843d0c80360cce159d554e5bcafbeda9cb808bab4441081e654ee714066bf8169159cd1ddc7e8ea276b28dba6536560e06cbab82e32ebde7701d0c404b255f192dc58463e7d7edd0501308864f4a386d5b0706b3c92fdf93822abb96d1c09768e0bbb50c121149d2fe6a844c4e2b3d4e93e4c6b59f1459405f138d08006bba833abbb481bb766ead32a992bf5904831a9710f33fed02ef98367a24cf0f502861a357907b440ab1657c6d3f403cb26cbcadad743e10437f28a8381d116c608ee7c8638710302d7a86fe7b1384851947b96e57acd6bbf5cd546f66fc780943a4b573e357c6b79ba31c438b70f93fa043bd113c9bb8052096b08f88bcd8b90bc753c34df972927bc19430ca70e3dbdc04637979244219e95a175b99f95b331d3fc40c0c6b9f737db2c794ca739de22017d7234c0fedc2c51c4a700dd06f3c50e241d679dd0936ac295aafc3a7b127b51860a0733455487738fd6f0efa5b6edc05f8c23d640e66e7e5951f4f0c521be451e93598bca0c5c1213511e7057e4376d409e01a1d64b7356b60c5b70c85f82d12dc0fbc0eff0cf17434feb9953281f8f16c62db5cd6aee1b863e6a3e970796eb65854cb8399c2eebe4f31643be01e72ae6f760f74989c813a3a8cdc2e9c65fc7792a0676d0c2ba81358dab896a319f84f30c2614270e489288c7d546e808a3e738b5c3fc359e2e22837c377df57c78b6bdf207c470d23837f0ee3f116015a2856c392a092989079764c8c306be068da57ed980ec6c823ab3af0e8dbf6b19de97b033abd358de7324aeae9bfc069cc44fb8e40438643b7bb587a0928aa3d2a3e51a35c45a636fc85055d6c0d946fbd6e24acadacf37a62168cd652bd5ab5475c85c1894dd8a84f6f065ad4065302be03fae342f2b6991f5473a7f79f916ab4a984dac59bad0093652ceb7dd20747ab57464091842fe6c6fad1c458074fd48cba564c63799f25f68e854a9ea23acb4110c7a70419c795ab1cc1bcb9b5a08a0b4bb142443cc513acf5d1994e19e43ef8107fa25e54f928829a5545f27d67efa7ad02e651c5a12f73c4115ef692237de0b2a026e2fcab17649447a49502c81c0a2438097ca4ba674092ac2736f1027261e9001f2719c0d2b60af064c79fc4e0f9a093c63534d572cde0ff9a57e553f005429eeef68273fd198a5e8e666aa8f01a00020ccadc0b8b745e6be7f2b6016348f18224f145b848a2be193627ece1604bb1c19e15c1ef1d53cc2de8605c089dc2871091cdf4ed5c260236ab1557a43532d5eb2e2f42e0795e3b9ef3a5d80eddcb96eb5b549294d3accccfdcaf15832f0cc3c7e6b3c5e9786e0ff830d34252beb082b32879c777f61dec13a4899af456af92fa0d3fb0ba9d66cc51d393bf33f400ef45a15c51a18c49085697504a9fdc6c1aec7f6e6d440629f6df540f97bff9d8990975b1ae9c50113c380802e0129cdc970b04e266866df612d38908d0e2d68eb883ae18f13d46e88acd38f3659d787ed97bb0869425ec8ad963db2d5e32eee948e1563787a5ca0be67d7cfec675ee3e88cdfb2eb9ec56ef31c2220645b2707b75ef228911e92f1ee36d4fd918b76b8b9fb514d583ee48b2290aa57683dd5a4aa3af599cec8a12b89ebd16c4570d96774d9a5b4f0372c49e60fd105ad5c1608a3e642b71b586a834b6b5982c5015290c2d3a47a10ac98168a22a3bda4385308d21606593b7304b8efad64afe3df7aa0b36543c76527fc7651436f7aadcadb26aaa863cfff659d9e1ea7449733519e89d85ba0b3cf95244f165e3d47957924b23a25b8e039e441af0fbcb275b4f6c3ca43ed56cef40d492dea676c6aa4dbb53bda44e1f1eaa0c218ab7cf8d4eb95aee123ffad7eaee04da3cba241b42d7a49598ee8bca057fbca886d02f6658853dea8bfc2f432be8b7298e1d45641f124456a0deafa0e7c9d140fb36e65724ce51bc94a38f6bc7337929c1bb1a9440eb9b19449bbeec3e9666a453b28dc2453b64d70ade79d49e725f57f3b82914fc185712d9163c80edc3008c5eecff537b03d5db709c3b3f078d40faf6909ea85e2db35e1a9e422b8d59437c4f81d84228cbb3d0e25ebf762772c49407bce34696f6dbca312bc8122153be95c99bbf4c4f5f11e09845d8a57fd07fa80580de1a217202e57f88e11eadd1dd0f01b13292e9fc86af0efb991f53fd16b22ae93c9e79bdfe1ccf67575f245746e", &(0x7f0000000540)="b0061ae946ae6a7b17ddfd94772fddc8b533c72bd5bcd67e157398c6a5dd283517465e2b", 0x1, 0xe0a}, 0x48) (async) sendto$inet(r0, &(0x7f0000000140)="b4e665eddce87a21e676d80c0aa3d70c2cf5282f826ec3971a238f8dc75488184c6220f26931ed5370d37c83b48c994ff23cee4197fad061d48d0173def3bfaf70d40b335e0d77dea87cf4bc2443b8816504ca715a18208e2155d5240166809083c60c97c0c775bde5336a14a5983cf3fcae419b8c84cc2b324f1d3d4067116452fd6f5993034fa2129a9ac82ed6b851e1f5370266e2e37d9df95418985d7ae9e47d37dd", 0xa4, 0x4000000, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x75) (async) pidfd_getfd(r1, r1, 0x0) (async) openat2(r3, &(0x7f0000000080)='.\x00', &(0x7f0000000a80)={0x201, 0x48}, 0x18) (async) 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 28) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="150000002dec908f7101fbf3003950a6f8c9067701dc448603acc0700e35d4b03030740e8528dd725339a7b5cc9b46f520805a3b08c3351715f03ee2b528719633c70683b21019ffc02487c02e3d03edef4786ce4c07b95c1f7eddcf9e2efe1964029799d437856004328b4bbddefb592c6f97f9f03cb318977488d8093562783c4d164bba925d2021e7da0bb189931aee6f334265b7253b56f2dec6c0179aefd43e447cdfc368042551b40492869414ee1af42f9ca780e58d83f27425b002b3288e2264caecb1163a4192fb930202c7ada9d906da7a1b46f4e3c55eadbf6f1810c0ff3aeed9a022c61d67edf1087bea8bad7d5f107b1185"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4b030000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x4c000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 29) 00:04:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 31) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="150000002dec908f7101fbf3003950a6f8c9067701dc448603acc0700e35d4b03030740e8528dd725339a7b5cc9b46f520805a3b08c3351715f03ee2b528719633c70683b21019ffc02487c02e3d03edef4786ce4c07b95c1f7eddcf9e2efe1964029799d437856004328b4bbddefb592c6f97f9f03cb318977488d8093562783c4d164bba925d2021e7da0bb189931aee6f334265b7253b56f2dec6c0179aefd43e447cdfc368042551b40492869414ee1af42f9ca780e58d83f27425b002b3288e2264caecb1163a4192fb930202c7ada9d906da7a1b46f4e3c55eadbf6f1810c0ff3aeed9a022c61d67edf1087bea8bad7d5f107b1185"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="150000002dec908f7101fbf3003950a6f8c9067701dc448603acc0700e35d4b03030740e8528dd725339a7b5cc9b46f520805a3b08c3351715f03ee2b528719633c70683b21019ffc02487c02e3d03edef4786ce4c07b95c1f7eddcf9e2efe1964029799d437856004328b4bbddefb592c6f97f9f03cb318977488d8093562783c4d164bba925d2021e7da0bb189931aee6f334265b7253b56f2dec6c0179aefd43e447cdfc368042551b40492869414ee1af42f9ca780e58d83f27425b002b3288e2264caecb1163a4192fb930202c7ada9d906da7a1b46f4e3c55eadbf6f1810c0ff3aeed9a022c61d67edf1087bea8bad7d5f107b1185"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3de, 0x20100) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) splice(r0, &(0x7f0000000040)=0x1, r1, &(0x7f0000000080)=0x8, 0x3, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbb3bb000000de860d7f1e"], 0x0) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x50010000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3de, 0x20100) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) splice(r0, &(0x7f0000000040)=0x1, r1, &(0x7f0000000080)=0x8, 0x3, 0x2) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="150000002dec908f7101fbf3003950a6f8c9067701dc448603acc0700e35d4b03030740e8528dd725339a7b5cc9b46f520805a3b08c3351715f03ee2b528719633c70683b21019ffc02487c02e3d03edef4786ce4c07b95c1f7eddcf9e2efe1964029799d437856004328b4bbddefb592c6f97f9f03cb318977488d8093562783c4d164bba925d2021e7da0bb189931aee6f334265b7253b56f2dec6c0179aefd43e447cdfc368042551b40492869414ee1af42f9ca780e58d83f27425b002b3288e2264caecb1163a4192fb930202c7ada9d906da7a1b46f4e3c55eadbf6f1810c0ff3aeed9a022c61d67edf1087bea8bad7d5f107b1185"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="150000002dec908f7101fbf3003950a6f8c9067701dc448603acc0700e35d4b03030740e8528dd725339a7b5cc9b46f520805a3b08c3351715f03ee2b528719633c70683b21019ffc02487c02e3d03edef4786ce4c07b95c1f7eddcf9e2efe1964029799d437856004328b4bbddefb592c6f97f9f03cb318977488d8093562783c4d164bba925d2021e7da0bb189931aee6f334265b7253b56f2dec6c0179aefd43e447cdfc368042551b40492869414ee1af42f9ca780e58d83f27425b002b3288e2264caecb1163a4192fb930202c7ada9d906da7a1b46f4e3c55eadbf6f1810c0ff3aeed9a022c61d67edf1087bea8bad7d5f107b1185"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) [ 271.229975][T19106] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x68000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 30) [ 271.241885][T19106] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 271.252927][T19106] CPU: 0 PID: 19106 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.255780][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.258520][T19106] Call trace: [ 271.259356][T19106] dump_backtrace+0x1c4/0x1f0 [ 271.260549][T19106] show_stack+0x2c/0x54 [ 271.261612][T19106] dump_stack_lvl+0x104/0x16c [ 271.262814][T19106] dump_stack+0x1c/0x58 [ 271.263834][T19106] kmem_cache_create_usercopy+0x268/0x31c [ 271.265249][T19106] p9_client_create+0x618/0x758 [ 271.266502][T19106] v9fs_session_init+0xa4/0x9f0 [ 271.267725][T19106] v9fs_mount+0x6c/0x568 [ 271.268814][T19106] legacy_get_tree+0x30/0x74 [ 271.269941][T19106] vfs_get_tree+0x40/0x140 [ 271.271070][T19106] do_new_mount+0x1dc/0x4e4 [ 271.272190][T19106] path_mount+0x358/0x914 [ 271.272874][T19121] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -22 [ 271.273243][T19106] __arm64_sys_mount+0x2c4/0x3c4 [ 271.276424][T19106] el0_svc_common+0x138/0x220 [ 271.277600][T19106] do_el0_svc+0x48/0x164 [ 271.278648][T19106] el0_svc+0x58/0x150 [ 271.279672][T19106] el0t_64_sync_handler+0x84/0xf0 [ 271.280930][T19106] el0t_64_sync+0x18c/0x190 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3de, 0x20100) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) splice(r0, &(0x7f0000000040)=0x1, r1, &(0x7f0000000080)=0x8, 0x3, 0x2) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) [ 271.296451][T19121] CPU: 1 PID: 19121 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.298920][T19121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.301374][T19121] Call trace: [ 271.302212][T19121] dump_backtrace+0x1c4/0x1f0 [ 271.303362][T19121] show_stack+0x2c/0x54 [ 271.304381][T19121] dump_stack_lvl+0x104/0x16c [ 271.305556][T19121] dump_stack+0x1c/0x58 [ 271.305566][T19121] kmem_cache_create_usercopy+0x268/0x31c [ 271.305576][T19121] p9_client_create+0x618/0x758 [ 271.305584][T19121] v9fs_session_init+0xa4/0x9f0 [ 271.305592][T19121] v9fs_mount+0x6c/0x568 [ 271.305599][T19121] legacy_get_tree+0x30/0x74 [ 271.305607][T19121] vfs_get_tree+0x40/0x140 [ 271.305615][T19121] do_new_mount+0x1dc/0x4e4 [ 271.305622][T19121] path_mount+0x358/0x914 [ 271.305629][T19121] __arm64_sys_mount+0x2c4/0x3c4 00:04:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 32) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x6c000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80) (rerun: 64) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="75f780b2d67c"}, 0x14) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbb3bb000000de860d7f1e"], 0x0) 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 31) [ 271.305636][T19121] el0_svc_common+0x138/0x220 [ 271.305645][T19121] do_el0_svc+0x48/0x164 [ 271.305652][T19121] el0_svc+0x58/0x150 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x74000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 271.305660][T19121] el0t_64_sync_handler+0x84/0xf0 [ 271.305668][T19121] el0t_64_sync+0x18c/0x190 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async, rerun: 64) r2 = dup(r1) (rerun: 64) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80) (rerun: 32) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7a000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 271.416057][T19139] kobject_add_internal failed for 9p-fcall-cache (error: -12 parent: slab) 00:04:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 33) [ 271.416119][T19139] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 32) [ 271.416128][T19139] CPU: 1 PID: 19139 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.416138][T19139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.416161][T19139] Call trace: [ 271.416164][T19139] dump_backtrace+0x1c4/0x1f0 [ 271.416176][T19139] show_stack+0x2c/0x54 [ 271.416183][T19139] dump_stack_lvl+0x104/0x16c [ 271.416192][T19139] dump_stack+0x1c/0x58 [ 271.416200][T19139] kmem_cache_create_usercopy+0x268/0x31c [ 271.416211][T19139] p9_client_create+0x618/0x758 [ 271.416219][T19139] v9fs_session_init+0xa4/0x9f0 [ 271.416228][T19139] v9fs_mount+0x6c/0x568 [ 271.416235][T19139] legacy_get_tree+0x30/0x74 [ 271.416243][T19139] vfs_get_tree+0x40/0x140 [ 271.416251][T19139] do_new_mount+0x1dc/0x4e4 [ 271.416259][T19139] path_mount+0x358/0x914 [ 271.416266][T19139] __arm64_sys_mount+0x2c4/0x3c4 [ 271.416274][T19139] el0_svc_common+0x138/0x220 [ 271.416286][T19139] do_el0_svc+0x48/0x164 [ 271.416294][T19139] el0_svc+0x58/0x150 [ 271.416303][T19139] el0t_64_sync_handler+0x84/0xf0 [ 271.416312][T19139] el0t_64_sync+0x18c/0x190 [ 271.418184][T19143] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 271.418196][T19143] CPU: 0 PID: 19143 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.418206][T19143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.418211][T19143] Call trace: [ 271.418214][T19143] dump_backtrace+0x1c4/0x1f0 [ 271.418223][T19143] show_stack+0x2c/0x54 [ 271.418229][T19143] dump_stack_lvl+0x104/0x16c [ 271.418238][T19143] dump_stack+0x1c/0x58 [ 271.418245][T19143] kmem_cache_create_usercopy+0x268/0x31c [ 271.418254][T19143] p9_client_create+0x618/0x758 [ 271.418261][T19143] v9fs_session_init+0xa4/0x9f0 [ 271.418270][T19143] v9fs_mount+0x6c/0x568 [ 271.418276][T19143] legacy_get_tree+0x30/0x74 [ 271.418284][T19143] vfs_get_tree+0x40/0x140 [ 271.418292][T19143] do_new_mount+0x1dc/0x4e4 [ 271.418299][T19143] path_mount+0x358/0x914 [ 271.418306][T19143] __arm64_sys_mount+0x2c4/0x3c4 [ 271.418314][T19143] el0_svc_common+0x138/0x220 [ 271.418322][T19143] do_el0_svc+0x48/0x164 [ 271.418331][T19143] el0_svc+0x58/0x150 [ 271.418339][T19143] el0t_64_sync_handler+0x84/0xf0 [ 271.418348][T19143] el0t_64_sync+0x18c/0x190 [ 271.493349][T19153] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 271.493362][T19153] CPU: 0 PID: 19153 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.493372][T19153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.493377][T19153] Call trace: [ 271.493380][T19153] dump_backtrace+0x1c4/0x1f0 [ 271.493390][T19153] show_stack+0x2c/0x54 [ 271.493397][T19153] dump_stack_lvl+0x104/0x16c [ 271.493410][T19153] dump_stack+0x1c/0x58 [ 271.493418][T19153] kmem_cache_create_usercopy+0x268/0x31c [ 271.493427][T19153] p9_client_create+0x618/0x758 [ 271.493434][T19153] v9fs_session_init+0xa4/0x9f0 [ 271.493442][T19153] v9fs_mount+0x6c/0x568 [ 271.493449][T19153] legacy_get_tree+0x30/0x74 [ 271.493457][T19153] vfs_get_tree+0x40/0x140 [ 271.493465][T19153] do_new_mount+0x1dc/0x4e4 [ 271.493475][T19153] path_mount+0x358/0x914 [ 271.493482][T19153] __arm64_sys_mount+0x2c4/0x3c4 [ 271.493490][T19153] el0_svc_common+0x138/0x220 [ 271.493499][T19153] do_el0_svc+0x48/0x164 [ 271.493507][T19153] el0_svc+0x58/0x150 [ 271.493515][T19153] el0t_64_sync_handler+0x84/0xf0 [ 271.493524][T19153] el0t_64_sync+0x18c/0x190 00:04:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@dev, @local, 0x0}, &(0x7f0000000140)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4}, 0x14) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x7c000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$P9_RVERSION(r3, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r5, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000023c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002380)={&(0x7f0000000240)={0x9c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe00000}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 34) 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x0, 0x65, 0x8}, 0x18) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kvm_dirty_ring_reset\x00', r1}, 0x10) lseek(r3, 0x7, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r4, 0x10, 0x0, 0x800) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='\x00', 0x0, r4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r5, 0x10, 0x0, 0x800) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f00000001c0)) 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 33) [ 271.663245][T19159] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 271.668391][T19159] CPU: 0 PID: 19159 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.670261][T19164] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 271.670974][T19159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.675371][T19159] Call trace: [ 271.676223][T19159] dump_backtrace+0x1c4/0x1f0 [ 271.677376][T19159] show_stack+0x2c/0x54 [ 271.678400][T19159] dump_stack_lvl+0x104/0x16c [ 271.679617][T19159] dump_stack+0x1c/0x58 [ 271.680644][T19159] kmem_cache_create_usercopy+0x268/0x31c [ 271.682004][T19159] p9_client_create+0x618/0x758 [ 271.683209][T19159] v9fs_session_init+0xa4/0x9f0 [ 271.684420][T19159] v9fs_mount+0x6c/0x568 [ 271.685483][T19159] legacy_get_tree+0x30/0x74 [ 271.686625][T19159] vfs_get_tree+0x40/0x140 [ 271.687722][T19159] do_new_mount+0x1dc/0x4e4 [ 271.688852][T19159] path_mount+0x358/0x914 [ 271.689955][T19159] __arm64_sys_mount+0x2c4/0x3c4 [ 271.691204][T19159] el0_svc_common+0x138/0x220 [ 271.692368][T19159] do_el0_svc+0x48/0x164 [ 271.693503][T19159] el0_svc+0x58/0x150 [ 271.694509][T19159] el0t_64_sync_handler+0x84/0xf0 [ 271.695770][T19159] el0t_64_sync+0x18c/0x190 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) write$P9_RVERSION(r3, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r5, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000023c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002380)={&(0x7f0000000240)={0x9c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe00000}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) [ 271.696913][T19164] CPU: 1 PID: 19164 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.699531][T19164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.701910][T19164] Call trace: [ 271.702694][T19164] dump_backtrace+0x1c4/0x1f0 [ 271.703784][T19164] show_stack+0x2c/0x54 [ 271.704753][T19164] dump_stack_lvl+0x104/0x16c [ 271.705863][T19164] dump_stack+0x1c/0x58 [ 271.706863][T19164] kmem_cache_create_usercopy+0x268/0x31c [ 271.708257][T19164] p9_client_create+0x618/0x758 [ 271.709376][T19164] v9fs_session_init+0xa4/0x9f0 [ 271.710573][T19164] v9fs_mount+0x6c/0x568 [ 271.711589][T19164] legacy_get_tree+0x30/0x74 [ 271.712708][T19164] vfs_get_tree+0x40/0x140 [ 271.713747][T19164] do_new_mount+0x1dc/0x4e4 [ 271.714827][T19164] path_mount+0x358/0x914 [ 271.715913][T19164] __arm64_sys_mount+0x2c4/0x3c4 [ 271.717052][T19164] el0_svc_common+0x138/0x220 [ 271.718167][T19164] do_el0_svc+0x48/0x164 [ 271.719152][T19164] el0_svc+0x58/0x150 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x88000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 271.720104][T19164] el0t_64_sync_handler+0x84/0xf0 [ 271.721339][T19164] el0t_64_sync+0x18c/0x190 00:04:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 35) 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r2 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x0, 0x65, 0x8}, 0x18) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kvm_dirty_ring_reset\x00', r1}, 0x10) lseek(r3, 0x7, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r4, 0x10, 0x0, 0x800) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='\x00', 0x0, r4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r5, 0x10, 0x0, 0x800) (async) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f00000001c0)) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x8a030000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$P9_RVERSION(r3, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r5, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000023c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002380)={&(0x7f0000000240)={0x9c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe00000}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) write$P9_RVERSION(r3, &(0x7f00000000c0)={0x13, 0x65, 0xffff, 0x1, 0x6, '9P2000'}, 0x13) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r5, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) (async) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000023c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002380)={&(0x7f0000000240)={0x9c, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff01}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1fe00000}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@dev, @local, 0x0}, &(0x7f0000000140)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4}, 0x14) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000a80)={0x0, 0x65, 0x8}, 0x18) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kvm_dirty_ring_reset\x00', r1}, 0x10) lseek(r3, 0x7, 0x1) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r4, 0x10, 0x0, 0x800) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000180)='\x00', 0x0, r4) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r5, 0x10, 0x0, 0x800) ioctl$BLKBSZGET(r5, 0x80081270, &(0x7f00000001c0)) [ 271.793750][T19181] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 34) [ 271.800538][T19181] CPU: 0 PID: 19181 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.803176][T19181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.805708][T19181] Call trace: [ 271.806554][T19181] dump_backtrace+0x1c4/0x1f0 [ 271.807728][T19181] show_stack+0x2c/0x54 [ 271.808809][T19181] dump_stack_lvl+0x104/0x16c [ 271.810022][T19181] dump_stack+0x1c/0x58 [ 271.811095][T19181] kmem_cache_create_usercopy+0x268/0x31c [ 271.812489][T19181] p9_client_create+0x618/0x758 [ 271.813721][T19181] v9fs_session_init+0xa4/0x9f0 [ 271.814973][T19181] v9fs_mount+0x6c/0x568 [ 271.815987][T19181] legacy_get_tree+0x30/0x74 [ 271.817154][T19181] vfs_get_tree+0x40/0x140 [ 271.818274][T19181] do_new_mount+0x1dc/0x4e4 [ 271.819411][T19181] path_mount+0x358/0x914 [ 271.820487][T19181] __arm64_sys_mount+0x2c4/0x3c4 [ 271.821776][T19181] el0_svc_common+0x138/0x220 [ 271.822923][T19181] do_el0_svc+0x48/0x164 [ 271.823982][T19181] el0_svc+0x58/0x150 [ 271.825059][T19181] el0t_64_sync_handler+0x84/0xf0 [ 271.826323][T19181] el0t_64_sync+0x18c/0x190 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x98000000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 271.837707][T19192] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x101000, 0x188) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000580)={0x6, @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000000c0)={0x4000, r4}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000002c0)="422728bab6d162ea883aa604c44f84ab9b9844e2cc5e599dc397e0ab00051b48436dc04a7442628bbe24ba0f848d810cc8d64690c10ab04dca6a2269f0f19b87e910d63aeca7c6e29d72b8407e4871fa17c4bace675ecc64", &(0x7f0000000340)=""/5, &(0x7f0000000380)="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", &(0x7f0000000480)="b246415e5aee67b337f1b4308fdc6b22dbe127ac66c600d9bb40c627b5308970303f8ee04cedf7c3746712975feec2d58f83fe2f0cc9108e0c5b8fd53d60f99ef9ca64449ce601c15b18aab84e2c4a1b88", 0xfc, r5, 0x4}, 0x38) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x200101, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x810) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r7, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000000)={0x1, 0x100}) [ 271.854095][T19192] CPU: 1 PID: 19192 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xcc010000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 271.856536][T19192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.859080][T19192] Call trace: [ 271.859929][T19192] dump_backtrace+0x1c4/0x1f0 [ 271.861119][T19192] show_stack+0x2c/0x54 [ 271.862131][T19192] dump_stack_lvl+0x104/0x16c [ 271.863277][T19192] dump_stack+0x1c/0x58 [ 271.864315][T19192] kmem_cache_create_usercopy+0x268/0x31c [ 271.865741][T19192] p9_client_create+0x618/0x758 [ 271.866946][T19192] v9fs_session_init+0xa4/0x9f0 [ 271.868135][T19192] v9fs_mount+0x6c/0x568 [ 271.869134][T19192] legacy_get_tree+0x30/0x74 [ 271.870293][T19192] vfs_get_tree+0x40/0x140 [ 271.871397][T19192] do_new_mount+0x1dc/0x4e4 [ 271.872535][T19192] path_mount+0x358/0x914 [ 271.873584][T19192] __arm64_sys_mount+0x2c4/0x3c4 [ 271.874813][T19192] el0_svc_common+0x138/0x220 [ 271.875960][T19192] do_el0_svc+0x48/0x164 [ 271.877011][T19192] el0_svc+0x58/0x150 [ 271.877974][T19192] el0t_64_sync_handler+0x84/0xf0 [ 271.879262][T19192] el0t_64_sync+0x18c/0x190 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xf6020000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x600000, 0xfffffffffffff700, 0x3ff, 0x8001, 0x3, 0xfe, 0xcd, 0x9}}}, 0x60) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 36) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0xffffe000, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x101000, 0x188) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000580)={0x6, @broadcast}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000000c0)={0x4000, r4}, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000002c0)="422728bab6d162ea883aa604c44f84ab9b9844e2cc5e599dc397e0ab00051b48436dc04a7442628bbe24ba0f848d810cc8d64690c10ab04dca6a2269f0f19b87e910d63aeca7c6e29d72b8407e4871fa17c4bace675ecc64", &(0x7f0000000340)=""/5, &(0x7f0000000380)="fb9a226f5177a058105331abeecd042dac89261d27647fdd81bee8423450490c6b57591c58ca3bd933090e12ca03c41fe4d3dae1ca6ee1d0347bc90c1cfdd9eb19e3d140d9e809e2a0e530e74f3624ac46150f65af7cb090617bd79922a7d77248e5de178e65d4a0cebe3e179e9514d57fadbba942ff6ddab9d7b50d9914a651e2c1b96be22ff092f9164d06df3e357d9856836e5e46228df65a2f46e2f61543695e16cafbe5228c824a8afad46d9fe2937d70f781427c19e48529276a1ed38be8335650a2b2f188af6039c10358a5ca37a96c106c8ea7a077b42e3a72903a952b7166b247a235bcaa226d72893ae75c2ede4378335d119e2743ae37", &(0x7f0000000480)="b246415e5aee67b337f1b4308fdc6b22dbe127ac66c600d9bb40c627b5308970303f8ee04cedf7c3746712975feec2d58f83fe2f0cc9108e0c5b8fd53d60f99ef9ca64449ce601c15b18aab84e2c4a1b88", 0xfc, r5, 0x4}, 0x38) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x200101, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x810) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r7, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000000)={0x1, 0x100}) 00:04:31 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@dev, @local, 0x0}, &(0x7f0000000140)=0xc) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4}, 0x14) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) socket$packet(0x11, 0x3, 0x300) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000000c0)={@dev, @local}, &(0x7f0000000140)=0xc) (async) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00'}) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r4}, 0x14) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="0300bbbbbbbb000000de860d7f1e"], 0x0) (async) 00:04:31 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x101000, 0x188) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000580)={0x6, @broadcast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000000c0)={0x4000, r4}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000002c0)="422728bab6d162ea883aa604c44f84ab9b9844e2cc5e599dc397e0ab00051b48436dc04a7442628bbe24ba0f848d810cc8d64690c10ab04dca6a2269f0f19b87e910d63aeca7c6e29d72b8407e4871fa17c4bace675ecc64", &(0x7f0000000340)=""/5, &(0x7f0000000380)="fb9a226f5177a058105331abeecd042dac89261d27647fdd81bee8423450490c6b57591c58ca3bd933090e12ca03c41fe4d3dae1ca6ee1d0347bc90c1cfdd9eb19e3d140d9e809e2a0e530e74f3624ac46150f65af7cb090617bd79922a7d77248e5de178e65d4a0cebe3e179e9514d57fadbba942ff6ddab9d7b50d9914a651e2c1b96be22ff092f9164d06df3e357d9856836e5e46228df65a2f46e2f61543695e16cafbe5228c824a8afad46d9fe2937d70f781427c19e48529276a1ed38be8335650a2b2f188af6039c10358a5ca37a96c106c8ea7a077b42e3a72903a952b7166b247a235bcaa226d72893ae75c2ede4378335d119e2743ae37", &(0x7f0000000480)="b246415e5aee67b337f1b4308fdc6b22dbe127ac66c600d9bb40c627b5308970303f8ee04cedf7c3746712975feec2d58f83fe2f0cc9108e0c5b8fd53d60f99ef9ca64449ce601c15b18aab84e2c4a1b88", 0xfc, r5, 0x4}, 0x38) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x200101, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x810) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r7, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000000)={0x1, 0x100}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats_percpu\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) openat(r1, &(0x7f0000000040)='./file0\x00', 0x101000, 0x188) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000580)={0x6, @broadcast}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000000c0)={0x4000, r4}, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={&(0x7f00000002c0)="422728bab6d162ea883aa604c44f84ab9b9844e2cc5e599dc397e0ab00051b48436dc04a7442628bbe24ba0f848d810cc8d64690c10ab04dca6a2269f0f19b87e910d63aeca7c6e29d72b8407e4871fa17c4bace675ecc64", &(0x7f0000000340)=""/5, &(0x7f0000000380)="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", &(0x7f0000000480)="b246415e5aee67b337f1b4308fdc6b22dbe127ac66c600d9bb40c627b5308970303f8ee04cedf7c3746712975feec2d58f83fe2f0cc9108e0c5b8fd53d60f99ef9ca64449ce601c15b18aab84e2c4a1b88", 0xfc, r5, 0x4}, 0x38) (async) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x200101, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4800}, 0x810) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r7, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000000)={0x1, 0x100}) (async) 00:04:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x600000, 0xfffffffffffff700, 0x3ff, 0x8001, 0x3, 0xfe, 0xcd, 0x9}}}, 0x60) (async, rerun: 64) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) [ 271.966305][T19223] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 271.971750][T19223] CPU: 0 PID: 19223 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 271.974243][T19223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 271.976704][T19223] Call trace: [ 271.977525][T19223] dump_backtrace+0x1c4/0x1f0 [ 271.978714][T19223] show_stack+0x2c/0x54 [ 271.979756][T19223] dump_stack_lvl+0x104/0x16c [ 271.980864][T19223] dump_stack+0x1c/0x58 [ 271.981887][T19223] kmem_cache_create_usercopy+0x268/0x31c [ 271.983293][T19223] p9_client_create+0x618/0x758 [ 271.984490][T19223] v9fs_session_init+0xa4/0x9f0 [ 271.985753][T19223] v9fs_mount+0x6c/0x568 [ 271.986876][T19223] legacy_get_tree+0x30/0x74 [ 271.987966][T19223] vfs_get_tree+0x40/0x140 [ 271.989139][T19223] do_new_mount+0x1dc/0x4e4 [ 271.990263][T19223] path_mount+0x358/0x914 [ 271.991316][T19223] __arm64_sys_mount+0x2c4/0x3c4 [ 271.992501][T19223] el0_svc_common+0x138/0x220 [ 271.993660][T19223] do_el0_svc+0x48/0x164 [ 271.994695][T19223] el0_svc+0x58/0x150 [ 271.995669][T19223] el0t_64_sync_handler+0x84/0xf0 [ 271.996895][T19223] el0t_64_sync+0x18c/0x190 00:04:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 35) 00:04:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x2, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 272.037938][T19260] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.041030][T19260] CPU: 0 PID: 19260 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.043664][T19260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.046195][T19260] Call trace: [ 272.046965][T19260] dump_backtrace+0x1c4/0x1f0 [ 272.048118][T19260] show_stack+0x2c/0x54 [ 272.049121][T19260] dump_stack_lvl+0x104/0x16c [ 272.050251][T19260] dump_stack+0x1c/0x58 [ 272.051327][T19260] kmem_cache_create_usercopy+0x268/0x31c [ 272.052732][T19260] p9_client_create+0x618/0x758 [ 272.053920][T19260] v9fs_session_init+0xa4/0x9f0 [ 272.055089][T19260] v9fs_mount+0x6c/0x568 [ 272.056095][T19260] legacy_get_tree+0x30/0x74 [ 272.057164][T19260] vfs_get_tree+0x40/0x140 [ 272.058238][T19260] do_new_mount+0x1dc/0x4e4 [ 272.059287][T19260] path_mount+0x358/0x914 [ 272.060344][T19260] __arm64_sys_mount+0x2c4/0x3c4 [ 272.061534][T19260] el0_svc_common+0x138/0x220 [ 272.062646][T19260] do_el0_svc+0x48/0x164 [ 272.063666][T19260] el0_svc+0x58/0x150 [ 272.064676][T19260] el0t_64_sync_handler+0x84/0xf0 [ 272.065966][T19260] el0t_64_sync+0x18c/0x190 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0xe8, 0x2}, 0x18) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r6, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r7, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r8, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x4e4080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xa, &(0x7f0000000180)=""/10, 0x41100, 0x8, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x99}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5, r6, 0x1, r7, r8, r9]}, 0x80) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x3, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 36) 00:04:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 37) 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x600000, 0xfffffffffffff700, 0x3ff, 0x8001, 0x3, 0xfe, 0xcd, 0x9}}}, 0x60) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) (fail_nth: 1) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 272.148801][T19271] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.151045][T19276] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) (fail_nth: 2) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r2 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0xe8, 0x2}, 0x18) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r6, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r7, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r8, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x4e4080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xa, &(0x7f0000000180)=""/10, 0x41100, 0x8, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x99}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5, r6, 0x1, r7, r8, r9]}, 0x80) [ 272.159922][T19271] CPU: 0 PID: 19271 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.162537][T19271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.165096][T19271] Call trace: [ 272.165910][T19271] dump_backtrace+0x1c4/0x1f0 [ 272.167064][T19271] show_stack+0x2c/0x54 [ 272.168124][T19271] dump_stack_lvl+0x104/0x16c [ 272.169380][T19271] dump_stack+0x1c/0x58 [ 272.170489][T19271] kmem_cache_create_usercopy+0x268/0x31c [ 272.171903][T19271] p9_client_create+0x618/0x758 [ 272.173245][T19271] v9fs_session_init+0xa4/0x9f0 [ 272.174516][T19271] v9fs_mount+0x6c/0x568 [ 272.175573][T19271] legacy_get_tree+0x30/0x74 [ 272.176804][T19271] vfs_get_tree+0x40/0x140 [ 272.177928][T19271] do_new_mount+0x1dc/0x4e4 [ 272.179009][T19271] path_mount+0x358/0x914 [ 272.180064][T19271] __arm64_sys_mount+0x2c4/0x3c4 [ 272.181254][T19271] el0_svc_common+0x138/0x220 [ 272.182418][T19271] do_el0_svc+0x48/0x164 [ 272.183543][T19271] el0_svc+0x58/0x150 [ 272.184522][T19271] el0t_64_sync_handler+0x84/0xf0 [ 272.185806][T19271] el0t_64_sync+0x18c/0x190 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) dup(r4) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x5, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 272.188342][T19276] CPU: 0 PID: 19276 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.190999][T19276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.193452][T19276] Call trace: [ 272.194269][T19276] dump_backtrace+0x1c4/0x1f0 [ 272.195384][T19276] show_stack+0x2c/0x54 [ 272.196430][T19276] dump_stack_lvl+0x104/0x16c [ 272.197522][T19276] dump_stack+0x1c/0x58 [ 272.198483][T19276] kmem_cache_create_usercopy+0x268/0x31c [ 272.199844][T19276] p9_client_create+0x618/0x758 [ 272.201014][T19276] v9fs_session_init+0xa4/0x9f0 [ 272.202163][T19276] v9fs_mount+0x6c/0x568 [ 272.203199][T19276] legacy_get_tree+0x30/0x74 [ 272.204413][T19276] vfs_get_tree+0x40/0x140 [ 272.205596][T19276] do_new_mount+0x1dc/0x4e4 [ 272.206628][T19276] path_mount+0x358/0x914 [ 272.207790][T19276] __arm64_sys_mount+0x2c4/0x3c4 [ 272.209091][T19276] el0_svc_common+0x138/0x220 [ 272.210247][T19276] do_el0_svc+0x48/0x164 [ 272.211319][T19276] el0_svc+0x58/0x150 [ 272.212315][T19276] el0t_64_sync_handler+0x84/0xf0 [ 272.213653][T19276] el0t_64_sync+0x18c/0x190 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r2 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0xe8, 0x2}, 0x18) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3}}, './file0\x00'}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r6, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r7, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r8, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x4e4080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xa, &(0x7f0000000180)=""/10, 0x41100, 0x8, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x3, 0x8, 0x99}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5, r6, 0x1, r7, r8, r9]}, 0x80) [ 272.224156][T19287] FAULT_INJECTION: forcing a failure. [ 272.224156][T19287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.227239][T19287] CPU: 0 PID: 19287 Comm: syz-executor.1 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.229756][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.232244][T19287] Call trace: [ 272.233079][T19287] dump_backtrace+0x1c4/0x1f0 [ 272.234205][T19287] show_stack+0x2c/0x54 [ 272.235185][T19287] dump_stack_lvl+0x104/0x16c [ 272.236330][T19287] dump_stack+0x1c/0x58 [ 272.237323][T19287] should_fail+0x1dc/0x200 [ 272.238378][T19287] should_fail_usercopy+0x20/0x30 [ 272.239556][T19287] simple_read_from_buffer+0xc0/0x1cc [ 272.240841][T19287] proc_fail_nth_read+0xf4/0x164 [ 272.242017][T19287] vfs_read+0x19c/0x448 [ 272.242998][T19287] ksys_read+0xb4/0x160 [ 272.244013][T19287] __arm64_sys_read+0x24/0x34 [ 272.245162][T19287] el0_svc_common+0x138/0x220 [ 272.246315][T19287] do_el0_svc+0x48/0x164 [ 272.247370][T19287] el0_svc+0x58/0x150 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x6, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) dup(r4) (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) [ 272.248337][T19287] el0t_64_sync_handler+0x84/0xf0 [ 272.249540][T19287] el0t_64_sync+0x18c/0x190 00:04:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 37) 00:04:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 38) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') write$smackfs_labels_list(r0, &(0x7f0000000040)={[{'\f\xb4\\l\xec+q\x93\b\xf1;5F\x92e'}, {'\x00*\x9a\x06\xb6'}, {'\xd1\x1fcZ\x00'}]}, 0x1d) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 272.305395][T19295] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.307356][T19295] CPU: 0 PID: 19295 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.309886][T19295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.312401][T19295] Call trace: [ 272.313231][T19295] dump_backtrace+0x1c4/0x1f0 [ 272.314405][T19295] show_stack+0x2c/0x54 [ 272.315444][T19295] dump_stack_lvl+0x104/0x16c [ 272.316643][T19295] dump_stack+0x1c/0x58 [ 272.317734][T19295] kmem_cache_create_usercopy+0x268/0x31c [ 272.319256][T19295] p9_client_create+0x618/0x758 [ 272.320482][T19295] v9fs_session_init+0xa4/0x9f0 [ 272.321746][T19295] v9fs_mount+0x6c/0x568 [ 272.322818][T19295] legacy_get_tree+0x30/0x74 [ 272.323954][T19295] vfs_get_tree+0x40/0x140 [ 272.325125][T19295] do_new_mount+0x1dc/0x4e4 [ 272.326236][T19295] path_mount+0x358/0x914 [ 272.327296][T19295] __arm64_sys_mount+0x2c4/0x3c4 [ 272.328515][T19295] el0_svc_common+0x138/0x220 [ 272.329686][T19295] do_el0_svc+0x48/0x164 [ 272.330791][T19295] el0_svc+0x58/0x150 [ 272.331832][T19295] el0t_64_sync_handler+0x84/0xf0 [ 272.333067][T19295] el0t_64_sync+0x18c/0x190 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) dup(r4) (async, rerun: 64) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (rerun: 64) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x8, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x2, 0x0, 0x800) [ 272.359044][T19304] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.361333][T19304] CPU: 0 PID: 19304 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.363879][T19304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.366405][T19304] Call trace: [ 272.367260][T19304] dump_backtrace+0x1c4/0x1f0 [ 272.368440][T19304] show_stack+0x2c/0x54 [ 272.369506][T19304] dump_stack_lvl+0x104/0x16c [ 272.370708][T19304] dump_stack+0x1c/0x58 [ 272.371718][T19304] kmem_cache_create_usercopy+0x268/0x31c [ 272.373131][T19304] p9_client_create+0x618/0x758 [ 272.374344][T19304] v9fs_session_init+0xa4/0x9f0 [ 272.375599][T19304] v9fs_mount+0x6c/0x568 [ 272.376657][T19304] legacy_get_tree+0x30/0x74 [ 272.377793][T19304] vfs_get_tree+0x40/0x140 [ 272.378890][T19304] do_new_mount+0x1dc/0x4e4 [ 272.380042][T19304] path_mount+0x358/0x914 [ 272.381122][T19304] __arm64_sys_mount+0x2c4/0x3c4 [ 272.382351][T19304] el0_svc_common+0x138/0x220 [ 272.383544][T19304] do_el0_svc+0x48/0x164 [ 272.384614][T19304] el0_svc+0x58/0x150 [ 272.385592][T19304] el0t_64_sync_handler+0x84/0xf0 [ 272.386796][T19304] el0t_64_sync+0x18c/0x190 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') write$smackfs_labels_list(r0, &(0x7f0000000040)={[{'\f\xb4\\l\xec+q\x93\b\xf1;5F\x92e'}, {'\x00*\x9a\x06\xb6'}, {'\xd1\x1fcZ\x00'}]}, 0x1d) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) write$smackfs_labels_list(r0, &(0x7f0000000040)={[{'\f\xb4\\l\xec+q\x93\b\xf1;5F\x92e'}, {'\x00*\x9a\x06\xb6'}, {'\xd1\x1fcZ\x00'}]}, 0x1d) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x9, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') write$smackfs_labels_list(r0, &(0x7f0000000040)={[{'\f\xb4\\l\xec+q\x93\b\xf1;5F\x92e'}, {'\x00*\x9a\x06\xb6'}, {'\xd1\x1fcZ\x00'}]}, 0x1d) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x3, 0x0, 0x800) 00:04:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 38) 00:04:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 39) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xa, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x40000, 0x0, 0x8}, 0x18) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x7, 0x0, 0x800) 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r3, 0x10, 0x0, 0x800) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x6, 0x1}}, 0x30) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0xfffffffffffffd3a) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xb, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x40000, 0x0, 0x8}, 0x18) [ 272.520841][T19333] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.521808][T19329] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x8, 0x0, 0x800) [ 272.528065][T19333] CPU: 1 PID: 19333 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.530622][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.533125][T19333] Call trace: [ 272.533920][T19333] dump_backtrace+0x1c4/0x1f0 [ 272.535074][T19333] show_stack+0x2c/0x54 [ 272.536082][T19333] dump_stack_lvl+0x104/0x16c [ 272.537257][T19333] dump_stack+0x1c/0x58 [ 272.538313][T19333] kmem_cache_create_usercopy+0x268/0x31c [ 272.539753][T19333] p9_client_create+0x618/0x758 [ 272.540975][T19333] v9fs_session_init+0xa4/0x9f0 [ 272.542361][T19333] v9fs_mount+0x6c/0x568 [ 272.543444][T19333] legacy_get_tree+0x30/0x74 [ 272.544618][T19333] vfs_get_tree+0x40/0x140 [ 272.545702][T19333] do_new_mount+0x1dc/0x4e4 [ 272.546790][T19333] path_mount+0x358/0x914 [ 272.547917][T19333] __arm64_sys_mount+0x2c4/0x3c4 [ 272.549120][T19333] el0_svc_common+0x138/0x220 [ 272.550277][T19333] do_el0_svc+0x48/0x164 [ 272.551355][T19333] el0_svc+0x58/0x150 [ 272.552373][T19333] el0t_64_sync_handler+0x84/0xf0 [ 272.553611][T19333] el0t_64_sync+0x18c/0x190 [ 272.554751][T19329] CPU: 0 PID: 19329 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.557267][T19329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.559765][T19329] Call trace: [ 272.560514][T19329] dump_backtrace+0x1c4/0x1f0 [ 272.561731][T19329] show_stack+0x2c/0x54 [ 272.562834][T19329] dump_stack_lvl+0x104/0x16c [ 272.564070][T19329] dump_stack+0x1c/0x58 [ 272.565185][T19329] kmem_cache_create_usercopy+0x268/0x31c [ 272.566725][T19329] p9_client_create+0x618/0x758 [ 272.567855][T19329] v9fs_session_init+0xa4/0x9f0 [ 272.568956][T19329] v9fs_mount+0x6c/0x568 [ 272.569904][T19329] legacy_get_tree+0x30/0x74 [ 272.571014][T19329] vfs_get_tree+0x40/0x140 [ 272.572084][T19329] do_new_mount+0x1dc/0x4e4 [ 272.573164][T19329] path_mount+0x358/0x914 [ 272.574196][T19329] __arm64_sys_mount+0x2c4/0x3c4 [ 272.575337][T19329] el0_svc_common+0x138/0x220 [ 272.576473][T19329] do_el0_svc+0x48/0x164 [ 272.577456][T19329] el0_svc+0x58/0x150 [ 272.578414][T19329] el0t_64_sync_handler+0x84/0xf0 [ 272.579621][T19329] el0t_64_sync+0x18c/0x190 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xc, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x11, 0x0, 0x800) 00:04:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 40) 00:04:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 39) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x12, 0x0, 0x800) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_names\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x40000, 0x0, 0x8}, 0x18) 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r3, 0x10, 0x0, 0x800) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x6, 0x1}}, 0x30) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0xfffffffffffffd3a) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x2, 0x800) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xd, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='^\x00', &(0x7f0000000040)='./file0\x00', r0) [ 272.684677][T19361] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.686972][T19359] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.688905][T19359] CPU: 1 PID: 19359 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.691390][T19359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.693880][T19359] Call trace: [ 272.694642][T19359] dump_backtrace+0x1c4/0x1f0 [ 272.695781][T19359] show_stack+0x2c/0x54 [ 272.696766][T19359] dump_stack_lvl+0x104/0x16c [ 272.697911][T19359] dump_stack+0x1c/0x58 [ 272.698910][T19359] kmem_cache_create_usercopy+0x268/0x31c [ 272.700284][T19359] p9_client_create+0x618/0x758 [ 272.701460][T19359] v9fs_session_init+0xa4/0x9f0 [ 272.702633][T19359] v9fs_mount+0x6c/0x568 [ 272.703615][T19359] legacy_get_tree+0x30/0x74 [ 272.704717][T19359] vfs_get_tree+0x40/0x140 [ 272.705804][T19359] do_new_mount+0x1dc/0x4e4 [ 272.706870][T19359] path_mount+0x358/0x914 [ 272.707928][T19359] __arm64_sys_mount+0x2c4/0x3c4 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='^\x00', &(0x7f0000000040)='./file0\x00', r0) [ 272.709137][T19359] el0_svc_common+0x138/0x220 [ 272.710277][T19359] do_el0_svc+0x48/0x164 [ 272.711277][T19359] el0_svc+0x58/0x150 [ 272.712224][T19359] el0t_64_sync_handler+0x84/0xf0 [ 272.713421][T19359] el0t_64_sync+0x18c/0x190 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x4, 0x800) [ 272.724422][T19361] CPU: 1 PID: 19361 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.726820][T19361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.729197][T19361] Call trace: [ 272.729984][T19361] dump_backtrace+0x1c4/0x1f0 [ 272.731079][T19361] show_stack+0x2c/0x54 [ 272.732092][T19361] dump_stack_lvl+0x104/0x16c [ 272.733208][T19361] dump_stack+0x1c/0x58 [ 272.734226][T19361] kmem_cache_create_usercopy+0x268/0x31c [ 272.735634][T19361] p9_client_create+0x618/0x758 [ 272.736830][T19361] v9fs_session_init+0xa4/0x9f0 [ 272.738055][T19361] v9fs_mount+0x6c/0x568 [ 272.739058][T19361] legacy_get_tree+0x30/0x74 [ 272.740156][T19361] vfs_get_tree+0x40/0x140 [ 272.741204][T19361] do_new_mount+0x1dc/0x4e4 [ 272.742300][T19361] path_mount+0x358/0x914 [ 272.743331][T19361] __arm64_sys_mount+0x2c4/0x3c4 [ 272.744557][T19361] el0_svc_common+0x138/0x220 [ 272.745692][T19361] do_el0_svc+0x48/0x164 [ 272.746756][T19361] el0_svc+0x58/0x150 [ 272.747724][T19361] el0t_64_sync_handler+0x84/0xf0 [ 272.748922][T19361] el0t_64_sync+0x18c/0x190 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r3, 0x10, 0x0, 0x800) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYRES16=r3], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x6, 0x1}}, 0x30) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0xfffffffffffffd3a) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xe, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 41) 00:04:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 40) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x5, 0x800) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='^\x00', &(0x7f0000000040)='./file0\x00', r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='^\x00', &(0x7f0000000040)='./file0\x00', r0) (async) 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_auto}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, ')-)'}}, {@subj_type={'subj_type', 0x3d, '@}-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x37, 0x36, 0x64, 0x31, 0x35, 0x63], 0x2d, [0x39, 0x33, 0x66, 0x65], 0x2d, [0x37, 0x62, 0x32, 0x66], 0x2d, [0x51, 0x62, 0x50, 0x31], 0x2d, [0x64, 0x63, 0x38, 0x35, 0x38, 0x66, 0x39, 0x38]}}}, {@subj_role={'subj_role', 0x3d, 'mounts\x00'}}]}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x10, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x6, 0x800) [ 272.831330][T19396] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.833284][T19396] CPU: 0 PID: 19396 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.835827][T19396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.838313][T19396] Call trace: [ 272.839082][T19396] dump_backtrace+0x1c4/0x1f0 [ 272.840283][T19396] show_stack+0x2c/0x54 [ 272.841328][T19396] dump_stack_lvl+0x104/0x16c [ 272.842475][T19396] dump_stack+0x1c/0x58 [ 272.843509][T19396] kmem_cache_create_usercopy+0x268/0x31c [ 272.844943][T19396] p9_client_create+0x618/0x758 [ 272.846158][T19396] v9fs_session_init+0xa4/0x9f0 [ 272.846977][T19397] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.847272][T19396] v9fs_mount+0x6c/0x568 [ 272.850248][T19396] legacy_get_tree+0x30/0x74 [ 272.851414][T19396] vfs_get_tree+0x40/0x140 [ 272.852508][T19396] do_new_mount+0x1dc/0x4e4 [ 272.853613][T19396] path_mount+0x358/0x914 [ 272.854675][T19396] __arm64_sys_mount+0x2c4/0x3c4 [ 272.855921][T19396] el0_svc_common+0x138/0x220 [ 272.857079][T19396] do_el0_svc+0x48/0x164 [ 272.858129][T19396] el0_svc+0x58/0x150 [ 272.859333][T19396] el0t_64_sync_handler+0x84/0xf0 [ 272.860602][T19396] el0t_64_sync+0x18c/0x190 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_auto}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, ')-)'}}, {@subj_type={'subj_type', 0x3d, '@}-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x37, 0x36, 0x64, 0x31, 0x35, 0x63], 0x2d, [0x39, 0x33, 0x66, 0x65], 0x2d, [0x37, 0x62, 0x32, 0x66], 0x2d, [0x51, 0x62, 0x50, 0x31], 0x2d, [0x64, 0x63, 0x38, 0x35, 0x38, 0x66, 0x39, 0x38]}}}, {@subj_role={'subj_role', 0x3d, 'mounts\x00'}}]}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_auto}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, ')-)'}}, {@subj_type={'subj_type', 0x3d, '@}-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x37, 0x36, 0x64, 0x31, 0x35, 0x63], 0x2d, [0x39, 0x33, 0x66, 0x65], 0x2d, [0x37, 0x62, 0x32, 0x66], 0x2d, [0x51, 0x62, 0x50, 0x31], 0x2d, [0x64, 0x63, 0x38, 0x35, 0x38, 0x66, 0x39, 0x38]}}}, {@subj_role={'subj_role', 0x3d, 'mounts\x00'}}]}) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) [ 272.861753][T19397] CPU: 1 PID: 19397 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 272.864259][T19397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 272.866675][T19397] Call trace: [ 272.867444][T19397] dump_backtrace+0x1c4/0x1f0 [ 272.868627][T19397] show_stack+0x2c/0x54 [ 272.869646][T19397] dump_stack_lvl+0x104/0x16c [ 272.870752][T19397] dump_stack+0x1c/0x58 [ 272.871756][T19397] kmem_cache_create_usercopy+0x268/0x31c [ 272.873102][T19397] p9_client_create+0x618/0x758 [ 272.874281][T19397] v9fs_session_init+0xa4/0x9f0 [ 272.875408][T19397] v9fs_mount+0x6c/0x568 [ 272.876431][T19397] legacy_get_tree+0x30/0x74 [ 272.877525][T19397] vfs_get_tree+0x40/0x140 [ 272.878584][T19397] do_new_mount+0x1dc/0x4e4 [ 272.879648][T19397] path_mount+0x358/0x914 [ 272.880708][T19397] __arm64_sys_mount+0x2c4/0x3c4 [ 272.881898][T19397] el0_svc_common+0x138/0x220 [ 272.883033][T19397] do_el0_svc+0x48/0x164 [ 272.884039][T19397] el0_svc+0x58/0x150 [ 272.884988][T19397] el0t_64_sync_handler+0x84/0xf0 [ 272.886284][T19397] el0t_64_sync+0x18c/0x190 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x11, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x7, 0x800) 00:04:32 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 42) 00:04:32 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 41) 00:04:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x12, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x8, 0x800) 00:04:32 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async, rerun: 32) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 00:04:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), 0x100000, &(0x7f0000000200)={[{@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@xino_auto}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, ')-)'}}, {@subj_type={'subj_type', 0x3d, '@}-'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x37, 0x36, 0x64, 0x31, 0x35, 0x63], 0x2d, [0x39, 0x33, 0x66, 0x65], 0x2d, [0x37, 0x62, 0x32, 0x66], 0x2d, [0x51, 0x62, 0x50, 0x31], 0x2d, [0x64, 0x63, 0x38, 0x35, 0x38, 0x66, 0x39, 0x38]}}}, {@subj_role={'subj_role', 0x3d, 'mounts\x00'}}]}) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:32 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x10, 0x800) [ 272.995796][T19428] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 272.997713][T19428] CPU: 1 PID: 19428 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 273.000230][T19428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 273.002731][T19428] Call trace: [ 273.003555][T19428] dump_backtrace+0x1c4/0x1f0 [ 273.004681][T19428] show_stack+0x2c/0x54 [ 273.005735][T19428] dump_stack_lvl+0x104/0x16c [ 273.006925][T19428] dump_stack+0x1c/0x58 [ 273.007909][T19428] kmem_cache_create_usercopy+0x268/0x31c [ 273.009320][T19428] p9_client_create+0x618/0x758 [ 273.010485][T19428] v9fs_session_init+0xa4/0x9f0 [ 273.011691][T19428] v9fs_mount+0x6c/0x568 [ 273.012760][T19428] legacy_get_tree+0x30/0x74 [ 273.013897][T19428] vfs_get_tree+0x40/0x140 [ 273.015018][T19428] do_new_mount+0x1dc/0x4e4 [ 273.016149][T19428] path_mount+0x358/0x914 [ 273.017237][T19428] __arm64_sys_mount+0x2c4/0x3c4 [ 273.018488][T19428] el0_svc_common+0x138/0x220 [ 273.019638][T19428] do_el0_svc+0x48/0x164 [ 273.020666][T19428] el0_svc+0x58/0x150 [ 273.021662][T19428] el0t_64_sync_handler+0x84/0xf0 [ 273.022958][T19428] el0t_64_sync+0x18c/0x190 00:04:33 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) setsockopt$sock_timeval(r2, 0x1, 0x7, &(0x7f0000000440)={0x0, 0xea60}, 0x10) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r3, 0xfffc, 0x9, 0x1f, 0x401, 0x1}, &(0x7f00000000c0)=0x14) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x18}, 0x18) 00:04:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x25, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x11, 0x800) [ 273.044118][T19433] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x3c, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 273.049775][T19433] CPU: 0 PID: 19433 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 273.052477][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 273.055006][T19433] Call trace: [ 273.055868][T19433] dump_backtrace+0x1c4/0x1f0 [ 273.057088][T19433] show_stack+0x2c/0x54 [ 273.058135][T19433] dump_stack_lvl+0x104/0x16c [ 273.059324][T19433] dump_stack+0x1c/0x58 [ 273.060412][T19433] kmem_cache_create_usercopy+0x268/0x31c [ 273.061876][T19433] p9_client_create+0x618/0x758 [ 273.063078][T19433] v9fs_session_init+0xa4/0x9f0 [ 273.064326][T19433] v9fs_mount+0x6c/0x568 [ 273.065386][T19433] legacy_get_tree+0x30/0x74 [ 273.066550][T19433] vfs_get_tree+0x40/0x140 [ 273.067666][T19433] do_new_mount+0x1dc/0x4e4 [ 273.068760][T19433] path_mount+0x358/0x914 [ 273.069876][T19433] __arm64_sys_mount+0x2c4/0x3c4 [ 273.071136][T19433] el0_svc_common+0x138/0x220 [ 273.072328][T19433] do_el0_svc+0x48/0x164 [ 273.073383][T19433] el0_svc+0x58/0x150 [ 273.074386][T19433] el0t_64_sync_handler+0x84/0xf0 [ 273.075672][T19433] el0t_64_sync+0x18c/0x190 00:04:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x22, 0x800) 00:04:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 43) [ 273.136532][T19448] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 273.140956][T19448] CPU: 0 PID: 19448 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 273.143594][T19448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 273.146094][T19448] Call trace: [ 273.146987][T19448] dump_backtrace+0x1c4/0x1f0 [ 273.148155][T19448] show_stack+0x2c/0x54 [ 273.149235][T19448] dump_stack_lvl+0x104/0x16c [ 273.150394][T19448] dump_stack+0x1c/0x58 [ 273.151410][T19448] kmem_cache_create_usercopy+0x268/0x31c [ 273.152849][T19448] p9_client_create+0x618/0x758 [ 273.154074][T19448] v9fs_session_init+0xa4/0x9f0 [ 273.155321][T19448] v9fs_mount+0x6c/0x568 [ 273.156370][T19448] legacy_get_tree+0x30/0x74 [ 273.157513][T19448] vfs_get_tree+0x40/0x140 [ 273.158644][T19448] do_new_mount+0x1dc/0x4e4 [ 273.159747][T19448] path_mount+0x358/0x914 [ 273.160801][T19448] __arm64_sys_mount+0x2c4/0x3c4 [ 273.162067][T19448] el0_svc_common+0x138/0x220 [ 273.163328][T19448] do_el0_svc+0x48/0x164 [ 273.164293][T19448] el0_svc+0x58/0x150 [ 273.165287][T19448] el0t_64_sync_handler+0x84/0xf0 [ 273.166560][T19448] el0t_64_sync+0x18c/0x190 00:04:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 42) 00:04:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x30, 0x800) 00:04:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x48, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4c, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 44) [ 273.226935][T19461] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 273.229056][T19461] CPU: 1 PID: 19461 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 273.231564][T19461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 273.234096][T19461] Call trace: [ 273.234897][T19461] dump_backtrace+0x1c4/0x1f0 [ 273.236013][T19461] show_stack+0x2c/0x54 [ 273.237064][T19461] dump_stack_lvl+0x104/0x16c [ 273.238195][T19461] dump_stack+0x1c/0x58 [ 273.239252][T19461] kmem_cache_create_usercopy+0x268/0x31c [ 273.240668][T19461] p9_client_create+0x618/0x758 [ 273.241940][T19461] v9fs_session_init+0xa4/0x9f0 [ 273.243178][T19461] v9fs_mount+0x6c/0x568 [ 273.244281][T19461] legacy_get_tree+0x30/0x74 [ 273.245470][T19461] vfs_get_tree+0x40/0x140 [ 273.246558][T19461] do_new_mount+0x1dc/0x4e4 [ 273.247659][T19461] path_mount+0x358/0x914 [ 273.248702][T19461] __arm64_sys_mount+0x2c4/0x3c4 [ 273.249991][T19461] el0_svc_common+0x138/0x220 [ 273.251174][T19461] do_el0_svc+0x48/0x164 [ 273.252187][T19461] el0_svc+0x58/0x150 [ 273.253191][T19461] el0t_64_sync_handler+0x84/0xf0 [ 273.254417][T19461] el0t_64_sync+0x18c/0x190 [ 273.258844][T19460] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 273.262172][T19460] CPU: 0 PID: 19460 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 273.264751][T19460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 273.267332][T19460] Call trace: [ 273.268137][T19460] dump_backtrace+0x1c4/0x1f0 [ 273.269357][T19460] show_stack+0x2c/0x54 [ 273.270365][T19460] dump_stack_lvl+0x104/0x16c [ 273.271575][T19460] dump_stack+0x1c/0x58 [ 273.272620][T19460] kmem_cache_create_usercopy+0x268/0x31c [ 273.274081][T19460] p9_client_create+0x618/0x758 [ 273.275298][T19460] v9fs_session_init+0xa4/0x9f0 [ 273.276522][T19460] v9fs_mount+0x6c/0x568 [ 273.277622][T19460] legacy_get_tree+0x30/0x74 [ 273.278808][T19460] vfs_get_tree+0x40/0x140 [ 273.279934][T19460] do_new_mount+0x1dc/0x4e4 [ 273.281091][T19460] path_mount+0x358/0x914 [ 273.282177][T19460] __arm64_sys_mount+0x2c4/0x3c4 [ 273.283443][T19460] el0_svc_common+0x138/0x220 [ 273.284596][T19460] do_el0_svc+0x48/0x164 [ 273.285672][T19460] el0_svc+0x58/0x150 [ 273.286704][T19460] el0t_64_sync_handler+0x84/0xf0 [ 273.288014][T19460] el0t_64_sync+0x18c/0x190 00:04:33 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x800) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) (async) setsockopt$sock_timeval(r2, 0x1, 0x7, &(0x7f0000000440)={0x0, 0xea60}, 0x10) (async) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r3, 0xfffc, 0x9, 0x1f, 0x401, 0x1}, &(0x7f00000000c0)=0x14) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x18}, 0x18) 00:04:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x500, 0x800) 00:04:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x68, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 45) 00:04:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 43) [ 273.892502][T19471] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 273.894577][T19471] CPU: 1 PID: 19471 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 273.897115][T19471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 273.899610][T19471] Call trace: [ 273.900426][T19471] dump_backtrace+0x1c4/0x1f0 [ 273.901676][T19471] show_stack+0x2c/0x54 [ 273.902751][T19471] dump_stack_lvl+0x104/0x16c [ 273.903966][T19471] dump_stack+0x1c/0x58 [ 273.905095][T19471] kmem_cache_create_usercopy+0x268/0x31c [ 273.905809][T19472] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 273.906602][T19471] p9_client_create+0x618/0x758 00:04:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x600, 0x800) [ 273.906614][T19471] v9fs_session_init+0xa4/0x9f0 [ 273.906628][T19471] v9fs_mount+0x6c/0x568 [ 273.906635][T19471] legacy_get_tree+0x30/0x74 [ 273.913197][T19471] vfs_get_tree+0x40/0x140 [ 273.914302][T19471] do_new_mount+0x1dc/0x4e4 [ 273.915428][T19471] path_mount+0x358/0x914 [ 273.916512][T19471] __arm64_sys_mount+0x2c4/0x3c4 [ 273.917797][T19471] el0_svc_common+0x138/0x220 [ 273.918949][T19471] do_el0_svc+0x48/0x164 [ 273.919942][T19471] el0_svc+0x58/0x150 [ 273.920902][T19471] el0t_64_sync_handler+0x84/0xf0 [ 273.922083][T19471] el0t_64_sync+0x18c/0x190 [ 273.923310][T19472] CPU: 0 PID: 19472 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 273.925963][T19472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 273.928511][T19472] Call trace: [ 273.929349][T19472] dump_backtrace+0x1c4/0x1f0 [ 273.930469][T19472] show_stack+0x2c/0x54 [ 273.931496][T19472] dump_stack_lvl+0x104/0x16c [ 273.932618][T19472] dump_stack+0x1c/0x58 [ 273.933603][T19472] kmem_cache_create_usercopy+0x268/0x31c [ 273.934985][T19472] p9_client_create+0x618/0x758 [ 273.936172][T19472] v9fs_session_init+0xa4/0x9f0 [ 273.937312][T19472] v9fs_mount+0x6c/0x568 [ 273.938358][T19472] legacy_get_tree+0x30/0x74 [ 273.939487][T19472] vfs_get_tree+0x40/0x140 [ 273.940503][T19472] do_new_mount+0x1dc/0x4e4 [ 273.941590][T19472] path_mount+0x358/0x914 [ 273.942730][T19472] __arm64_sys_mount+0x2c4/0x3c4 [ 273.943907][T19472] el0_svc_common+0x138/0x220 [ 273.945077][T19472] do_el0_svc+0x48/0x164 [ 273.946100][T19472] el0_svc+0x58/0x150 [ 273.947071][T19472] el0t_64_sync_handler+0x84/0xf0 [ 273.948243][T19472] el0t_64_sync+0x18c/0x190 00:04:33 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x8, 0x6, '9P2000'}, 0x13) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:33 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 46) 00:04:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x6c, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:33 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x800) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @dev, 0x1}]}, &(0x7f0000000240)=0x10) setsockopt$sock_timeval(r2, 0x1, 0x7, &(0x7f0000000440)={0x0, 0xea60}, 0x10) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r3, 0xfffc, 0x9, 0x1f, 0x401, 0x1}, &(0x7f00000000c0)=0x14) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x18}, 0x18) 00:04:33 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 44) 00:04:33 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x700, 0x800) [ 274.017818][T19483] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 274.020002][T19483] CPU: 0 PID: 19483 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 274.022570][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 274.025138][T19483] Call trace: [ 274.025958][T19483] dump_backtrace+0x1c4/0x1f0 [ 274.025976][T19491] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 274.027157][T19483] show_stack+0x2c/0x54 [ 274.027168][T19483] dump_stack_lvl+0x104/0x16c [ 274.027177][T19483] dump_stack+0x1c/0x58 [ 274.027185][T19483] kmem_cache_create_usercopy+0x268/0x31c [ 274.033960][T19483] p9_client_create+0x618/0x758 [ 274.035228][T19483] v9fs_session_init+0xa4/0x9f0 [ 274.036393][T19483] v9fs_mount+0x6c/0x568 [ 274.037381][T19483] legacy_get_tree+0x30/0x74 [ 274.038493][T19483] vfs_get_tree+0x40/0x140 [ 274.039496][T19483] do_new_mount+0x1dc/0x4e4 [ 274.040611][T19483] path_mount+0x358/0x914 [ 274.041681][T19483] __arm64_sys_mount+0x2c4/0x3c4 [ 274.042882][T19483] el0_svc_common+0x138/0x220 [ 274.044033][T19483] do_el0_svc+0x48/0x164 [ 274.045094][T19483] el0_svc+0x58/0x150 [ 274.046097][T19483] el0t_64_sync_handler+0x84/0xf0 [ 274.047336][T19483] el0t_64_sync+0x18c/0x190 00:04:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x74, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40, 0x70) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) [ 274.061047][T19491] CPU: 1 PID: 19491 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 274.063651][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 274.066103][T19491] Call trace: [ 274.066950][T19491] dump_backtrace+0x1c4/0x1f0 [ 274.068106][T19491] show_stack+0x2c/0x54 00:04:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 47) [ 274.069138][T19491] dump_stack_lvl+0x104/0x16c [ 274.070334][T19491] dump_stack+0x1c/0x58 [ 274.071385][T19491] kmem_cache_create_usercopy+0x268/0x31c [ 274.072813][T19491] p9_client_create+0x618/0x758 [ 274.074041][T19491] v9fs_session_init+0xa4/0x9f0 [ 274.075241][T19491] v9fs_mount+0x6c/0x568 [ 274.076282][T19491] legacy_get_tree+0x30/0x74 [ 274.077496][T19491] vfs_get_tree+0x40/0x140 [ 274.078639][T19491] do_new_mount+0x1dc/0x4e4 [ 274.079778][T19491] path_mount+0x358/0x914 [ 274.080858][T19491] __arm64_sys_mount+0x2c4/0x3c4 [ 274.082035][T19491] el0_svc_common+0x138/0x220 [ 274.083210][T19491] do_el0_svc+0x48/0x164 [ 274.084268][T19491] el0_svc+0x58/0x150 [ 274.085276][T19491] el0t_64_sync_handler+0x84/0xf0 [ 274.086508][T19491] el0t_64_sync+0x18c/0x190 00:04:34 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x1100, 0x800) 00:04:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7a, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 274.120754][T19504] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 274.127164][T19504] CPU: 1 PID: 19504 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 274.129737][T19504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 274.132161][T19504] Call trace: [ 274.132969][T19504] dump_backtrace+0x1c4/0x1f0 [ 274.134153][T19504] show_stack+0x2c/0x54 [ 274.135169][T19504] dump_stack_lvl+0x104/0x16c [ 274.136300][T19504] dump_stack+0x1c/0x58 [ 274.137339][T19504] kmem_cache_create_usercopy+0x268/0x31c [ 274.138787][T19504] p9_client_create+0x618/0x758 [ 274.139910][T19504] v9fs_session_init+0xa4/0x9f0 [ 274.141104][T19504] v9fs_mount+0x6c/0x568 00:04:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40, 0x70) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) [ 274.142217][T19504] legacy_get_tree+0x30/0x74 00:04:34 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x2000, 0x800) [ 274.143339][T19504] vfs_get_tree+0x40/0x140 [ 274.144447][T19504] do_new_mount+0x1dc/0x4e4 [ 274.145555][T19504] path_mount+0x358/0x914 [ 274.146684][T19504] __arm64_sys_mount+0x2c4/0x3c4 [ 274.147893][T19504] el0_svc_common+0x138/0x220 [ 274.149104][T19504] do_el0_svc+0x48/0x164 [ 274.150162][T19504] el0_svc+0x58/0x150 [ 274.151227][T19504] el0t_64_sync_handler+0x84/0xf0 [ 274.152477][T19504] el0t_64_sync+0x18c/0x190 00:04:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7c, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:34 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x2200, 0x800) 00:04:34 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') fcntl$setstatus(r0, 0x4, 0x50000) r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x12200, 0x100, 0x8}, 0x18) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3b18, 0x4100) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2, r1}) 00:04:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40, 0x70) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x40, 0x70) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x88, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:34 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x3000, 0x800) 00:04:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 45) 00:04:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 48) [ 274.871467][T19524] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 274.874370][T19525] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 274.876433][T19525] CPU: 0 PID: 19525 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 274.878813][T19525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 274.881341][T19525] Call trace: [ 274.882179][T19525] dump_backtrace+0x1c4/0x1f0 [ 274.883354][T19525] show_stack+0x2c/0x54 [ 274.884421][T19525] dump_stack_lvl+0x104/0x16c [ 274.885611][T19525] dump_stack+0x1c/0x58 [ 274.886703][T19525] kmem_cache_create_usercopy+0x268/0x31c [ 274.888285][T19525] p9_client_create+0x618/0x758 [ 274.889486][T19525] v9fs_session_init+0xa4/0x9f0 [ 274.890665][T19525] v9fs_mount+0x6c/0x568 [ 274.891688][T19525] legacy_get_tree+0x30/0x74 [ 274.892873][T19525] vfs_get_tree+0x40/0x140 [ 274.893998][T19525] do_new_mount+0x1dc/0x4e4 [ 274.895057][T19525] path_mount+0x358/0x914 [ 274.896233][T19525] __arm64_sys_mount+0x2c4/0x3c4 00:04:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x98, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 274.897414][T19525] el0_svc_common+0x138/0x220 [ 274.898049][T19542] tcpmss_tg4_check: 36 callbacks suppressed [ 274.898057][T19542] xt_TCPMSS: Only works on TCP SYN packets [ 274.898532][T19525] do_el0_svc+0x48/0x164 [ 274.898543][T19525] el0_svc+0x58/0x150 [ 274.898553][T19525] el0t_64_sync_handler+0x84/0xf0 [ 274.898562][T19525] el0t_64_sync+0x18c/0x190 [ 274.906006][T19524] CPU: 1 PID: 19524 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 274.908587][T19524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 274.911119][T19524] Call trace: [ 274.911867][T19524] dump_backtrace+0x1c4/0x1f0 [ 274.913019][T19524] show_stack+0x2c/0x54 [ 274.914120][T19524] dump_stack_lvl+0x104/0x16c [ 274.915295][T19524] dump_stack+0x1c/0x58 [ 274.916367][T19524] kmem_cache_create_usercopy+0x268/0x31c 00:04:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) r3 = syz_io_uring_complete(0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000000c0)={0x2d, r0, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) [ 274.917817][T19524] p9_client_create+0x618/0x758 [ 274.919046][T19524] v9fs_session_init+0xa4/0x9f0 [ 274.920301][T19524] v9fs_mount+0x6c/0x568 [ 274.921355][T19524] legacy_get_tree+0x30/0x74 00:04:34 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x200000, 0x800) [ 274.922523][T19524] vfs_get_tree+0x40/0x140 [ 274.923609][T19524] do_new_mount+0x1dc/0x4e4 [ 274.924785][T19524] path_mount+0x358/0x914 [ 274.925845][T19524] __arm64_sys_mount+0x2c4/0x3c4 [ 274.927116][T19524] el0_svc_common+0x138/0x220 [ 274.928290][T19524] do_el0_svc+0x48/0x164 [ 274.929374][T19524] el0_svc+0x58/0x150 [ 274.930378][T19524] el0t_64_sync_handler+0x84/0xf0 [ 274.931662][T19524] el0t_64_sync+0x18c/0x190 00:04:34 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 49) 00:04:34 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') fcntl$setstatus(r0, 0x4, 0x50000) r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x12200, 0x100, 0x8}, 0x18) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3b18, 0x4100) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2, r1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) fcntl$setstatus(r0, 0x4, 0x50000) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x12200, 0x100, 0x8}, 0x18) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x3b18, 0x4100) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2, r1}) (async) [ 274.966406][T19548] 9pnet_fd: Insufficient options for proto=fd 00:04:34 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x1000000, 0x800) [ 274.972827][T19547] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 274.974851][T19547] CPU: 1 PID: 19547 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 274.977255][T19547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 274.979719][T19547] Call trace: [ 274.980559][T19547] dump_backtrace+0x1c4/0x1f0 [ 274.981704][T19547] show_stack+0x2c/0x54 [ 274.982739][T19547] dump_stack_lvl+0x104/0x16c [ 274.983883][T19547] dump_stack+0x1c/0x58 [ 274.984917][T19547] kmem_cache_create_usercopy+0x268/0x31c [ 274.986303][T19547] p9_client_create+0x618/0x758 [ 274.987466][T19547] v9fs_session_init+0xa4/0x9f0 [ 274.988631][T19547] v9fs_mount+0x6c/0x568 [ 274.989614][T19547] legacy_get_tree+0x30/0x74 [ 274.990700][T19547] vfs_get_tree+0x40/0x140 [ 274.991776][T19547] do_new_mount+0x1dc/0x4e4 [ 274.992988][T19547] path_mount+0x358/0x914 00:04:34 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) r3 = syz_io_uring_complete(0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000000c0)={0x2d, r0, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) [ 274.994076][T19547] __arm64_sys_mount+0x2c4/0x3c4 [ 274.995320][T19547] el0_svc_common+0x138/0x220 [ 274.996585][T19547] do_el0_svc+0x48/0x164 [ 274.997763][T19547] el0_svc+0x58/0x150 [ 274.998778][T19547] el0t_64_sync_handler+0x84/0xf0 [ 275.000113][T19547] el0t_64_sync+0x18c/0x190 00:04:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x150, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 275.017317][T19559] xt_TCPMSS: Only works on TCP SYN packets 00:04:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 46) [ 275.034620][T19561] 9pnet_fd: Insufficient options for proto=fd 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x2000000, 0x800) 00:04:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') fcntl$setstatus(r0, 0x4, 0x50000) r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x12200, 0x100, 0x8}, 0x18) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3b18, 0x4100) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2, r1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) fcntl$setstatus(r0, 0x4, 0x50000) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x12200, 0x100, 0x8}, 0x18) (async) syz_open_dev$vcsu(&(0x7f0000000000), 0x3b18, 0x4100) (async) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x2, r1}) (async) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x1cc, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 50) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x4000000, 0x800) [ 275.077768][T19567] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 275.079903][T19567] CPU: 1 PID: 19567 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.082436][T19567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.084934][T19567] Call trace: [ 275.085736][T19567] dump_backtrace+0x1c4/0x1f0 [ 275.086846][T19567] show_stack+0x2c/0x54 [ 275.087823][T19567] dump_stack_lvl+0x104/0x16c [ 275.088969][T19567] dump_stack+0x1c/0x58 [ 275.089934][T19567] kmem_cache_create_usercopy+0x268/0x31c [ 275.091319][T19567] p9_client_create+0x618/0x758 [ 275.092461][T19567] v9fs_session_init+0xa4/0x9f0 [ 275.093609][T19567] v9fs_mount+0x6c/0x568 00:04:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x14, 0x9, 0x0, 0x4, 0x6, 0x80000000, "a9b4a7f1c930e40db9c5dc81a1efef857af51062"}}, 0x12c) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 275.094710][T19567] legacy_get_tree+0x30/0x74 [ 275.095757][T19567] vfs_get_tree+0x40/0x140 [ 275.096867][T19567] do_new_mount+0x1dc/0x4e4 [ 275.097947][T19567] path_mount+0x358/0x914 [ 275.098998][T19567] __arm64_sys_mount+0x2c4/0x3c4 [ 275.100171][T19567] el0_svc_common+0x138/0x220 [ 275.101327][T19567] do_el0_svc+0x48/0x164 [ 275.102319][T19567] el0_svc+0x58/0x150 [ 275.103268][T19567] el0t_64_sync_handler+0x84/0xf0 [ 275.104583][T19567] el0t_64_sync+0x18c/0x190 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x22c, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) r3 = syz_io_uring_complete(0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000000c0)={0x2d, r0, 0x1}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x14, 0x9, 0x0, 0x4, 0x6, 0x80000000, "a9b4a7f1c930e40db9c5dc81a1efef857af51062"}}, 0x12c) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x14, 0x9, 0x0, 0x4, 0x6, 0x80000000, "a9b4a7f1c930e40db9c5dc81a1efef857af51062"}}, 0x12c) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x5000000, 0x800) [ 275.145062][T19586] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 275.147206][T19586] CPU: 1 PID: 19586 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.149719][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.151642][T19583] 9pnet_fd: Insufficient options for proto=fd [ 275.152157][T19586] Call trace: [ 275.152162][T19586] dump_backtrace+0x1c4/0x1f0 [ 275.155632][T19586] show_stack+0x2c/0x54 [ 275.156654][T19586] dump_stack_lvl+0x104/0x16c [ 275.157801][T19586] dump_stack+0x1c/0x58 [ 275.158800][T19586] kmem_cache_create_usercopy+0x268/0x31c [ 275.160346][T19586] p9_client_create+0x618/0x758 [ 275.161593][T19586] v9fs_session_init+0xa4/0x9f0 [ 275.162808][T19586] v9fs_mount+0x6c/0x568 [ 275.163871][T19586] legacy_get_tree+0x30/0x74 [ 275.165066][T19586] vfs_get_tree+0x40/0x140 [ 275.166167][T19586] do_new_mount+0x1dc/0x4e4 [ 275.167273][T19586] path_mount+0x358/0x914 [ 275.168362][T19586] __arm64_sys_mount+0x2c4/0x3c4 [ 275.169619][T19586] el0_svc_common+0x138/0x220 [ 275.170718][T19586] do_el0_svc+0x48/0x164 [ 275.171819][T19586] el0_svc+0x58/0x150 [ 275.172770][T19586] el0t_64_sync_handler+0x84/0xf0 [ 275.173999][T19586] el0t_64_sync+0x18c/0x190 00:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 47) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x2f6, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x6000000, 0x800) 00:04:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x14, 0x9, 0x0, 0x4, 0x6, 0x80000000, "a9b4a7f1c930e40db9c5dc81a1efef857af51062"}}, 0x12c) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 275.239485][T19607] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 275.241913][T19607] CPU: 1 PID: 19607 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.244487][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.246984][T19607] Call trace: [ 275.247797][T19607] dump_backtrace+0x1c4/0x1f0 [ 275.248964][T19607] show_stack+0x2c/0x54 [ 275.250043][T19607] dump_stack_lvl+0x104/0x16c [ 275.251300][T19607] dump_stack+0x1c/0x58 [ 275.252362][T19607] kmem_cache_create_usercopy+0x268/0x31c [ 275.253789][T19607] p9_client_create+0x618/0x758 [ 275.254974][T19607] v9fs_session_init+0xa4/0x9f0 [ 275.256168][T19607] v9fs_mount+0x6c/0x568 [ 275.257276][T19607] legacy_get_tree+0x30/0x74 [ 275.258518][T19607] vfs_get_tree+0x40/0x140 [ 275.259691][T19607] do_new_mount+0x1dc/0x4e4 [ 275.260845][T19607] path_mount+0x358/0x914 [ 275.261937][T19607] __arm64_sys_mount+0x2c4/0x3c4 [ 275.263171][T19607] el0_svc_common+0x138/0x220 [ 275.264363][T19607] do_el0_svc+0x48/0x164 [ 275.265422][T19607] el0_svc+0x58/0x150 [ 275.266413][T19607] el0t_64_sync_handler+0x84/0xf0 [ 275.267741][T19607] el0t_64_sync+0x18c/0x190 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x300, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 51) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x7000000, 0x800) 00:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000000c0), 0x80) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x2102, 0x4, 0x8}, 0xfffffffffffffe43) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x332, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x8000000, 0x800) [ 275.310536][T19621] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 48) 00:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000000c0), 0x80) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) [ 275.319918][T19621] CPU: 1 PID: 19621 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.322431][T19621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.324894][T19621] Call trace: [ 275.325663][T19621] dump_backtrace+0x1c4/0x1f0 [ 275.326788][T19621] show_stack+0x2c/0x54 [ 275.327858][T19621] dump_stack_lvl+0x104/0x16c [ 275.329094][T19621] dump_stack+0x1c/0x58 [ 275.330098][T19621] kmem_cache_create_usercopy+0x268/0x31c [ 275.331560][T19621] p9_client_create+0x618/0x758 [ 275.332764][T19621] v9fs_session_init+0xa4/0x9f0 [ 275.333958][T19621] v9fs_mount+0x6c/0x568 [ 275.335010][T19621] legacy_get_tree+0x30/0x74 [ 275.336173][T19621] vfs_get_tree+0x40/0x140 [ 275.337240][T19621] do_new_mount+0x1dc/0x4e4 [ 275.338354][T19621] path_mount+0x358/0x914 [ 275.339370][T19621] __arm64_sys_mount+0x2c4/0x3c4 [ 275.340653][T19621] el0_svc_common+0x138/0x220 [ 275.341778][T19621] do_el0_svc+0x48/0x164 [ 275.342771][T19621] el0_svc+0x58/0x150 [ 275.343720][T19621] el0t_64_sync_handler+0x84/0xf0 [ 275.344900][T19621] el0t_64_sync+0x18c/0x190 00:04:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x2102, 0x4, 0x8}, 0xfffffffffffffe43) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x34b, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 275.371783][T19633] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x10000000, 0x800) [ 275.379526][T19633] CPU: 1 PID: 19633 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.382036][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.384391][T19633] Call trace: [ 275.385155][T19633] dump_backtrace+0x1c4/0x1f0 [ 275.386244][T19633] show_stack+0x2c/0x54 [ 275.387238][T19633] dump_stack_lvl+0x104/0x16c [ 275.388324][T19633] dump_stack+0x1c/0x58 [ 275.389295][T19633] kmem_cache_create_usercopy+0x268/0x31c [ 275.390666][T19633] p9_client_create+0x618/0x758 [ 275.391897][T19633] v9fs_session_init+0xa4/0x9f0 [ 275.393170][T19633] v9fs_mount+0x6c/0x568 [ 275.394180][T19633] legacy_get_tree+0x30/0x74 [ 275.395378][T19633] vfs_get_tree+0x40/0x140 [ 275.396534][T19633] do_new_mount+0x1dc/0x4e4 [ 275.397679][T19633] path_mount+0x358/0x914 [ 275.398795][T19633] __arm64_sys_mount+0x2c4/0x3c4 [ 275.399986][T19633] el0_svc_common+0x138/0x220 [ 275.401300][T19633] do_el0_svc+0x48/0x164 [ 275.402465][T19633] el0_svc+0x58/0x150 [ 275.403437][T19633] el0t_64_sync_handler+0x84/0xf0 [ 275.404706][T19633] el0t_64_sync+0x18c/0x190 00:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 52) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x38a, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x2102, 0x4, 0x8}, 0xfffffffffffffe43) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x2102, 0x4, 0x8}, 0xfffffffffffffe43) (async) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x11000000, 0x800) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x500, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 49) 00:04:35 executing program 5: r0 = syz_usb_connect(0x1, 0x9f9, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xa, 0x35, 0x42, 0x10, 0x15a4, 0x1001, 0x81ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e7, 0x4, 0x2, 0x2, 0x80, 0x6, [{{0x9, 0x4, 0x88, 0x0, 0x5, 0x59, 0x4f, 0x33, 0x1f, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x8, 0xa3, "519c71d1cb19af5cef"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x4d, 'wh', 'g'}, @as_header={0x7, 0x24, 0x1, 0x80, 0x8}]}, @hid_hid={0x9, 0x21, 0x8493, 0xf9, 0x1, {0x22, 0x5c9}}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x54, 0x4, [@generic={0xf3, 0x4, "da96814a75101fdcdc132d94bd228f0184896194baa73c55ae52de7a2400f148dfec4625be43258ca03228c3b10d1eff481c51c370ea4b42d9675d237e58dce9b51d597bcce0517c8449d00c21d663e0e73da9c5a5bdb4e74d35ae661050fef2de7927ce4aaadc1c587312ee505174c83ae9b5b9981f584082b87775a0090834ae0ced309ee3bae804a4555c54354d3e23b1ed194c82ea4d9ca5e9af4909bf78fa5bc4ca3956cd94405f2e8d96bb379f860c2e5e5dc4342171e82b5f6f846a98034899829ee41ecafa0cb7dcb9d613cbf2151c8c9d99adf3f48b58f33b2bd88ac468aaf342eaa40093d3669d17bb40f489"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0x67, 0x5, [@generic={0x9, 0xb, "816ed1bbe7c3d1"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x1, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x6, 0x7f, 0x2, [@generic={0x5c, 0x24, "d6c3fb5f22e9962be826925be03558e8eb86c8bd5f7820fbb1e6cbbffca92cbca0ef0545accb66b266d3b13a22cfd8ec1e9ba43eb6bd53b6664b01d904474547392ae299285a62b4b59970f16744063f16c2e80529d52c7e343b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x80}]}}]}}, {{0x9, 0x4, 0x6b, 0x47, 0x3, 0xd4, 0x3, 0x10, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x3f}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0x1, '}'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x5}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x60, 0x9, 0x0, [@generic={0xc4, 0x3, "0ee442c13a0b78a8cdca9b1de9baa24776365e10e94469fe34a1053d4a38a8abbbf9630f0a4918d992e2d9f96bd126fd47eafc37e0d31085afbf29c76149fc6ba4a1eb15b11229023923c160f82d430477ba28c888c142dc0d4028cc7c81258115ae37abb0f018de085086f9d21345b6d2b7fdc06fc298b166c6f8d02e1d16b7e4092144c3efb4611329a970677965d1c6eb8e0bb9c71947203dd075bd3ee4b1af5fdd0d27f24ab935c8cec1e911a8f511ed17ac7794d02fd9d561853f89912a2082"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x96, 0x3, 0x20, [@generic={0x8d, 0xf, "8d25526f169d822e85cac94253600e49d50e1b0a361b1ff3d0ac9fab8e64d59af7f5f420be94b42a8cfbe5d3cd5184527baab01bbbe70fa1611e55507d9fabf9ae498513720f9c7be6280ab6723761653a4c103784de33b81729b4b966f7304c866395756b02315b8761d38d699714b110e7bdbf1a16d9305fe0ba2468f79bc5f9c7f089dbf9467dc69502"}]}}]}}, {{0x9, 0x4, 0xa, 0xff, 0x9, 0x3b, 0x73, 0x9b, 0x1, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9d84"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x412c}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x5, 0x1, 0x48, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x40}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xff, 0x9, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}, @generic={0xc1, 0x21, "489bde061164df4d2dd17762628d0f8e70caff8e662c3dcb3611283287b540e1d6a04c83862c2874a1ac5c657b269665706a820b174131c64cc3e60b517f0b5960063547cb711d69ad4cb84d944b82ae450dc13ffe1960af037b39a16828c0688f4a1c36dcce3dba3b3c57689bcd124c3d7048a88c22396f8b194f31c40506c9c05babdf76d1cea1934906e4601dc961b8a54d9b77690acd57c48e8cea073441c0aacffc08222df785dea9bf3a6e7da5cf9839948e3a1abb38c783a3b3832b"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xff, 0x7, 0x80, [@generic={0xdc, 0x1, "91dcdd47b0792d25bebc6fe0d7d19045f65d57f292a46e37d8a4b098ca25bf8c8f331615c992e15b4f7edd9c12821b692f8b64df89fd488d5f7204ee2ee4c0489e3960da86514a8438ce029c68eb8c1283e5ec677485d8313b99343ec01a29d17a3c64c8955cc12fe83cac066c2cee6fcd5b7d8205266d67cf27c5ab63696976b8dbc412279f8d5733e8e5ef566afbf7b67c77777d467bbb361505069dfc3802da1a29a79b0b9aff2a9c32505becde23e3d91e1e222d9edadaabe69a4e61b5c659bbfda10a85d2aaa19d1aeccf6edda795e93c64983ba8c4a51a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x74, 0x4, 0x68, [@generic={0xf2, 0x22, "dea0d9db53f129629cac42588245d5f88958c58798967283c593db09e95a81db20a16a75cb75425dee02b6ba52bd45874d980f028831178be2f853494e080bf480313acab0d79ecfca5d37541c2d68f7dde418904939c8c0dee928c6c5f6b67f7ee3a4eb192aa3e0375dab6a77077f44191b4bf0f35ef2a550a9a88bb0612225ef54f788cb6fe6ec6f262d94df5b22f4c5731bada586bf7412ca5d827b198a14836426f79fd493115f722dd528ee7388ff174075821e3d8499a9a823bf1e26a54f49d1c1a7569b340a7216f9c30e5c27d6242dd249e59c3152921c305034d7eee87724fd271bf24fadf1ccef6299b529"}]}}, {{0x9, 0x5, 0x3, 0x15, 0x40, 0x6, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x4}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x79, 0x1, 0x7f, [@generic={0xfa, 0x22, "313dbe9ee193be018ee18591b2520939646a4a1971f25bde796b9b6b85a0d8f9807de3e04cb48edae2fcaf15b89ed1ef806dd6fdaf38d6b51334d190fe48d2dad08a86434c32ddf35cf8b9b4ed77114191fadca43d1a8fca266479cad260f14da229bfdb811d1d6721cbfa04109e41097f6e67f4ef453075e0f10c645a78d5b6e2d4c538581c8f3dce6d7eeb9e2edb6dd725dbbd39cfdf986936dc4b19410caa3184d7595f9518b4fd041d6f862b869072840aaa8a9868f38d5c51f74b5b39eb3bf5e0daa57eebaf23da0b3e758af5025eda09dcbe90383f808ac8742e6f6846b3ef810f89d130479b4f6b84dfef4f5048a8db537a646b75"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x23, 0x4, 0x1f, [@generic={0x31, 0x9, "dacfdf168fb34f49e13025ee29ca272692907f6b12634070d33646fe1dc3935221bb3787d44d08a1124b88eebe6640"}]}}]}}, {{0x9, 0x4, 0x4, 0x1f, 0x1, 0xeb, 0x5d, 0xc9, 0x40, [@generic={0xda, 0x2, "cff0d151a40a68ed19b23a73c26d10c957aa6632c3315e77f63263d5319f9b0e86ebc07d6d9b2afe816abe1790a2072cf0fa0529435fd2fe1c7b91cce13f0a960c053a8cc90cc271f959789c1ab15ea528dd8dacd1d6d94445b10025cc7365a3551506a8820f1069c82abf41af3e41400a5c724c79de7983d831f7b1dfe5314d792a0de398e6270862c352992cda65485ad131f85db447e79e231218a430bc03fa531b53a7443e94f299e8da2d487b5ff3bfe35975aa67ff6cc51cf08558ba081dc4e88cad66a16eccf9503ccd51e97cb00501739fe28a40"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ca4a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xe4, 0x3, 0xff}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xf56, 0x4, 0x1, 0xde, 0x8b5, 0xc0}, @obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x7, 0x10, 0x1ff, 0xfe, 0x5, 0x1, [@generic={0xf6, 0x11, "3c7d58aa387bcfb55044413834f6309bac657108b08ddc5e65e4d6a120464f7f7eabc02ca98b4eb9500355401101d649491c0d98936c1a8eca6bfe62c1596b4d2adf83b8e0fdb888cf38519128bb7b0c328d0efb46ae543fe33a1f6f9717d4895122869d684ad95bd38571db2b56543005e2827c4b3451d36055227e55cb808368a054018ff451c3e78a6693e37940144007b4a8bfa2bbe0d96ef79835f1db3af6d0972d5ccfa034cd68b1d5bc4f7bc0abec87d102a6ffdeb92bda85dd0a3773a1a557b2661fb9d1dcb507b7e0c9a73920dcb0befcd3dd894300d6bc49f373db9e8f5c5b5deb744217264080bfe39058e7725a40"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc7, 0x7}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x0, 0x0, 0x40, 0x3f}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9f, "1caccf0761458dce8e62137e02924e88"}]}, 0x3, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "01ee3164504c02492ed9c712cb912de210b5c3b8d5575ea2d3dd363a61535bad8a2fcd38fa69b8e5d1eff75be9b0fb26338852050acf288aa6fc1e71d1440208c41249ff1f6e609081101e23b556c35710b5444b9cccd576f1add5d37ab3094cba8f53667f28f7d4d519d8895c1e565cb3dabe9b5b1d1e1b8d7f93f16a8977c4278cd2f1c0767fd63c823fbe4bfd401d269258e62e95ae3ce4fbfa12f64988cc124060c5a1fd58988b9bfb071a8217c806dd7a2fbd8e27b49a513cde6dd5e4e34c478d84a0493ce1dfd5966ca3a5596f915c85389d39a533dffc42c48d488c792d493ca3073af17a68f375eab9d8400778fd"}}, {0x18, &(0x7f0000000080)=@string={0x18, 0x3, "89dfce7062b099047a40dd15431fd3a34bb2f8c2ea34"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="200b16000000070000002b9770a4a9267f566e46ee19a4bd97a3f9cc"], &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x19, 0xa6, "2ca1ea1018d00da800cc46dddbb6fc2f54800c62b4bca1a64c9f559d402ab120e551049da626c2b10195ce94d4f91e323666e26cab5fb80fb5c717bc368fe22a9cecc7c7264edf6a6a8c5fbba5fe7e1a8b73121e19f07c8236a2c20e9dad72347ee8bfae57e5c546077e418b5dba1e94e0b72ad1d184760585d452b034fc0001b65a059e9c5eddb964176f552a36e88917fb97f0cbad47de62b5fadc33c52d4d733783323cfb"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x100, 0x0, 0x2, 0xa0, 0x400, 0x8000, 0x9, 0x2f49, 0x5d4f, 0x3f, 0x981, 0x1}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000010c0)={0x90, 0x20, 0x21, 0x0, 0x0, "", [@nested={0x80, 0x0, 0x0, 0x1, [@generic="5f70f9b936e59cf116dcadf839113986124e4bdecdfb42c917178fbc151cfd31fbf3aa8b09854b66bfbb015f59b124be166e7e4e38357f2dfcd79f61ceb9954a2e97856451e15811f5e160b4712f8d809fdde7b574d67a7ed636050934833c6b6d48be36f355cc0163cea47995eb5eb0d688b63d", @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x90}], 0x1}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f00000014c0)={0xe1d495ec5b58287b, 0x31, 0x65, {0x65, 0xc, "1869499ed8357b4a57ba1459c54ba0de5cda0aef10d93aac9c77a6fd1cb780c98d4a28ae77754c0e4a3d822b0c4eb069e95cde13ff0998b5112bdee2f067a100e07b097ea30b252ea5a9c4486d888a36c9ff0ad7a1e342d0c803f8b7a0c763e5b195cd"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000001540)={0x0, 0xf, 0x115, {0x5, 0xf, 0x115, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x4, 0x0, 0x800, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x7, 0x5, 0x40, 0x1, 0x4}, @generic={0xa9, 0x10, 0x2, "618c7f28214a9a7bc68b3f5758520389624cc558f6cd846140c848ba112216012622336bfbdc43e09926db9aa9c7616f875e74ac9cf43057c3f69fc2d11a7d0229e181ff283b0eb3fa80644f3a93e880fb9538d8f417982b3c0173cc5e02f88f0731520f87946365f02715b7335fa28efd77780bb338d1b5846f0a7e9c96e4b2f016e54dd3e39ce8939a35532a7be7b2d95a69bac754f148bec36e144fea66630a3aeb3a229a"}, @generic={0xb, 0x10, 0x4, "7db4bd612fad149c"}, @generic={0x46, 0x10, 0x2, "c8696893a31e4c23257f057e743a566eae7e44676917537a0257acf834264fafe6daab8182319172ccb14d5dd382dc2a911704533015dac7aa03de014f17b26bcc1801"}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0xb5, 0x60, "b2ba2759", "3b05a9f9"}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x20, 0xa5, 0x3f, 0x1, 0x1}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001740)={0x0, 0x10, 0x86, "f2be8e86e4e56882269a84451a8598e4e044e36c5d55a1674f4f7bb9ed95e79d58bdabd1f1d7a4a00c86cdd642fa653d2c3ac1c81580abe490407824fb4716a25fe15998fe1ab1c6906480c1bab5c86dc3fc659eb5cac4d3bda8c10c119997707a096479ca93213c136ac428ae6de031bdc86b748ec249c7116b920890b43d39604650618737"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xef}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f00000018c0)={0x20, 0x0, 0x8, {0x400, 0xa4f532775f4c489d, [0xf000]}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001980)={0x40, 0xb, 0x2, "105c"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001a40)={0x40, 0x17, 0x6}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "0e09"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x40, 0x31, 0x1c, {0x1c, 0x3, "49b0e28b1abf4990c5e63b728d53393b51311263f323565c1761"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x0, 0x5, 0x96, "507b4b6bbc03cee759a65b0a7403e1d3871133f5e632e2bb6c891b9248044d41081411fb313d1d2849b3eccc310c199e6011824b73bfb49b585b5c92c806df69fdb102f7b5ddf55450b2b3f0ca2360a0640ae6e14c9a5254d239a1b7a023eff6bc538d36c748afd10346e3f20f9ee1474b9d2cfd287dd27538e5e113355456645cc3717953a086faba08f128e05de81f183b64f3ed6b"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x9, 0x101, 0x1000, 0x8, 0x401, 0x7, 0x81, 0x7, 0x87, 0x3ff, 0x8000, 0xcf}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x693}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) 00:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) [ 275.490437][T19660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.492742][T19660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x1f3ffffc, 0x800) [ 275.496030][T19662] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 275.496259][T19657] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 275.498097][T19662] CPU: 0 PID: 19662 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.502547][T19662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.504994][T19662] Call trace: [ 275.505835][T19662] dump_backtrace+0x1c4/0x1f0 [ 275.506999][T19662] show_stack+0x2c/0x54 [ 275.508045][T19662] dump_stack_lvl+0x104/0x16c [ 275.508387][T19660] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.5'. [ 275.509283][T19662] dump_stack+0x1c/0x58 [ 275.509296][T19662] kmem_cache_create_usercopy+0x268/0x31c [ 275.509306][T19662] p9_client_create+0x618/0x758 [ 275.509314][T19662] v9fs_session_init+0xa4/0x9f0 [ 275.509323][T19662] v9fs_mount+0x6c/0x568 [ 275.509330][T19662] legacy_get_tree+0x30/0x74 [ 275.518823][T19662] vfs_get_tree+0x40/0x140 [ 275.519938][T19662] do_new_mount+0x1dc/0x4e4 [ 275.521072][T19662] path_mount+0x358/0x914 [ 275.522177][T19662] __arm64_sys_mount+0x2c4/0x3c4 [ 275.523413][T19662] el0_svc_common+0x138/0x220 [ 275.524610][T19662] do_el0_svc+0x48/0x164 [ 275.525674][T19662] el0_svc+0x58/0x150 [ 275.526703][T19662] el0t_64_sync_handler+0x84/0xf0 [ 275.527969][T19662] el0t_64_sync+0x18c/0x190 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x600, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 275.529858][T19657] CPU: 1 PID: 19657 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.532516][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.535033][T19657] Call trace: [ 275.535861][T19657] dump_backtrace+0x1c4/0x1f0 [ 275.537063][T19657] show_stack+0x2c/0x54 [ 275.538175][T19657] dump_stack_lvl+0x104/0x16c [ 275.539232][T19657] dump_stack+0x1c/0x58 [ 275.540180][T19657] kmem_cache_create_usercopy+0x268/0x31c [ 275.541455][T19657] p9_client_create+0x618/0x758 [ 275.542591][T19657] v9fs_session_init+0xa4/0x9f0 [ 275.543729][T19657] v9fs_mount+0x6c/0x568 [ 275.544822][T19657] legacy_get_tree+0x30/0x74 [ 275.545881][T19657] vfs_get_tree+0x40/0x140 [ 275.546950][T19657] do_new_mount+0x1dc/0x4e4 [ 275.548037][T19657] path_mount+0x358/0x914 [ 275.549042][T19657] __arm64_sys_mount+0x2c4/0x3c4 [ 275.550203][T19657] el0_svc_common+0x138/0x220 [ 275.551368][T19657] do_el0_svc+0x48/0x164 [ 275.552357][T19657] el0_svc+0x58/0x150 [ 275.553339][T19657] el0t_64_sync_handler+0x84/0xf0 [ 275.554536][T19657] el0t_64_sync+0x18c/0x190 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x22000000, 0x800) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x700, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 53) 00:04:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x900, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x30000000, 0x800) 00:04:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:35 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 50) 00:04:35 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x31f5ffff, 0x800) [ 275.671033][T19695] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 275.672978][T19695] CPU: 0 PID: 19695 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.675586][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.678055][T19695] Call trace: [ 275.678848][T19695] dump_backtrace+0x1c4/0x1f0 [ 275.680020][T19695] show_stack+0x2c/0x54 [ 275.681075][T19695] dump_stack_lvl+0x104/0x16c [ 275.682238][T19695] dump_stack+0x1c/0x58 [ 275.683257][T19695] kmem_cache_create_usercopy+0x268/0x31c [ 275.684707][T19695] p9_client_create+0x618/0x758 [ 275.685924][T19695] v9fs_session_init+0xa4/0x9f0 [ 275.687124][T19695] v9fs_mount+0x6c/0x568 [ 275.688256][T19695] legacy_get_tree+0x30/0x74 [ 275.689402][T19695] vfs_get_tree+0x40/0x140 [ 275.690499][T19695] do_new_mount+0x1dc/0x4e4 [ 275.691642][T19695] path_mount+0x358/0x914 [ 275.692738][T19695] __arm64_sys_mount+0x2c4/0x3c4 [ 275.693968][T19695] el0_svc_common+0x138/0x220 [ 275.695133][T19695] do_el0_svc+0x48/0x164 [ 275.696174][T19695] el0_svc+0x58/0x150 [ 275.697177][T19695] el0t_64_sync_handler+0x84/0xf0 [ 275.698502][T19695] el0t_64_sync+0x18c/0x190 [ 275.706905][T19694] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 275.709027][T19694] CPU: 1 PID: 19694 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 275.711613][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 275.714112][T19694] Call trace: [ 275.714907][T19694] dump_backtrace+0x1c4/0x1f0 [ 275.716072][T19694] show_stack+0x2c/0x54 [ 275.717064][T19694] dump_stack_lvl+0x104/0x16c [ 275.718164][T19694] dump_stack+0x1c/0x58 [ 275.719313][T19694] kmem_cache_create_usercopy+0x268/0x31c [ 275.720719][T19694] p9_client_create+0x618/0x758 [ 275.721928][T19694] v9fs_session_init+0xa4/0x9f0 [ 275.723163][T19694] v9fs_mount+0x6c/0x568 [ 275.724246][T19694] legacy_get_tree+0x30/0x74 [ 275.725407][T19694] vfs_get_tree+0x40/0x140 [ 275.726525][T19694] do_new_mount+0x1dc/0x4e4 [ 275.727646][T19694] path_mount+0x358/0x914 [ 275.728667][T19694] __arm64_sys_mount+0x2c4/0x3c4 [ 275.729905][T19694] el0_svc_common+0x138/0x220 [ 275.731067][T19694] do_el0_svc+0x48/0x164 [ 275.732106][T19694] el0_svc+0x58/0x150 [ 275.733075][T19694] el0t_64_sync_handler+0x84/0xf0 [ 275.734348][T19694] el0t_64_sync+0x18c/0x190 00:04:36 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xffffffffffffffd1, 0x0, {0x2}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xa00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0xfcff3f1f, 0x800) 00:04:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 54) 00:04:36 executing program 5: r0 = syz_usb_connect(0x1, 0x9f9, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xa, 0x35, 0x42, 0x10, 0x15a4, 0x1001, 0x81ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e7, 0x4, 0x2, 0x2, 0x80, 0x6, [{{0x9, 0x4, 0x88, 0x0, 0x5, 0x59, 0x4f, 0x33, 0x1f, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x8, 0xa3, "519c71d1cb19af5cef"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x4d, 'wh', 'g'}, @as_header={0x7, 0x24, 0x1, 0x80, 0x8}]}, @hid_hid={0x9, 0x21, 0x8493, 0xf9, 0x1, {0x22, 0x5c9}}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x54, 0x4, [@generic={0xf3, 0x4, "da96814a75101fdcdc132d94bd228f0184896194baa73c55ae52de7a2400f148dfec4625be43258ca03228c3b10d1eff481c51c370ea4b42d9675d237e58dce9b51d597bcce0517c8449d00c21d663e0e73da9c5a5bdb4e74d35ae661050fef2de7927ce4aaadc1c587312ee505174c83ae9b5b9981f584082b87775a0090834ae0ced309ee3bae804a4555c54354d3e23b1ed194c82ea4d9ca5e9af4909bf78fa5bc4ca3956cd94405f2e8d96bb379f860c2e5e5dc4342171e82b5f6f846a98034899829ee41ecafa0cb7dcb9d613cbf2151c8c9d99adf3f48b58f33b2bd88ac468aaf342eaa40093d3669d17bb40f489"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0x67, 0x5, [@generic={0x9, 0xb, "816ed1bbe7c3d1"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x1, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x6, 0x7f, 0x2, [@generic={0x5c, 0x24, "d6c3fb5f22e9962be826925be03558e8eb86c8bd5f7820fbb1e6cbbffca92cbca0ef0545accb66b266d3b13a22cfd8ec1e9ba43eb6bd53b6664b01d904474547392ae299285a62b4b59970f16744063f16c2e80529d52c7e343b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x80}]}}]}}, {{0x9, 0x4, 0x6b, 0x47, 0x3, 0xd4, 0x3, 0x10, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x3f}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0x1, '}'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x5}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x60, 0x9, 0x0, [@generic={0xc4, 0x3, "0ee442c13a0b78a8cdca9b1de9baa24776365e10e94469fe34a1053d4a38a8abbbf9630f0a4918d992e2d9f96bd126fd47eafc37e0d31085afbf29c76149fc6ba4a1eb15b11229023923c160f82d430477ba28c888c142dc0d4028cc7c81258115ae37abb0f018de085086f9d21345b6d2b7fdc06fc298b166c6f8d02e1d16b7e4092144c3efb4611329a970677965d1c6eb8e0bb9c71947203dd075bd3ee4b1af5fdd0d27f24ab935c8cec1e911a8f511ed17ac7794d02fd9d561853f89912a2082"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x96, 0x3, 0x20, [@generic={0x8d, 0xf, "8d25526f169d822e85cac94253600e49d50e1b0a361b1ff3d0ac9fab8e64d59af7f5f420be94b42a8cfbe5d3cd5184527baab01bbbe70fa1611e55507d9fabf9ae498513720f9c7be6280ab6723761653a4c103784de33b81729b4b966f7304c866395756b02315b8761d38d699714b110e7bdbf1a16d9305fe0ba2468f79bc5f9c7f089dbf9467dc69502"}]}}]}}, {{0x9, 0x4, 0xa, 0xff, 0x9, 0x3b, 0x73, 0x9b, 0x1, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9d84"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x412c}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x5, 0x1, 0x48, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x40}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xff, 0x9, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}, @generic={0xc1, 0x21, "489bde061164df4d2dd17762628d0f8e70caff8e662c3dcb3611283287b540e1d6a04c83862c2874a1ac5c657b269665706a820b174131c64cc3e60b517f0b5960063547cb711d69ad4cb84d944b82ae450dc13ffe1960af037b39a16828c0688f4a1c36dcce3dba3b3c57689bcd124c3d7048a88c22396f8b194f31c40506c9c05babdf76d1cea1934906e4601dc961b8a54d9b77690acd57c48e8cea073441c0aacffc08222df785dea9bf3a6e7da5cf9839948e3a1abb38c783a3b3832b"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xff, 0x7, 0x80, [@generic={0xdc, 0x1, "91dcdd47b0792d25bebc6fe0d7d19045f65d57f292a46e37d8a4b098ca25bf8c8f331615c992e15b4f7edd9c12821b692f8b64df89fd488d5f7204ee2ee4c0489e3960da86514a8438ce029c68eb8c1283e5ec677485d8313b99343ec01a29d17a3c64c8955cc12fe83cac066c2cee6fcd5b7d8205266d67cf27c5ab63696976b8dbc412279f8d5733e8e5ef566afbf7b67c77777d467bbb361505069dfc3802da1a29a79b0b9aff2a9c32505becde23e3d91e1e222d9edadaabe69a4e61b5c659bbfda10a85d2aaa19d1aeccf6edda795e93c64983ba8c4a51a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x74, 0x4, 0x68, [@generic={0xf2, 0x22, "dea0d9db53f129629cac42588245d5f88958c58798967283c593db09e95a81db20a16a75cb75425dee02b6ba52bd45874d980f028831178be2f853494e080bf480313acab0d79ecfca5d37541c2d68f7dde418904939c8c0dee928c6c5f6b67f7ee3a4eb192aa3e0375dab6a77077f44191b4bf0f35ef2a550a9a88bb0612225ef54f788cb6fe6ec6f262d94df5b22f4c5731bada586bf7412ca5d827b198a14836426f79fd493115f722dd528ee7388ff174075821e3d8499a9a823bf1e26a54f49d1c1a7569b340a7216f9c30e5c27d6242dd249e59c3152921c305034d7eee87724fd271bf24fadf1ccef6299b529"}]}}, {{0x9, 0x5, 0x3, 0x15, 0x40, 0x6, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x4}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x79, 0x1, 0x7f, [@generic={0xfa, 0x22, "313dbe9ee193be018ee18591b2520939646a4a1971f25bde796b9b6b85a0d8f9807de3e04cb48edae2fcaf15b89ed1ef806dd6fdaf38d6b51334d190fe48d2dad08a86434c32ddf35cf8b9b4ed77114191fadca43d1a8fca266479cad260f14da229bfdb811d1d6721cbfa04109e41097f6e67f4ef453075e0f10c645a78d5b6e2d4c538581c8f3dce6d7eeb9e2edb6dd725dbbd39cfdf986936dc4b19410caa3184d7595f9518b4fd041d6f862b869072840aaa8a9868f38d5c51f74b5b39eb3bf5e0daa57eebaf23da0b3e758af5025eda09dcbe90383f808ac8742e6f6846b3ef810f89d130479b4f6b84dfef4f5048a8db537a646b75"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x23, 0x4, 0x1f, [@generic={0x31, 0x9, "dacfdf168fb34f49e13025ee29ca272692907f6b12634070d33646fe1dc3935221bb3787d44d08a1124b88eebe6640"}]}}]}}, {{0x9, 0x4, 0x4, 0x1f, 0x1, 0xeb, 0x5d, 0xc9, 0x40, [@generic={0xda, 0x2, "cff0d151a40a68ed19b23a73c26d10c957aa6632c3315e77f63263d5319f9b0e86ebc07d6d9b2afe816abe1790a2072cf0fa0529435fd2fe1c7b91cce13f0a960c053a8cc90cc271f959789c1ab15ea528dd8dacd1d6d94445b10025cc7365a3551506a8820f1069c82abf41af3e41400a5c724c79de7983d831f7b1dfe5314d792a0de398e6270862c352992cda65485ad131f85db447e79e231218a430bc03fa531b53a7443e94f299e8da2d487b5ff3bfe35975aa67ff6cc51cf08558ba081dc4e88cad66a16eccf9503ccd51e97cb00501739fe28a40"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ca4a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xe4, 0x3, 0xff}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xf56, 0x4, 0x1, 0xde, 0x8b5, 0xc0}, @obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x7, 0x10, 0x1ff, 0xfe, 0x5, 0x1, [@generic={0xf6, 0x11, "3c7d58aa387bcfb55044413834f6309bac657108b08ddc5e65e4d6a120464f7f7eabc02ca98b4eb9500355401101d649491c0d98936c1a8eca6bfe62c1596b4d2adf83b8e0fdb888cf38519128bb7b0c328d0efb46ae543fe33a1f6f9717d4895122869d684ad95bd38571db2b56543005e2827c4b3451d36055227e55cb808368a054018ff451c3e78a6693e37940144007b4a8bfa2bbe0d96ef79835f1db3af6d0972d5ccfa034cd68b1d5bc4f7bc0abec87d102a6ffdeb92bda85dd0a3773a1a557b2661fb9d1dcb507b7e0c9a73920dcb0befcd3dd894300d6bc49f373db9e8f5c5b5deb744217264080bfe39058e7725a40"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc7, 0x7}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x0, 0x0, 0x40, 0x3f}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9f, "1caccf0761458dce8e62137e02924e88"}]}, 0x3, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "01ee3164504c02492ed9c712cb912de210b5c3b8d5575ea2d3dd363a61535bad8a2fcd38fa69b8e5d1eff75be9b0fb26338852050acf288aa6fc1e71d1440208c41249ff1f6e609081101e23b556c35710b5444b9cccd576f1add5d37ab3094cba8f53667f28f7d4d519d8895c1e565cb3dabe9b5b1d1e1b8d7f93f16a8977c4278cd2f1c0767fd63c823fbe4bfd401d269258e62e95ae3ce4fbfa12f64988cc124060c5a1fd58988b9bfb071a8217c806dd7a2fbd8e27b49a513cde6dd5e4e34c478d84a0493ce1dfd5966ca3a5596f915c85389d39a533dffc42c48d488c792d493ca3073af17a68f375eab9d8400778fd"}}, {0x18, &(0x7f0000000080)=@string={0x18, 0x3, "89dfce7062b099047a40dd15431fd3a34bb2f8c2ea34"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="200b16000000070000002b9770a4a9267f566e46ee19a4bd97a3f9cc"], &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x19, 0xa6, "2ca1ea1018d00da800cc46dddbb6fc2f54800c62b4bca1a64c9f559d402ab120e551049da626c2b10195ce94d4f91e323666e26cab5fb80fb5c717bc368fe22a9cecc7c7264edf6a6a8c5fbba5fe7e1a8b73121e19f07c8236a2c20e9dad72347ee8bfae57e5c546077e418b5dba1e94e0b72ad1d184760585d452b034fc0001b65a059e9c5eddb964176f552a36e88917fb97f0cbad47de62b5fadc33c52d4d733783323cfb"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x100, 0x0, 0x2, 0xa0, 0x400, 0x8000, 0x9, 0x2f49, 0x5d4f, 0x3f, 0x981, 0x1}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000010c0)={0x90, 0x20, 0x21, 0x0, 0x0, "", [@nested={0x80, 0x0, 0x0, 0x1, [@generic="5f70f9b936e59cf116dcadf839113986124e4bdecdfb42c917178fbc151cfd31fbf3aa8b09854b66bfbb015f59b124be166e7e4e38357f2dfcd79f61ceb9954a2e97856451e15811f5e160b4712f8d809fdde7b574d67a7ed636050934833c6b6d48be36f355cc0163cea47995eb5eb0d688b63d", @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x90}], 0x1}, 0x0) (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f00000014c0)={0xe1d495ec5b58287b, 0x31, 0x65, {0x65, 0xc, "1869499ed8357b4a57ba1459c54ba0de5cda0aef10d93aac9c77a6fd1cb780c98d4a28ae77754c0e4a3d822b0c4eb069e95cde13ff0998b5112bdee2f067a100e07b097ea30b252ea5a9c4486d888a36c9ff0ad7a1e342d0c803f8b7a0c763e5b195cd"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000001540)={0x0, 0xf, 0x115, {0x5, 0xf, 0x115, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x4, 0x0, 0x800, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x7, 0x5, 0x40, 0x1, 0x4}, @generic={0xa9, 0x10, 0x2, "618c7f28214a9a7bc68b3f5758520389624cc558f6cd846140c848ba112216012622336bfbdc43e09926db9aa9c7616f875e74ac9cf43057c3f69fc2d11a7d0229e181ff283b0eb3fa80644f3a93e880fb9538d8f417982b3c0173cc5e02f88f0731520f87946365f02715b7335fa28efd77780bb338d1b5846f0a7e9c96e4b2f016e54dd3e39ce8939a35532a7be7b2d95a69bac754f148bec36e144fea66630a3aeb3a229a"}, @generic={0xb, 0x10, 0x4, "7db4bd612fad149c"}, @generic={0x46, 0x10, 0x2, "c8696893a31e4c23257f057e743a566eae7e44676917537a0257acf834264fafe6daab8182319172ccb14d5dd382dc2a911704533015dac7aa03de014f17b26bcc1801"}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0xb5, 0x60, "b2ba2759", "3b05a9f9"}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x20, 0xa5, 0x3f, 0x1, 0x1}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001740)={0x0, 0x10, 0x86, "f2be8e86e4e56882269a84451a8598e4e044e36c5d55a1674f4f7bb9ed95e79d58bdabd1f1d7a4a00c86cdd642fa653d2c3ac1c81580abe490407824fb4716a25fe15998fe1ab1c6906480c1bab5c86dc3fc659eb5cac4d3bda8c10c119997707a096479ca93213c136ac428ae6de031bdc86b748ec249c7116b920890b43d39604650618737"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xef}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f00000018c0)={0x20, 0x0, 0x8, {0x400, 0xa4f532775f4c489d, [0xf000]}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001980)={0x40, 0xb, 0x2, "105c"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001a40)={0x40, 0x17, 0x6}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "0e09"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x40, 0x31, 0x1c, {0x1c, 0x3, "49b0e28b1abf4990c5e63b728d53393b51311263f323565c1761"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x0, 0x5, 0x96, "507b4b6bbc03cee759a65b0a7403e1d3871133f5e632e2bb6c891b9248044d41081411fb313d1d2849b3eccc310c199e6011824b73bfb49b585b5c92c806df69fdb102f7b5ddf55450b2b3f0ca2360a0640ae6e14c9a5254d239a1b7a023eff6bc538d36c748afd10346e3f20f9ee1474b9d2cfd287dd27538e5e113355456645cc3717953a086faba08f128e05de81f183b64f3ed6b"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x9, 0x101, 0x1000, 0x8, 0x401, 0x7, 0x81, 0x7, 0x87, 0x3ff, 0x8000, 0xcf}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x693}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) 00:04:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 51) 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0xfff7ffff, 0x800) [ 276.069435][T19705] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 276.071474][T19705] CPU: 0 PID: 19705 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 276.074129][T19705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 276.076704][T19705] Call trace: [ 276.077541][T19705] dump_backtrace+0x1c4/0x1f0 [ 276.078688][T19705] show_stack+0x2c/0x54 [ 276.079715][T19705] dump_stack_lvl+0x104/0x16c [ 276.080935][T19705] dump_stack+0x1c/0x58 [ 276.081982][T19705] kmem_cache_create_usercopy+0x268/0x31c [ 276.083502][T19705] p9_client_create+0x618/0x758 [ 276.084637][T19705] v9fs_session_init+0xa4/0x9f0 [ 276.085795][T19705] v9fs_mount+0x6c/0x568 [ 276.086809][T19705] legacy_get_tree+0x30/0x74 [ 276.087891][T19705] vfs_get_tree+0x40/0x140 [ 276.088983][T19705] do_new_mount+0x1dc/0x4e4 [ 276.089571][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.090084][T19705] path_mount+0x358/0x914 [ 276.090095][T19705] __arm64_sys_mount+0x2c4/0x3c4 [ 276.090103][T19705] el0_svc_common+0x138/0x220 [ 276.095543][T19705] do_el0_svc+0x48/0x164 [ 276.096568][T19705] el0_svc+0x58/0x150 [ 276.097522][T19705] el0t_64_sync_handler+0x84/0xf0 [ 276.098482][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.098885][T19705] el0t_64_sync+0x18c/0x190 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xb00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:36 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xffffffffffffffd1, 0x0, {0x2}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xffffffffffffffd1, 0x0, {0x2}}, 0x18) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) (async) [ 276.101678][T19712] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0xfffff531, 0x800) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xc00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 52) 00:04:36 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xffffffffffffffd1, 0x0, {0x2}}, 0x18) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xd00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 276.155393][T19731] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 276.157525][T19731] CPU: 1 PID: 19731 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 276.160198][T19731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 276.162724][T19731] Call trace: [ 276.163513][T19731] dump_backtrace+0x1c4/0x1f0 [ 276.164669][T19731] show_stack+0x2c/0x54 [ 276.165746][T19731] dump_stack_lvl+0x104/0x16c [ 276.166913][T19731] dump_stack+0x1c/0x58 [ 276.167941][T19731] kmem_cache_create_usercopy+0x268/0x31c [ 276.169386][T19731] p9_client_create+0x618/0x758 [ 276.170606][T19731] v9fs_session_init+0xa4/0x9f0 [ 276.171756][T19731] v9fs_mount+0x6c/0x568 [ 276.172774][T19731] legacy_get_tree+0x30/0x74 [ 276.173891][T19731] vfs_get_tree+0x40/0x140 [ 276.175000][T19731] do_new_mount+0x1dc/0x4e4 [ 276.176118][T19731] path_mount+0x358/0x914 [ 276.177206][T19731] __arm64_sys_mount+0x2c4/0x3c4 [ 276.178447][T19731] el0_svc_common+0x138/0x220 [ 276.179610][T19731] do_el0_svc+0x48/0x164 [ 276.180679][T19731] el0_svc+0x58/0x150 [ 276.181694][T19731] el0t_64_sync_handler+0x84/0xf0 [ 276.182919][T19731] el0t_64_sync+0x18c/0x190 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0xfffff7ff, 0x800) 00:04:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 55) [ 276.253245][T19740] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 276.255421][T19740] CPU: 1 PID: 19740 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 276.258059][T19740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 276.260554][T19740] Call trace: [ 276.261349][T19740] dump_backtrace+0x1c4/0x1f0 [ 276.262473][T19740] show_stack+0x2c/0x54 [ 276.263437][T19740] dump_stack_lvl+0x104/0x16c [ 276.264552][T19740] dump_stack+0x1c/0x58 [ 276.265524][T19740] kmem_cache_create_usercopy+0x268/0x31c [ 276.266875][T19740] p9_client_create+0x618/0x758 [ 276.268027][T19740] v9fs_session_init+0xa4/0x9f0 [ 276.269184][T19740] v9fs_mount+0x6c/0x568 [ 276.270350][T19740] legacy_get_tree+0x30/0x74 [ 276.271415][T19740] vfs_get_tree+0x40/0x140 [ 276.272455][T19740] do_new_mount+0x1dc/0x4e4 [ 276.273505][T19740] path_mount+0x358/0x914 [ 276.274573][T19740] __arm64_sys_mount+0x2c4/0x3c4 [ 276.275830][T19740] el0_svc_common+0x138/0x220 [ 276.277068][T19740] do_el0_svc+0x48/0x164 [ 276.278176][T19740] el0_svc+0x58/0x150 [ 276.279260][T19740] el0t_64_sync_handler+0x84/0xf0 [ 276.280563][T19740] el0t_64_sync+0x18c/0x190 00:04:36 executing program 5: r0 = syz_usb_connect(0x1, 0x9f9, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xa, 0x35, 0x42, 0x10, 0x15a4, 0x1001, 0x81ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e7, 0x4, 0x2, 0x2, 0x80, 0x6, [{{0x9, 0x4, 0x88, 0x0, 0x5, 0x59, 0x4f, 0x33, 0x1f, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x8, 0xa3, "519c71d1cb19af5cef"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x4d, 'wh', 'g'}, @as_header={0x7, 0x24, 0x1, 0x80, 0x8}]}, @hid_hid={0x9, 0x21, 0x8493, 0xf9, 0x1, {0x22, 0x5c9}}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x54, 0x4, [@generic={0xf3, 0x4, "da96814a75101fdcdc132d94bd228f0184896194baa73c55ae52de7a2400f148dfec4625be43258ca03228c3b10d1eff481c51c370ea4b42d9675d237e58dce9b51d597bcce0517c8449d00c21d663e0e73da9c5a5bdb4e74d35ae661050fef2de7927ce4aaadc1c587312ee505174c83ae9b5b9981f584082b87775a0090834ae0ced309ee3bae804a4555c54354d3e23b1ed194c82ea4d9ca5e9af4909bf78fa5bc4ca3956cd94405f2e8d96bb379f860c2e5e5dc4342171e82b5f6f846a98034899829ee41ecafa0cb7dcb9d613cbf2151c8c9d99adf3f48b58f33b2bd88ac468aaf342eaa40093d3669d17bb40f489"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0x67, 0x5, [@generic={0x9, 0xb, "816ed1bbe7c3d1"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x1, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x6, 0x7f, 0x2, [@generic={0x5c, 0x24, "d6c3fb5f22e9962be826925be03558e8eb86c8bd5f7820fbb1e6cbbffca92cbca0ef0545accb66b266d3b13a22cfd8ec1e9ba43eb6bd53b6664b01d904474547392ae299285a62b4b59970f16744063f16c2e80529d52c7e343b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x80}]}}]}}, {{0x9, 0x4, 0x6b, 0x47, 0x3, 0xd4, 0x3, 0x10, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x3f}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0x1, '}'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x5}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x60, 0x9, 0x0, [@generic={0xc4, 0x3, "0ee442c13a0b78a8cdca9b1de9baa24776365e10e94469fe34a1053d4a38a8abbbf9630f0a4918d992e2d9f96bd126fd47eafc37e0d31085afbf29c76149fc6ba4a1eb15b11229023923c160f82d430477ba28c888c142dc0d4028cc7c81258115ae37abb0f018de085086f9d21345b6d2b7fdc06fc298b166c6f8d02e1d16b7e4092144c3efb4611329a970677965d1c6eb8e0bb9c71947203dd075bd3ee4b1af5fdd0d27f24ab935c8cec1e911a8f511ed17ac7794d02fd9d561853f89912a2082"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x96, 0x3, 0x20, [@generic={0x8d, 0xf, "8d25526f169d822e85cac94253600e49d50e1b0a361b1ff3d0ac9fab8e64d59af7f5f420be94b42a8cfbe5d3cd5184527baab01bbbe70fa1611e55507d9fabf9ae498513720f9c7be6280ab6723761653a4c103784de33b81729b4b966f7304c866395756b02315b8761d38d699714b110e7bdbf1a16d9305fe0ba2468f79bc5f9c7f089dbf9467dc69502"}]}}]}}, {{0x9, 0x4, 0xa, 0xff, 0x9, 0x3b, 0x73, 0x9b, 0x1, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9d84"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x412c}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x5, 0x1, 0x48, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x40}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xff, 0x9, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}, @generic={0xc1, 0x21, "489bde061164df4d2dd17762628d0f8e70caff8e662c3dcb3611283287b540e1d6a04c83862c2874a1ac5c657b269665706a820b174131c64cc3e60b517f0b5960063547cb711d69ad4cb84d944b82ae450dc13ffe1960af037b39a16828c0688f4a1c36dcce3dba3b3c57689bcd124c3d7048a88c22396f8b194f31c40506c9c05babdf76d1cea1934906e4601dc961b8a54d9b77690acd57c48e8cea073441c0aacffc08222df785dea9bf3a6e7da5cf9839948e3a1abb38c783a3b3832b"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xff, 0x7, 0x80, [@generic={0xdc, 0x1, "91dcdd47b0792d25bebc6fe0d7d19045f65d57f292a46e37d8a4b098ca25bf8c8f331615c992e15b4f7edd9c12821b692f8b64df89fd488d5f7204ee2ee4c0489e3960da86514a8438ce029c68eb8c1283e5ec677485d8313b99343ec01a29d17a3c64c8955cc12fe83cac066c2cee6fcd5b7d8205266d67cf27c5ab63696976b8dbc412279f8d5733e8e5ef566afbf7b67c77777d467bbb361505069dfc3802da1a29a79b0b9aff2a9c32505becde23e3d91e1e222d9edadaabe69a4e61b5c659bbfda10a85d2aaa19d1aeccf6edda795e93c64983ba8c4a51a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x74, 0x4, 0x68, [@generic={0xf2, 0x22, "dea0d9db53f129629cac42588245d5f88958c58798967283c593db09e95a81db20a16a75cb75425dee02b6ba52bd45874d980f028831178be2f853494e080bf480313acab0d79ecfca5d37541c2d68f7dde418904939c8c0dee928c6c5f6b67f7ee3a4eb192aa3e0375dab6a77077f44191b4bf0f35ef2a550a9a88bb0612225ef54f788cb6fe6ec6f262d94df5b22f4c5731bada586bf7412ca5d827b198a14836426f79fd493115f722dd528ee7388ff174075821e3d8499a9a823bf1e26a54f49d1c1a7569b340a7216f9c30e5c27d6242dd249e59c3152921c305034d7eee87724fd271bf24fadf1ccef6299b529"}]}}, {{0x9, 0x5, 0x3, 0x15, 0x40, 0x6, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x4}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x79, 0x1, 0x7f, [@generic={0xfa, 0x22, "313dbe9ee193be018ee18591b2520939646a4a1971f25bde796b9b6b85a0d8f9807de3e04cb48edae2fcaf15b89ed1ef806dd6fdaf38d6b51334d190fe48d2dad08a86434c32ddf35cf8b9b4ed77114191fadca43d1a8fca266479cad260f14da229bfdb811d1d6721cbfa04109e41097f6e67f4ef453075e0f10c645a78d5b6e2d4c538581c8f3dce6d7eeb9e2edb6dd725dbbd39cfdf986936dc4b19410caa3184d7595f9518b4fd041d6f862b869072840aaa8a9868f38d5c51f74b5b39eb3bf5e0daa57eebaf23da0b3e758af5025eda09dcbe90383f808ac8742e6f6846b3ef810f89d130479b4f6b84dfef4f5048a8db537a646b75"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x23, 0x4, 0x1f, [@generic={0x31, 0x9, "dacfdf168fb34f49e13025ee29ca272692907f6b12634070d33646fe1dc3935221bb3787d44d08a1124b88eebe6640"}]}}]}}, {{0x9, 0x4, 0x4, 0x1f, 0x1, 0xeb, 0x5d, 0xc9, 0x40, [@generic={0xda, 0x2, "cff0d151a40a68ed19b23a73c26d10c957aa6632c3315e77f63263d5319f9b0e86ebc07d6d9b2afe816abe1790a2072cf0fa0529435fd2fe1c7b91cce13f0a960c053a8cc90cc271f959789c1ab15ea528dd8dacd1d6d94445b10025cc7365a3551506a8820f1069c82abf41af3e41400a5c724c79de7983d831f7b1dfe5314d792a0de398e6270862c352992cda65485ad131f85db447e79e231218a430bc03fa531b53a7443e94f299e8da2d487b5ff3bfe35975aa67ff6cc51cf08558ba081dc4e88cad66a16eccf9503ccd51e97cb00501739fe28a40"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ca4a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xe4, 0x3, 0xff}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xf56, 0x4, 0x1, 0xde, 0x8b5, 0xc0}, @obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x7, 0x10, 0x1ff, 0xfe, 0x5, 0x1, [@generic={0xf6, 0x11, "3c7d58aa387bcfb55044413834f6309bac657108b08ddc5e65e4d6a120464f7f7eabc02ca98b4eb9500355401101d649491c0d98936c1a8eca6bfe62c1596b4d2adf83b8e0fdb888cf38519128bb7b0c328d0efb46ae543fe33a1f6f9717d4895122869d684ad95bd38571db2b56543005e2827c4b3451d36055227e55cb808368a054018ff451c3e78a6693e37940144007b4a8bfa2bbe0d96ef79835f1db3af6d0972d5ccfa034cd68b1d5bc4f7bc0abec87d102a6ffdeb92bda85dd0a3773a1a557b2661fb9d1dcb507b7e0c9a73920dcb0befcd3dd894300d6bc49f373db9e8f5c5b5deb744217264080bfe39058e7725a40"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc7, 0x7}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x0, 0x0, 0x40, 0x3f}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9f, "1caccf0761458dce8e62137e02924e88"}]}, 0x3, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "01ee3164504c02492ed9c712cb912de210b5c3b8d5575ea2d3dd363a61535bad8a2fcd38fa69b8e5d1eff75be9b0fb26338852050acf288aa6fc1e71d1440208c41249ff1f6e609081101e23b556c35710b5444b9cccd576f1add5d37ab3094cba8f53667f28f7d4d519d8895c1e565cb3dabe9b5b1d1e1b8d7f93f16a8977c4278cd2f1c0767fd63c823fbe4bfd401d269258e62e95ae3ce4fbfa12f64988cc124060c5a1fd58988b9bfb071a8217c806dd7a2fbd8e27b49a513cde6dd5e4e34c478d84a0493ce1dfd5966ca3a5596f915c85389d39a533dffc42c48d488c792d493ca3073af17a68f375eab9d8400778fd"}}, {0x18, &(0x7f0000000080)=@string={0x18, 0x3, "89dfce7062b099047a40dd15431fd3a34bb2f8c2ea34"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="200b16000000070000002b9770a4a9267f566e46ee19a4bd97a3f9cc"], &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x19, 0xa6, "2ca1ea1018d00da800cc46dddbb6fc2f54800c62b4bca1a64c9f559d402ab120e551049da626c2b10195ce94d4f91e323666e26cab5fb80fb5c717bc368fe22a9cecc7c7264edf6a6a8c5fbba5fe7e1a8b73121e19f07c8236a2c20e9dad72347ee8bfae57e5c546077e418b5dba1e94e0b72ad1d184760585d452b034fc0001b65a059e9c5eddb964176f552a36e88917fb97f0cbad47de62b5fadc33c52d4d733783323cfb"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x100, 0x0, 0x2, 0xa0, 0x400, 0x8000, 0x9, 0x2f49, 0x5d4f, 0x3f, 0x981, 0x1}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000010c0)={0x90, 0x20, 0x21, 0x0, 0x0, "", [@nested={0x80, 0x0, 0x0, 0x1, [@generic="5f70f9b936e59cf116dcadf839113986124e4bdecdfb42c917178fbc151cfd31fbf3aa8b09854b66bfbb015f59b124be166e7e4e38357f2dfcd79f61ceb9954a2e97856451e15811f5e160b4712f8d809fdde7b574d67a7ed636050934833c6b6d48be36f355cc0163cea47995eb5eb0d688b63d", @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x90}], 0x1}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f00000014c0)={0xe1d495ec5b58287b, 0x31, 0x65, {0x65, 0xc, "1869499ed8357b4a57ba1459c54ba0de5cda0aef10d93aac9c77a6fd1cb780c98d4a28ae77754c0e4a3d822b0c4eb069e95cde13ff0998b5112bdee2f067a100e07b097ea30b252ea5a9c4486d888a36c9ff0ad7a1e342d0c803f8b7a0c763e5b195cd"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000001540)={0x0, 0xf, 0x115, {0x5, 0xf, 0x115, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x4, 0x0, 0x800, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x7, 0x5, 0x40, 0x1, 0x4}, @generic={0xa9, 0x10, 0x2, "618c7f28214a9a7bc68b3f5758520389624cc558f6cd846140c848ba112216012622336bfbdc43e09926db9aa9c7616f875e74ac9cf43057c3f69fc2d11a7d0229e181ff283b0eb3fa80644f3a93e880fb9538d8f417982b3c0173cc5e02f88f0731520f87946365f02715b7335fa28efd77780bb338d1b5846f0a7e9c96e4b2f016e54dd3e39ce8939a35532a7be7b2d95a69bac754f148bec36e144fea66630a3aeb3a229a"}, @generic={0xb, 0x10, 0x4, "7db4bd612fad149c"}, @generic={0x46, 0x10, 0x2, "c8696893a31e4c23257f057e743a566eae7e44676917537a0257acf834264fafe6daab8182319172ccb14d5dd382dc2a911704533015dac7aa03de014f17b26bcc1801"}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0xb5, 0x60, "b2ba2759", "3b05a9f9"}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x20, 0xa5, 0x3f, 0x1, 0x1}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001740)={0x0, 0x10, 0x86, "f2be8e86e4e56882269a84451a8598e4e044e36c5d55a1674f4f7bb9ed95e79d58bdabd1f1d7a4a00c86cdd642fa653d2c3ac1c81580abe490407824fb4716a25fe15998fe1ab1c6906480c1bab5c86dc3fc659eb5cac4d3bda8c10c119997707a096479ca93213c136ac428ae6de031bdc86b748ec249c7116b920890b43d39604650618737"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xef}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f00000018c0)={0x20, 0x0, 0x8, {0x400, 0xa4f532775f4c489d, [0xf000]}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001980)={0x40, 0xb, 0x2, "105c"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001a40)={0x40, 0x17, 0x6}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "0e09"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x40, 0x31, 0x1c, {0x1c, 0x3, "49b0e28b1abf4990c5e63b728d53393b51311263f323565c1761"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x0, 0x5, 0x96, "507b4b6bbc03cee759a65b0a7403e1d3871133f5e632e2bb6c891b9248044d41081411fb313d1d2849b3eccc310c199e6011824b73bfb49b585b5c92c806df69fdb102f7b5ddf55450b2b3f0ca2360a0640ae6e14c9a5254d239a1b7a023eff6bc538d36c748afd10346e3f20f9ee1474b9d2cfd287dd27538e5e113355456645cc3717953a086faba08f128e05de81f183b64f3ed6b"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x9, 0x101, 0x1000, 0x8, 0x401, 0x7, 0x81, 0x7, 0x87, 0x3ff, 0x8000, 0xcf}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x693}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) syz_usb_connect(0x1, 0x9f9, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0xa, 0x35, 0x42, 0x10, 0x15a4, 0x1001, 0x81ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e7, 0x4, 0x2, 0x2, 0x80, 0x6, [{{0x9, 0x4, 0x88, 0x0, 0x5, 0x59, 0x4f, 0x33, 0x1f, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x8, 0xa3, "519c71d1cb19af5cef"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x6, 0x4d, 'wh', 'g'}, @as_header={0x7, 0x24, 0x1, 0x80, 0x8}]}, @hid_hid={0x9, 0x21, 0x8493, 0xf9, 0x1, {0x22, 0x5c9}}], [{{0x9, 0x5, 0xb, 0x10, 0x200, 0x7, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3f, 0x9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x2, 0x54, 0x4, [@generic={0xf3, 0x4, "da96814a75101fdcdc132d94bd228f0184896194baa73c55ae52de7a2400f148dfec4625be43258ca03228c3b10d1eff481c51c370ea4b42d9675d237e58dce9b51d597bcce0517c8449d00c21d663e0e73da9c5a5bdb4e74d35ae661050fef2de7927ce4aaadc1c587312ee505174c83ae9b5b9981f584082b87775a0090834ae0ced309ee3bae804a4555c54354d3e23b1ed194c82ea4d9ca5e9af4909bf78fa5bc4ca3956cd94405f2e8d96bb379f860c2e5e5dc4342171e82b5f6f846a98034899829ee41ecafa0cb7dcb9d613cbf2151c8c9d99adf3f48b58f33b2bd88ac468aaf342eaa40093d3669d17bb40f489"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x9, 0x67, 0x5, [@generic={0x9, 0xb, "816ed1bbe7c3d1"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x0, 0x1, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x6, 0x7f, 0x2, [@generic={0x5c, 0x24, "d6c3fb5f22e9962be826925be03558e8eb86c8bd5f7820fbb1e6cbbffca92cbca0ef0545accb66b266d3b13a22cfd8ec1e9ba43eb6bd53b6664b01d904474547392ae299285a62b4b59970f16744063f16c2e80529d52c7e343b"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x80}]}}]}}, {{0x9, 0x4, 0x6b, 0x47, 0x3, 0xd4, 0x3, 0x10, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x3f}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x0, 0x1, '}'}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x0, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x5}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x60, 0x9, 0x0, [@generic={0xc4, 0x3, "0ee442c13a0b78a8cdca9b1de9baa24776365e10e94469fe34a1053d4a38a8abbbf9630f0a4918d992e2d9f96bd126fd47eafc37e0d31085afbf29c76149fc6ba4a1eb15b11229023923c160f82d430477ba28c888c142dc0d4028cc7c81258115ae37abb0f018de085086f9d21345b6d2b7fdc06fc298b166c6f8d02e1d16b7e4092144c3efb4611329a970677965d1c6eb8e0bb9c71947203dd075bd3ee4b1af5fdd0d27f24ab935c8cec1e911a8f511ed17ac7794d02fd9d561853f89912a2082"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x96, 0x3, 0x20, [@generic={0x8d, 0xf, "8d25526f169d822e85cac94253600e49d50e1b0a361b1ff3d0ac9fab8e64d59af7f5f420be94b42a8cfbe5d3cd5184527baab01bbbe70fa1611e55507d9fabf9ae498513720f9c7be6280ab6723761653a4c103784de33b81729b4b966f7304c866395756b02315b8761d38d699714b110e7bdbf1a16d9305fe0ba2468f79bc5f9c7f089dbf9467dc69502"}]}}]}}, {{0x9, 0x4, 0xa, 0xff, 0x9, 0x3b, 0x73, 0x9b, 0x1, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9d84"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x412c}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0x5, 0x1, 0x48, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x40}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0xff, 0x9, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfff9}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x6, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}, @generic={0xc1, 0x21, "489bde061164df4d2dd17762628d0f8e70caff8e662c3dcb3611283287b540e1d6a04c83862c2874a1ac5c657b269665706a820b174131c64cc3e60b517f0b5960063547cb711d69ad4cb84d944b82ae450dc13ffe1960af037b39a16828c0688f4a1c36dcce3dba3b3c57689bcd124c3d7048a88c22396f8b194f31c40506c9c05babdf76d1cea1934906e4601dc961b8a54d9b77690acd57c48e8cea073441c0aacffc08222df785dea9bf3a6e7da5cf9839948e3a1abb38c783a3b3832b"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x40, 0xff, 0x7, 0x80, [@generic={0xdc, 0x1, "91dcdd47b0792d25bebc6fe0d7d19045f65d57f292a46e37d8a4b098ca25bf8c8f331615c992e15b4f7edd9c12821b692f8b64df89fd488d5f7204ee2ee4c0489e3960da86514a8438ce029c68eb8c1283e5ec677485d8313b99343ec01a29d17a3c64c8955cc12fe83cac066c2cee6fcd5b7d8205266d67cf27c5ab63696976b8dbc412279f8d5733e8e5ef566afbf7b67c77777d467bbb361505069dfc3802da1a29a79b0b9aff2a9c32505becde23e3d91e1e222d9edadaabe69a4e61b5c659bbfda10a85d2aaa19d1aeccf6edda795e93c64983ba8c4a51a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0x3}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x3}]}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x74, 0x4, 0x68, [@generic={0xf2, 0x22, "dea0d9db53f129629cac42588245d5f88958c58798967283c593db09e95a81db20a16a75cb75425dee02b6ba52bd45874d980f028831178be2f853494e080bf480313acab0d79ecfca5d37541c2d68f7dde418904939c8c0dee928c6c5f6b67f7ee3a4eb192aa3e0375dab6a77077f44191b4bf0f35ef2a550a9a88bb0612225ef54f788cb6fe6ec6f262d94df5b22f4c5731bada586bf7412ca5d827b198a14836426f79fd493115f722dd528ee7388ff174075821e3d8499a9a823bf1e26a54f49d1c1a7569b340a7216f9c30e5c27d6242dd249e59c3152921c305034d7eee87724fd271bf24fadf1ccef6299b529"}]}}, {{0x9, 0x5, 0x3, 0x15, 0x40, 0x6, 0x9, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x20, 0x4}]}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x79, 0x1, 0x7f, [@generic={0xfa, 0x22, "313dbe9ee193be018ee18591b2520939646a4a1971f25bde796b9b6b85a0d8f9807de3e04cb48edae2fcaf15b89ed1ef806dd6fdaf38d6b51334d190fe48d2dad08a86434c32ddf35cf8b9b4ed77114191fadca43d1a8fca266479cad260f14da229bfdb811d1d6721cbfa04109e41097f6e67f4ef453075e0f10c645a78d5b6e2d4c538581c8f3dce6d7eeb9e2edb6dd725dbbd39cfdf986936dc4b19410caa3184d7595f9518b4fd041d6f862b869072840aaa8a9868f38d5c51f74b5b39eb3bf5e0daa57eebaf23da0b3e758af5025eda09dcbe90383f808ac8742e6f6846b3ef810f89d130479b4f6b84dfef4f5048a8db537a646b75"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x23, 0x4, 0x1f, [@generic={0x31, 0x9, "dacfdf168fb34f49e13025ee29ca272692907f6b12634070d33646fe1dc3935221bb3787d44d08a1124b88eebe6640"}]}}]}}, {{0x9, 0x4, 0x4, 0x1f, 0x1, 0xeb, 0x5d, 0xc9, 0x40, [@generic={0xda, 0x2, "cff0d151a40a68ed19b23a73c26d10c957aa6632c3315e77f63263d5319f9b0e86ebc07d6d9b2afe816abe1790a2072cf0fa0529435fd2fe1c7b91cce13f0a960c053a8cc90cc271f959789c1ab15ea528dd8dacd1d6d94445b10025cc7365a3551506a8820f1069c82abf41af3e41400a5c724c79de7983d831f7b1dfe5314d792a0de398e6270862c352992cda65485ad131f85db447e79e231218a430bc03fa531b53a7443e94f299e8da2d487b5ff3bfe35975aa67ff6cc51cf08558ba081dc4e88cad66a16eccf9503ccd51e97cb00501739fe28a40"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ca4a"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xe4, 0x3, 0xff}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xf56, 0x4, 0x1, 0xde, 0x8b5, 0xc0}, @obex={0x5, 0x24, 0x15, 0x3}, @obex={0x5, 0x24, 0x15, 0x2}]}], [{{0x9, 0x5, 0x7, 0x10, 0x1ff, 0xfe, 0x5, 0x1, [@generic={0xf6, 0x11, "3c7d58aa387bcfb55044413834f6309bac657108b08ddc5e65e4d6a120464f7f7eabc02ca98b4eb9500355401101d649491c0d98936c1a8eca6bfe62c1596b4d2adf83b8e0fdb888cf38519128bb7b0c328d0efb46ae543fe33a1f6f9717d4895122869d684ad95bd38571db2b56543005e2827c4b3451d36055227e55cb808368a054018ff451c3e78a6693e37940144007b4a8bfa2bbe0d96ef79835f1db3af6d0972d5ccfa034cd68b1d5bc4f7bc0abec87d102a6ffdeb92bda85dd0a3773a1a557b2661fb9d1dcb507b7e0c9a73920dcb0befcd3dd894300d6bc49f373db9e8f5c5b5deb744217264080bfe39058e7725a40"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc7, 0x7}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x7, 0x0, 0x0, 0x40, 0x3f}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9f, "1caccf0761458dce8e62137e02924e88"}]}, 0x3, [{0xf4, &(0x7f0000000140)=@string={0xf4, 0x3, "01ee3164504c02492ed9c712cb912de210b5c3b8d5575ea2d3dd363a61535bad8a2fcd38fa69b8e5d1eff75be9b0fb26338852050acf288aa6fc1e71d1440208c41249ff1f6e609081101e23b556c35710b5444b9cccd576f1add5d37ab3094cba8f53667f28f7d4d519d8895c1e565cb3dabe9b5b1d1e1b8d7f93f16a8977c4278cd2f1c0767fd63c823fbe4bfd401d269258e62e95ae3ce4fbfa12f64988cc124060c5a1fd58988b9bfb071a8217c806dd7a2fbd8e27b49a513cde6dd5e4e34c478d84a0493ce1dfd5966ca3a5596f915c85389d39a533dffc42c48d488c792d493ca3073af17a68f375eab9d8400778fd"}}, {0x18, &(0x7f0000000080)=@string={0x18, 0x3, "89dfce7062b099047a40dd15431fd3a34bb2f8c2ea34"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x861}}]}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000300)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="200b16000000070000002b9770a4a9267f566e46ee19a4bd97a3f9cc"], &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000340)={0x20, 0x19, 0xa6, "2ca1ea1018d00da800cc46dddbb6fc2f54800c62b4bca1a64c9f559d402ab120e551049da626c2b10195ce94d4f91e323666e26cab5fb80fb5c717bc368fe22a9cecc7c7264edf6a6a8c5fbba5fe7e1a8b73121e19f07c8236a2c20e9dad72347ee8bfae57e5c546077e418b5dba1e94e0b72ad1d184760585d452b034fc0001b65a059e9c5eddb964176f552a36e88917fb97f0cbad47de62b5fadc33c52d4d733783323cfb"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x80, 0x1c, {0x100, 0x0, 0x2, 0xa0, 0x400, 0x8000, 0x9, 0x2f49, 0x5d4f, 0x3f, 0x981, 0x1}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x401}, &(0x7f0000000500)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000010c0)={0x90, 0x20, 0x21, 0x0, 0x0, "", [@nested={0x80, 0x0, 0x0, 0x1, [@generic="5f70f9b936e59cf116dcadf839113986124e4bdecdfb42c917178fbc151cfd31fbf3aa8b09854b66bfbb015f59b124be166e7e4e38357f2dfcd79f61ceb9954a2e97856451e15811f5e160b4712f8d809fdde7b574d67a7ed636050934833c6b6d48be36f355cc0163cea47995eb5eb0d688b63d", @typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x90}], 0x1}, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r2, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) syz_usb_control_io(r0, &(0x7f0000001700)={0x2c, &(0x7f00000014c0)={0xe1d495ec5b58287b, 0x31, 0x65, {0x65, 0xc, "1869499ed8357b4a57ba1459c54ba0de5cda0aef10d93aac9c77a6fd1cb780c98d4a28ae77754c0e4a3d822b0c4eb069e95cde13ff0998b5112bdee2f067a100e07b097ea30b252ea5a9c4486d888a36c9ff0ad7a1e342d0c803f8b7a0c763e5b195cd"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000001540)={0x0, 0xf, 0x115, {0x5, 0xf, 0x115, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x4, 0x0, 0x800, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x7, 0x5, 0x40, 0x1, 0x4}, @generic={0xa9, 0x10, 0x2, "618c7f28214a9a7bc68b3f5758520389624cc558f6cd846140c848ba112216012622336bfbdc43e09926db9aa9c7616f875e74ac9cf43057c3f69fc2d11a7d0229e181ff283b0eb3fa80644f3a93e880fb9538d8f417982b3c0173cc5e02f88f0731520f87946365f02715b7335fa28efd77780bb338d1b5846f0a7e9c96e4b2f016e54dd3e39ce8939a35532a7be7b2d95a69bac754f148bec36e144fea66630a3aeb3a229a"}, @generic={0xb, 0x10, 0x4, "7db4bd612fad149c"}, @generic={0x46, 0x10, 0x2, "c8696893a31e4c23257f057e743a566eae7e44676917537a0257acf834264fafe6daab8182319172ccb14d5dd382dc2a911704533015dac7aa03de014f17b26bcc1801"}]}}, &(0x7f0000001680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0xb5, 0x60, "b2ba2759", "3b05a9f9"}}, &(0x7f00000016c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x60, 0x20, 0xa5, 0x3f, 0x1, 0x1}}}, &(0x7f0000001bc0)={0x84, &(0x7f0000001740)={0x0, 0x10, 0x86, "f2be8e86e4e56882269a84451a8598e4e044e36c5d55a1674f4f7bb9ed95e79d58bdabd1f1d7a4a00c86cdd642fa653d2c3ac1c81580abe490407824fb4716a25fe15998fe1ab1c6906480c1bab5c86dc3fc659eb5cac4d3bda8c10c119997707a096479ca93213c136ac428ae6de031bdc86b748ec249c7116b920890b43d39604650618737"}, &(0x7f0000001800)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000001840)={0x0, 0x8, 0x1, 0xef}, &(0x7f0000001880)={0x20, 0x0, 0x4, {0x3, 0x5}}, &(0x7f00000018c0)={0x20, 0x0, 0x8, {0x400, 0xa4f532775f4c489d, [0xf000]}}, &(0x7f0000001900)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001940)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001980)={0x40, 0xb, 0x2, "105c"}, &(0x7f00000019c0)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000001a00)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001a40)={0x40, 0x17, 0x6}, &(0x7f0000001a80)={0x40, 0x19, 0x2, "0e09"}, &(0x7f0000001ac0)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001b00)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001b40)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001b80)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000640)={0x40, 0x31, 0x1c, {0x1c, 0x3, "49b0e28b1abf4990c5e63b728d53393b51311263f323565c1761"}}, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000700)={0x0, 0x5, 0x96, "507b4b6bbc03cee759a65b0a7403e1d3871133f5e632e2bb6c891b9248044d41081411fb313d1d2849b3eccc310c199e6011824b73bfb49b585b5c92c806df69fdb102f7b5ddf55450b2b3f0ca2360a0640ae6e14c9a5254d239a1b7a023eff6bc538d36c748afd10346e3f20f9ee1474b9d2cfd287dd27538e5e113355456645cc3717953a086faba08f128e05de81f183b64f3ed6b"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000800)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x9, 0x101, 0x1000, 0x8, 0x401, 0x7, 0x81, 0x7, 0x87, 0x3ff, 0x8000, 0xcf}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x693}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) (async) 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x3e80000000, 0x800) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xe00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x200400, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 53) 00:04:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 56) [ 276.645581][T19748] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 276.648439][T19747] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 276.650452][T19747] CPU: 1 PID: 19747 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 276.652913][T19747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 276.655425][T19747] Call trace: [ 276.656235][T19747] dump_backtrace+0x1c4/0x1f0 [ 276.657398][T19747] show_stack+0x2c/0x54 [ 276.658420][T19747] dump_stack_lvl+0x104/0x16c [ 276.659613][T19747] dump_stack+0x1c/0x58 [ 276.660666][T19747] kmem_cache_create_usercopy+0x268/0x31c [ 276.662022][T19747] p9_client_create+0x618/0x758 [ 276.663204][T19747] v9fs_session_init+0xa4/0x9f0 [ 276.664405][T19747] v9fs_mount+0x6c/0x568 [ 276.665374][T19747] legacy_get_tree+0x30/0x74 [ 276.666424][T19747] vfs_get_tree+0x40/0x140 [ 276.667458][T19747] do_new_mount+0x1dc/0x4e4 [ 276.668503][T19747] path_mount+0x358/0x914 [ 276.669524][T19747] __arm64_sys_mount+0x2c4/0x3c4 [ 276.670993][T19747] el0_svc_common+0x138/0x220 [ 276.672151][T19747] do_el0_svc+0x48/0x164 [ 276.673158][T19747] el0_svc+0x58/0x150 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x803e000000, 0x800) [ 276.674135][T19747] el0t_64_sync_handler+0x84/0xf0 [ 276.675367][T19747] el0t_64_sync+0x18c/0x190 [ 276.677970][T19750] fuse: Bad value for 'fd' 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xe21, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 276.699839][T19748] CPU: 0 PID: 19748 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 276.702368][T19748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 276.704876][T19748] Call trace: [ 276.705698][T19748] dump_backtrace+0x1c4/0x1f0 [ 276.706847][T19748] show_stack+0x2c/0x54 [ 276.707868][T19748] dump_stack_lvl+0x104/0x16c [ 276.709069][T19748] dump_stack+0x1c/0x58 [ 276.710126][T19748] kmem_cache_create_usercopy+0x268/0x31c [ 276.711547][T19748] p9_client_create+0x618/0x758 [ 276.712762][T19748] v9fs_session_init+0xa4/0x9f0 [ 276.714004][T19748] v9fs_mount+0x6c/0x568 [ 276.715089][T19748] legacy_get_tree+0x30/0x74 [ 276.716259][T19748] vfs_get_tree+0x40/0x140 [ 276.717387][T19748] do_new_mount+0x1dc/0x4e4 [ 276.718527][T19748] path_mount+0x358/0x914 [ 276.719623][T19748] __arm64_sys_mount+0x2c4/0x3c4 [ 276.720863][T19748] el0_svc_common+0x138/0x220 [ 276.722057][T19748] do_el0_svc+0x48/0x164 [ 276.723110][T19748] el0_svc+0x58/0x150 [ 276.724099][T19748] el0t_64_sync_handler+0x84/0xf0 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xe22, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x1100, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 276.725401][T19748] el0t_64_sync+0x18c/0x190 [ 276.733924][T19756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.747508][T19756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x1000000000000, 0x800) 00:04:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 57) [ 276.754674][T19756] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.5'. [ 276.780238][T19756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.788947][T19756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.803598][T19773] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 276.805350][T19773] CPU: 1 PID: 19773 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 276.807890][T19773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 276.810272][T19773] Call trace: [ 276.811049][T19773] dump_backtrace+0x1c4/0x1f0 [ 276.812152][T19773] show_stack+0x2c/0x54 [ 276.813153][T19773] dump_stack_lvl+0x104/0x16c [ 276.814284][T19773] dump_stack+0x1c/0x58 [ 276.815299][T19773] kmem_cache_create_usercopy+0x268/0x31c [ 276.816756][T19773] p9_client_create+0x618/0x758 [ 276.817943][T19773] v9fs_session_init+0xa4/0x9f0 [ 276.819203][T19773] v9fs_mount+0x6c/0x568 [ 276.820254][T19773] legacy_get_tree+0x30/0x74 [ 276.821457][T19773] vfs_get_tree+0x40/0x140 [ 276.822580][T19773] do_new_mount+0x1dc/0x4e4 [ 276.823721][T19773] path_mount+0x358/0x914 [ 276.824772][T19773] __arm64_sys_mount+0x2c4/0x3c4 [ 276.825951][T19773] el0_svc_common+0x138/0x220 [ 276.827110][T19773] do_el0_svc+0x48/0x164 00:04:36 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendto$x25(r2, &(0x7f0000000040)="d7d6", 0x2, 0x0, &(0x7f0000000080), 0x12) 00:04:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x200400, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x200400, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x1200, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 54) 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x20000000000000, 0x800) [ 276.828110][T19773] el0_svc+0x58/0x150 [ 276.829050][T19773] el0t_64_sync_handler+0x84/0xf0 [ 276.830289][T19773] el0t_64_sync+0x18c/0x190 [ 276.850362][T19780] fuse: Bad value for 'fd' 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x100000000000000, 0x800) [ 276.859976][T19782] fuse: Bad value for 'fd' 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x210e, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 276.874421][T19793] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:36 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendto$x25(r2, &(0x7f0000000040)="d7d6", 0x2, 0x0, &(0x7f0000000080), 0x12) [ 276.879680][T19793] CPU: 1 PID: 19793 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 276.882166][T19793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 276.884640][T19793] Call trace: [ 276.885473][T19793] dump_backtrace+0x1c4/0x1f0 [ 276.886609][T19793] show_stack+0x2c/0x54 [ 276.887609][T19793] dump_stack_lvl+0x104/0x16c [ 276.888774][T19793] dump_stack+0x1c/0x58 [ 276.889850][T19793] kmem_cache_create_usercopy+0x268/0x31c [ 276.891304][T19793] p9_client_create+0x618/0x758 [ 276.892526][T19793] v9fs_session_init+0xa4/0x9f0 [ 276.893716][T19793] v9fs_mount+0x6c/0x568 [ 276.894772][T19793] legacy_get_tree+0x30/0x74 [ 276.895934][T19793] vfs_get_tree+0x40/0x140 [ 276.897025][T19793] do_new_mount+0x1dc/0x4e4 [ 276.898132][T19793] path_mount+0x358/0x914 [ 276.899195][T19793] __arm64_sys_mount+0x2c4/0x3c4 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x200000000000000, 0x800) [ 276.900480][T19793] el0_svc_common+0x138/0x220 [ 276.901652][T19793] do_el0_svc+0x48/0x164 [ 276.902688][T19793] el0_svc+0x58/0x150 [ 276.903670][T19793] el0t_64_sync_handler+0x84/0xf0 [ 276.904982][T19793] el0t_64_sync+0x18c/0x190 00:04:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x200400, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x200400, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@measure}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}}) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x220e, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 276.928004][T19801] fuse: Bad value for 'fd' 00:04:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 58) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x2500, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:36 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) sendto$x25(r2, &(0x7f0000000040)="d7d6", 0x2, 0x0, &(0x7f0000000080), 0x12) 00:04:36 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 55) 00:04:36 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x400000000000000, 0x800) 00:04:36 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002380)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000240)=0xe8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1200000, &(0x7f0000002480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x4}}, {@debug={'debug', 0x3d, 0x2}}, {@access_client}, {@uname={'uname', 0x3d, 'rfdno'}}, {@mmap}, {@mmap}, {@cache_mmap}], [{@smackfstransmute}, {@subj_role={'subj_role', 0x3d, 'trans=fd,'}}, {@obj_user={'obj_user', 0x3d, '['}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_eq={'fowner', 0x3d, r5}}]}}) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:36 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x45d94294093aaf4d, 0x0, 0x8}, 0x18) 00:04:36 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x2c02, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x500000000000000, 0x800) 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x2) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002380)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000240)=0xe8) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1200000, &(0x7f0000002480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x4}}, {@debug={'debug', 0x3d, 0x2}}, {@access_client}, {@uname={'uname', 0x3d, 'rfdno'}}, {@mmap}, {@mmap}, {@cache_mmap}], [{@smackfstransmute}, {@subj_role={'subj_role', 0x3d, 'trans=fd,'}}, {@obj_user={'obj_user', 0x3d, '['}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_eq={'fowner', 0x3d, r5}}]}}) (async) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) (async, rerun: 32) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1, 0x6c) (async, rerun: 32) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) [ 277.034396][T19827] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.035672][T19824] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.038297][T19824] CPU: 0 PID: 19824 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.040863][T19824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.043355][T19824] Call trace: [ 277.044173][T19824] dump_backtrace+0x1c4/0x1f0 [ 277.045327][T19824] show_stack+0x2c/0x54 [ 277.046357][T19824] dump_stack_lvl+0x104/0x16c [ 277.047539][T19824] dump_stack+0x1c/0x58 [ 277.048572][T19824] kmem_cache_create_usercopy+0x268/0x31c [ 277.049972][T19824] p9_client_create+0x618/0x758 [ 277.051213][T19824] v9fs_session_init+0xa4/0x9f0 [ 277.052432][T19824] v9fs_mount+0x6c/0x568 [ 277.053529][T19824] legacy_get_tree+0x30/0x74 [ 277.054627][T19824] vfs_get_tree+0x40/0x140 [ 277.055692][T19824] do_new_mount+0x1dc/0x4e4 [ 277.056833][T19824] path_mount+0x358/0x914 [ 277.057872][T19824] __arm64_sys_mount+0x2c4/0x3c4 [ 277.059176][T19824] el0_svc_common+0x138/0x220 [ 277.060384][T19824] do_el0_svc+0x48/0x164 [ 277.061484][T19824] el0_svc+0x58/0x150 [ 277.062455][T19824] el0t_64_sync_handler+0x84/0xf0 [ 277.063640][T19824] el0t_64_sync+0x18c/0x190 [ 277.066704][T19827] CPU: 1 PID: 19827 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.069321][T19827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.071936][T19827] Call trace: [ 277.072798][T19827] dump_backtrace+0x1c4/0x1f0 [ 277.074046][T19827] show_stack+0x2c/0x54 [ 277.075099][T19827] dump_stack_lvl+0x104/0x16c [ 277.076345][T19827] dump_stack+0x1c/0x58 [ 277.077353][T19827] kmem_cache_create_usercopy+0x268/0x31c [ 277.078850][T19827] p9_client_create+0x618/0x758 [ 277.080066][T19827] v9fs_session_init+0xa4/0x9f0 [ 277.081310][T19827] v9fs_mount+0x6c/0x568 [ 277.082371][T19827] legacy_get_tree+0x30/0x74 [ 277.083520][T19827] vfs_get_tree+0x40/0x140 [ 277.084630][T19827] do_new_mount+0x1dc/0x4e4 [ 277.085815][T19827] path_mount+0x358/0x914 [ 277.086866][T19827] __arm64_sys_mount+0x2c4/0x3c4 [ 277.088076][T19827] el0_svc_common+0x138/0x220 [ 277.089182][T19827] do_el0_svc+0x48/0x164 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x3203, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 277.090224][T19827] el0_svc+0x58/0x150 [ 277.091143][T19827] el0t_64_sync_handler+0x84/0xf0 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x45d94294093aaf4d, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x45d94294093aaf4d, 0x0, 0x8}, 0x18) (async) [ 277.092356][T19827] el0t_64_sync+0x18c/0x190 00:04:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 59) 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x2) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002380)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000240)=0xe8) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x1200000, &(0x7f0000002480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}, {@debug={'debug', 0x3d, 0x4}}, {@debug={'debug', 0x3d, 0x2}}, {@access_client}, {@uname={'uname', 0x3d, 'rfdno'}}, {@mmap}, {@mmap}, {@cache_mmap}], [{@smackfstransmute}, {@subj_role={'subj_role', 0x3d, 'trans=fd,'}}, {@obj_user={'obj_user', 0x3d, '['}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_eq={'fowner', 0x3d, r5}}]}}) (async) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1, 0x6c) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x600000000000000, 0x800) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x3c00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x45d94294093aaf4d, 0x0, 0x8}, 0x18) 00:04:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 56) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4800, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 277.186574][T19846] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x700000000000000, 0x800) [ 277.188605][T19846] CPU: 1 PID: 19846 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.191181][T19846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.193644][T19846] Call trace: [ 277.194436][T19846] dump_backtrace+0x1c4/0x1f0 [ 277.195669][T19846] show_stack+0x2c/0x54 [ 277.196691][T19846] dump_stack_lvl+0x104/0x16c [ 277.197897][T19846] dump_stack+0x1c/0x58 00:04:37 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8860, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c66736361a2d5d017139c5b33355599a06afa6530303030303030306261352c66736d616769633d3078303030303030303030303030303436622c6673636f6e7465091e3678743d756e00"/84]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 277.198960][T19846] kmem_cache_create_usercopy+0x268/0x31c [ 277.200408][T19846] p9_client_create+0x618/0x758 [ 277.201615][T19846] v9fs_session_init+0xa4/0x9f0 [ 277.202832][T19846] v9fs_mount+0x6c/0x568 [ 277.203907][T19846] legacy_get_tree+0x30/0x74 [ 277.205085][T19846] vfs_get_tree+0x40/0x140 [ 277.206142][T19846] do_new_mount+0x1dc/0x4e4 [ 277.207226][T19846] path_mount+0x358/0x914 [ 277.208231][T19846] __arm64_sys_mount+0x2c4/0x3c4 [ 277.209410][T19846] el0_svc_common+0x138/0x220 [ 277.210607][T19846] do_el0_svc+0x48/0x164 [ 277.211646][T19846] el0_svc+0x58/0x150 [ 277.212617][T19846] el0t_64_sync_handler+0x84/0xf0 [ 277.213824][T19846] el0t_64_sync+0x18c/0x190 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x10000) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x800000000000000, 0x800) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4b03, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 277.257440][T19868] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.259952][T19868] CPU: 0 PID: 19868 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.262740][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.265316][T19868] Call trace: [ 277.266140][T19868] dump_backtrace+0x1c4/0x1f0 [ 277.267436][T19868] show_stack+0x2c/0x54 [ 277.268468][T19868] dump_stack_lvl+0x104/0x16c [ 277.269650][T19868] dump_stack+0x1c/0x58 [ 277.270709][T19868] kmem_cache_create_usercopy+0x268/0x31c [ 277.272217][T19868] p9_client_create+0x618/0x758 [ 277.273427][T19868] v9fs_session_init+0xa4/0x9f0 [ 277.274648][T19868] v9fs_mount+0x6c/0x568 [ 277.275692][T19868] legacy_get_tree+0x30/0x74 [ 277.276904][T19868] vfs_get_tree+0x40/0x140 [ 277.277985][T19868] do_new_mount+0x1dc/0x4e4 [ 277.279155][T19868] path_mount+0x358/0x914 [ 277.280235][T19868] __arm64_sys_mount+0x2c4/0x3c4 [ 277.281474][T19868] el0_svc_common+0x138/0x220 [ 277.282632][T19868] do_el0_svc+0x48/0x164 [ 277.283709][T19868] el0_svc+0x58/0x150 [ 277.284800][T19868] el0t_64_sync_handler+0x84/0xf0 [ 277.286133][T19868] el0t_64_sync+0x18c/0x190 00:04:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 60) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x1000000000000000, 0x800) 00:04:37 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8860, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c66736361a2d5d017139c5b33355599a06afa6530303030303030306261352c66736d616769633d3078303030303030303030303030303436622c6673636f6e7465091e3678743d756e00"/84]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8860, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c66736361a2d5d017139c5b33355599a06afa6530303030303030306261352c66736d616769633d3078303030303030303030303030303436622c6673636f6e7465091e3678743d756e00"/84]) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4c00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 57) 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x10000) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x1100000000000000, 0x800) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x5001, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 277.352161][T19878] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.354228][T19878] CPU: 1 PID: 19878 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 00:04:37 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8860, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c66736361a2d5d017139c5b33355599a06afa6530303030303030306261352c66736d616769633d3078303030303030303030303030303436622c6673636f6e7465091e3678743d756e00"/84]) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 277.356697][T19878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.359174][T19878] Call trace: [ 277.359952][T19878] dump_backtrace+0x1c4/0x1f0 [ 277.361103][T19878] show_stack+0x2c/0x54 [ 277.362166][T19878] dump_stack_lvl+0x104/0x16c [ 277.363350][T19878] dump_stack+0x1c/0x58 [ 277.364420][T19878] kmem_cache_create_usercopy+0x268/0x31c [ 277.365865][T19878] p9_client_create+0x618/0x758 [ 277.367106][T19878] v9fs_session_init+0xa4/0x9f0 [ 277.368295][T19878] v9fs_mount+0x6c/0x568 [ 277.369362][T19878] legacy_get_tree+0x30/0x74 [ 277.370558][T19878] vfs_get_tree+0x40/0x140 [ 277.371797][T19878] do_new_mount+0x1dc/0x4e4 [ 277.372984][T19878] path_mount+0x358/0x914 [ 277.374121][T19878] __arm64_sys_mount+0x2c4/0x3c4 [ 277.375425][T19878] el0_svc_common+0x138/0x220 [ 277.376594][T19878] do_el0_svc+0x48/0x164 [ 277.377643][T19878] el0_svc+0x58/0x150 [ 277.378676][T19878] el0t_64_sync_handler+0x84/0xf0 [ 277.379944][T19878] el0t_64_sync+0x18c/0x190 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x10000) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x90) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) pipe2(&(0x7f00000000c0), 0x10000) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0], 0x90) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) (async) [ 277.398402][T19893] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x6800, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 277.415943][T19893] CPU: 0 PID: 19893 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.418537][T19893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.421120][T19893] Call trace: [ 277.421954][T19893] dump_backtrace+0x1c4/0x1f0 [ 277.423114][T19893] show_stack+0x2c/0x54 [ 277.424274][T19893] dump_stack_lvl+0x104/0x16c [ 277.425633][T19893] dump_stack+0x1c/0x58 [ 277.426787][T19893] kmem_cache_create_usercopy+0x268/0x31c [ 277.428306][T19893] p9_client_create+0x618/0x758 [ 277.429438][T19893] v9fs_session_init+0xa4/0x9f0 [ 277.430576][T19893] v9fs_mount+0x6c/0x568 [ 277.431563][T19893] legacy_get_tree+0x30/0x74 [ 277.432758][T19893] vfs_get_tree+0x40/0x140 [ 277.433888][T19893] do_new_mount+0x1dc/0x4e4 [ 277.434971][T19893] path_mount+0x358/0x914 [ 277.436186][T19893] __arm64_sys_mount+0x2c4/0x3c4 [ 277.437485][T19893] el0_svc_common+0x138/0x220 [ 277.438679][T19893] do_el0_svc+0x48/0x164 [ 277.439845][T19893] el0_svc+0x58/0x150 [ 277.440878][T19893] el0t_64_sync_handler+0x84/0xf0 [ 277.442163][T19893] el0t_64_sync+0x18c/0x190 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x6c00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 61) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x2200000000000000, 0x800) 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x15735f8, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x840) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 58) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7400, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="15003230302e4c00"], 0x15) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4af6}}, './file1\x00'}) getpeername$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) [ 277.532169][T19917] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.534801][T19917] CPU: 1 PID: 19917 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.537410][T19917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.539932][T19917] Call trace: [ 277.540749][T19917] dump_backtrace+0x1c4/0x1f0 [ 277.541999][T19917] show_stack+0x2c/0x54 [ 277.543076][T19917] dump_stack_lvl+0x104/0x16c [ 277.544291][T19917] dump_stack+0x1c/0x58 [ 277.545286][T19917] kmem_cache_create_usercopy+0x268/0x31c [ 277.546710][T19917] p9_client_create+0x618/0x758 [ 277.547970][T19917] v9fs_session_init+0xa4/0x9f0 [ 277.549242][T19917] v9fs_mount+0x6c/0x568 [ 277.550348][T19917] legacy_get_tree+0x30/0x74 [ 277.551545][T19917] vfs_get_tree+0x40/0x140 [ 277.552681][T19917] do_new_mount+0x1dc/0x4e4 [ 277.553847][T19917] path_mount+0x358/0x914 [ 277.554959][T19917] __arm64_sys_mount+0x2c4/0x3c4 [ 277.556197][T19917] el0_svc_common+0x138/0x220 [ 277.557392][T19917] do_el0_svc+0x48/0x164 [ 277.558495][T19917] el0_svc+0x58/0x150 [ 277.559617][T19917] el0t_64_sync_handler+0x84/0xf0 [ 277.560897][T19917] el0t_64_sync+0x18c/0x190 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x3000000000000000, 0x800) 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x15735f8, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x840) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 277.585103][T19922] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="15003230302e4c00"], 0x15) (async, rerun: 32) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4af6}}, './file1\x00'}) getpeername$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) [ 277.587071][T19922] CPU: 0 PID: 19922 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.589529][T19922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.592228][T19922] Call trace: [ 277.593022][T19922] dump_backtrace+0x1c4/0x1f0 [ 277.594213][T19922] show_stack+0x2c/0x54 [ 277.595275][T19922] dump_stack_lvl+0x104/0x16c [ 277.596498][T19922] dump_stack+0x1c/0x58 [ 277.597604][T19922] kmem_cache_create_usercopy+0x268/0x31c [ 277.599100][T19922] p9_client_create+0x618/0x758 [ 277.600357][T19922] v9fs_session_init+0xa4/0x9f0 [ 277.601603][T19922] v9fs_mount+0x6c/0x568 [ 277.602719][T19922] legacy_get_tree+0x30/0x74 [ 277.603898][T19922] vfs_get_tree+0x40/0x140 [ 277.605041][T19922] do_new_mount+0x1dc/0x4e4 [ 277.606190][T19922] path_mount+0x358/0x914 [ 277.607330][T19922] __arm64_sys_mount+0x2c4/0x3c4 [ 277.608648][T19922] el0_svc_common+0x138/0x220 [ 277.609821][T19922] do_el0_svc+0x48/0x164 [ 277.610890][T19922] el0_svc+0x58/0x150 [ 277.611943][T19922] el0t_64_sync_handler+0x84/0xf0 [ 277.613474][T19922] el0t_64_sync+0x18c/0x190 00:04:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 59) 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x15735f8, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x840) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7a00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 277.658523][T19938] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.660599][T19938] CPU: 0 PID: 19938 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.663081][T19938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.665596][T19938] Call trace: [ 277.666451][T19938] dump_backtrace+0x1c4/0x1f0 [ 277.667604][T19938] show_stack+0x2c/0x54 [ 277.668669][T19938] dump_stack_lvl+0x104/0x16c [ 277.669837][T19938] dump_stack+0x1c/0x58 [ 277.670911][T19938] kmem_cache_create_usercopy+0x268/0x31c [ 277.672343][T19938] p9_client_create+0x618/0x758 [ 277.673481][T19938] v9fs_session_init+0xa4/0x9f0 [ 277.674707][T19938] v9fs_mount+0x6c/0x568 [ 277.675760][T19938] legacy_get_tree+0x30/0x74 [ 277.676903][T19938] vfs_get_tree+0x40/0x140 [ 277.677971][T19938] do_new_mount+0x1dc/0x4e4 [ 277.679066][T19938] path_mount+0x358/0x914 [ 277.680057][T19938] __arm64_sys_mount+0x2c4/0x3c4 [ 277.681301][T19938] el0_svc_common+0x138/0x220 [ 277.682506][T19938] do_el0_svc+0x48/0x164 [ 277.683561][T19938] el0_svc+0x58/0x150 [ 277.684586][T19938] el0t_64_sync_handler+0x84/0xf0 [ 277.685851][T19938] el0t_64_sync+0x18c/0x190 00:04:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 62) 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="15003230302e4c00"], 0x15) (async) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4af6}}, './file1\x00'}) getpeername$unix(r2, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x31f5ffff00000000, 0x800) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7c00, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x128, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:37 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x128, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 60) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x8800, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0xfcff3f1f00000000, 0x800) [ 277.755478][T19954] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.762072][T19954] CPU: 1 PID: 19954 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.764739][T19954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.767302][T19954] Call trace: [ 277.768073][T19954] dump_backtrace+0x1c4/0x1f0 [ 277.769165][T19954] show_stack+0x2c/0x54 [ 277.770137][T19954] dump_stack_lvl+0x104/0x16c [ 277.771247][T19954] dump_stack+0x1c/0x58 [ 277.771584][T19960] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 277.772252][T19954] kmem_cache_create_usercopy+0x268/0x31c [ 277.772267][T19954] p9_client_create+0x618/0x758 [ 277.772276][T19954] v9fs_session_init+0xa4/0x9f0 [ 277.778032][T19954] v9fs_mount+0x6c/0x568 [ 277.779028][T19954] legacy_get_tree+0x30/0x74 [ 277.780106][T19954] vfs_get_tree+0x40/0x140 [ 277.781160][T19954] do_new_mount+0x1dc/0x4e4 [ 277.782230][T19954] path_mount+0x358/0x914 [ 277.783362][T19954] __arm64_sys_mount+0x2c4/0x3c4 [ 277.784537][T19954] el0_svc_common+0x138/0x220 [ 277.785627][T19954] do_el0_svc+0x48/0x164 [ 277.786652][T19954] el0_svc+0x58/0x150 [ 277.787580][T19954] el0t_64_sync_handler+0x84/0xf0 [ 277.788862][T19954] el0t_64_sync+0x18c/0x190 [ 277.789964][T19960] CPU: 0 PID: 19960 Comm: syz-executor.4 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 277.792712][T19960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 277.795278][T19960] Call trace: [ 277.796114][T19960] dump_backtrace+0x1c4/0x1f0 [ 277.797369][T19960] show_stack+0x2c/0x54 [ 277.798425][T19960] dump_stack_lvl+0x104/0x16c [ 277.799619][T19960] dump_stack+0x1c/0x58 [ 277.800624][T19960] kmem_cache_create_usercopy+0x268/0x31c [ 277.801927][T19960] p9_client_create+0x618/0x758 [ 277.803167][T19960] v9fs_session_init+0xa4/0x9f0 [ 277.804409][T19960] v9fs_mount+0x6c/0x568 [ 277.805459][T19960] legacy_get_tree+0x30/0x74 [ 277.806604][T19960] vfs_get_tree+0x40/0x140 [ 277.807734][T19960] do_new_mount+0x1dc/0x4e4 [ 277.808852][T19960] path_mount+0x358/0x914 [ 277.809909][T19960] __arm64_sys_mount+0x2c4/0x3c4 [ 277.811167][T19960] el0_svc_common+0x138/0x220 [ 277.812323][T19960] do_el0_svc+0x48/0x164 [ 277.813364][T19960] el0_svc+0x58/0x150 [ 277.814319][T19960] el0t_64_sync_handler+0x84/0xf0 [ 277.815545][T19960] el0t_64_sync+0x18c/0x190 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x8a03, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x128, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x128, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0xfff7ffff00000000, 0x800) 00:04:37 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 63) 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x9800, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000002900)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cabd7977e5504eb1e8818b143bd7835a0a7c52898a3c6dbfb28915da6cb63bf2b6789452fcdc1d309a88ac6f21a9380313f4ab12b20a54fcd4f179f56e8da17aba5a8a428b77f04af34fce4368ff1d31a902359f571c95d4e668cf4e2866076eb00a64b0f9b549c9ed09029146380afbd82a4e36ac65c28df8b5cbab915f2ef41ba9e69028401c13278215134933a7e5e8ced271d7113b6f023fcb950b4a88cf6ab3b63ba706b5b64abbe10bc3da511fe32ab8bce0eebce53dc36e002e06317520b0c45209038fb20759796ef70dcd738d89e194b9ddd22"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r5, 0x0) r6 = getegid() r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0x0) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000200)) statx(r2, &(0x7f0000000240)='./file0\x00', 0x2000, 0x40, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() write$FUSE_DIRENTPLUS(r3, &(0x7f0000002480)={0x470, 0x0, 0x0, [{{0x5, 0x0, 0x9, 0x2, 0x40, 0xfffffc00, {0x5, 0x2, 0x3, 0x7fffffff, 0x3, 0x40000000000, 0x7, 0xffff3fa6, 0x2, 0x4000, 0x1, 0xee01, 0xffffffffffffffff, 0x5, 0x8000}}, {0x5, 0x2, 0x5, 0x0, 'wfdno'}}, {{0x4, 0x0, 0x1, 0x7, 0x7, 0xcd56, {0x6, 0x56a2, 0xffffffff, 0x8, 0x8, 0xe25d, 0x7011, 0x7, 0x0, 0x4000, 0xffffce24, 0xee01, 0x0, 0x3ff, 0x3fc5d84}}, {0x2, 0x2, 0x5, 0x80000001, 'rfdno'}}, {{0x2, 0x2, 0x4, 0x6, 0x6, 0x1, {0x1, 0x3ff, 0x2, 0x200, 0x2, 0x4, 0x80000001, 0x9, 0xeb65, 0x2000, 0x10000, 0xee01, 0x0, 0x4, 0x1}}, {0x4, 0x401, 0x3, 0xfff, ':^#'}}, {{0x2, 0x1, 0x800, 0x9, 0x5, 0x599, {0x5, 0x6, 0x3282, 0x4, 0x8, 0x4, 0xb752, 0x4, 0x0, 0x8000, 0x10001, 0xffffffffffffffff, r5, 0x3ff, 0x10000}}, {0x4, 0x1, 0x1, 0x1, '{'}}, {{0x0, 0x2, 0x100000001, 0x7, 0x100, 0x7, {0x5, 0x3f, 0x2, 0xe71, 0x3, 0x9, 0x1, 0x101, 0xed4, 0xa000, 0x200, 0xee01, r6, 0x9, 0x35a}}, {0x0, 0x5, 0x2, 0x6, '-\xae'}}, {{0x5, 0x3, 0xff, 0x2a4, 0x7, 0xfffffffb, {0x3, 0x8, 0x8, 0x9, 0x4, 0x8001, 0xfffffffa, 0xffffffff, 0x4, 0x6000, 0x3, r8, r9, 0xbb2f}}, {0x4, 0x4, 0x3, 0x800, '9p\x00'}}, {{0x0, 0x0, 0x3f, 0x6, 0x40, 0x2, {0x5, 0xe2f, 0x2, 0xf74, 0x0, 0x80, 0x8001, 0x3, 0xe7, 0x3000, 0x0, r10, r11, 0x7, 0xfffffffd}}, {0x4, 0x3, 0x2, 0x15561f51, ']:'}}]}, 0x470) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0xffffffff00000000, 0x800) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xcc01, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 61) 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async, rerun: 64) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (rerun: 64) 00:04:37 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000002900)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cabd7977e5504eb1e8818b143bd7835a0a7c52898a3c6dbfb28915da6cb63bf2b6789452fcdc1d309a88ac6f21a9380313f4ab12b20a54fcd4f179f56e8da17aba5a8a428b77f04af34fce4368ff1d31a902359f571c95d4e668cf4e2866076eb00a64b0f9b549c9ed09029146380afbd82a4e36ac65c28df8b5cbab915f2ef41ba9e69028401c13278215134933a7e5e8ced271d7113b6f023fcb950b4a88cf6ab3b63ba706b5b64abbe10bc3da511fe32ab8bce0eebce53dc36e002e06317520b0c45209038fb20759796ef70dcd738d89e194b9ddd22"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r5, 0x0) r6 = getegid() r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0x0) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000200)) statx(r2, &(0x7f0000000240)='./file0\x00', 0x2000, 0x40, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() write$FUSE_DIRENTPLUS(r3, &(0x7f0000002480)={0x470, 0x0, 0x0, [{{0x5, 0x0, 0x9, 0x2, 0x40, 0xfffffc00, {0x5, 0x2, 0x3, 0x7fffffff, 0x3, 0x40000000000, 0x7, 0xffff3fa6, 0x2, 0x4000, 0x1, 0xee01, 0xffffffffffffffff, 0x5, 0x8000}}, {0x5, 0x2, 0x5, 0x0, 'wfdno'}}, {{0x4, 0x0, 0x1, 0x7, 0x7, 0xcd56, {0x6, 0x56a2, 0xffffffff, 0x8, 0x8, 0xe25d, 0x7011, 0x7, 0x0, 0x4000, 0xffffce24, 0xee01, 0x0, 0x3ff, 0x3fc5d84}}, {0x2, 0x2, 0x5, 0x80000001, 'rfdno'}}, {{0x2, 0x2, 0x4, 0x6, 0x6, 0x1, {0x1, 0x3ff, 0x2, 0x200, 0x2, 0x4, 0x80000001, 0x9, 0xeb65, 0x2000, 0x10000, 0xee01, 0x0, 0x4, 0x1}}, {0x4, 0x401, 0x3, 0xfff, ':^#'}}, {{0x2, 0x1, 0x800, 0x9, 0x5, 0x599, {0x5, 0x6, 0x3282, 0x4, 0x8, 0x4, 0xb752, 0x4, 0x0, 0x8000, 0x10001, 0xffffffffffffffff, r5, 0x3ff, 0x10000}}, {0x4, 0x1, 0x1, 0x1, '{'}}, {{0x0, 0x2, 0x100000001, 0x7, 0x100, 0x7, {0x5, 0x3f, 0x2, 0xe71, 0x3, 0x9, 0x1, 0x101, 0xed4, 0xa000, 0x200, 0xee01, r6, 0x9, 0x35a}}, {0x0, 0x5, 0x2, 0x6, '-\xae'}}, {{0x5, 0x3, 0xff, 0x2a4, 0x7, 0xfffffffb, {0x3, 0x8, 0x8, 0x9, 0x4, 0x8001, 0xfffffffa, 0xffffffff, 0x4, 0x6000, 0x3, r8, r9, 0xbb2f}}, {0x4, 0x4, 0x3, 0x800, '9p\x00'}}, {{0x0, 0x0, 0x3f, 0x6, 0x40, 0x2, {0x5, 0xe2f, 0x2, 0xf74, 0x0, 0x80, 0x8001, 0x3, 0xe7, 0x3000, 0x0, r10, r11, 0x7, 0xfffffffd}}, {0x4, 0x3, 0x2, 0x15561f51, ']:'}}]}, 0x470) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000002900)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cabd7977e5504eb1e8818b143bd7835a0a7c52898a3c6dbfb28915da6cb63bf2b6789452fcdc1d309a88ac6f21a9380313f4ab12b20a54fcd4f179f56e8da17aba5a8a428b77f04af34fce4368ff1d31a902359f571c95d4e668cf4e2866076eb00a64b0f9b549c9ed09029146380afbd82a4e36ac65c28df8b5cbab915f2ef41ba9e69028401c13278215134933a7e5e8ced271d7113b6f023fcb950b4a88cf6ab3b63ba706b5b64abbe10bc3da511fe32ab8bce0eebce53dc36e002e06317520b0c45209038fb20759796ef70dcd738d89e194b9ddd22"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r5, 0x0) (async) getegid() (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setresuid(0x0, r8, 0x0) (async) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200)) (async) statx(r2, &(0x7f0000000240)='./file0\x00', 0x2000, 0x40, &(0x7f0000002380)) (async) getgid() (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002480)={0x470, 0x0, 0x0, [{{0x5, 0x0, 0x9, 0x2, 0x40, 0xfffffc00, {0x5, 0x2, 0x3, 0x7fffffff, 0x3, 0x40000000000, 0x7, 0xffff3fa6, 0x2, 0x4000, 0x1, 0xee01, 0xffffffffffffffff, 0x5, 0x8000}}, {0x5, 0x2, 0x5, 0x0, 'wfdno'}}, {{0x4, 0x0, 0x1, 0x7, 0x7, 0xcd56, {0x6, 0x56a2, 0xffffffff, 0x8, 0x8, 0xe25d, 0x7011, 0x7, 0x0, 0x4000, 0xffffce24, 0xee01, 0x0, 0x3ff, 0x3fc5d84}}, {0x2, 0x2, 0x5, 0x80000001, 'rfdno'}}, {{0x2, 0x2, 0x4, 0x6, 0x6, 0x1, {0x1, 0x3ff, 0x2, 0x200, 0x2, 0x4, 0x80000001, 0x9, 0xeb65, 0x2000, 0x10000, 0xee01, 0x0, 0x4, 0x1}}, {0x4, 0x401, 0x3, 0xfff, ':^#'}}, {{0x2, 0x1, 0x800, 0x9, 0x5, 0x599, {0x5, 0x6, 0x3282, 0x4, 0x8, 0x4, 0xb752, 0x4, 0x0, 0x8000, 0x10001, 0xffffffffffffffff, r5, 0x3ff, 0x10000}}, {0x4, 0x1, 0x1, 0x1, '{'}}, {{0x0, 0x2, 0x100000001, 0x7, 0x100, 0x7, {0x5, 0x3f, 0x2, 0xe71, 0x3, 0x9, 0x1, 0x101, 0xed4, 0xa000, 0x200, 0xee01, r6, 0x9, 0x35a}}, {0x0, 0x5, 0x2, 0x6, '-\xae'}}, {{0x5, 0x3, 0xff, 0x2a4, 0x7, 0xfffffffb, {0x3, 0x8, 0x8, 0x9, 0x4, 0x8001, 0xfffffffa, 0xffffffff, 0x4, 0x6000, 0x3, r8, r9, 0xbb2f}}, {0x4, 0x4, 0x3, 0x800, '9p\x00'}}, {{0x0, 0x0, 0x3f, 0x6, 0x40, 0x2, {0x5, 0xe2f, 0x2, 0xf74, 0x0, 0x80, 0x8001, 0x3, 0xe7, 0x3000, 0x0, r10, r11, 0x7, 0xfffffffd}}, {0x4, 0x3, 0x2, 0x15561f51, ']:'}}]}, 0x470) (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:37 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) connect$x25(r0, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) 00:04:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xf602, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:37 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x802) [ 278.000046][T20011] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 278.002087][T20011] CPU: 0 PID: 20011 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 278.004726][T20011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 278.007273][T20011] Call trace: [ 278.008049][T20011] dump_backtrace+0x1c4/0x1f0 [ 278.009199][T20011] show_stack+0x2c/0x54 [ 278.010276][T20011] dump_stack_lvl+0x104/0x16c [ 278.011453][T20011] dump_stack+0x1c/0x58 [ 278.012499][T20011] kmem_cache_create_usercopy+0x268/0x31c [ 278.013982][T20011] p9_client_create+0x618/0x758 [ 278.015217][T20011] v9fs_session_init+0xa4/0x9f0 [ 278.016411][T20011] v9fs_mount+0x6c/0x568 [ 278.017482][T20011] legacy_get_tree+0x30/0x74 [ 278.018652][T20011] vfs_get_tree+0x40/0x140 [ 278.019786][T20011] do_new_mount+0x1dc/0x4e4 [ 278.020886][T20011] path_mount+0x358/0x914 [ 278.021921][T20011] __arm64_sys_mount+0x2c4/0x3c4 [ 278.023120][T20011] el0_svc_common+0x138/0x220 [ 278.024294][T20011] do_el0_svc+0x48/0x164 [ 278.025395][T20011] el0_svc+0x58/0x150 [ 278.026368][T20011] el0t_64_sync_handler+0x84/0xf0 [ 278.027625][T20011] el0t_64_sync+0x18c/0x190 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 64) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x804) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x8580, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x144, 0x1e}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x5, "8fdc977e0b"}, &(0x7f00000000c0)=0xd) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000002900)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cabd7977e5504eb1e8818b143bd7835a0a7c52898a3c6dbfb28915da6cb63bf2b6789452fcdc1d309a88ac6f21a9380313f4ab12b20a54fcd4f179f56e8da17aba5a8a428b77f04af34fce4368ff1d31a902359f571c95d4e668cf4e2866076eb00a64b0f9b549c9ed09029146380afbd82a4e36ac65c28df8b5cbab915f2ef41ba9e69028401c13278215134933a7e5e8ced271d7113b6f023fcb950b4a88cf6ab3b63ba706b5b64abbe10bc3da511fe32ab8bce0eebce53dc36e002e06317520b0c45209038fb20759796ef70dcd738d89e194b9ddd22"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r5, 0x0) r6 = getegid() r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r8, 0x0) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000200)) statx(r2, &(0x7f0000000240)='./file0\x00', 0x2000, 0x40, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() write$FUSE_DIRENTPLUS(r3, &(0x7f0000002480)={0x470, 0x0, 0x0, [{{0x5, 0x0, 0x9, 0x2, 0x40, 0xfffffc00, {0x5, 0x2, 0x3, 0x7fffffff, 0x3, 0x40000000000, 0x7, 0xffff3fa6, 0x2, 0x4000, 0x1, 0xee01, 0xffffffffffffffff, 0x5, 0x8000}}, {0x5, 0x2, 0x5, 0x0, 'wfdno'}}, {{0x4, 0x0, 0x1, 0x7, 0x7, 0xcd56, {0x6, 0x56a2, 0xffffffff, 0x8, 0x8, 0xe25d, 0x7011, 0x7, 0x0, 0x4000, 0xffffce24, 0xee01, 0x0, 0x3ff, 0x3fc5d84}}, {0x2, 0x2, 0x5, 0x80000001, 'rfdno'}}, {{0x2, 0x2, 0x4, 0x6, 0x6, 0x1, {0x1, 0x3ff, 0x2, 0x200, 0x2, 0x4, 0x80000001, 0x9, 0xeb65, 0x2000, 0x10000, 0xee01, 0x0, 0x4, 0x1}}, {0x4, 0x401, 0x3, 0xfff, ':^#'}}, {{0x2, 0x1, 0x800, 0x9, 0x5, 0x599, {0x5, 0x6, 0x3282, 0x4, 0x8, 0x4, 0xb752, 0x4, 0x0, 0x8000, 0x10001, 0xffffffffffffffff, r5, 0x3ff, 0x10000}}, {0x4, 0x1, 0x1, 0x1, '{'}}, {{0x0, 0x2, 0x100000001, 0x7, 0x100, 0x7, {0x5, 0x3f, 0x2, 0xe71, 0x3, 0x9, 0x1, 0x101, 0xed4, 0xa000, 0x200, 0xee01, r6, 0x9, 0x35a}}, {0x0, 0x5, 0x2, 0x6, '-\xae'}}, {{0x5, 0x3, 0xff, 0x2a4, 0x7, 0xfffffffb, {0x3, 0x8, 0x8, 0x9, 0x4, 0x8001, 0xfffffffa, 0xffffffff, 0x4, 0x6000, 0x3, r8, r9, 0xbb2f}}, {0x4, 0x4, 0x3, 0x800, '9p\x00'}}, {{0x0, 0x0, 0x3f, 0x6, 0x40, 0x2, {0x5, 0xe2f, 0x2, 0xf74, 0x0, 0x80, 0x8001, 0x3, 0xe7, 0x3000, 0x0, r10, r11, 0x7, 0xfffffffd}}, {0x4, 0x3, 0x2, 0x15561f51, ']:'}}]}, 0x470) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000002900)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cabd7977e5504eb1e8818b143bd7835a0a7c52898a3c6dbfb28915da6cb63bf2b6789452fcdc1d309a88ac6f21a9380313f4ab12b20a54fcd4f179f56e8da17aba5a8a428b77f04af34fce4368ff1d31a902359f571c95d4e668cf4e2866076eb00a64b0f9b549c9ed09029146380afbd82a4e36ac65c28df8b5cbab915f2ef41ba9e69028401c13278215134933a7e5e8ced271d7113b6f023fcb950b4a88cf6ab3b63ba706b5b64abbe10bc3da511fe32ab8bce0eebce53dc36e002e06317520b0c45209038fb20759796ef70dcd738d89e194b9ddd22"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r5, 0x0) (async) getegid() (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setresuid(0x0, r8, 0x0) (async) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200)) (async) statx(r2, &(0x7f0000000240)='./file0\x00', 0x2000, 0x40, &(0x7f0000002380)) (async) getgid() (async) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002480)={0x470, 0x0, 0x0, [{{0x5, 0x0, 0x9, 0x2, 0x40, 0xfffffc00, {0x5, 0x2, 0x3, 0x7fffffff, 0x3, 0x40000000000, 0x7, 0xffff3fa6, 0x2, 0x4000, 0x1, 0xee01, 0xffffffffffffffff, 0x5, 0x8000}}, {0x5, 0x2, 0x5, 0x0, 'wfdno'}}, {{0x4, 0x0, 0x1, 0x7, 0x7, 0xcd56, {0x6, 0x56a2, 0xffffffff, 0x8, 0x8, 0xe25d, 0x7011, 0x7, 0x0, 0x4000, 0xffffce24, 0xee01, 0x0, 0x3ff, 0x3fc5d84}}, {0x2, 0x2, 0x5, 0x80000001, 'rfdno'}}, {{0x2, 0x2, 0x4, 0x6, 0x6, 0x1, {0x1, 0x3ff, 0x2, 0x200, 0x2, 0x4, 0x80000001, 0x9, 0xeb65, 0x2000, 0x10000, 0xee01, 0x0, 0x4, 0x1}}, {0x4, 0x401, 0x3, 0xfff, ':^#'}}, {{0x2, 0x1, 0x800, 0x9, 0x5, 0x599, {0x5, 0x6, 0x3282, 0x4, 0x8, 0x4, 0xb752, 0x4, 0x0, 0x8000, 0x10001, 0xffffffffffffffff, r5, 0x3ff, 0x10000}}, {0x4, 0x1, 0x1, 0x1, '{'}}, {{0x0, 0x2, 0x100000001, 0x7, 0x100, 0x7, {0x5, 0x3f, 0x2, 0xe71, 0x3, 0x9, 0x1, 0x101, 0xed4, 0xa000, 0x200, 0xee01, r6, 0x9, 0x35a}}, {0x0, 0x5, 0x2, 0x6, '-\xae'}}, {{0x5, 0x3, 0xff, 0x2a4, 0x7, 0xfffffffb, {0x3, 0x8, 0x8, 0x9, 0x4, 0x8001, 0xfffffffa, 0xffffffff, 0x4, 0x6000, 0x3, r8, r9, 0xbb2f}}, {0x4, 0x4, 0x3, 0x800, '9p\x00'}}, {{0x0, 0x0, 0x3f, 0x6, 0x40, 0x2, {0x5, 0xe2f, 0x2, 0xf74, 0x0, 0x80, 0x8001, 0x3, 0xe7, 0x3000, 0x0, r10, r11, 0x7, 0xfffffffd}}, {0x4, 0x3, 0x2, 0x15561f51, ']:'}}]}, 0x470) (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x40000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 62) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x805) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x8580, 0x0) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x144, 0x1e}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x5, "8fdc977e0b"}, &(0x7f00000000c0)=0xd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x8580, 0x0) (async) openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x144, 0x1e}, 0x18) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x5, "8fdc977e0b"}, &(0x7f00000000c0)=0xd) (async) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 65) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xe0ffff, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 278.097420][T20041] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 278.099495][T20041] CPU: 1 PID: 20041 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 278.101944][T20041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 278.104465][T20041] Call trace: [ 278.105271][T20041] dump_backtrace+0x1c4/0x1f0 [ 278.106485][T20041] show_stack+0x2c/0x54 [ 278.107518][T20041] dump_stack_lvl+0x104/0x16c [ 278.108664][T20041] dump_stack+0x1c/0x58 [ 278.109678][T20041] kmem_cache_create_usercopy+0x268/0x31c [ 278.111119][T20041] p9_client_create+0x618/0x758 [ 278.112362][T20041] v9fs_session_init+0xa4/0x9f0 [ 278.113564][T20041] v9fs_mount+0x6c/0x568 [ 278.114594][T20041] legacy_get_tree+0x30/0x74 [ 278.115709][T20041] vfs_get_tree+0x40/0x140 [ 278.116778][T20041] do_new_mount+0x1dc/0x4e4 [ 278.117938][T20041] path_mount+0x358/0x914 [ 278.119007][T20041] __arm64_sys_mount+0x2c4/0x3c4 [ 278.120278][T20041] el0_svc_common+0x138/0x220 [ 278.121461][T20041] do_el0_svc+0x48/0x164 [ 278.122518][T20041] el0_svc+0x58/0x150 [ 278.123550][T20041] el0t_64_sync_handler+0x84/0xf0 [ 278.124817][T20041] el0t_64_sync+0x18c/0x190 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x806) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 66) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x1000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x40000, &(0x7f0000000240)='\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x8580, 0x0) (async) r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000a80)={0x0, 0x144, 0x1e}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x5, "8fdc977e0b"}, &(0x7f00000000c0)=0xd) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x2000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x807) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 63) 00:04:38 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x1, 0x1, 0x7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x3000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 67) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x808) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x40000, &(0x7f0000000240)='\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x40000, &(0x7f0000000240)='\x00') (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) [ 278.232805][T20075] xt_TCPMSS: Only works on TCP SYN packets 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x810) 00:04:38 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x1, 0x1, 0x7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 68) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x5000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 64) [ 278.298237][T20096] xt_TCPMSS: Only works on TCP SYN packets 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x40000, &(0x7f0000000240)='\x00') (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x811) 00:04:38 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x1, 0x1, 0x7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 69) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x6000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 278.344809][T20101] kmem_cache_create_usercopy(9p-fcall-cache) failed with error -12 [ 278.346871][T20101] CPU: 0 PID: 20101 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 278.349550][T20101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 278.352154][T20101] Call trace: [ 278.352957][T20101] dump_backtrace+0x1c4/0x1f0 [ 278.354121][T20101] show_stack+0x2c/0x54 [ 278.355136][T20101] dump_stack_lvl+0x104/0x16c [ 278.356292][T20101] dump_stack+0x1c/0x58 [ 278.357328][T20101] kmem_cache_create_usercopy+0x268/0x31c [ 278.358880][T20101] p9_client_create+0x618/0x758 [ 278.360132][T20101] v9fs_session_init+0xa4/0x9f0 [ 278.361378][T20101] v9fs_mount+0x6c/0x568 [ 278.362474][T20101] legacy_get_tree+0x30/0x74 [ 278.363621][T20101] vfs_get_tree+0x40/0x140 [ 278.364731][T20101] do_new_mount+0x1dc/0x4e4 [ 278.365847][T20101] path_mount+0x358/0x914 [ 278.366961][T20101] __arm64_sys_mount+0x2c4/0x3c4 [ 278.368206][T20101] el0_svc_common+0x138/0x220 [ 278.369374][T20101] do_el0_svc+0x48/0x164 [ 278.370462][T20101] el0_svc+0x58/0x150 [ 278.371443][T20101] el0t_64_sync_handler+0x84/0xf0 [ 278.372686][T20101] el0t_64_sync+0x18c/0x190 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback, 0x0}, &(0x7f0000000080)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r4], 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x38c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2381}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x38c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 278.387960][T20116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x8000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="170c00008003000000302e4c0000000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="a8c54dddadb353810e8ef666ef4dba012680960137aebd7fa3694db5ea7eaca4a11876d2e8944bf7ff65bcf1b596bbe2d78019ff64d0070e9aa9845d43947fe1b755c9a3a65f99f57d3771dfb12e5e5a5de1876ee23bf377719602393f53c006db52ae036e000000000000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x24, 0x7ff, 0x800, 0x8000, 0x0, 0x9, 0x10000000}}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x822) [ 278.425346][T20116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 70) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 65) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x9000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x830) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback, 0x0}, &(0x7f0000000080)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r4], 0x44}}, 0x0) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r8], 0x44}}, 0x0) (async, rerun: 64) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x38c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2381}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x38c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) (async, rerun: 64) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="170c00008003000000302e4c0000000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="a8c54dddadb353810e8ef666ef4dba012680960137aebd7fa3694db5ea7eaca4a11876d2e8944bf7ff65bcf1b596bbe2d78019ff64d0070e9aa9845d43947fe1b755c9a3a65f99f57d3771dfb12e5e5a5de1876ee23bf377719602393f53c006db52ae036e000000000000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x24, 0x7ff, 0x800, 0x8000, 0x0, 0x9, 0x10000000}}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="170c00008003000000302e4c0000000000"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="a8c54dddadb353810e8ef666ef4dba012680960137aebd7fa3694db5ea7eaca4a11876d2e8944bf7ff65bcf1b596bbe2d78019ff64d0070e9aa9845d43947fe1b755c9a3a65f99f57d3771dfb12e5e5a5de1876ee23bf377719602393f53c006db52ae036e000000000000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) (async) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x24, 0x7ff, 0x800, 0x8000, 0x0, 0x9, 0x10000000}}, 0x50) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 71) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xa000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x8800) [ 278.514741][T20134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="170c00008003000000302e4c0000000000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="a8c54dddadb353810e8ef666ef4dba012680960137aebd7fa3694db5ea7eaca4a11876d2e8944bf7ff65bcf1b596bbe2d78019ff64d0070e9aa9845d43947fe1b755c9a3a65f99f57d3771dfb12e5e5a5de1876ee23bf377719602393f53c006db52ae036e000000000000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0xfffffffffffffffe, r5, {0x7, 0x24, 0x7ff, 0x800, 0x8000, 0x0, 0x9, 0x10000000}}, 0x50) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 1: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r1, 0x10, 0x0, 0x800) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 66) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 72) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xb000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @loopback, 0x0}, &(0x7f0000000080)=0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r4], 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000001000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000002a00270d0000000000000000f4000000", @ANYRES32=r8], 0x44}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)={0x38c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2381}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x38c}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000000) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 278.593834][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:04:38 executing program 1: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) (async, rerun: 64) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r1, 0x10, 0x0, 0x800) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 67) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xc000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 73) 00:04:38 executing program 1: removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8001}}, './file0\x00'}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r1, 0x10, 0x0, 0x800) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xd000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cdaad69d1520a500ac519910723bf8a4bfdca3c4ee3a10714176cfd870a77f13703c7d94741f0483f098b6fd93f957d9c59c83f6a9f7e90b334192ddc31cde4b7ccf13592e7d84388a0ea42e6dee740fca0b07c7a854574fd7864881b9cfacb4d0fc7641d68197e2dc32d81cbe0381de3e42492748cb7235267a9e09175c3bc"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000a80)={0x800, 0x10, 0x8}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x24, 0xfffffffd, 0xc8000, 0x40, 0x4, 0x9, 0x800}}, 0x50) dup3(r1, r2, 0x80000) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 68) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 74) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xe000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000a80)={0x800, 0x10, 0x8}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x24, 0xfffffffd, 0xc8000, 0x40, 0x4, 0x9, 0x800}}, 0x50) (async, rerun: 32) dup3(r1, r2, 0x80000) (rerun: 32) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 75) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x10000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 69) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x69aa03, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x800, 0x0) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cdaad69d1520a500ac519910723bf8a4bfdca3c4ee3a10714176cfd870a77f13703c7d94741f0483f098b6fd93f957d9c59c83f6a9f7e90b334192ddc31cde4b7ccf13592e7d84388a0ea42e6dee740fca0b07c7a854574fd7864881b9cfacb4d0fc7641d68197e2dc32d81cbe0381de3e42492748cb7235267a9e09175c3bc"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000a80)={0x800, 0x10, 0x8}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x24, 0xfffffffd, 0xc8000, 0x40, 0x4, 0x9, 0x800}}, 0x50) dup3(r1, r2, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000a80)={0x800, 0x10, 0x8}, 0x18) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x24, 0xfffffffd, 0xc8000, 0x40, 0x4, 0x9, 0x800}}, 0x50) (async) dup3(r1, r2, 0x80000) (async) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x11000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 76) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 70) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) (async, rerun: 64) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x69aa03, 0x0) (rerun: 64) sendfile(r0, r1, &(0x7f0000000040)=0x800, 0x0) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x12000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x98401, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000140)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x210e0000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) (async) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x69aa03, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x800, 0x0) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cdaad69d1520a500ac519910723bf8a4bfdca3c4ee3a10714176cfd870a77f13703c7d94741f0483f098b6fd93f957d9c59c83f6a9f7e90b334192ddc31cde4b7ccf13592e7d84388a0ea42e6dee740fca0b07c7a854574fd7864881b9cfacb4d0fc7641d68197e2dc32d81cbe0381de3e42492748cb7235267a9e09175c3bc"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cdaad69d1520a500ac519910723bf8a4bfdca3c4ee3a10714176cfd870a77f13703c7d94741f0483f098b6fd93f957d9c59c83f6a9f7e90b334192ddc31cde4b7ccf13592e7d84388a0ea42e6dee740fca0b07c7a854574fd7864881b9cfacb4d0fc7641d68197e2dc32d81cbe0381de3e42492748cb7235267a9e09175c3bc"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 77) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 71) [ 278.895763][T20248] xt_TCPMSS: Only works on TCP SYN packets 00:04:38 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async, rerun: 32) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x98401, 0x0) (rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async, rerun: 32) r2 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000140)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) (async) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149803, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) fcntl$dupfd(r2, 0x406, r0) fallocate(r1, 0x62, 0x2000000fff, 0x806) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r3, 0x10, 0x0, 0x800) sendfile(r3, r1, &(0x7f0000000080)=0x400000000000000, 0xfffffffffffff179) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x220e0000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x7]}, 0x8, 0x80800) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000140)=0x4, 0x4) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 78) 00:04:38 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149803, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) (async) fcntl$dupfd(r2, 0x406, r0) (async) fallocate(r1, 0x62, 0x2000000fff, 0x806) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r3, 0x10, 0x0, 0x800) (async) sendfile(r3, r1, &(0x7f0000000080)=0x400000000000000, 0xfffffffffffff179) 00:04:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x25000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:38 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 72) [ 278.993160][T20267] xt_TCPMSS: Only works on TCP SYN packets 00:04:38 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x7]}, 0x8, 0x80800) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000140)=0x4, 0x4) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:38 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 79) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x2c020000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x98401, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000140)={0x1, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149803, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) fcntl$dupfd(r2, 0x406, r0) fallocate(r1, 0x62, 0x2000000fff, 0x806) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r3, 0x10, 0x0, 0x800) sendfile(r3, r1, &(0x7f0000000080)=0x400000000000000, 0xfffffffffffff179) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149803, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r2, 0x10, 0x0, 0x800) (async) fcntl$dupfd(r2, 0x406, r0) (async) fallocate(r1, 0x62, 0x2000000fff, 0x806) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r3, 0x10, 0x0, 0x800) (async) sendfile(r3, r1, &(0x7f0000000080)=0x400000000000000, 0xfffffffffffff179) (async) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = signalfd4(r2, &(0x7f00000000c0)={[0x7]}, 0x8, 0x80800) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000000140)=0x4, 0x4) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 80) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 73) [ 279.067347][T20291] xt_TCPMSS: Only works on TCP SYN packets 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x32030000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(tnepres-generic)\x00'}, 0x58) [ 279.090550][T20298] kobject_add_internal failed for 9p-341 (error: -12 parent: bdi) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 74) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 81) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x3) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000000)) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x3c000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) dup(r2) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xe8, 0x2}}, './file0\x00'}) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0xfffffffffffffff7, 0xd55f, 0x0, r5}}}, 0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2ccbb32558cda302da9000"]) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) write$P9_RWRITE(r6, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x401}, 0xb) [ 279.148700][T20324] kobject_add_internal failed for 9p-343 (error: -12 parent: bdi) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(tnepres-generic)\x00'}, 0x58) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x3) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) fallocate(r0, 0x10, 0x0, 0x3) (async) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000000)) (async) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x48000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 82) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 75) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ofb(tnepres-generic)\x00'}, 0x58) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r2, 0x10, 0x0, 0x800) dup(r2) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xe8, 0x2}}, './file0\x00'}) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0xfffffffffffffff7, 0xd55f, 0x0, r5}}}, 0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2ccbb32558cda302da9000"]) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) write$P9_RWRITE(r6, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x401}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r2, 0x10, 0x0, 0x800) (async) dup(r2) (async) dup(r1) (async) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xe8, 0x2}}, './file0\x00'}) (async) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)) (async) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0xfffffffffffffff7, 0xd55f, 0x0, r5}}}, 0x28) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2ccbb32558cda302da9000"]) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) (async) write$P9_RWRITE(r6, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x401}, 0xb) (async) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x3) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000000)) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4b030000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 83) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 76) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x800) fallocate(r1, 0x74, 0x81e, 0x5) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x4c000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 77) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x800) fallocate(r1, 0x74, 0x81e, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x800) (async) fallocate(r1, 0x74, 0x81e, 0x5) (async) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x50010000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r2, 0x10, 0x0, 0x800) (async) dup(r2) (async) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xe8, 0x2}}, './file0\x00'}) (rerun: 32) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) (async) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async, rerun: 32) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000140)=0x0) (rerun: 32) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, {{0xfffffffffffffff7, 0xd55f, 0x0, r5}}}, 0x28) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2ccbb32558cda302da9000"]) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) (async) write$P9_RWRITE(r6, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x401}, 0xb) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 84) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x68000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(r1, 0x10, 0x0, 0x800) (async) fallocate(r1, 0x74, 0x81e, 0x5) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 85) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 78) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x6c000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000024c0)='.pending_reads\x00', 0x10440, 0x40) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x140) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) write$P9_RLOPEN(r3, &(0x7f0000002480)={0x18, 0xd, 0x1, {{0x10, 0x2, 0x1}, 0x3f}}, 0x18) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = dup(r4) r6 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x62301, 0x30) renameat2(r5, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000200)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x20004, &(0x7f0000002380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@access_user}], [{@euid_eq={'euid', 0x3d, r8}}, {@euid_gt={'euid>', r8}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fowner_gt={'fowner>', r9}}, {@appraise}]}}) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000140)={'#tLMr.\n\xab\x14)\xc6[\x9f\x16\xce\xfa\xb9;Mad\xeb\xc2\x9a[\x14\xbbt\xca\xd8\x7f\x1aD\x1d\xfe\xcc\xdc~,\xe7\x037\n\x91\xc7\x93\xa8\x89\xdcgz\xddMSP\xf2\x99\xca\xc9\x87\xea\xdf\x15\xf5\xd9\xbd\xe5\x81g\v8\x96\xb7\xbd'}, 0x4b, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 79) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 86) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x74000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000024c0)='.pending_reads\x00', 0x10440, 0x40) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x140) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) write$P9_RLOPEN(r3, &(0x7f0000002480)={0x18, 0xd, 0x1, {{0x10, 0x2, 0x1}, 0x3f}}, 0x18) (async) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r5 = dup(r4) r6 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x62301, 0x30) renameat2(r5, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000200)='./file0\x00', 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x20004, &(0x7f0000002380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@access_user}], [{@euid_eq={'euid', 0x3d, r8}}, {@euid_gt={'euid>', r8}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fowner_gt={'fowner>', r9}}, {@appraise}]}}) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) (async, rerun: 64) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48000) (rerun: 64) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000140)={'#tLMr.\n\xab\x14)\xc6[\x9f\x16\xce\xfa\xb9;Mad\xeb\xc2\x9a[\x14\xbbt\xca\xd8\x7f\x1aD\x1d\xfe\xcc\xdc~,\xe7\x037\n\x91\xc7\x93\xa8\x89\xdcgz\xddMSP\xf2\x99\xca\xc9\x87\xea\xdf\x15\xf5\xd9\xbd\xe5\x81g\v8\x96\xb7\xbd'}, 0x4b, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7a000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 80) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 87) 00:04:39 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000024c0)='.pending_reads\x00', 0x10440, 0x40) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x140) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r3, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) write$P9_RLOPEN(r3, &(0x7f0000002480)={0x18, 0xd, 0x1, {{0x10, 0x2, 0x1}, 0x3f}}, 0x18) (async) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000"], 0x138) (async, rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) (async, rerun: 64) r5 = dup(r4) r6 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x62301, 0x30) renameat2(r5, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000200)='./file0\x00', 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r7, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x20004, &(0x7f0000002380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@access_user}], [{@euid_eq={'euid', 0x3d, r8}}, {@euid_gt={'euid>', r8}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fowner_gt={'fowner>', r9}}, {@appraise}]}}) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x7c000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) fsetxattr$smack_xattr_label(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000140)={'#tLMr.\n\xab\x14)\xc6[\x9f\x16\xce\xfa\xb9;Mad\xeb\xc2\x9a[\x14\xbbt\xca\xd8\x7f\x1aD\x1d\xfe\xcc\xdc~,\xe7\x037\n\x91\xc7\x93\xa8\x89\xdcgz\xddMSP\xf2\x99\xca\xc9\x87\xea\xdf\x15\xf5\xd9\xbd\xe5\x81g\v8\x96\xb7\xbd'}, 0x4b, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 279.569028][T20445] kobject_add_internal failed for 9p-355 (error: -12 parent: bdi) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 81) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 88) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) fallocate(r0, 0x10, 0x0, 0x800) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) (async) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x88000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 279.626700][T20461] kobject_add_internal failed for 9p-357 (error: -12 parent: bdi) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200421, 0x0) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 82) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x8a030000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 89) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0x800) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000000)) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200421, 0x0) (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x70, 0x0, 0x800) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0xfcc0432051bc9139, 0xffffffffffffffff, 0xac410000) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 83) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200421, 0x0) (async, rerun: 64) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (rerun: 64) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x98000000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x70, 0x0, 0x800) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0xfcc0432051bc9139, 0xffffffffffffffff, 0xac410000) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 90) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xcc010000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 91) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 84) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) dup(r1) (async) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') (async) read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) (async) 00:04:39 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x70, 0x0, 0x800) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0xfcc0432051bc9139, 0xffffffffffffffff, 0xac410000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) fallocate(r0, 0x70, 0x0, 0x800) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0xfcc0432051bc9139, 0xffffffffffffffff, 0xac410000) (async) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x0, 0x122, 0x10}, 0x18) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xf6020000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x4c, 0x3ffffffffd, 0x4000000000802) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 85) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (rerun: 32) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x0, 0x122, 0x10}, 0x18) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0xffffe000, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 92) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1be) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getdents64(r4, &(0x7f0000000200)=""/67, 0x43) 00:04:39 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x800) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x4c, 0x3ffffffffd, 0x4000000000802) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 86) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x0, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 93) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000a80)={0x0, 0x122, 0x10}, 0x18) [ 279.945783][T20556] xt_TCPMSS: Only works on TCP SYN packets 00:04:39 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r1 = openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x4c, 0x3ffffffffd, 0x4000000000802) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (async) openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x800) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) (async) fallocate(r0, 0x4c, 0x3ffffffffd, 0x4000000000802) (async) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) (async) 00:04:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1be) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) getdents64(r4, &(0x7f0000000200)=""/67, 0x43) 00:04:39 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 87) 00:04:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x2, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:39 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x12, r4, 0x8000000) 00:04:39 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 94) [ 280.012592][T20574] xt_TCPMSS: Only works on TCP SYN packets 00:04:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1be) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r4, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) getdents64(r4, &(0x7f0000000200)=""/67, 0x43) 00:04:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 88) 00:04:40 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async, rerun: 32) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') (rerun: 32) r2 = openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x12, r4, 0x8000000) 00:04:40 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x3, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 280.059562][T20583] ------------[ cut here ]------------ [ 280.061219][T20583] WARNING: CPU: 1 PID: 20583 at fs/kernfs/dir.c:504 __kernfs_remove+0x6f4/0x7d8 [ 280.063421][T20583] Modules linked in: [ 280.064381][T20583] CPU: 1 PID: 20583 Comm: syz-executor.0 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 280.067095][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 280.069632][T20583] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 280.071650][T20583] pc : __kernfs_remove+0x6f4/0x7d8 [ 280.072941][T20583] lr : __kernfs_remove+0x6f4/0x7d8 [ 280.074203][T20583] sp : ffff8000209338a0 [ 280.075212][T20583] x29: ffff8000209338d0 x28: ffff80000cee8161 x27: 0000000080000001 [ 280.077299][T20583] x26: ffff0000c0011a00 x25: ffff80000d30c000 x24: ffff00012d574b28 [ 280.079359][T20583] x23: ffff00012d5742e0 x22: 0000000000000000 x21: ffff00012d574b28 [ 280.081486][T20583] x20: ffff00012d574b28 x19: ffff8000086f7744 x18: 00000000000001a1 [ 280.083560][T20583] x17: ffff8001f1d7d000 x16: ffff80000db49158 x15: ffff0001121f1a80 [ 280.085611][T20583] x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000 [ 280.087618][T20583] x11: 0000000000007270 x10: ffff800012875000 x9 : ffff8000086f70dc [ 280.089616][T20583] x8 : 0000000000007271 x7 : ffff8000095d331c x6 : 0000000000000000 [ 280.091601][T20583] x5 : 000000008018000e x4 : fffffc0004b55d20 x3 : 000000008018000e [ 280.093595][T20583] x2 : ffff00012d574b28 x1 : 0000000000000000 x0 : 0000000000000000 [ 280.095582][T20583] Call trace: [ 280.096412][T20583] __kernfs_remove+0x6f4/0x7d8 [ 280.097580][T20583] kernfs_remove_by_name_ns+0x68/0xb8 [ 280.098913][T20583] sysfs_remove_link+0x40/0x50 [ 280.100112][T20583] sysfs_slab_add+0x70/0x274 [ 280.101350][T20583] __kmem_cache_create+0x60/0x118 [ 280.102593][T20583] kmem_cache_create_usercopy+0x19c/0x31c [ 280.104104][T20583] p9_client_create+0x618/0x758 [ 280.105394][T20583] v9fs_session_init+0xa4/0x9f0 [ 280.106602][T20588] xt_TCPMSS: Only works on TCP SYN packets [ 280.106641][T20583] v9fs_mount+0x6c/0x568 [ 280.109168][T20583] legacy_get_tree+0x30/0x74 [ 280.110289][T20583] vfs_get_tree+0x40/0x140 [ 280.111397][T20583] do_new_mount+0x1dc/0x4e4 [ 280.112501][T20583] path_mount+0x358/0x914 [ 280.113611][T20583] __arm64_sys_mount+0x2c4/0x3c4 [ 280.114858][T20583] el0_svc_common+0x138/0x220 [ 280.116006][T20583] do_el0_svc+0x48/0x164 [ 280.117028][T20583] el0_svc+0x58/0x150 [ 280.118050][T20583] el0t_64_sync_handler+0x84/0xf0 [ 280.119290][T20583] el0t_64_sync+0x18c/0x190 [ 280.120411][T20583] irq event stamp: 730 [ 280.121436][T20583] hardirqs last enabled at (729): [] _raw_spin_unlock_irqrestore+0x48/0x8c [ 280.124067][T20583] hardirqs last disabled at (730): [] el1_dbg+0x24/0x5c [ 280.126258][T20583] softirqs last enabled at (432): [] local_bh_enable+0x10/0x34 [ 280.128560][T20583] softirqs last disabled at (430): [] local_bh_disable+0x10/0x34 [ 280.130895][T20583] ---[ end trace 0000000000000000 ]--- 00:04:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 95) 00:04:40 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0xffbffffffffc) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x800) syz_clone3(&(0x7f0000000740)={0xff8657941d8300cb, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x7}, &(0x7f00000005c0)=""/64, 0x40, &(0x7f0000000600)=""/233, &(0x7f0000000700)=[0x0], 0x1}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r2, 0x0) getegid() r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) getresuid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r8, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r9, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)="435bedae6103ac323586ccfde9ef4bd502143c1bf703cf10324fc383a6cfeb2d7ed2f23a0e1a5762ba28db4ecf499451849358e147490799764510cd2c2af7fdd00622351169ae36029619a4db22a240856bf4368257cdbd767214dba78d2fe31d372144c7c3b05c0b482ac62b0089437676ef633f30f0d647d67197d4fa36dc77279cae18d97128e56b1b26527c966d23d6b749138c4c0f0e60578ccf36a59fc4d3b2d6161cb092728239c5f8c38a108494c96ba2ba8f9d0f519d455f20085c207f5dbd6c139f1a", 0xc8}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000180)="1349b3f9560a4ec222d199e6e004e16b8af9394de369034a5a113330c38b0a1ea56dce3333a100a2fb7cf703099ecf62d7a7bb008501fa0af91897e39b83220f27c8543d6f894fa463350b55e62dbf5e", 0x50}, {&(0x7f0000000200)="64b436db1c4866ad7f88480b4de3073541cdff982483639dca7afe", 0x1b}, {&(0x7f0000000240)="eac81e7f1df8346cf82d79a36b3670afa0", 0x11}, {&(0x7f0000000280)="8a960d6b9bf4af1fe501dc1c0a6c4a9449b4e367b0b33de1fd3583735bd1994a158d9264e11c733afdd99ec78171abed6f321805edb4a20241aadd20e0114c0f4637eec3702d0178c9b67f9a3fef30409ad844003fff9c8953f84281eb6cce7d4e97d10481ed245380a1b01bb2c58280d5e555409757407d28ea7e3de80398d62f7c30bebed3c523ff1ef1b1c8709274dd5ca0e16c27047c2a2ba3a86fc3e2b9a963d5369e6f7d5edbc8c1e49251c18de93f2d0341a8c2474703d0a391a9a071f8965c5c2743a0a150c60ffa418e0c8936a2f6dbe372ff29d39d28", 0xdb}, {&(0x7f0000002040)="2fe349a80efedfca2f64ceb95ef55ec184552b474c837e138c5411689fe40b7ae78dd7e19de7169ca3c4e50a7bea5589cc6f2b8794a39302311907c015307bda4585aa23a250b2c9e3ccce3651c5fbfcd3e563422d50a4a65054dceb8ba13e2d59d2181cd5e32982767a28ba96fa09fce5e5552510b6f0b385cd2beb228c79c795d239cfbac549cde018e3cf9f1eb8ea245d17c7a10df334570153fb4529d2da18f3b5adc6c34362a532c9611e3a098b816a650487153a1d265f57a885bd4b9422358a4595828940f48f8253edf62599e2ddcd9c165cd09867d020fb5490f697d830e6f8ceb28234bd703e3a1b470da193feb08a576af312b4f4c6a0da59ad3ae516d7f8c4c775ca52030b3e2822526dba98e793031f320f8dba6fec5fccc392f52555cd43c87a811d2a24743f47a00b00e988e1dbb67efa3827e7f531433e92f856bfcfeac9afe9e95fd86627154cdf8f7b60c76c09fd32522cd71b1958fa3cc9d27e88c591ed6e214ea88bfd75695cac77ca4d88cd10a326e1b1986a37644cd8707b6291abaaa0d26ace07082df8c35cde861d376b7987aedd4e6743faf052353aeaaa2c822a676f54dbf2c2c69b7dc88826ceb2b377e664e6dca682fe4c559bc7a253c7f8433b95ef15d742c5ac7bd4bc0ecf45d58125c94887c5d5d863f31731749ea19749f5ebe772d11707567818ae153b386509c2b1e55bbd78044aa577c27be149163eb835b312b852a2c940afc27377d930ee79467c2fafe798e5342763fcbdcaa18fb06e688331d1f21d8520de6582d185713dc9652df417d1f0417df97fe53e02f91e9b88eef6ef73d14b1c2ef8b5aace3bae13bcfd017f47ec7bc3d9246fc64cd32d9620e63611781a7f91f51acb0b44a47ac232b6476f08f051ea835968349f6ab4670ceb2c83bfc031bb03f7100624aedcbada2ae43883073e490602296dea345c537d149f2c3ff6c338987c18fad0297abb4b3f669300f3f550e0a4fbb2dc36ee618da172a18cfb313bf0ecb209b8abc809c0db3863bb8c424d0d8cc8958fa2623ead1827e38ec287502ff916ac95cca0f73fe2b7faeae16e6bce5bdbff7cc8aef57a4779f7818fcb0fdcc603f7833365188d5b97759d37eb763a0808fa6270e209c9d01ca50d31c811f50012199a3af6808f64d8c1c78af6b606d6333553b92eae089f493b2572833f2d83d74f3114ad126129c94f9daeb662f326bc7c20988eb11efb2523d1b4a614aa6d278ff95b60e7050d4502d50a0fa5e7c25d9486c6c2a4e6a6f68e1014f03a7365341eb29aa2db4e011d6fc252b8877ad3e2d9b50e973c934051fa846297b9aace6f326b1c87892b992ef8267bc096b62042a9e83f4ac864d63ddcfd5d9f6c1a2d2dc8c27f5ccf12250ba906d9d3a1b7537d5db4597d33d8c8e3655c7fe821d42ac3340e16513f8c145b21d4e0f7c13bd92699d6fc3bf5d231a47d9667aaf6929c0e8f77622d95d121ca7844d72b93b2308efb3abfc9552e649e5c22180ca884094ddd7c883a2b908ea6f4090049fa8694a1aa638f26ddf3617bdf1740a2a4cc420e993e166a1409c6174d86caea46bb0fcced8eea4a6124197c6b18dd5d78d56b00ec6a99de0ae1cee3bd0806dc09106837c91ea9cac96a37de37205b2aed0a6a93e305c39027d2dbbec77f5191e9b958a33718d1352bc945f190400d6ee77f307db0156321543a94c098e7ff2670dd1a94bb0698b3a76f61aaa612a60db5b1812c864e62017d7fab4645cd4e4723c58362cd3376e769ba3ea9cb6a3795d799c759a20b9113585dbd00666d9ac9ef23fd98ae686b6acf542c409b189719903e53d4f6c251b7873539c4a5718bb88a9b8d4febc565c4ba3744c2577476131b80643946a603c98a3066c75ae964661a344d9fdd7fdec7e743b87234b7915179f49c403676038665c0aa5b65c186ac7000a8418a62ed0be55c82be99dd51d9c70cbe065021f302d7bdbc8f19a304539780dd65635d4da3a7dbfd74f0efd017d1092381d203152a5a2e43f8a6c1161130c33e9fe79c347198c71b17e33a0391bf6d91a8d44bc5e4975592958e3ff66f620e3bac9d49a41540505fb7924d8d14d0dd05a98e176780b9b5b56480b0224bf5780f15b24d1007e824753a575abe89bb88faa11567d552356bd7ad6b1e23bf10aa7ba10eb1a3cea698afb884c9045474bd933003caeff4956882246717d92ecfb180fdbc350d191b5e7216c20211f7d3b8c856116a2234d6e043eec8314817ca6ffec2eea02436a15213cc24dad2853a45f881adf3d11d54fc9fd94615af538c521a351732b1f859966528f2cd6b7d3e0d0f37b8ed8f83dd0726fb027108e48bf79aba4010eb48303b5b19b132b0acd8a1cebae1ec9778343681f27df139ca9e65abcde46229f21dbba92310e664bbdd73d2d8ddfd07497a5fdf689dad25494cce3a7e36bf962709b1d1feae6c9d6f44cd0e28173728aef60e331dbf982a97243915cec837e130ebf093ed84dbda10565f0bf21b76dd38d9c4e23dbaa8eca743132c31bae69d011c7b5c68ee798c0a3e40282cb772d2f7083b58489f84ef75328e524e369c7d9764f61328370e248edf51dd074b1f378a98c7a4b8e3114a34bd561a968988518bef15890e5800c71fb192c8a1ce7fb37c945e52793abfa3c2a937dda6ea195ea071803d3af2de2e3f91e02710f868ea392d935b0a9a7d86f619cb5cfafc1eb14aba22ca7e6f78842465f031e16143d975789603b6031698cae02540ac3ac0b47fbbeca8b6a90e42b2be3aa6e144e8e98fb3c8170fe49792d5bc85b45c3acb09eda5fd1d7946ef87ed560bd48ba029c16de4c641eba2b2c035f02233728564dbd08af482230c90b0fba047bae7d1dd623c5f2ee839af9bed0bd494fef28e4fe77600f4dbc678bd3aac15d4bc017d7fcb3556af10eba8e5e8ee187aedc6755b87134867f2ea962c98c0523738e0659d1c374c195a93d959591a06ee6790555c2620ae0e02fc12a29a05bdb8f82ffd5fdb87f6c7c2f52c7bbfd7ca2c33d752714d5a154416d7423e1318803c67e171da0df308f4a5a551cb0cfef012dde44605820697a0aa1e0cab7559aee1216e651f52882afd1193afb7904e9363b21f81857a7ac78b632790d69cd30fd9a6eea00cde087b5bc6eecb5861cf05d870bd14f6e1432518f109dd5014d0e2cbbd6d4aca4ee6f4ccf91fea4ed413e4f1c5159b8b72f1a840dff21d525f98d7bfdc155e1ddc0f060be60014465b4e614b159f4afbd080f70951f91f1357ca7ea66ddcf0969862d5e05d79749d07867a5053f2c013a7d4e627adbf5745552dbc27a304fe9d0a7e217b84b283c0c3bdf96705001847ce0727e007df6eb46ab07912e08206329500e5914bbca4ff4ade19e9e9b2169a60f703532fb16eb986fe18f358ea49256955956e8cb65b32b445a6d28b9d7eef7172ea1c1ddcb3765aec4fce1a29037e901bcd3c588e2f57df33b0c978abf6b7aa419db40c699376d741e05c04809e35020ed919059de63498460aed7f9107feac5089b895b8cdf998f3b02ce96826fe2f0fd781228b8764462d9c3fc6b98bfb140809be4a68986e73390315d226597400ea88acf6e209b61c40be186c17d5129c98fbaec1900f57f81989072d5987338a83480e183690b2e813503303a7a7f9833e60f359a369fb8a5d924fdbf31c81808b9a27125071187b454fef992968d96e9472a49f914233bc6404b34fd7de7b832d361019b67a5bbf3e4478056fd2eda895f4c158c47adeab5fb2d5eb6632e1cfb6a6143ed89657a79f7905b9ce46d138b1bd885923e2f4f2077cdfb3f03b9a26be8b45aff6360d9060dbb65e6f852a9f3f29d0386b30ca5c9deba8f9750ad13ea10860a939e5524ea16d143356f2ec901852f0f148dcfa4c188372cff06b15f1b5442f5de784d9f789058d10306ea804c6af819f2f36fdbdf50fbead2cd8de833f061a51fa2028bd069cb63554acd3efc876ebd487b8a5892c1965060c23b31b18f3c19d8de97027fef2f9c541506876b09c3a18f686a583cbdf0ea14d72f6e0770a591243f23d0f6f4e5765767f8f7329cb7a1a30a2d0b152052c04f84645e874a059a4b3d79d821db01a5399d3aefb7a36870a39cad2263ee4b155f5056a507e75523bcc62816526af06c8ab7ad9b6b6de54d3961eeb8464c61c09b86c504f592d423adce3a6b1ec6f82dfcc370aa24d9e93241eaaa0bd0a73bc3964a11a2a84d1758ddd6a7aa87686d45b0f106ac942f5381118f26c516794c6ff7c7b5c422686dfa64c7a903ff3eb0e104ddfdc87dbd1610c115ddec647571fb714afffc3d202070fce8616306dbf8769a4e3832020f31284e571f7699e62a037d48aafe2c9e17c89babb51ec941a99f60e0ad003a4d0897a6a878164d72adc61eb407f774d32bec59f5acdd31f0aa6c72d4987fee93655c2abb265771385217ebfeb807afbd5c25c24e6bf116f6a7143da0ae3dee42362e9b30bd0b70b25dd74dacd5d3244894fbe9aebb3e67772e859fdee88a9b171cef6a4c8ecdef7768bf9e52dfa6450def1a445ae9931d35360457291dae5c2feccd47c10a00bb6a0be59be47bb38d85eb8499f796ade0282782c0b524ab01f46293a07bb16da5b4b713b8df1e0216f563411a76f9a0bca6c4e94454eb40e00aee00289416d97bcd29fff4ce8069b13208158421eee3fa2fdb68e3d3f4f3eeda33a724099e3b31b16b8fd7376222529809d4b6a38bf99d7b296f72ac01ac734b9d3c465b508696f06e98a6123fb8548d32e70fe447e0a69653b0dd094454626cfd1eefc9c18c3e3ddb7d2a00bcdc60503884fe2d36f6c13caba762b92db48f0e7aa4915c970ec2ad5717d678e25fbd1a6c0efd22432cea904eb1ec442430ece7ea14644406f7ec5851336ccf3cf00b30a8412e8e2d75c2d4fdc027974a02430caf92147155fec36ff58588cb87a4e851ba380ac1993bebbd1f3582c6c43356f6068f11371a0a8c3b4d86e3176a3c9267181f59c89213d8961131db567a796ffc429ca2f92f3fed2e6760600959d0d3b42e8bce630f359073fb16b36568b5439a6459f03e3dcf9b25e371b305869d410633017dcba41593af071c80ddd3f641b6192b53ed689262e9db212728603404e13601f3ff6f4fb557e17376a3eaad757aadf40cedc0bc562891c50bccf5817482edfa07413cc85826a465bb5242beeb917886dc0da3d0eceb4018f00da74a42a6c70640566b60506c3cb7f873792cacc5a212b7653880af98666d75e44ba91408c4441a112138e886c4d407f53f1b83708cc2fc44d59ebe14fcd9bedf9ee9bfaf2271d080726cf57a84333626f965e71e804568b7cd09ee39845cd258a9e87bebe1e03ddc657171aab0dd55dba1f543af56725bd886719b3155bf94ab0cbf875f0696e79c9c3c752322ce998da7b5f0c081765cd863ba9fac59970b3f18e63b2f1efe4196dc2de7c2b8a426e7a08891a399d38d3f3949ca5ac2bfeb9edffafba4f723924d8e254937d32f761269503ef2e16e961ad8eb1cdf47d631f70d9bef8d803225fbc1badc31817598f0b0e45bb83a01f3958c6e89b3a68bad2d74a546e5663f2a6807314c164ab2b4f1ba2a95efd31d61a0ed0250cf04d2da283bcda9efacb1f70f55ef26f3593366ba48ae160127b40ddb9d5f66c403eee4c4c19f6bcc058ae0334ba6cb59cc5f92dc941df82a43c3de779f451a4c825aac1886a670532d8d67bbe4b7aa3ceb70a1068996c06600563434c451d9d2ee1d9c82cbbd35fbf07500795e59568", 0x1000}, {&(0x7f0000000380)="6dead4fcc36e12b084d9b5fac7aa8ab8a11229007aaf88c37f6044f67bed1dc6dcf627fdc41ae30356b91685925499bcb911442efa9b2e39c1f5301efdb9cae1656184fe73e419a2cc17d7b43a0a83328dfe34d046d7ebfc19540795f07f60b4b9aac413643d7806053bb5ce0cfa3448b1f9e01ea9eb9b7dd97ab101d90c027598113c65b6000ca1c930a6a2b273771eb2535cf0bdbe1d71cc0e0925a42327b76b4d5b14857e3b99fc7bbbc17b8b855006c3bcd30f3fb2ef54aa3f5861b29cf412773ad30e442e198840428821b62bc6d3a26d6b", 0xd4}], 0x8, &(0x7f00000007c0), 0x0, 0x80}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000008c0)="4d7893882833fff6e973583a4355febfe2d4bbdfedcd0ddf012b6151f70ddf8e72c24b29305ead0361598ae79a13a8ecbfb5bedcb03e168044b5a879b83486424701f33f1a10f905911153cf729aade0", 0x50}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, 0xffffffffffffffff}}}], 0x20, 0x8000}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b00)="acf344eb573a16ee253b0882ffc19ba2439bbf293bd52ec774dc88612b23e2d3c40bc81fe8357352718d42a5ae5f8b01e516faa030d735075fec4e43642391fa1a89e93c1546d15143386f8af5eefc6707de0618b62a4bebb51057158c34e363d9aa118790e42b0ff140c32d95c379b771e307184d7449a46436a2e26b000bf9859381610378541da3527d3e7a6f9719a8c0db99d5b5a52ad0ec85e2d6f2d3a00663c3b4ecddda2002bd6394d2350cfe9ee37fbb741cbf01fa6e63ce1a40ab67ebfbe6f0a5b5e52f237feab8e2d607fb154ea5cbee526d00717ca9d71e41fb98fd9ea5b83c7a75fece2583500d", 0xed}, {&(0x7f0000000c00)="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", 0xfe}, {&(0x7f0000000d00)="ec41a59c23befecc1d1ceac39f513097e860f64f735ef6da900de591df34dac1d7eaca86f593d0318b6f099e0f92283a11f7d49d5a7a311fafed4703c81c105c724aff8d412d2a88cf14a9301f84bbb9e1f577664ab5a851f4430962d8316eeb90d500af7b00c2a8619fdefe28bad7f923ed83f7483a0e2ee31c648f7f7fac0b2f43448e25d738b39995c99d742eecb51f99a917a5ae4c9f3bd0671e61474e666bf2f3c760a7490162d23c8878c04982f009eab573704a6e898b6898bf1bb9ece5f1d18922da69e6b5ea4cd8fffcd7cad4685214723fa2a0f85dbbad19881760996d30965fe05ea9f4110e5d64817b3d65ccc6a8f76c36", 0xf7}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000000e00)="94d55659d779b6b7fe8715b2aa526c97601e1ad806b41fdcfbeaa021d1e75a87f01347da301398b68676239ee9d4c3273cd289845ac3a3d473a8c5536162cc7b21823f49fa7b91068e97388a04e3d10ba21a60499f96ec5936876450a0c30ae5407eaf4e97f08fca17a08595e902a1d9eadf584e4676f70b67d4517b719b1f31a7f185bb700fbd883b9e62ea90feeb238ca72b92f1978cb1dd725875e142e5db4868e9317664a63c5268def553e54863fe42f84cbc91f4d97456cae49d65ceab666bcd3da123246d7b20ea9c", 0xcc}], 0x5, &(0x7f0000004100)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRESOCT=r0], 0x38, 0x4040}}], 0x3, 0x40000000) 00:04:40 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x4, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) [ 280.147273][T20598] xt_TCPMSS: Only works on TCP SYN packets [ 280.159214][T20596] ------------[ cut here ]------------ [ 280.164086][T20596] sysfs group 'power' not found for kobject '9p-375' [ 280.165892][T20596] WARNING: CPU: 0 PID: 20596 at fs/sysfs/group.c:280 sysfs_remove_group+0x104/0x160 [ 280.168264][T20596] Modules linked in: [ 280.169122][T20596] CPU: 0 PID: 20596 Comm: syz-executor.4 Tainted: G W 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 280.172083][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 280.174585][T20596] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 280.176492][T20596] pc : sysfs_remove_group+0x104/0x160 [ 280.177842][T20596] lr : sysfs_remove_group+0x104/0x160 00:04:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 89) [ 280.179201][T20596] sp : ffff8000206eb8e0 [ 280.180222][T20596] x29: ffff8000206eb8e0 x28: ffff0001121f4f80 x27: 0000000000000000 [ 280.182235][T20596] x26: ffff0000c0cc4900 x25: 0000000000000000 x24: 0000000000000000 [ 280.184335][T20596] x23: ffff80000d62a678 x22: ffff00012dcb9700 x21: ffff000112ea7000 [ 280.186447][T20596] x20: ffff80000c1f4c38 x19: ffff00012d62cd20 x18: 00000000000001c3 [ 280.188484][T20596] x17: 0000000000000000 x16: ffff80000db49158 x15: ffff0001121f4f80 [ 280.190569][T20596] x14: 0000000000000000 x13: 00000000ffffffff x12: 0000000000040000 [ 280.192679][T20596] x11: 00000000000110bd x10: ffff80001c1b9000 x9 : e89756f79024ac00 [ 280.194802][T20596] x8 : e89756f79024ac00 x7 : ffff800008161d1c x6 : 0000000000000000 [ 280.196885][T20596] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 280.198943][T20596] x2 : 0000000000000006 x1 : 0000000100000000 x0 : 0000000000000032 [ 280.201027][T20596] Call trace: [ 280.201932][T20596] sysfs_remove_group+0x104/0x160 [ 280.203247][T20596] dpm_sysfs_add+0x1a0/0x1bc [ 280.204348][T20596] device_add+0x4f4/0x958 [ 280.205406][T20596] device_create_groups_vargs+0xf4/0x15c [ 280.206944][T20596] device_create+0x88/0xbc [ 280.208098][T20596] bdi_register_va+0x8c/0x328 [ 280.209343][T20596] super_setup_bdi_name+0x84/0x120 [ 280.210684][T20596] super_setup_bdi+0x50/0x8c [ 280.211871][T20596] v9fs_mount+0x1a4/0x568 [ 280.212994][T20596] legacy_get_tree+0x30/0x74 [ 280.214186][T20596] vfs_get_tree+0x40/0x140 [ 280.215404][T20596] do_new_mount+0x1dc/0x4e4 [ 280.216584][T20596] path_mount+0x358/0x914 [ 280.217726][T20596] __arm64_sys_mount+0x2c4/0x3c4 [ 280.219000][T20596] el0_svc_common+0x138/0x220 [ 280.220243][T20596] do_el0_svc+0x48/0x164 [ 280.221348][T20596] el0_svc+0x58/0x150 [ 280.222313][T20596] el0t_64_sync_handler+0x84/0xf0 [ 280.223532][T20596] el0t_64_sync+0x18c/0x190 [ 280.224615][T20596] irq event stamp: 1004 [ 280.225646][T20596] hardirqs last enabled at (1003): [] finish_lock_switch+0x94/0xe8 [ 280.228124][T20596] hardirqs last disabled at (1004): [] el1_dbg+0x24/0x5c [ 280.230378][T20596] softirqs last enabled at (458): [] _stext+0x2e4/0x37c [ 280.232636][T20596] softirqs last disabled at (423): [] ____do_softirq+0x14/0x20 [ 280.234995][T20596] ---[ end trace 0000000000000000 ]--- 00:04:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a010000fe0000f7"], 0x138) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (fail_nth: 90) 00:04:40 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r0, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') r2 = openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x12, r4, 0x8000000) 00:04:40 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = socket$netlink(0x10, 0x3, 0x15) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a01"], 0x138) r4 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x5, 0x40000) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000200)={0x3, 0xeb, "a262e45598b016950eb69f62541e29c4eabfddf4f9226b8fc9f199fa9f491c70a76c4b3c57a512227b6e63a800507600fe6860ba181d2d4a9603d43e2fd1601252ebc5fc76fdbb633fc394304920b8417f2f1423c68ae8ec451b1712c9ca3ce60f5ca3aa4211eac8bf6cc37e082ea6738bf8ef41dc996ebecdad9a835e8e58bb18154b007c7178cdbb741858fc6652f8928caee593619f3faddf43f989243ff7e9f7592b7d92533e9a99040317bd540e6e5548dcd288da54c22790d8faac9e42a398be9f73a00ab2f054310ea5d14913d72e037e636c7e90fff09c3e364390666cd21dba19749fd1d2cc83"}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0x2020) 00:04:40 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) fallocate(r0, 0x10, 0x0, 0xffbffffffffc) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/75, 0x4b}], 0x1, 0x0, 0x0) (async) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x800) syz_clone3(&(0x7f0000000740)={0xff8657941d8300cb, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0x7}, &(0x7f00000005c0)=""/64, 0x40, &(0x7f0000000600)=""/233, &(0x7f0000000700)=[0x0], 0x1}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r2, 0x0) (async) getegid() (async, rerun: 32) r3 = openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$damon_target_ids(r3, &(0x7f0000000300)={@void, [{' ', r4}, {' ', r5}, {}]}, 0x3f) (async, rerun: 32) getresuid(&(0x7f0000000980)=0x0, &(0x7f00000009c0), &(0x7f0000000a00)) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000f80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') read$FUSE(r8, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, r9, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)="435bedae6103ac323586ccfde9ef4bd502143c1bf703cf10324fc383a6cfeb2d7ed2f23a0e1a5762ba28db4ecf499451849358e147490799764510cd2c2af7fdd00622351169ae36029619a4db22a240856bf4368257cdbd767214dba78d2fe31d372144c7c3b05c0b482ac62b0089437676ef633f30f0d647d67197d4fa36dc77279cae18d97128e56b1b26527c966d23d6b749138c4c0f0e60578ccf36a59fc4d3b2d6161cb092728239c5f8c38a108494c96ba2ba8f9d0f519d455f20085c207f5dbd6c139f1a", 0xc8}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000180)="1349b3f9560a4ec222d199e6e004e16b8af9394de369034a5a113330c38b0a1ea56dce3333a100a2fb7cf703099ecf62d7a7bb008501fa0af91897e39b83220f27c8543d6f894fa463350b55e62dbf5e", 0x50}, {&(0x7f0000000200)="64b436db1c4866ad7f88480b4de3073541cdff982483639dca7afe", 0x1b}, {&(0x7f0000000240)="eac81e7f1df8346cf82d79a36b3670afa0", 0x11}, {&(0x7f0000000280)="8a960d6b9bf4af1fe501dc1c0a6c4a9449b4e367b0b33de1fd3583735bd1994a158d9264e11c733afdd99ec78171abed6f321805edb4a20241aadd20e0114c0f4637eec3702d0178c9b67f9a3fef30409ad844003fff9c8953f84281eb6cce7d4e97d10481ed245380a1b01bb2c58280d5e555409757407d28ea7e3de80398d62f7c30bebed3c523ff1ef1b1c8709274dd5ca0e16c27047c2a2ba3a86fc3e2b9a963d5369e6f7d5edbc8c1e49251c18de93f2d0341a8c2474703d0a391a9a071f8965c5c2743a0a150c60ffa418e0c8936a2f6dbe372ff29d39d28", 0xdb}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000380)="6dead4fcc36e12b084d9b5fac7aa8ab8a11229007aaf88c37f6044f67bed1dc6dcf627fdc41ae30356b91685925499bcb911442efa9b2e39c1f5301efdb9cae1656184fe73e419a2cc17d7b43a0a83328dfe34d046d7ebfc19540795f07f60b4b9aac413643d7806053bb5ce0cfa3448b1f9e01ea9eb9b7dd97ab101d90c027598113c65b6000ca1c930a6a2b273771eb2535cf0bdbe1d71cc0e0925a42327b76b4d5b14857e3b99fc7bbbc17b8b855006c3bcd30f3fb2ef54aa3f5861b29cf412773ad30e442e198840428821b62bc6d3a26d6b", 0xd4}], 0x8, &(0x7f00000007c0), 0x0, 0x80}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000008c0)="4d7893882833fff6e973583a4355febfe2d4bbdfedcd0ddf012b6151f70ddf8e72c24b29305ead0361598ae79a13a8ecbfb5bedcb03e168044b5a879b83486424701f33f1a10f905911153cf729aade0", 0x50}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, 0xffffffffffffffff}}}], 0x20, 0x8000}}, {{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000b00)="acf344eb573a16ee253b0882ffc19ba2439bbf293bd52ec774dc88612b23e2d3c40bc81fe8357352718d42a5ae5f8b01e516faa030d735075fec4e43642391fa1a89e93c1546d15143386f8af5eefc6707de0618b62a4bebb51057158c34e363d9aa118790e42b0ff140c32d95c379b771e307184d7449a46436a2e26b000bf9859381610378541da3527d3e7a6f9719a8c0db99d5b5a52ad0ec85e2d6f2d3a00663c3b4ecddda2002bd6394d2350cfe9ee37fbb741cbf01fa6e63ce1a40ab67ebfbe6f0a5b5e52f237feab8e2d607fb154ea5cbee526d00717ca9d71e41fb98fd9ea5b83c7a75fece2583500d", 0xed}, {&(0x7f0000000c00)="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", 0xfe}, {&(0x7f0000000d00)="ec41a59c23befecc1d1ceac39f513097e860f64f735ef6da900de591df34dac1d7eaca86f593d0318b6f099e0f92283a11f7d49d5a7a311fafed4703c81c105c724aff8d412d2a88cf14a9301f84bbb9e1f577664ab5a851f4430962d8316eeb90d500af7b00c2a8619fdefe28bad7f923ed83f7483a0e2ee31c648f7f7fac0b2f43448e25d738b39995c99d742eecb51f99a917a5ae4c9f3bd0671e61474e666bf2f3c760a7490162d23c8878c04982f009eab573704a6e898b6898bf1bb9ece5f1d18922da69e6b5ea4cd8fffcd7cad4685214723fa2a0f85dbbad19881760996d30965fe05ea9f4110e5d64817b3d65ccc6a8f76c36", 0xf7}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000000e00)="94d55659d779b6b7fe8715b2aa526c97601e1ad806b41fdcfbeaa021d1e75a87f01347da301398b68676239ee9d4c3273cd289845ac3a3d473a8c5536162cc7b21823f49fa7b91068e97388a04e3d10ba21a60499f96ec5936876450a0c30ae5407eaf4e97f08fca17a08595e902a1d9eadf584e4676f70b67d4517b719b1f31a7f185bb700fbd883b9e62ea90feeb238ca72b92f1978cb1dd725875e142e5db4868e9317664a63c5268def553e54863fe42f84cbc91f4d97456cae49d65ceab666bcd3da123246d7b20ea9c", 0xcc}], 0x5, &(0x7f0000004100)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r9, @ANYRESOCT=r0], 0x38, 0x4040}}], 0x3, 0x40000000) 00:04:40 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x5, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:40 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x8, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 280.280868][T20616] xt_TCPMSS: Only works on TCP SYN packets 00:04:40 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x98, 0x0, 0x0, 0x0, 0x6, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) 00:04:40 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x8, 0x4) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x1) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr\x00') openat2(r1, &(0x7f0000000a40)='.\x00', &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0x18) [ 280.306703][T20619] xt_TCPMSS: Only works on TCP SYN packets