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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0}) 01:35:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:35:11 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, 0x12, 0x201}, 0x4c}}, 0x0) 01:35:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@map_val], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:35:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:35:12 executing program 2: r0 = openat$vcsa(0xffffff9c, &(0x7f0000001880)='/dev/vcsa\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0xc01047d0, &(0x7f0000000100)={0x1, 0x0, 0x0}) 01:35:12 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0, 0x158}}, 0x0) 01:35:12 executing program 5: modify_ldt$write2(0x11, &(0x7f0000000000)={0x1000}, 0x10) 01:35:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x0}) 01:35:12 executing program 1: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x400445a0, 0x0) 01:35:12 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000000c0)) 01:35:12 executing program 1: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x400445a0, 0x0) 01:35:12 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x9, &(0x7f0000000040), 0x8) 01:35:12 executing program 3: 01:35:12 executing program 0: r0 = epoll_create(0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) 01:35:12 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 01:35:12 executing program 2: set_mempolicy(0x1, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0) 01:35:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) 01:35:12 executing program 1: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x400445a0, 0x0) 01:35:12 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x7, 0x0, 0x0, 0x0) 01:35:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x22, &(0x7f0000000040)={0x77359400}, 0x8) 01:35:12 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040), 0x8) 01:35:12 executing program 4: bpf$MAP_CREATE(0x16, &(0x7f0000000080), 0x40) 01:35:12 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0xb, &(0x7f0000000040), 0x8) 01:35:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) 01:35:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae68, &(0x7f0000000140)={0x1}) 01:35:12 executing program 5: futex(&(0x7f00000000c0), 0x1, 0x0, 0x0, 0x0, 0x0) 01:35:12 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600800000000000000000000002000600ca3f8bca000000003800000000ff00f7ffffffffffff1f0002000600000000000000000001000000000000000000ff7f00000000000100000000e472"], 0x78) close(r0) uselib(&(0x7f0000000000)='./file0\x00') 01:35:12 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x3c, &(0x7f0000000040), 0x8) 01:35:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) 01:35:12 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f0000000080), 0x40) 01:35:12 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000480)=""/172, 0x3a, 0xac, 0x1}, 0x20) 01:35:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x40) 01:35:12 executing program 0: bpf$LINK_GET_FD_BY_ID(0x3, 0x0, 0x0) 01:35:12 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b4a254461311c1537", 0x6d, 0x600}, {0x0, 0x0, 0x10e00}], 0x1a10000, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'default'}}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={0xffffffffffffffff, 0x7f, 0x6fb, 0x8}) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x8c, 0x0, 0x400, 0x70bd2c, 0x0, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0xc050) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) 01:35:12 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) 01:35:12 executing program 5: socketpair(0x1, 0x801, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) 01:35:12 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000001c0)={0x0, 0x1100, &(0x7f0000000180)={0x0, 0x3e80}, 0x300}, 0x0) 01:35:12 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x0, 0x0, 0x400}, 0x40) r0 = openat$vcsa(0xffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x800, 0x0) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = getpgrp(0x0) sched_rr_get_interval(r1, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0x9, 0x9, 0x7}, @generic={0x2, 0x0, 0x3, 0xfff7}], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x9c, &(0x7f0000000100)=""/156, 0x40f00, 0x18, [], 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xa, 0x8001, 0x6}, 0x10, 0x0, r0}, 0x74) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) modify_ldt$write2(0x11, &(0x7f0000000000)={0xbe1, 0x100000, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) 01:35:12 executing program 3: set_mempolicy(0x0, &(0x7f0000000000)=0xfffffffffffffff9, 0x100) 01:35:12 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) 01:35:12 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x8000}]}) 01:35:12 executing program 3: set_mempolicy(0x2, &(0x7f0000000140)=0x1, 0x40) openat$vcsa(0xffffff9c, &(0x7f0000001880)='/dev/vcsa\x00', 0x0, 0x0) 01:35:12 executing program 4: r0 = openat$vcsa(0xffffff9c, &(0x7f0000002a80)='/dev/vcsa\x00', 0x0, 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200b01, 0x0) dup3(r0, r1, 0x0) 01:35:12 executing program 1: r0 = openat$vcsa(0xffffff9c, &(0x7f0000001880)='/dev/vcsa\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0xc01047d0, &(0x7f0000000100)={0x0, 0x0, 0x0}) 01:35:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r2}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000140)) 01:35:12 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x14, 0x0, 0x4}, 0x40) 01:35:13 executing program 0: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000000540), 0x187, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0) 01:35:13 executing program 4: set_mempolicy(0x2, &(0x7f0000000040)=0x9, 0x3) 01:35:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x5, 0x0) write$evdev(r0, 0x0, 0x0) 01:35:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff17}, {0x6}}]}, 0x44}}, 0x0) 01:35:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) write$evdev(r0, 0x0, 0x0) 01:35:13 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x0, 0x0, 0x0, 0x10000000002) 01:35:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b4a254461311c1537aae29d00428db8c9900b8a6a95f54f8d2a3ff0c7bc2e4648045430d49fce1ea5e5e7e893f5c09413d0944f5e9afbeeee4f7ae05c7cd12cf7d87618eadd1a02130d11d2e7163e6c481688f483a741bb857f2ce6d4aa8326bf75a25e06c2bc52530f21af3ab19e674537fdc7b455", 0xda, 0x600}, {0x0, 0x0, 0x10e00}], 0x1a10000, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'default'}}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) creat(&(0x7f0000000400)='./file1\x00', 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0x8c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0xc050) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000500)) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000180)) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x0) 01:35:13 executing program 5: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) 01:35:13 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') [ 151.210800] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:35:13 executing program 4: bpf$LINK_GET_FD_BY_ID(0xd, 0x0, 0x0) [ 151.275217] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 01:35:13 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x2d, &(0x7f0000000040), 0x8) 01:35:13 executing program 5: bpf$LINK_GET_FD_BY_ID(0x16, 0x0, 0x0) 01:35:13 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x44, &(0x7f0000000040), 0x8) 01:35:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000140)) 01:35:13 executing program 3: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@random="0d4a95627d66", @link_local, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e1a104", 0x8, 0x3a, 0x0, @local, @empty, {[], @echo_request}}}}}, 0x0) 01:35:13 executing program 5: syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x5, 0x6200) 01:35:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x40, r1, 0xf1a4c9ef89f52ea3, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}]}, 0x40}}, 0x0) 01:35:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc}, 0x40) 01:35:13 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x5, 0x8000}]}) 01:35:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000140)) 01:35:13 executing program 1: setresuid(0xffffffffffffffff, 0xee00, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 01:35:13 executing program 3: creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa32420, 0x0) 01:35:13 executing program 4: socketpair(0x1, 0x801, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 01:35:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x3d, &(0x7f0000000040)={0x0, r1/1000+10000}, 0x8) 01:35:13 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/206) 01:35:13 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b4a254461311c1537aae29d00428db8c9900b8a6a95f54f8d2a3ff0c7bc2e4648045430d49fce1ea5e5e7e893f5c09413d0944f5e9afbeeee4f7ae05c7cd12cf7d87618eadd1a02130d11d2e7163e6c481688f483a741bb857f2ce6d4aa8326bf75a25e06c2bc52530f21af3ab19e674537fdc7b455", 0xda, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'default'}}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) r2 = creat(&(0x7f0000000400)='./file1\x00', 0x0) io_submit(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={r2, 0x7f, 0x6fb, 0x8}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xc050) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000500)) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x0) 01:35:13 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xfffffffffffffed9, 0x15, 0x0, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "e13ce46337b59496e338174c9deff4f8d8560d59de44a9b3fd41f32bd0f16b316ae017c93efdd59d56fe026688c4d27ff8e4179cbbab614208797c20ca3083f29eb3d2818b8f98f88fe8cc51969e7938464c9cad90ce668c311f"}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000004) 01:35:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x7, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xba9, 0x9599}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000000)) pipe(&(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:35:13 executing program 2: bpf$LINK_GET_FD_BY_ID(0x13, 0x0, 0x0) 01:35:13 executing program 5: setresuid(0xffffffffffffffff, 0xee00, 0x0) setresuid(0x0, 0xee01, 0x0) 01:35:13 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x19, &(0x7f0000000040), 0x8) 01:35:13 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x10, &(0x7f0000000040)={0x77359400}, 0x8) 01:35:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x17, 0x0, 0x0, 0x4048, 0x0, 0x1}, 0x40) 01:35:13 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x2c, &(0x7f0000000040)={0x77359400}, 0x8) 01:35:14 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f00000005c0)="9c", 0x1, 0xffffffffffffffff) keyctl$link(0x9, r0, 0xffffffffffffffff) 01:35:14 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8e) 01:35:14 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x12, 0x201, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "8b30e420"}]}, 0x58}}, 0x0) [ 151.921815] kvm [11018]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfb000000fa [ 151.956047] kvm [11018]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfb000000fa 01:35:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x23, &(0x7f0000000040), 0x8) 01:35:14 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000280)="53595a4b414c4c45522020080000e780325132510000e780325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202030e2fc1e9fe6778a5a33a0f0e12cdf7b108c29fc0151371bd18b4a254461311c1537aae29d00428db8c9900b8a6a95f54f8d2a3ff0c7bc2e4648045430d49fce1ea5e5e7e893f5c09413d0944f5e9afbeeee4f7ae05c7cd12cf7d87618eadd1a02130d11d2e7163e6c481688f483a741bb857f2ce6d4aa8326bf75a25e06c2bc52530f21af3ab19e674537fdc7b455", 0xda, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'default'}}]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000400)='./file1\x00', 0x0) io_submit(0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f00000001c0)={r2, 0x7f, 0x6fb, 0x8}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xc050) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000500)) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x2000000) [ 152.025975] kvm [11018]: vcpu0, guest rIP: 0xcc disabled perfctr wrmsr: 0xc2 data 0xfb000000fa 01:35:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 01:35:14 executing program 5: bpf$LINK_GET_FD_BY_ID(0x23, 0x0, 0x0) 01:35:14 executing program 1: setresuid(0xee00, 0x0, 0xee01) setresuid(0xffffffffffffffff, 0xee00, 0x0) 01:35:14 executing program 2: setresuid(0xffffffffffffffff, 0xee00, 0x0) openat$tun(0xffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) 01:35:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008aeef, 0x0) 01:35:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0xf2ffffff, 0x7b, 0x1b, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f"}, 0x48) 01:35:14 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000700), 0xfce3) syz_open_dev$tty1(0xc, 0x4, 0x1) 01:35:14 executing program 1: bpf$MAP_CREATE(0x1d, &(0x7f0000000080), 0x40) 01:35:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4010aef5, &(0x7f0000000140)) 01:35:14 executing program 0: pselect6(0x40, &(0x7f0000000000), 0xffffffffffffffff, 0x0, 0x0, 0x0) 01:35:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x12a}, 0x40) 01:35:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000140)) 01:35:14 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x103002, 0x0) write$char_raw(r0, &(0x7f0000000400)={"b1"}, 0x200) 01:35:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0xf2ffffff, 0x7b, 0x1b, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f"}, 0x48) 01:35:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x74d8) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x40001, 0x2}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000000)=0x1000) clone(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)=""/255, &(0x7f0000000280)=0xff) 01:35:14 executing program 2: bpf$LINK_GET_FD_BY_ID(0xe, 0x0, 0x0) 01:35:14 executing program 3: 01:35:14 executing program 4: 01:35:14 executing program 3: 01:35:14 executing program 2: 01:35:14 executing program 1: 01:35:14 executing program 3: 01:35:14 executing program 2: 01:35:14 executing program 4: 01:35:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0xf2ffffff, 0x7b, 0x1b, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f"}, 0x48) 01:35:14 executing program 3: 01:35:14 executing program 0: 01:35:14 executing program 2: 01:35:14 executing program 1: 01:35:14 executing program 4: 01:35:14 executing program 3: 01:35:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0xf2ffffff, 0x7b, 0x1b, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f"}, 0x48) 01:35:14 executing program 4: 01:35:14 executing program 2: 01:35:14 executing program 3: 01:35:14 executing program 1: 01:35:14 executing program 0: 01:35:14 executing program 4: 01:35:14 executing program 3: 01:35:14 executing program 2: 01:35:14 executing program 4: 01:35:14 executing program 3: 01:35:14 executing program 1: 01:35:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:35:14 executing program 0: 01:35:14 executing program 2: 01:35:15 executing program 1: 01:35:15 executing program 4: 01:35:15 executing program 3: 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 3: 01:35:15 executing program 4: 01:35:15 executing program 1: 01:35:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 3: 01:35:15 executing program 1: 01:35:15 executing program 4: 01:35:15 executing program 3: 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 4: 01:35:15 executing program 1: 01:35:15 executing program 3: 01:35:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 4: 01:35:15 executing program 1: 01:35:15 executing program 3: 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 4: 01:35:15 executing program 1: 01:35:15 executing program 3: 01:35:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:15 executing program 0: 01:35:15 executing program 2: 01:35:15 executing program 4: 01:35:15 executing program 3: 01:35:15 executing program 1: 01:35:15 executing program 4: 01:35:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:15 executing program 2: 01:35:15 executing program 3: 01:35:15 executing program 0: 01:35:15 executing program 1: 01:35:15 executing program 4: 01:35:15 executing program 1: 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 3: 01:35:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:15 executing program 4: 01:35:15 executing program 2: 01:35:15 executing program 1: 01:35:15 executing program 0: 01:35:15 executing program 3: 01:35:15 executing program 4: 01:35:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:15 executing program 1: 01:35:15 executing program 3: 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 1: 01:35:15 executing program 4: 01:35:15 executing program 3: 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 1: 01:35:15 executing program 2: [ 153.778568] 9pnet: Insufficient options for proto=fd 01:35:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:15 executing program 0: 01:35:15 executing program 3: 01:35:15 executing program 1: 01:35:15 executing program 4: 01:35:15 executing program 2: 01:35:15 executing program 0: 01:35:15 executing program 1: 01:35:15 executing program 4: 01:35:15 executing program 2: 01:35:15 executing program 3: 01:35:15 executing program 1: [ 153.968507] 9pnet: Insufficient options for proto=fd 01:35:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:16 executing program 4: 01:35:16 executing program 3: 01:35:16 executing program 2: 01:35:16 executing program 0: 01:35:16 executing program 1: 01:35:16 executing program 3: 01:35:16 executing program 0: 01:35:16 executing program 4: 01:35:16 executing program 2: 01:35:16 executing program 1: 01:35:16 executing program 4: [ 154.122337] 9pnet: Insufficient options for proto=fd 01:35:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:16 executing program 3: 01:35:16 executing program 0: 01:35:16 executing program 2: 01:35:16 executing program 4: 01:35:16 executing program 1: 01:35:16 executing program 1: 01:35:16 executing program 3: 01:35:16 executing program 4: 01:35:16 executing program 2: 01:35:16 executing program 0: 01:35:16 executing program 3: 01:35:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:16 executing program 2: 01:35:16 executing program 0: 01:35:16 executing program 1: 01:35:16 executing program 4: 01:35:16 executing program 3: 01:35:16 executing program 2: 01:35:16 executing program 1: 01:35:16 executing program 3: 01:35:16 executing program 0: 01:35:16 executing program 4: 01:35:16 executing program 2: [ 154.536470] 9pnet: Insufficient options for proto=fd 01:35:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:16 executing program 3: 01:35:16 executing program 1: 01:35:16 executing program 0: 01:35:16 executing program 2: 01:35:16 executing program 4: 01:35:16 executing program 3: 01:35:16 executing program 0: 01:35:16 executing program 1: 01:35:16 executing program 4: 01:35:16 executing program 2: [ 154.677547] 9pnet: Insufficient options for proto=fd 01:35:16 executing program 3: 01:35:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:16 executing program 2: 01:35:16 executing program 0: 01:35:16 executing program 1: 01:35:16 executing program 4: 01:35:16 executing program 3: 01:35:16 executing program 2: 01:35:16 executing program 0: 01:35:16 executing program 1: 01:35:16 executing program 4: 01:35:16 executing program 3: 01:35:16 executing program 1: [ 154.861209] 9pnet: Insufficient options for proto=fd 01:35:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:16 executing program 4: 01:35:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x85810e63e03d1c5a) 01:35:16 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000003880)=[{0x0}, {&(0x7f0000002740)="97", 0x1}], 0x2}}], 0x1, 0x0) 01:35:16 executing program 1: 01:35:16 executing program 3: 01:35:17 executing program 3: 01:35:17 executing program 2: 01:35:17 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') write$tun(r0, 0x0, 0x0) 01:35:17 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @private=0xa010101}, @ethernet={0x0, @remote}, 0x44c}) 01:35:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') write$tun(r0, 0x0, 0xf) 01:35:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:17 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="ff0700", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 01:35:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000110001", @ANYRESOCT], 0xa0}}, 0x0) 01:35:17 executing program 1: renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) 01:35:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfff, 0x10b382) sendfile(r0, r0, 0x0, 0x24002d00) 01:35:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0xfffffffffffffeae, &(0x7f0000000140)="3e787f21a619b0c4d4297f15b1977d55441ccb0a182715a961d27e6e0ab5057ede343241e8fde2ee31393dde2272e6ffb80aaa82d354c7059cb7a16e1de000255dd5b386b3107edff4e59c9b8f18152af32ccb7e5aabe4462f2c42a1ff80ad811277fa6b576cf6126dbda91b2fa5e4738d767295cc8ede7a88c99246514dbfc9b83155d8e63bedcb78ccb6298e77bc68c2fecb946a752aa273dd9da6ca12239293ddaac3887100642fc58fecd1b4aaf57aa2a3b5b691c0b58f556c70f5ab714e58da2e29d0fba3a18a5afbb29564"}) 01:35:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x48, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LABEL={0x14, 0x3, 'wg2\x00'}, @IFA_CACHEINFO={0x14}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x48}}, 0x0) 01:35:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000000)={'veth1_to_bond\x00', @ifru_ivalue}) 01:35:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr, 0x4000}, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, @l2={0x1f, 0x0, @none}, 0xfffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x7}) [ 155.115758] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') fcntl$notify(r0, 0x402, 0x20) fcntl$notify(r0, 0x402, 0x0) 01:35:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x2162) 01:35:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') fcntl$notify(r0, 0x402, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') fcntl$notify(r1, 0x402, 0x0) 01:35:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @remote}, @ethernet={0x0, @remote}, 0x44c}) 01:35:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000000), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv4_deladdr={0x48, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LABEL={0x14, 0x3, 'wg2\x00'}, @IFA_CACHEINFO={0x14}, @IFA_BROADCAST={0x8, 0x4, @remote}]}, 0x48}}, 0x0) 01:35:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @rand_addr, 0x4000}, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x4}}, @rc={0x1f, @none, 0xad}, 0xfffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x7}) 01:35:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000015000100000000000000000002000000", @ANYRES64=r0], 0x48}}, 0x0) 01:35:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000040)={'vlan0\x00', @ifru_ivalue}) 01:35:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008e00)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000035c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @empty, @local}}}], 0x18}}], 0x1, 0x0) 01:35:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001440)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@dontfrag={{0x10}}], 0x10}}], 0x1, 0x0) 01:35:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f0000000280)=[{0x0}, {0x0, 0x62}, {&(0x7f0000000000)="57b8288205e6cf7ff15164169bf87d51471827", 0x1}], 0x3}, 0x0) 01:35:17 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000040), 0x7ffffffffffff91, 0x0) [ 155.355097] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 01:35:17 executing program 1: renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) 01:35:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$tun(r0, 0x0, 0xffffffffffffff7d) 01:35:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x3}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="5dbc2063", 0x4}, {&(0x7f00000001c0)="1bb97a6ce717fda09c386c5566526fb8eb3e1b85c85ce2ce2c6b21793a57d9b784af", 0x22}, {&(0x7f0000000300)="632841554904fea3467a336d859771256780b0f5602b415054d0a7699dee2c0fcd6f1f5c755937bdde68b36daf571efc88fa8c0cd24bc87c0c2980056a5becebb5e7fe414fe256c66b9bc4a6756af0755beeee86d6e347d6e86bb7076c19474e0c27ae8e4a85d3ab5dab6e36f6b7560e7becdbb38424dd373fe01ddc933d593c0fa40cc9c7861159cc3e07f7fb8358ffb77cac9e7ce42aae4930325547b0473a57ea795b5042f70f81d8e83541855f515acf9d882dd45edbb5fec7ab939638accc66a8f14142b89d5074acefda98845a90cc4b8d857e0b1ebd1ebc289ee65b574c700c20e031932340a2ba49f3bb8875e1d2aff196ea95704c98fd93302bb42f73bba43519b442623908aea2c456c5832c71e90126248bd4cf73e0c2b4f37c4d591c5f3994d23d0c45cebd526b8bcc17501c000ca890780a237ce1f8316700831908c7e7d4bbbc2077dcaf0d40f5cb8aa177344c8acd2091a751544510a4ad5aede0bba8492f81464f580e258c483fa4f941da077b96582b4f2fca782ea433bc597f9cc9139cce200b1342b89331b9cbf8be84e071587d8b0882d50586da35c19c882f149a9c4524dfebd4997f37ab5f7f68eb7a2d8762a26089088cd2d3b3aec9c29f19c8012b2af22cf116480bd963aac0bb86d5cc84df086e11f5f15b735a7096394a6d6804c2448b5ef3f102ec67c4fa0ee455cc7bc59cf9a3f65dfba32082784b41f4898549ec03888b2f69f5eb6c18338c39ad77fc82e4663f2b7efcea9682af6878dc6ab52e346dddf4d3c9f2764720bcf5b535863268e977cdd773e314f0b93879fef6ca79db681f13b62f5c66e73432084ef614f92e615f9e3cb02eb3e3cd7d508971670cdbbed9dc81ca15db9ed61bd38a80d617f6c1ac13b9580c14199d5061b2533793029d7acf4ca1bbb7e58c6f14dc19db4a8b19ad147f1d6eb3f7ffd3c3c71ee926cc294b6f764f90af8b0e05f7e1722e8f96f340b3c686b8872ef735ff0132bf4dcec0ff4429e12e9aa475243da6396a0a0f088453a248e907b789830ce725511e10650d79495b2bd61d35b62e97164df377e0a5a3383c44513e565f264cdbfd9e852ee47bbd4dfef02000781553653b47b4af1c216815c251140a75cff14bc7702ed341d7afd98db7e11034e684fa27d3ea5c0cc34f2a1562836801ee88d97628edb2dd32554d54b6c4e150230e6e4363776e984ac8e6a2180a1d4ee64bb12f1ca7d025b563c0dda09ce4f4a1dc5d40daec9e73cd59cf24313ad76aed1196c5a5d5482d38e0d0a829142645e0d9bd76b375facfe2d0d0bac47ecd602ad1fc90b7fa9959a3df0abee5e7438aa1e359c63a7b123aef1dd03d716a3358347928c1869ebc8089f26b7ff9623672cb582c81ef1847eea478e63bad376d89c00bc6447e4dc89cb60d6d40a78b98fbdb8a722dd4f315ebe7ae0af8b40631cf5274bcf639c71060dc4e98bcac3cb883e789ef3b87a71100b82f6b16c09039c97a407d576739cbf827fbcbc0820d9bdf4153d054368224c59d4b0a4a23f02c7e9ceb473fb232dd4e0eb0b7ef107167becd6a4e756fcce310d9d675d0cd0105d6d9a8585b46eb039e0140b353bb4c9756fb5e47331482e7fba3b24e565f4f045dd00c918b7548c99246964b456b52f7cd1f2398c82e8e4d1605abc3e499e24d9f44d7a336521b940e85122d36a2f8b0d5ae20e5f5be18593796540ebda1b3649313124b65a1f854efbcb932abdb478507e2b45040b8474ad039e2fe809996b297251e8fbf848d92173b45339d2139a68265dae610d097fadc1cd37b2137a75e5bc3fa7399fafd3e8562373fb983c30b29b1c5a24b8d2c07c32662071feba472b88419493c0a47a6562a995e05bb36b4766fb3ab876770be1f9b70e4d2770c90a7c766a5ef649c8f9d0ff876e16758a75b16b3383ab692d781874bf5082e66d18e0aa967edfa9db15ecd26d466f0cd7a1b293fe4a010f607250716020567c5c166484726b862e7c4bfab7c3f05387084ebe1ca346576d2548de271acaec8d453e655f999c0b5e16c806b520079a97a3270adb31b07adc1b3dfd66cb54541bf4797216050019d8e3d0e9b5731ae5a86a70670715325523f6c21488bdd64e6b3b17319787af516017582b0098a2895bfdc9371e29542347e5c74e70c00f71bee9ad054616a9d0a69f19ebc269161087b31003f1cc0ad140c382da23274b024b71b40a2da8628ea49ac91b592e2008222163d10b09b395451364bce10d40b3d29bf758235f829d52f0d742c08b18c5e0f086c32399479e27988774c1af02ae79928facfd2a97201c6f3b4d01f07a145e6eab818f9e4ee940b9e698e383c95f62997f45ca6964cd9dbee2f20d2d7851302a502ba199b5c3a86ad610ab5c763f665ee21d62909e6975320633d9961bd1f30922150a46e098d98f14556e123cd7bae510c19060f62f2b05fb52089bf7092d81643f569936484858ae1c1e9ae91fe5fe3771301fdc96e1cd2b3b894d149b6dd80d196b141a98463177a2e74ee230ae25e216b1419e75ec98de2871442a2f0ccc449f1395729b663a187f2cae433146d0f45138a8162a669fbf4e7d5de50f7aabffdf5f21a3e70351ae673b4137b9734b93c5c9f701fc6e769729102adf645e3ab254f6846c9c0cf0c2947a72ae933bd6bcb66a6d38e7720feeaaf8bd474edf3c2d9bf721d369f098a1917d73ff346b89e6ed16136ee363b61c803ec3ef7ccaaa006a8072efdbc97fa89a005a54e92a3aa6c695f08fff8ca24bd5980962ebc9dc004d40f63c0796fd4a8ae33a28f24f0bf9dcab79168a73ef7bf6b2b47149bf5c97a4bfea61f58fad567cc238f2736533f5e8a1c21f54c4844355e01eee701824bc5424767739bc2a9b42465439a1e0ac4d6ca3071f78af0e382cd2eee989e3d530cd4861bc6a812a9634f3c5a83613863e5a9413bf5b8f3723cde24793fb9bc737fb666b0d4a2138b4480c53ac503a91dd8766fe8313fe6b7cbf0fddca83a74c82a1ef2e2a49e235c507e91fac9e4e0b4ff86ba065033b26ec84fd909326464bdaae72754e79aaf4ea11d233cf82b093365b3459b08804c9a3facfad7c1155cf5af1f6d9b8b406d8630d8d8f87b208c1f223ca131032dca0b27925191045e9a10dda6fed9ea79804270d74aab7ec8e49790d67d8165876c24a4c7b6d4e8760ea9d797aea6257445a786f7a8c13d3e32ea2521e24a80fb462af63aa3a9a22adc56fa7725795c7cfaaa4eea2564e44cf0a321ee4c2effc7bc25e74d862262cab02b147a3939ff907c363a63f1fc6946f04a6c12e3e80e7708c7caed0eaded5c787b594f3da6c07a42d434258cb5779f9d338680b4301ef074c643d8510ff1a3847bb489b7196c945760e63fdf21e78b9995333f37d9416e2b06e365c033eb96a829a539dee4bcb4d4396092340d1d9f73a9d034698afb5095a43677fc7333a2ea062858ce840c3d9a320df4c0766ff6cf98524e8f8c6172aadf173286ce3e5fccb16f8b826af2d339f353cebc3ac5c1ca657783798c500b786bf1fbabbe99718abe5702f4b4206e11863c7c07a91ba0147d7a39cd9ddc61d60eaa7236a08de8de39922d4fe00717f6d0cafbdff13b46d548c0597f257127a0b704cf815421810cf47831520ca76f9b64d41af0164653894df6cc0ca1e03d883ba265ab05975f106a956ab90340094d6f93ed7c36e3409cd606767033f209be7733351373b7faea6275cee827cbe09a28eba81beb2dfb675a45e5fbaea35d78d92e142d77c025dea569ba5bfe8253178e551fc0449523f98ed3e775d39cb0271018840b73c7d913f26037e53d2c0edcda24fbb1c177ddc0c27c9840ffc4f2f565220bd168b1e3befab74531342a85cffb5ea82c4fb21e13cc382a91d39da44102432dd7ee9e297f744d9fd86127005a19881537a4e9a2a5ef729d9dfc346d0851333753c8bf7796c49ce8d459de4ae706e6826ab2c11a080176345e530dd1231d621b8de450d656b2efbe336a9ef26a118e4e7aff1c0519", 0xb22}, {&(0x7f0000001300)="3fc3ce", 0x3}, {&(0x7f0000000200)='W', 0x1}], 0x5}, 0x0) 01:35:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000001440)={0x0, @xdp, @ethernet={0x0, @dev}, @rc, 0xf9ce, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)='vlan1\x00'}) 01:35:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000000)={'veth1_to_bond\x00', @ifru_ivalue}) 01:35:17 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 01:35:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000002740)="97", 0x1}], 0x1}}], 0x1, 0x0) 01:35:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000003180)=[{{&(0x7f00000005c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_ttl={{0x10}}], 0x10}}], 0x1, 0x0) 01:35:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="5dbc2063", 0x4}, {&(0x7f00000001c0)="1bb97a6ce717fda09c386c5566526fb8eb3e1b85c85ce2ce2c6b21793a57d9b784af", 0xffc5}, {&(0x7f00000015c0)="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", 0x587}, {&(0x7f0000000380)="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", 0xae}, {&(0x7f00000002c0)="4be1c856c3176ae8b3173a50ddc7c0d31b684a28d99efdaf0a28ca1cfe1ac3a7cb59fae4af634292861fa2b89232e92333d49e208b9e4da41cfc2d63319c8c604dc8bd5262a6d685b3b14cb157730450cdc1395a3772993469531c5cb239a11dcc42d86f211ad8c651bff11e7d155d0dbe5b968c6f17a243aa17640872ec9ac773cad4509bb8abd16036051a13c445397423615873cf83ba70f148a88619f442e63d3986f6bcbb1f4290bc1327b23a4fda7ad121fddaf9", 0xb7}], 0x5}, 0x4000800) 01:35:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:17 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) 01:35:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 01:35:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') write$tun(r0, 0x0, 0xf) 01:35:17 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') fcntl$notify(r0, 0x402, 0x20) fcntl$notify(r0, 0x402, 0x2) 01:35:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_flags}) 01:35:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001140)=@buf={0x400, &(0x7f0000000140)="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"}) 01:35:17 executing program 0: pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, 0x0, 0xfffffffffffffd08) write$binfmt_elf64(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 01:35:17 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f000000c500)=[{{&(0x7f00000012c0)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x0) 01:35:17 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) 01:35:17 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) 01:35:17 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:17 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xc}], 0xc}}], 0x1, 0x0) 01:35:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@flowinfo={{0x10, 0x29, 0xb, 0x100}}, @hoplimit_2292={{0x10}}], 0x20}, 0x0) 01:35:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c, 0x0}, 0x0) 01:35:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000150001000000000000000000020000001d97"], 0x54}}, 0x0) 01:35:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001580)={&(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote, 0x4}, 0x1c, 0x0}, 0x0) 01:35:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'macvlan1\x00', @ifru_names}) 01:35:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="ab386b3699e14fcdd9e22cf018d1a2fb51be3ac0b755943014403d29bb5e2d49aa37967dc2e6d2576f15cb88ac9c0a887e1b94797eb666856b1ae3c26346a52212d515af988b2d42e757a51801da64f9f063b53193f5c746ddb100c5e8f9db22d044516194cce050b57b031c1bdbc9a7168db145d06d5eecb64261b51ada81f88c86586d9d5753b58a756d5a616ee8374ca8c4c059735c1dc41946ce7d7f19866ff65d", 0xa3}, {&(0x7f0000002740)="975f051d756686af88c2497b998371a1b7fb192dfb40a40f4b51090b635fc6cee2786427cf7b01fa1527df14e01de8003f369ea192f9f74df863689a3d0c5ca7d6d2d26d9cb2d42a35f4c2f73ec1c8e20aad5332a8bcc509eb0f16b63caabf7dbc9a9ced6c4c2469679401061c222391c685442a91526b78f561d37ce408efe307930d60d05e12fb2959f0ac86c0f9374304e0058f83e346b3e81007af7bc6f485bffb644e8843a63fb088db96b4a1660b75cc384fc25a5c5409e4bab7", 0xbd}, {&(0x7f0000002800)="140ebf25eec92c1253609ff8f48090c455c7453a6af3d1041629ea7e88f64ca72c1ef22858f436f6c6c66f7082ddc77acd72b30070e174998d6f906ed35f26e916ba7334d9128ccf707810a35d59ff67a5594de7598144b775b0ef50196772c2f3e600f16824ea18f1207493a4690887f97c018776662443c00a", 0x7a}, {&(0x7f0000002880)="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", 0xce7}, {&(0x7f0000000100)="8eec26f150237fbe26495f5cd7859e4b8012b2bf12f41e6afe75c97a4d433910e79804fa6868fa6a43530f49eca2f20ed5a86be06a9e8ef7281a75f8c1cb6f3190e24e8e714e79d00061fb9c97c47d0e6518b4eed3cf036ad433bbe6aa6cd14eb36a83d2cca83ec24cd616eff1a020eaa51e48cad856062161e478284b94294f6688aa77760df5c682ac46bf03b79cef493a0080b6cd5376857f7199000276d8e908668d0c2d3a8eaa6cb1700f67855c0862c0064f4b6c438b4009a1bc4c24746b36506cf38d19ae5666bec4b8be6e96a7717038a5270f9614a1eaf0a3ce2c", 0xdf}, {&(0x7f0000000200)="49007de56ddf4635919ec65391f9fc2e15e08da502ad29e84d3b710f8e7cbda0255823045a581bdb70652a5e39e097139d8e466d5a2f6ead345654b77206b4c8fadf9476f4a5e6a5e91e230195ac56ae53ed4a9de3dfc0877825f267db4c906ebd", 0x61}], 0x6}}], 0x1, 0x0) 01:35:17 executing program 5: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'veth1_to_bond\x00', @ifru_ivalue}) 01:35:17 executing program 0: openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0xe) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) lchown(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x15, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 155.887656] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:18 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 01:35:18 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') fcntl$notify(r0, 0x402, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') 01:35:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, @tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x3}, 0x3}}, @ethernet={0x6, @remote}, 0xfffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x3, 0xb}) 01:35:18 executing program 1: 01:35:18 executing program 5: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @dev}, @tipc=@name, @ethernet={0x0, @remote}, 0x44c}) 01:35:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000018c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x0) 01:35:18 executing program 5: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='loginuid\x00') write$tun(r0, 0x0, 0x4d) 01:35:18 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x40000042, 0x0, 0x0) 01:35:18 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 01:35:18 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0x0, 0x0, 0xdc, 0x0, 0x194, 0x170, 0x170, 0x194, 0x170, 0x3, 0x0, {[{{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'team0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x284) syz_emit_ethernet(0x42, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @broadcast}, @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}, 0x0) 01:35:18 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ethernet={0x0, @remote}, 0x44c}) 01:35:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$tun(r0, 0x0, 0x0) 01:35:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000007ac0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, 0x0}}], 0x1, 0x20000090) 01:35:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 156.940690] 9pnet: Insufficient options for proto=fd 01:35:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x0, @dev}, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ethernet={0x0, @remote}, 0x44c}) 01:35:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') fcntl$notify(r0, 0x402, 0x2) 01:35:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000001c0), 0x4) r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x100, 0x0, 0x0, {{}, {@void, @void}}, [""]}, 0x14}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 01:35:19 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040)={0x77359400}, 0x8) 01:35:19 executing program 2: 01:35:19 executing program 0: [ 157.039004] 9pnet: Insufficient options for proto=fd 01:35:19 executing program 4: 01:35:19 executing program 2: 01:35:19 executing program 1: 01:35:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 157.155217] 9pnet: Insufficient options for proto=fd 01:35:19 executing program 3: 01:35:19 executing program 0: 01:35:19 executing program 2: 01:35:19 executing program 4: 01:35:19 executing program 1: 01:35:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:19 executing program 2: 01:35:19 executing program 0: 01:35:19 executing program 4: 01:35:19 executing program 1: 01:35:19 executing program 3: [ 157.809109] 9pnet: Insufficient options for proto=fd 01:35:19 executing program 2: 01:35:19 executing program 0: 01:35:19 executing program 3: 01:35:19 executing program 4: 01:35:19 executing program 1: 01:35:19 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:19 executing program 2: 01:35:19 executing program 3: 01:35:19 executing program 4: 01:35:20 executing program 1: 01:35:20 executing program 0: [ 157.935178] 9pnet: Insufficient options for proto=fd 01:35:20 executing program 3: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 4: 01:35:20 executing program 2: 01:35:20 executing program 0: 01:35:20 executing program 1: 01:35:20 executing program 3: 01:35:20 executing program 1: 01:35:20 executing program 3: 01:35:20 executing program 4: 01:35:20 executing program 2: 01:35:20 executing program 0: [ 158.065214] 9pnet: Insufficient options for proto=fd 01:35:20 executing program 4: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 2: 01:35:20 executing program 0: 01:35:20 executing program 1: 01:35:20 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x3, 0x4000) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000100)=0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$fuse(0x0, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) r3 = gettid() tkill(r3, 0x3d) setpgid(r3, 0x0) 01:35:20 executing program 4: 01:35:20 executing program 2: 01:35:20 executing program 0: 01:35:20 executing program 1: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 4: 01:35:20 executing program 2: [ 158.226056] 9pnet_virtio: no channels available for device éq‰Y’3aK 01:35:20 executing program 0: 01:35:20 executing program 3: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 1: 01:35:20 executing program 4: [ 158.278237] 9pnet_virtio: no channels available for device éq‰Y’3aK 01:35:20 executing program 2: 01:35:20 executing program 0: 01:35:20 executing program 1: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 4: 01:35:20 executing program 3: 01:35:20 executing program 2: 01:35:20 executing program 0: 01:35:20 executing program 1: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 2: 01:35:20 executing program 4: 01:35:20 executing program 3: 01:35:20 executing program 1: 01:35:20 executing program 0: 01:35:20 executing program 2: 01:35:20 executing program 4: 01:35:20 executing program 3: 01:35:20 executing program 1: 01:35:20 executing program 4: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 0: 01:35:20 executing program 2: 01:35:20 executing program 3: 01:35:20 executing program 1: 01:35:20 executing program 0: 01:35:20 executing program 4: 01:35:20 executing program 2: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 01:35:20 executing program 3: 01:35:20 executing program 1: 01:35:20 executing program 4: 01:35:20 executing program 0: 01:35:20 executing program 2: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 01:35:20 executing program 3: 01:35:20 executing program 2: 01:35:20 executing program 0: 01:35:20 executing program 4: 01:35:20 executing program 1: 01:35:20 executing program 2: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 01:35:20 executing program 0: 01:35:20 executing program 3: 01:35:20 executing program 4: 01:35:20 executing program 1: 01:35:20 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:20 executing program 0: 01:35:21 executing program 2: 01:35:21 executing program 3: 01:35:21 executing program 4: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:21 executing program 1: [ 158.962153] 9pnet: Insufficient options for proto=fd 01:35:21 executing program 4: 01:35:21 executing program 3: 01:35:21 executing program 1: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 159.015224] 9pnet: Insufficient options for proto=fd 01:35:21 executing program 0: 01:35:21 executing program 2: 01:35:21 executing program 3: 01:35:21 executing program 4: 01:35:21 executing program 1: 01:35:21 executing program 0: 01:35:21 executing program 2: 01:35:21 executing program 3: [ 159.114240] 9pnet: Insufficient options for proto=fd 01:35:21 executing program 4: 01:35:21 executing program 1: 01:35:21 executing program 2: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:21 executing program 0: 01:35:21 executing program 3: 01:35:21 executing program 2: 01:35:21 executing program 0: 01:35:21 executing program 4: 01:35:21 executing program 1: [ 159.268515] 9pnet: Insufficient options for proto=fd 01:35:21 executing program 3: 01:35:21 executing program 2: 01:35:21 executing program 0: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:21 executing program 4: 01:35:21 executing program 1: 01:35:21 executing program 3: 01:35:21 executing program 0: 01:35:21 executing program 4: 01:35:21 executing program 1: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:21 executing program 2: [ 159.372251] 9pnet: Insufficient options for proto=fd 01:35:21 executing program 3: 01:35:21 executing program 1: 01:35:21 executing program 4: 01:35:21 executing program 0: [ 159.447627] 9pnet: Insufficient options for proto=fd 01:35:21 executing program 2: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}], [], 0x6b}}) 01:35:21 executing program 3: 01:35:21 executing program 1: 01:35:21 executing program 4: 01:35:21 executing program 0: 01:35:21 executing program 2: 01:35:21 executing program 4: 01:35:21 executing program 3: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}], [], 0x6b}}) 01:35:21 executing program 1: 01:35:21 executing program 0: 01:35:21 executing program 2: 01:35:21 executing program 4: 01:35:21 executing program 3: 01:35:21 executing program 1: 01:35:21 executing program 0: 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}], [], 0x6b}}) 01:35:21 executing program 3: 01:35:21 executing program 1: 01:35:21 executing program 0: 01:35:21 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000140)=""/159, 0x26, 0x9f, 0x1}, 0x20) 01:35:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x46, 0x0, 0x0) 01:35:21 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000140)=""/144, 0x2a, 0x90, 0x1}, 0x20) 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x34, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}}, 0x0) 01:35:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x2}, 0x0) 01:35:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0xc11, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x34}}, 0x0) 01:35:21 executing program 4: r0 = socket(0x28, 0x1, 0x0) accept$alg(r0, 0x0, 0x0) 01:35:21 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000004c0)={{r1}}) 01:35:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc45, 0x1}, 0x40) 01:35:21 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x10d, 0x2, &(0x7f0000000000)={@private, @empty}, 0x4) 01:35:21 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 01:35:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000001) 01:35:21 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8929, &(0x7f0000000140)={'batadv0\x00'}) 01:35:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x84, 0x6, 0x0, 0x0) 01:35:22 executing program 4: bpf$OBJ_GET_PROG(0x2, 0x0, 0xdc) 01:35:22 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x6, 0x7, &(0x7f00000003c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) 01:35:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:22 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='S', 0x1, 0x0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) 01:35:22 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x6, 0x10, &(0x7f00000003c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) 01:35:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x21, 0x0, 0x0) 01:35:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x38, 0x0, 0x0) 01:35:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIGETBSZ(r0, 0xc0045878, 0x0) 01:35:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x800, 0x5}, 0x40) 01:35:22 executing program 1: getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 01:35:22 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:35:22 executing program 3: socketpair(0x23, 0x0, 0x8, &(0x7f0000000100)) 01:35:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 01:35:22 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x160, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe95}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x160}}, 0x90) 01:35:22 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0x200000e8) 01:35:22 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0xffffffb2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:35:22 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x17, 0x0, 0x0) 01:35:22 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xf0ff7f00000000}}, 0x0) 01:35:22 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x6, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 01:35:22 executing program 2: 01:35:22 executing program 0: r0 = socket(0x28, 0x1, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 01:35:22 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 01:35:22 executing program 1: socket(0x26, 0x5, 0x20000000) 01:35:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x60}, 0x0) 01:35:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7baf48e6d2885a09a87507ebf4e43bc0609b199b6ed90e0ebcdac5f7a860c00269c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81070545cab5d5b0da0f0575cc2727e8d974927676468582d8621c3ac94712ed9cf6b40b3cf252a47c05af3a30d57cc3ed67d1867b54d24e2da18568c3b0f24b52616bf84d3b00127473e6ba922aff649609d40b47ec349ccba3ce8d530ffff19a6471bf3abc742d9cbcfb964b13831034694a6aad86cf08a2c7b2235dc99de9aa3e6b77c7a2877261ed72da90864987f30926c9013eec3b86836ae504479f60b0ec9204d2b85627aa5a79f670000000000000000000000008f02712c3d8fc4e2686e21a855e823887196d4f4e9fa013d2aef4a3b5092be4d6852b88317c5adbbdb0015f89e9939bc424d1bafe5725c8a4047b91da3768c1ca6a4410009f95d4ba21068285afa8d3b4a6893d3626ab5becbcdb887af2c85c2d9ab09b5dd7d384406d373650bf7b2ff4602aec5eea200000064881c560c371a08e051374cf05c921a06fb78183e7e68de9dabe35f1a5d50f20209eec6eb2c510b2cc8d95e4e5b365d1e1298f431432010e100002f0c88283c1e45fd73dd7d54184da3b4b2019ae40954f0c2d56a7b54d1a2a958cce0203d01cc8bf34daa3f69feafbb85387f807debd9268398d91888ecf22a9dc9259dd3be0533700bfcac"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0xfd000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 01:35:23 executing program 0: r0 = socket(0x1d, 0x3, 0x1) recvfrom$phonet(r0, 0x0, 0x0, 0x40000143, 0x0, 0x0) 01:35:23 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a0, &(0x7f0000000140)={'batadv0\x00'}) 01:35:23 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/159, 0x1a, 0x9f, 0x1}, 0x20) 01:35:23 executing program 1: r0 = socket(0x2a, 0x2, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x20000010) 01:35:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 01:35:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:35:23 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, &(0x7f00000005c0), 0x4) 01:35:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:35:23 executing program 2: r0 = socket(0x23, 0x5, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 01:35:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x4b53}, 0x0) 01:35:23 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{}]}]}}, &(0x7f0000000080)=""/168, 0x32, 0xa8, 0x1}, 0x20) 01:35:23 executing program 4: r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) 01:35:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4a, &(0x7f00000005c0), 0x4) 01:35:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000000800000010000000066090000000000000000ffc4587476fff0"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 01:35:23 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5452, 0x0) 01:35:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="14000000022001"], 0x14}}, 0x0) 01:35:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2022) 01:35:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xd}}, 0x0) 01:35:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xa, 0xa, 0x401}, 0x14}}, 0x0) 01:35:23 executing program 4: r0 = socket(0x23, 0x5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 01:35:23 executing program 1: r0 = socket(0x23, 0x5, 0x0) recvfrom$x25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:35:23 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getpeername$inet6(r0, 0x0, 0x0) 01:35:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:35:23 executing program 1: socketpair(0x15, 0x5, 0x7, &(0x7f0000000000)) 01:35:23 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x26, &(0x7f0000000000)={@private=0xe0000000, @empty}, 0xc) 01:35:23 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) 01:35:23 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x4020940d, 0x0) 01:35:23 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x6, 0x25, &(0x7f00000003c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) 01:35:24 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0002001}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 01:35:24 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x10d, 0x2, &(0x7f0000000000)={@private, @empty}, 0xc) 01:35:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) 01:35:24 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 01:35:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003700)=@bpf_lsm={0x1d, 0x4, &(0x7f0000002400)=ANY=[], &(0x7f0000002640)='syzkaller\x00', 0x7f, 0x1000, &(0x7f0000002680)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:35:24 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@private0}, 0x14) 01:35:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:35:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) 01:35:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1a, &(0x7f00000005c0), 0x4) 01:35:24 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 01:35:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='\'h\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0x30}}, 0x0) 01:35:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x31, &(0x7f00000005c0), 0x4) 01:35:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x4}]}]}}, &(0x7f0000000140)=""/159, 0x2e, 0x9f, 0x1}, 0x20) 01:35:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000000140)=""/144, 0x2a, 0x90, 0x8}, 0x20) 01:35:24 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') 01:35:24 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000080)="1669fcaddc4726ed2327bcdc63853a29047be9b7d824a63e16d8f7ebb1810dffa92490280a5f0918da197b2d3669ac13e5481b36fbb10f77fd0ec9fb85b98c433123c97d74c94c8d7d7260f077b7516bdfc4140d522df0cf3388b62325c2c1a9fefee9df27aa5d31e6d768162a68505c3d7532dd0cc0398160d58fc0504e3a8a8e24e43b16072fbe014004c9", 0x8c, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 01:35:24 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 162.129986] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r0, 0x29, 0x13, 0x0, &(0x7f00000000c0)) 01:35:24 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private1}}, 0x24) 01:35:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x800, 0x5, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 01:35:24 executing program 1: socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="276800000000000000000c0000000c00018006000100000000f38f0008000400040000000800060009000000"], 0x30}}, 0x0) [ 162.190027] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000140)=""/159, 0x26, 0x9f, 0x1}, 0x20) 01:35:24 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}]}, @func]}}, &(0x7f0000000140)=""/159, 0x3a, 0x9f, 0x1}, 0x20) 01:35:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000140)=@raw=[@generic], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 01:35:24 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x6, 0x13, &(0x7f00000003c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) 01:35:24 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000140)={'batadv0\x00'}) 01:35:24 executing program 3: r0 = epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x10002000}) 01:35:24 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 162.288989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:35:24 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 01:35:24 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x10d, 0xa, &(0x7f0000000000)={@private, @empty}, 0xc) 01:35:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 01:35:24 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@private, @remote, r1}, 0xc) [ 162.362042] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 01:35:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x0, 0x7ff, 0x800, 0x610}, 0x40) 01:35:24 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/cgroup\x00') 01:35:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c10"], 0x6c}}, 0x0) 01:35:24 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x48, &(0x7f00000005c0), 0x4) 01:35:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4b, 0x0, 0x0) 01:35:24 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x30, 0x0, 0x0) 01:35:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f00000000c0)) 01:35:24 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0xc, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 01:35:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, 0x2, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 01:35:24 executing program 1: pipe(&(0x7f0000001a00)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x541b, 0x0) 01:35:24 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x6, 0xe, &(0x7f00000003c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) 01:35:24 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x13, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 01:35:24 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0xc, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@loopback}, 0x0, @in6=@empty}}, 0xe8) 01:35:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x6}, 0x40) 01:35:24 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x43, 0x0, 0x0) 01:35:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 01:35:24 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 01:35:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIGETBSZ(r0, 0x5421, 0x0) 01:35:24 executing program 1: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f00000001c0)={0x4, 0xffffffffffffff02, 0x7fffffff, 0x401}, &(0x7f0000000200)={0x7, 0x0, 0x8, 0x5, 0x4, 0x0, 0x0, 0x3ff}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000780)={&(0x7f0000000740), 0x8}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x160, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe95}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004010}, 0x90) 01:35:24 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @func={0x0, 0x0, 0x0, 0xb}]}}, &(0x7f0000000140)=""/159, 0x32, 0x9f, 0x1}, 0x20) 01:35:24 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000040)={'batadv0\x00'}) 01:35:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) 01:35:24 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001400)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x6, 0x2, &(0x7f00000003c0)={r1, @remote, @local}, 0xc) 01:35:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) 01:35:24 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0xc0189436, 0x0) 01:35:24 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x8980, 0x0) 01:35:24 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f00000000c0)) 01:35:24 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_pktinfo(r0, 0x6, 0x15, &(0x7f00000003c0)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, 0xc) 01:35:24 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x10d, 0x10, &(0x7f0000000000)={@private, @empty}, 0xc) 01:35:24 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 01:35:24 executing program 1: r0 = socket(0x18, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) 01:35:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000140)=""/159, 0x2e, 0x9f, 0x1}, 0x20) 01:35:24 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIGETBSZ(r0, 0x40049409, 0x0) 01:35:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0xc11, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) 01:35:25 executing program 4: socketpair(0x10, 0x2, 0x1f, &(0x7f0000004040)) 01:35:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x34}}, 0x0) 01:35:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x4}]}]}}, &(0x7f0000000140)=""/159, 0x36, 0x9f, 0x1}, 0x20) 01:35:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x301}, 0x14}}, 0x0) 01:35:25 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000080)=""/173, 0x26, 0xad, 0x1}, 0x20) 01:35:25 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10}]}}, &(0x7f0000000140)=""/144, 0x2a, 0x90, 0x1}, 0x20) 01:35:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000001380)=ANY=[@ANYBLOB="0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008457c501405c4c977264d80b79fa0ade30be951b065e2a377c095ce6d731a9719a"]}) 01:35:25 executing program 1: bpf$BPF_GET_MAP_INFO(0x13, 0x0, 0x0) 01:35:25 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xb}]}}, &(0x7f0000000140)=""/159, 0x26, 0x9f, 0x1}, 0x20) 01:35:25 executing program 4: socketpair(0x18, 0x0, 0x1f, &(0x7f00000000c0)) 01:35:25 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 01:35:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:35:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xb) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:35:25 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x10d, 0xd, &(0x7f0000000000)={@private, @empty}, 0xc) 01:35:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x6, &(0x7f00000005c0), 0x4) 01:35:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={&(0x7f00000004c0), 0x10, &(0x7f00000005c0)={0x0}}, 0x0) 01:35:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x8, &(0x7f00000005c0), 0x4) 01:35:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000001010400000000000000000100000a08e1"], 0x1c}}, 0x0) 01:35:25 executing program 5: syz_genetlink_get_family_id$devlink(0xfffffffffffffffd) 01:35:25 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x1000, &(0x7f00000000c0)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:35:25 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCOUTQ(r0, 0x5421, 0x0) 01:35:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 01:35:25 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x400000000000010, 0x2, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) [ 163.824312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 01:35:25 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:35:25 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreqn(r0, 0x10d, 0x3, 0x0, 0x0) 01:35:25 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x7fffffff}, 0x40) 01:35:25 executing program 0: socket(0x1d, 0x0, 0xfffffff7) 01:35:25 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x3a, &(0x7f00000005c0), 0x4) 01:35:26 executing program 4: r0 = socket(0x2a, 0x2, 0x0) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 01:35:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIONCLEX(r0, 0x5450) [ 163.936042] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 163.962059] IPVS: ftp: loaded support on port[0] = 21 01:35:26 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0x0, 0x4}]}]}}, &(0x7f0000000140)=""/159, 0x36, 0x9f, 0x1}, 0x20) 01:35:26 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0xa) recvmsg(r0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x10040) 01:35:26 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x36, &(0x7f00000005c0), 0x4) 01:35:26 executing program 2: socketpair(0x2b, 0x1, 0x7, &(0x7f0000000240)) [ 164.201190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.246089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:35:26 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x400000000000010, 0x2, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 01:35:26 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xffffff7f}}, 0x0) 01:35:26 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@empty}}, 0xe8) 01:35:26 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891e, &(0x7f0000000140)={'batadv0\x00'}) 01:35:26 executing program 0: bpf$BPF_GET_MAP_INFO(0x17, 0x0, 0x0) 01:35:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1a, &(0x7f0000000400)={@private1}, &(0x7f0000000440)=0x14) 01:35:26 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x400000000000010, 0x2, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 01:35:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x38, &(0x7f00000005c0), 0x4) 01:35:26 executing program 3: r0 = socket(0x28, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 01:35:26 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24) 01:35:26 executing program 4: bpf$BPF_GET_MAP_INFO(0xd, 0x0, 0x0) 01:35:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) [ 164.622704] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.662324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:35:27 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0), 0x4) 01:35:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0) 01:35:27 executing program 0: r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000014}) 01:35:27 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0x8, &(0x7f0000000000)={{{@in=@broadcast, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@local}}, 0xe8) 01:35:27 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000500)) 01:35:27 executing program 3: 01:35:27 executing program 5: 01:35:27 executing program 1: 01:35:27 executing program 2: 01:35:27 executing program 4: 01:35:27 executing program 3: 01:35:27 executing program 0: 01:35:27 executing program 2: 01:35:27 executing program 1: 01:35:27 executing program 0: 01:35:27 executing program 3: 01:35:27 executing program 4: 01:35:27 executing program 5: 01:35:27 executing program 2: 01:35:27 executing program 1: 01:35:27 executing program 3: 01:35:27 executing program 4: 01:35:27 executing program 0: 01:35:27 executing program 5: 01:35:27 executing program 2: 01:35:27 executing program 1: 01:35:27 executing program 3: 01:35:27 executing program 4: 01:35:27 executing program 5: 01:35:27 executing program 0: 01:35:27 executing program 4: 01:35:27 executing program 3: 01:35:27 executing program 0: 01:35:27 executing program 2: 01:35:27 executing program 1: 01:35:27 executing program 5: 01:35:27 executing program 0: 01:35:27 executing program 3: 01:35:27 executing program 2: 01:35:27 executing program 4: 01:35:27 executing program 1: 01:35:27 executing program 0: 01:35:27 executing program 2: 01:35:27 executing program 3: 01:35:27 executing program 5: 01:35:27 executing program 4: 01:35:27 executing program 0: 01:35:27 executing program 1: 01:35:27 executing program 3: 01:35:27 executing program 5: 01:35:27 executing program 2: 01:35:27 executing program 4: 01:35:27 executing program 0: 01:35:27 executing program 3: 01:35:27 executing program 4: 01:35:27 executing program 5: 01:35:27 executing program 1: 01:35:27 executing program 0: 01:35:27 executing program 3: 01:35:27 executing program 2: 01:35:28 executing program 4: 01:35:28 executing program 1: 01:35:28 executing program 5: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 2: 01:35:28 executing program 4: 01:35:28 executing program 1: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 4: 01:35:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x50}}, 0x0) 01:35:28 executing program 2: 01:35:28 executing program 1: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 4: 01:35:28 executing program 1: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 5: 01:35:28 executing program 2: 01:35:28 executing program 1: 01:35:28 executing program 4: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 1: 01:35:28 executing program 4: 01:35:28 executing program 5: 01:35:28 executing program 2: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 1: 01:35:28 executing program 4: 01:35:28 executing program 0: 01:35:28 executing program 1: 01:35:28 executing program 2: 01:35:28 executing program 3: 01:35:28 executing program 5: 01:35:28 executing program 0: 01:35:28 executing program 4: 01:35:28 executing program 2: 01:35:28 executing program 1: 01:35:28 executing program 3: 01:35:28 executing program 5: 01:35:28 executing program 4: 01:35:28 executing program 0: 01:35:28 executing program 1: 01:35:28 executing program 2: 01:35:28 executing program 0: 01:35:28 executing program 5: 01:35:28 executing program 3: 01:35:28 executing program 4: 01:35:28 executing program 1: 01:35:28 executing program 2: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 5: 01:35:28 executing program 1: 01:35:28 executing program 2: 01:35:28 executing program 4: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 1: 01:35:28 executing program 2: 01:35:28 executing program 5: 01:35:28 executing program 0: 01:35:28 executing program 3: 01:35:28 executing program 4: 01:35:28 executing program 0: 01:35:28 executing program 1: 01:35:28 executing program 2: 01:35:28 executing program 5: 01:35:28 executing program 3: 01:35:28 executing program 2: 01:35:28 executing program 4: 01:35:28 executing program 5: 01:35:28 executing program 0: 01:35:28 executing program 1: 01:35:29 executing program 2: 01:35:29 executing program 3: 01:35:29 executing program 5: 01:35:29 executing program 1: 01:35:29 executing program 0: 01:35:29 executing program 2: 01:35:29 executing program 5: 01:35:29 executing program 2: 01:35:29 executing program 4: 01:35:29 executing program 0: 01:35:29 executing program 4: 01:35:29 executing program 0: 01:35:29 executing program 3: 01:35:29 executing program 1: 01:35:29 executing program 5: 01:35:29 executing program 4: 01:35:29 executing program 2: 01:35:29 executing program 5: 01:35:29 executing program 4: 01:35:29 executing program 1: 01:35:29 executing program 3: 01:35:29 executing program 2: 01:35:29 executing program 0: 01:35:29 executing program 5: 01:35:29 executing program 1: 01:35:29 executing program 2: 01:35:29 executing program 4: 01:35:29 executing program 0: 01:35:29 executing program 3: 01:35:29 executing program 1: 01:35:29 executing program 5: 01:35:29 executing program 2: 01:35:29 executing program 4: 01:35:29 executing program 3: 01:35:29 executing program 0: 01:35:29 executing program 1: 01:35:29 executing program 5: 01:35:29 executing program 2: 01:35:29 executing program 3: 01:35:29 executing program 1: 01:35:29 executing program 0: 01:35:29 executing program 4: 01:35:29 executing program 5: 01:35:29 executing program 2: 01:35:29 executing program 0: 01:35:29 executing program 3: 01:35:29 executing program 4: 01:35:29 executing program 1: 01:35:29 executing program 5: 01:35:29 executing program 2: 01:35:29 executing program 0: 01:35:29 executing program 4: 01:35:29 executing program 1: 01:35:29 executing program 5: 01:35:29 executing program 3: 01:35:29 executing program 4: 01:35:29 executing program 0: 01:35:29 executing program 2: 01:35:29 executing program 1: 01:35:29 executing program 3: 01:35:29 executing program 0: 01:35:29 executing program 5: 01:35:29 executing program 2: 01:35:29 executing program 4: 01:35:29 executing program 1: 01:35:29 executing program 3: 01:35:29 executing program 5: 01:35:29 executing program 0: 01:35:29 executing program 2: 01:35:29 executing program 4: 01:35:29 executing program 0: 01:35:29 executing program 1: 01:35:29 executing program 4: 01:35:29 executing program 3: 01:35:29 executing program 2: 01:35:29 executing program 5: 01:35:29 executing program 1: 01:35:29 executing program 0: 01:35:29 executing program 4: 01:35:29 executing program 3: 01:35:29 executing program 1: 01:35:29 executing program 0: 01:35:29 executing program 5: 01:35:29 executing program 2: 01:35:29 executing program 4: 01:35:30 executing program 3: 01:35:30 executing program 0: 01:35:30 executing program 1: 01:35:30 executing program 2: 01:35:30 executing program 5: 01:35:30 executing program 4: 01:35:30 executing program 3: 01:35:30 executing program 2: 01:35:30 executing program 5: 01:35:30 executing program 0: 01:35:30 executing program 1: 01:35:30 executing program 3: 01:35:30 executing program 4: 01:35:30 executing program 5: 01:35:30 executing program 2: 01:35:30 executing program 3: 01:35:30 executing program 4: 01:35:30 executing program 0: 01:35:30 executing program 1: 01:35:30 executing program 5: 01:35:30 executing program 2: 01:35:30 executing program 3: 01:35:30 executing program 1: 01:35:30 executing program 5: 01:35:30 executing program 4: 01:35:30 executing program 0: 01:35:30 executing program 3: 01:35:30 executing program 2: 01:35:30 executing program 1: 01:35:30 executing program 5: 01:35:30 executing program 0: 01:35:30 executing program 2: 01:35:30 executing program 4: 01:35:30 executing program 3: 01:35:30 executing program 1: 01:35:30 executing program 4: 01:35:30 executing program 0: 01:35:30 executing program 5: 01:35:30 executing program 2: 01:35:30 executing program 3: 01:35:30 executing program 1: 01:35:30 executing program 4: 01:35:30 executing program 3: 01:35:30 executing program 2: 01:35:30 executing program 5: 01:35:30 executing program 0: 01:35:30 executing program 1: 01:35:30 executing program 3: 01:35:30 executing program 4: 01:35:30 executing program 2: 01:35:30 executing program 0: 01:35:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x301, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 01:35:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x25, 0x0, &(0x7f0000000740)) 01:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x22) 01:35:30 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000006640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x40) r0 = socket$inet6(0xa, 0x3, 0x21) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:35:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @local}}) 01:35:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x12, &(0x7f0000000000)="eba27c23", 0x4) 01:35:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x21, 0x0, &(0x7f0000000740)) 01:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x40049409, 0x0) 01:35:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) poll(&(0x7f0000000100)=[{r1}, {r2}, {r0}], 0x3, 0xfff) 01:35:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x2, 0x0, &(0x7f0000000740)) 01:35:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)) 01:35:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x8, 0x0, &(0x7f0000000740)) 01:35:30 executing program 3: 01:35:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x13, 0x0, &(0x7f0000000740)) 01:35:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x6ca, 0x0, &(0x7f0000000740)) 01:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x35, 0x0, &(0x7f0000000740)) 01:35:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x4020940d, &(0x7f0000000000)={@private2}) 01:35:30 executing program 4: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000006640)={0x1, 0x4, 0x3, 0x777, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x40) 01:35:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x6c8, &(0x7f0000000000)="eba27c23", 0x4) 01:35:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x1c, 0x0, &(0x7f0000000740)) 01:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x3a, 0x0, &(0x7f0000000740)) 01:35:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 01:35:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x80000001) 01:35:30 executing program 1: sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0xa5a86d17c4fbb5d0) 01:35:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x0, 0x0, &(0x7f0000000740)) 01:35:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() sendmsg$netlink(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000380)={0x10}, 0x10}, {&(0x7f0000002900)={0x10}, 0x10}], 0x2, &(0x7f0000003a80)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}], 0x20}, 0x0) 01:35:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x1e, 0x0, &(0x7f0000000740)) 01:35:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, @qipcrtr, @xdp, @xdp={0x2c, 0x0, 0x0, 0x38}}) 01:35:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x4, 0x0, &(0x7f0000000740)) 01:35:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x3d, 0x0, &(0x7f0000000740)) 01:35:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={0x0}}, 0x0) 01:35:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x6bf, 0x0, &(0x7f0000000740)) 01:35:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 01:35:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x4a, 0x0, &(0x7f0000000740)) 01:35:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xf9, 0x45, "c35e715fb250c6bbd11d4d2a484c50f443ddf9858eb2059e8e965d9b8df9f484a0723d4b44540f80a0d5f28b7533e4542493edab2702b51eec5b0e35c64bfdaefddfa0bc45d275fc86ce03cbdddb374dee61bc401b5a51aafe75fd681fa21fa83d45391b37a09d41cb1171843088095c4b1cd002d9af78ed0aba178f73fcccb166c806044040288c531566171e5e6eeeab9952b003f8ee634ae2d8ebd1a2984d57e6d815ac4e36be567942881d387c7b9f142f4e1f0c7565b9b422bd88b58d8a9abda2739a260e598c2c73a609deb1f68257b47ad19cabbcb259e6aa579b97351c0916b9be57cb5837e432aabc3780dd25caef14c3"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "16e748ee812c9ac99a25c1600f349a014925d3e9ded18eb16c0ecb7255248788156113bf0b4d853ccf504df69fb0bef17ccf2effb624569b922d4fc870ad9d6e0b99587bec09227266770cab8ae627c4ca440120b8dcb8a24aafd4c7d5470a3d70cb8e614bdaba44fe6ee3f1f5ad3d91847d61c5e72f15fe8ee5c2999d95a3288563be0f8ad358b7d1d603fe13250b1580f301771796563929edf2c9fc64177404e135249dcf99d6c627fe3be5a5c5557c9024af0b"}, @NL80211_ATTR_TESTDATA={0xb1, 0x45, "b1540ea40251a61b65d8b1680037071b2d8a14c580989c75cc0f030a6925a8e01a389ff0ce8755487ece618c33f5da1e260d971bf4c93dd03d848fef1742883a001f5332daedf90752435d0da512434da82ceb429f05cf2a87679e11e726723dd4102827a0c13fd62d8aa36ff080bd6be12c09a1c75c1dfdb250cea87972f389cdfb02ae758550b2d975b279fecfacef589894d9d640be72b5c196c9f57f13e1b39bb0833ac57e2a3b6af2116a"}, @NL80211_ATTR_TESTDATA={0xc1, 0x45, "d23f456049f7030d71875348cb8a79010137247b59529e66626f9021195b69b7e2a3787f80ba86f4f059225bd1607ea2ff57b8529b0b9fea79980030f4503b2f24865a0fb43018d2fdb0e30ee4f89b3962f44592a2d3461048207d34e2dc18004d6d761d3e872a560bf21eaba187e176e661a2790d4f2c96bc3a0ff739960edf7a21a8f981c650ef7ed8b209f7b02f694cb016e5ead2c5ad6dbccac21d58d0ae7a012855724fd3735fc6650b30e178cd3ac3719e218eac6b7452e6e3de"}, @NL80211_ATTR_TESTDATA={0xb7d, 0x45, "4e2ba3d9a31639c8a0d6e36533b671a89a00b05726338932838b9b5040c79ddd3c68a3be15a76e7fddc7576c583c50e7572905b4ade3fdc0846c18960ddba779be83bfca6cac86b39d80cb1fc481309944f9ad214545c49bb979b8268ec00e87a267d6100cfe2cb2b3e4a4ebc6ebe6f7c6327fd781e62615629f5adb0f5a9d4be067bfc0a23da0c0de9d7afe409e0d231409c8aaed749361596120910943218796e0aedec4a6b9469a278b21c62eee158b286a30fd332b9488598d7db7dba2fb42f593215284fb1acc337c4aba7fbfa9c58bd4249d088687d5de74c31b498db950d4b91d6d1ed1c25a215595660107da4f0a7a7af4f020f6611169af9081a12cf8d114546d1e83cebe61736b97c2b28b5a4406c1ffb1ad54bd6a14b4a3b84560bfdc89ea574687bc0d7085a2a28324ab834eabf1664293b11fe39682f3c0db61cf7e9c4289be0b246045acefc4987e176a3e402bac98b5277bf99dc9d2154fd813b7ed36ef404773103fc96b00037387867213c668a5930689f4a317a18881afed4645618a1c97a94f271e84177a4dafb5874be332f5c76281b1dcbf5f8995113085901bf3b8ff0c635b99450d6396bfeef94f3e00dd0222fe7ccb04a146e874097b818c8ccf94aa3687b045d053e741e5bc8d945147d43749f0b9d65a6fb0d77bc33cb732810122c037d2b956bd1dd3ca99f5375150fbe9c3a88fccb2a58931305bfc98259577016d48720b289dd1cec3b40c244ca6b591ad39821c641989027ad91cb9caf662ddbd091a2a998d8b0a0e2c9854ad759f586b8872aef814d2f71ee21510fd97230b7e59a60820154e87cc44d0832567aee542835ea040c3bfcc420d18e441e56155fd5f5fd17f44bde9d9c30e146a7873cbffac8f0a329de1aff02a30296dd72570cde160fc54f170d9d9f2faf34488dd1b1568be2b5fbff30b327551b88fb8a965e34dd0a1408f23da0adda7d660b854b9861b8227051bea3926c4095b3c2c90b607a26891ef873eafa789530273b2e5f6499063bfa06d9ec8a8a57d30d2f207b3d4c4eefa756892c4e0436d292cc6e35a83e1c9dcfd7745b4b37877b9dd0a9695114eca55faa1ba15599a8cfacc5129005bfbc629e7cb9814c456d65ea848c181c52a843c9b23c24f8e4ffdb9c1507e38bc32cc36742647dbdfc74a06737e37f979c01dd9afffef2201985c09011d8e851ce7093689c2414659e1993da2a8366d46b6eef562f24f1a1148cf1795ef3a1ec01113028ac5a47dc662ae665bf135813c844f328d564964fd9b1c976b00884453636354bc2f533f57753484b250ad3e61c25883c3ddd65e4a73a0fe5145df245e8116a2b690673692f8149617a82b64f85086822b78a370ac3a8a7200cf3319aaaab9091a71362bf5eceadd1f0a5b351e67157b39ed1c544ff488af2599548864b0834e830b79c34a715f60e22bd346b61c26d640943633ad02b67797df2d9412dc526b9ce316c491db2618c960fb5f880b41967dce0d7ed152ea27a57c7f0a717f01deab4cfb3d12ca07303ac2733f6f8fec22f492fa1174d5ff9b566e67faa2088dd07f39311f7dfe31829f781ffbce8ff332d35b9004fb6505e6e3573ae4a6c8d3520eecf5c9f32d02990ef7cdf827db3cac8f15d0b3aa5eb65bdbfa49a009ae324747604d674613ac192f8f0c079efa6b83690bb71f8428f859ec6035efc1bf62994683aa196c6257e2e4b29add84bd5296e6747940faa10d7e0f8b742a11885ab8200c28939adc64f849254000fa0aa70efb8a4a0f1df0df2f65fd26719ddd92743b2df84fc9a1ad1867cfff37d63451c4dda6e684a1f147bf1936e5596138442cf22ace5df8b75ef3a4279535377a6e42f2da92bd4ee4de9acaae5645f0eccbe1031b96b6234e83bc1aad2f54cf607977473e10db807ff333f71e1df620396bea9a3a46ae8aec8edca6ed0478496c5e8772394e8bba09f8fdd4c9797af694b9dbfd6c6f555ad2c4ad2ea5d9000f2b056f76d13b8319f1e6c4ea8d2f892af411b1d3d7f0b07af46529da12f4c3612788e24736824f00a31dad36bd1529efa730f546aa5210011e659b0223cd7ca6b0b5c58c959dbb623b7aecd21ed15bee98c0dc5b8bf140a3a807686f450cb0af60bae80f6970252eb674cff9d26a94635d5e633d4ecaa2855174917f123b8733f6605652118c42c26a9ffe5d47f45eb8ecd7085445dc797db5885f68449bdda9e8ba6fa5959b7a9883295fc3d74140e0f18488b3290587a938c1fea425e375ac056805ce2070e6aaacfea8566e36930552affc83c1015b4ddfe0d65fca64d3134710ac7fd16ef4b1406326bcd38216559cd8fa6b88fee066e122c25ed0290185372a36aa0bea40a745fa6a2aaeb04b7f1109b1bb710e4d4d202221875dcc9f1817170543cee86585798fbb98410d96cceef8071c7956004e3225bc2656b8e3b8e2da0450d7ae4e76060449f23d0774447902c4b1815f91e964d588e49f17f8362b4550f22c3e9c9f5a04e363b9e6165fe1a801485cd1b639dbd0a35f06d9098ecfe1c86ef46e4eca7eab60f2b502fd47968fa7dafd2bf8a5194d84b0f824781c0b82be7dce86d61a8a3398eadc6fad6604a0da7ccd283657fc7c738504d73b4a87ff7f12fd392377896827fbcb9681523f7aa332c76f398757c4657856a50cc857178ca36a46a34c959ff90d4424c60b577302d74d2e67ab0f34084e5208b990c3decad4fd454cc4457bec70b41519ee51192e5141c10e8f2a0214185a027facf88851efcc4d8ecd41531a3fa454ecd98402b1408a7c7251145636a99cba56032a766a416b04100a4630fa859fd0af7771bed870c02c09203bb432eecc3d179f4ae87895ec057983cf28bf16142842ed47dc1927e3dcb9900483def5577d483ee7c4ef38cbacd15956880761742fc8b0bec52872c1056f6c2f19ae83bf31a9adfc5b1b3c77b98d331f061fa381531310dce8de496e0e297f22f3a3def78d1e0d20ecaf43ecf357edcccc7546ef983b99a9ea3ccedda0be75ec1be83a3652c978b296cdb5bf0a32a4275621ad6cb45df99f5f6bd180e3c358d5f4083ea921cdaec5c7189872c8c7ead56ef8df8f92e8aa144c91f4da85ef85864320115429c21f5656e74ec1276cba8dd359824eee08d15bf50c12f1279a6ead18b2e4a3786833e9308182ae7f2eb3b43a120a2bb210f2dc25e1f2404b6bf22c088ecaaea156e7a2a768e35b00d44f1aa5dfe19e17bc28a9fba4eaa3395399a6f0b01de2b44059054d20e71048613320c01c2003ee493737efe0698eccfa047f12af5d1957e8ab8bc216ff210f7b7671790ceb8b347623b0c10c9d9c09a2f209a7eabeba7a893e552cda0b880bad838305565dc40eec00b622350c15a32c33bd702b7b1ff8260b7b7259313c2b6a3d204c0e9d3d349a5f075970cbe0b7af4bf1ab071ad1e4d0697b5ddc3a5757fe4e8c6edfe5ad5688d24ea043e6c1a920c36648f3fcb7cbdd70aa945f8f2dfdfc79edae3eeba8d67c019af989afbefbaec47ff34caf285bb65fe8e798765994742f0ea725f6086983bfa7ec07cfb1152a3de8bc896513e542d3d0a6fadf388c0fb16d197943e0c890a700d0f9a9a46990ff522ebd39e41dc3b5b1faeb7037320794edc0305472ce8dc45bb78daa648399768a5669b8db59f274ada1314b6d9fd741347a984f2ec9cf59696333d62c2b2fb62aa468d828a2d3c00c2957f9a2158c711bc9beffe7fc68d11a6f54bde7429bb20762fbaeda0c4cd4c4a55a00b9e6fd82bcc4d1a0abe8a9e5d1a3e51a36ac989a56cfd0cecfe7e197bb2396e8846eebce52114e896de4f5ac515aa74b4881d62141304cd772cb64a9befee430d91996ec90dc8ee394f265865ae7623c30ec72e895d5e8753e724e2e9767af48b9f1a0d51aa0a0b864865456bf54b919591cec4a2416e5cf18d6184987c08479987900fface09c19f7fc905720629bd564281296f48d2ace6da2e8e6fee81fbbd110241dd3acb10c27ecef1eaabd0ddc97d1a1b4ada0a5d3ccda0276f5dd3a3c2992374eb19d60956aeb4bce9a8f947197d991034ac24447f184b07101d2468fd7017b4a5c098506efe5cb7cbcb013fa33f6af3262cbe6a0b328566e1e3a5664054976bc722383fe9d234384"}]}, 0xec4}}, 0x0) 01:35:31 executing program 5: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000006640)={0x5, 0x4, 0x100000, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x2e]}, 0x40) 01:35:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x6c5, 0x0, &(0x7f0000000740)) 01:35:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x9, &(0x7f0000000000)="eba27c23", 0x4) 01:35:31 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000180), 0x10) 01:35:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x11, 0x0, &(0x7f0000000740)) 01:35:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000002840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002800)={&(0x7f0000000480)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xf9, 0x45, "c35e715fb250c6bbd11d4d2a484c50f443ddf9858eb2059e8e965d9b8df9f484a0723d4b44540f80a0d5f28b7533e4542493edab2702b51eec5b0e35c64bfdaefddfa0bc45d275fc86ce03cbdddb374dee61bc401b5a51aafe75fd681fa21fa83d45391b37a09d41cb1171843088095c4b1cd002d9af78ed0aba178f73fcccb166c806044040288c531566171e5e6eeeab9952b003f8ee634ae2d8ebd1a2984d57e6d815ac4e36be567942881d387c7b9f142f4e1f0c7565b9b422bd88b58d8a9abda2739a260e598c2c73a609deb1f68257b47ad19cabbcb259e6aa579b97351c0916b9be57cb5837e432aabc3780dd25caef14c3"}, @NL80211_ATTR_TESTDATA={0xb9, 0x45, "16e748ee812c9ac99a25c1600f349a014925d3e9ded18eb16c0ecb7255248788156113bf0b4d853ccf504df69fb0bef17ccf2effb624569b922d4fc870ad9d6e0b99587bec09227266770cab8ae627c4ca440120b8dcb8a24aafd4c7d5470a3d70cb8e614bdaba44fe6ee3f1f5ad3d91847d61c5e72f15fe8ee5c2999d95a3288563be0f8ad358b7d1d603fe13250b1580f301771796563929edf2c9fc64177404e135249dcf99d6c627fe3be5a5c5557c9024af0b"}, @NL80211_ATTR_TESTDATA={0xb1, 0x45, "b1540ea40251a61b65d8b1680037071b2d8a14c580989c75cc0f030a6925a8e01a389ff0ce8755487ece618c33f5da1e260d971bf4c93dd03d848fef1742883a001f5332daedf90752435d0da512434da82ceb429f05cf2a87679e11e726723dd4102827a0c13fd62d8aa36ff080bd6be12c09a1c75c1dfdb250cea87972f389cdfb02ae758550b2d975b279fecfacef589894d9d640be72b5c196c9f57f13e1b39bb0833ac57e2a3b6af2116a"}, @NL80211_ATTR_TESTDATA={0xc1, 0x45, "d23f456049f7030d71875348cb8a79010137247b59529e66626f9021195b69b7e2a3787f80ba86f4f059225bd1607ea2ff57b8529b0b9fea79980030f4503b2f24865a0fb43018d2fdb0e30ee4f89b3962f44592a2d3461048207d34e2dc18004d6d761d3e872a560bf21eaba187e176e661a2790d4f2c96bc3a0ff739960edf7a21a8f981c650ef7ed8b209f7b02f694cb016e5ead2c5ad6dbccac21d58d0ae7a012855724fd3735fc6650b30e178cd3ac3719e218eac6b7452e6e3de"}, @NL80211_ATTR_TESTDATA={0xb7d, 0x45, "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"}]}, 0xec4}}, 0x0) 01:35:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 01:35:31 executing program 4: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000006640)={0x5, 0x4, 0x80, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x2e]}, 0x40) 01:35:31 executing program 1: socket(0x2, 0x0, 0x300) 01:35:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x6cc, 0x0, &(0x7f0000000740)) 01:35:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x10, 0x0, &(0x7f0000000740)) 01:35:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x7, 0x0, &(0x7f0000000740)) 01:35:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x6, &(0x7f0000000000)="eba27c23", 0x4) 01:35:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x5421, &(0x7f0000000000)={@private2}) 01:35:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x802, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 01:35:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x42, 0x0, &(0x7f0000000740)) 01:35:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x6bf, &(0x7f0000000000)="eba27c23", 0x4) 01:35:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8905, &(0x7f0000000800)={'wlan1\x00'}) 01:35:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x17, &(0x7f0000000000)="eba27c23", 0x4) 01:35:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() sendmsg$netlink(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a40)=[{0x0}, {0x0}, {&(0x7f0000003a00)={0x14, 0x17, 0x13785c13dabd4529, 0x0, 0x0, "", [@generic="88"]}, 0x14}], 0x3}, 0x0) [ 169.275791] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:35:31 executing program 5: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x7fffffff}, 0x8) 01:35:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a40)=[{0x0}, {&(0x7f0000003a00)={0x10}, 0x10}], 0x2}, 0x0) 01:35:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 01:35:31 executing program 3: socket$inet6(0xa, 0x0, 0x7f) 01:35:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) [ 169.349122] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 01:35:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x6c9, 0x0, &(0x7f0000000740)) 01:35:31 executing program 4: unshare(0x40400) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000000200), 0xc) 01:35:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x17, 0x0, &(0x7f0000000740)) 01:35:31 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 01:35:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x25, &(0x7f0000000000)="eba27c23", 0x4) 01:35:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x6, 0x21, 0x0, &(0x7f0000000740)) 01:35:31 executing program 3: 01:35:31 executing program 4: 01:35:31 executing program 0: 01:35:31 executing program 1: 01:35:31 executing program 2: 01:35:31 executing program 3: 01:35:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) 01:35:31 executing program 4: 01:35:31 executing program 0: 01:35:31 executing program 1: 01:35:31 executing program 2: 01:35:31 executing program 3: 01:35:31 executing program 1: 01:35:31 executing program 4: 01:35:31 executing program 5: 01:35:31 executing program 0: 01:35:31 executing program 2: 01:35:31 executing program 3: 01:35:31 executing program 1: 01:35:31 executing program 4: 01:35:31 executing program 5: 01:35:31 executing program 3: 01:35:31 executing program 2: 01:35:31 executing program 0: 01:35:31 executing program 1: 01:35:31 executing program 5: 01:35:31 executing program 3: 01:35:31 executing program 2: 01:35:31 executing program 1: 01:35:31 executing program 0: 01:35:31 executing program 4: 01:35:31 executing program 5: 01:35:31 executing program 2: 01:35:31 executing program 3: 01:35:31 executing program 0: 01:35:31 executing program 1: 01:35:32 executing program 4: 01:35:32 executing program 2: 01:35:32 executing program 3: 01:35:32 executing program 0: 01:35:32 executing program 1: 01:35:32 executing program 5: 01:35:32 executing program 4: 01:35:32 executing program 3: 01:35:32 executing program 2: 01:35:32 executing program 0: 01:35:32 executing program 1: 01:35:32 executing program 3: 01:35:32 executing program 5: 01:35:32 executing program 2: 01:35:32 executing program 4: 01:35:32 executing program 0: 01:35:32 executing program 1: 01:35:32 executing program 3: 01:35:32 executing program 5: 01:35:32 executing program 2: 01:35:32 executing program 0: 01:35:32 executing program 4: 01:35:32 executing program 1: 01:35:32 executing program 2: 01:35:32 executing program 3: 01:35:32 executing program 1: 01:35:32 executing program 4: 01:35:32 executing program 5: 01:35:32 executing program 0: 01:35:32 executing program 2: 01:35:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x8010) 01:35:32 executing program 5: r0 = socket(0x1, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 01:35:32 executing program 1: 01:35:32 executing program 4: 01:35:32 executing program 1: 01:35:32 executing program 0: 01:35:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001d40)={'team0\x00'}) 01:35:32 executing program 4: shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xef0998858628d285) 01:35:32 executing program 3: epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x0) 01:35:32 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x6000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6800) 01:35:32 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@empty, @random="35c12966a896", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}}}, 0x0) 01:35:32 executing program 2: timer_settime(0x0, 0x0, &(0x7f0000000340), 0x0) 01:35:32 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) 01:35:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 01:35:32 executing program 5: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x101282) 01:35:32 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x84002, 0x0) 01:35:32 executing program 1: creat(&(0x7f0000000240)='./file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 01:35:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x208100, 0x0) dup3(r0, r1, 0x0) 01:35:32 executing program 4: syz_open_dev$char_raw(&(0x7f0000000240)='/dev/raw/raw#\x00', 0x0, 0x405000) 01:35:32 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/consoles\x00', 0x0, 0x0) r1 = dup(r0) ftruncate(r1, 0x0) 01:35:32 executing program 2: add_key$user(&(0x7f0000000dc0)='user\x00', &(0x7f0000000e00)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 01:35:32 executing program 4: r0 = socket$inet(0x2, 0x80a, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 01:35:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000480)) 01:35:32 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:35:32 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/mnt\x00') ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) 01:35:32 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 01:35:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x20000011) 01:35:32 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000000)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "41c2eff69a86005f0f0c560762"}]}, 0x28}}, 0x0) 01:35:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/nf_conntrack_expect\x00') read$FUSE(r0, 0x0, 0x0) [ 170.657251] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 01:35:32 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/net\x00') 01:35:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xab) 01:35:32 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x9e642, 0x0) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1000, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=""/12) 01:35:32 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) 01:35:32 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x3e) 01:35:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffe824) 01:35:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:32 executing program 2: 01:35:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @empty}, 0x80, 0x0}}], 0x1, 0x0) 01:35:32 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x11) [ 170.816434] audit: type=1800 audit(1605404132.859:6): pid=13180 uid=0 auid=0 ses=4 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=15994 res=0 01:35:32 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x1a640, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2b5f0ab, 0x0) 01:35:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000014c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x0) 01:35:32 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) 01:35:32 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) pwritev(r0, 0x0, 0x5e, 0x0, 0x0) 01:35:32 executing program 2: mknod(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 01:35:33 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001bc0)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:35:33 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @remote}, @ethernet={0x0, @dev}, @qipcrtr}) 01:35:33 executing program 3: r0 = socket$inet(0x2, 0x80803, 0x9) getsockopt$sock_timeval(r0, 0x1, 0x1, 0x0, &(0x7f0000000000)=0x57) 01:35:35 executing program 2: timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) 01:35:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:35 executing program 3: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:35:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 01:35:35 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001f80)={0x4c, 0x12, 0x1}, 0x4c}}, 0x0) 01:35:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2001, 0x0, 0x0) 01:35:35 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}]}, 0x38}}, 0x0) 01:35:35 executing program 3: [ 173.876967] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:35 executing program 5: 01:35:36 executing program 3: 01:35:36 executing program 1: 01:35:36 executing program 2: 01:35:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 174.055570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:38 executing program 1: 01:35:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:38 executing program 5: 01:35:38 executing program 3: 01:35:38 executing program 2: 01:35:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:38 executing program 2: 01:35:38 executing program 3: 01:35:38 executing program 1: 01:35:38 executing program 5: semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x2}, {0x0, 0x80}], 0x2, &(0x7f00000000c0)) 01:35:39 executing program 2: [ 176.931106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:39 executing program 1: 01:35:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:41 executing program 3: 01:35:41 executing program 5: 01:35:41 executing program 2: 01:35:41 executing program 1: 01:35:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:42 executing program 5: 01:35:42 executing program 2: 01:35:42 executing program 5: 01:35:42 executing program 2: 01:35:42 executing program 3: 01:35:42 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_buf(r0, 0x0, 0x9, 0x0, 0x0) [ 179.953446] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) listen(r0, 0xe7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x101, 0x0, 0x0) 01:35:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000040)={0x1, [0x0, 0x0]}, &(0x7f0000000200)=0x3) 01:35:45 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x48070c, 0x0) 01:35:45 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x8) 01:35:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:45 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000180)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='9', 0x1}], 0x1, &(0x7f0000000600)=[@dstaddrv4={0x10}], 0x10}, 0x0) 01:35:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000000)={r2}, 0x8) [ 183.018237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) r2 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x10) 01:35:45 executing program 5: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 01:35:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:45 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x53, 0x0, 0x0) 01:35:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000100)={0x10, 0x2}, 0x10) listen(r0, 0xe7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10) dup2(r0, r1) accept4$inet(r0, 0x0, 0x0, 0x0) 01:35:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f00000002c0)={0x0, 0x1a20}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) [ 183.179224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:48 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 01:35:48 executing program 1: madvise(&(0x7f00006a0000/0x4000)=nil, 0x4000, 0x2) mlock(&(0x7f00006a0000/0x3000)=nil, 0x3000) 01:35:48 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) sendmsg$inet_sctp(r2, &(0x7f00000006c0)={&(0x7f0000000340)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000780)="d6", 0x1}], 0x1}, 0x0) 01:35:48 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x100, &(0x7f0000000000), 0x4) 01:35:48 executing program 1: madvise(&(0x7f0000511000/0x2000)=nil, 0x2000, 0x6) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x7) 01:35:48 executing program 5: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2005) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) [ 186.040998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:48 executing program 2: 01:35:48 executing program 1: 01:35:48 executing program 2: 01:35:48 executing program 5: 01:35:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:51 executing program 1: 01:35:51 executing program 2: 01:35:51 executing program 3: 01:35:51 executing program 5: 01:35:51 executing program 5: 01:35:51 executing program 2: 01:35:51 executing program 3: 01:35:51 executing program 1: 01:35:51 executing program 2: [ 189.112701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:51 executing program 5: 01:35:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:54 executing program 3: 01:35:54 executing program 1: 01:35:54 executing program 5: 01:35:54 executing program 2: 01:35:54 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:54 executing program 5: 01:35:54 executing program 2: 01:35:54 executing program 3: 01:35:54 executing program 1: 01:35:54 executing program 5: [ 192.144623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:54 executing program 2: 01:35:57 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @broadcast, @val, {@ipv6}}, 0x0) 01:35:57 executing program 3: r0 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) 01:35:57 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:35:57 executing program 5: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x27, 0x0, &(0x7f0000001100)) 01:35:57 executing program 2: openat$ptmx(0xffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x200, 0x0) 01:35:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 195.160360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:35:57 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="09de2b47407a723719e7b4", 0xb, 0x0, &(0x7f0000000140)={0x1c, 0x1c, 0x2}, 0x1c) 01:35:57 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="9d42169f180c", @broadcast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @local={0xac, 0x14, 0x0}, @empty, @local={0xac, 0x14, 0x0}}}}}, 0x0) 01:35:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@un=@abs={0x0, 0x0, 0x3}, 0x8) 01:35:57 executing program 1: setuid(0xffffffffffffffff) acct(0x0) 01:35:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:35:57 executing program 5: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000002c0)) 01:35:57 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080), 0x10) 01:36:00 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fsync(r0) 01:36:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:00 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080)={0x1bf}, 0x8) 01:36:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0}, {r0}], 0x2, 0x0) 01:36:00 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) 01:36:00 executing program 5: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0xfffffffffffff000}) 01:36:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x0, 0x0, 0x0) 01:36:00 executing program 2: setuid(0xffffffffffffffff) r0 = semget(0x3, 0x0, 0x0) semctl$GETVAL(r0, 0x0, 0x5, 0x0) 01:36:00 executing program 5: setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)="e62ba863013447f84d51ddf53d2aa8187fe327f061738dfd2ffb7f06c30c2209428347bed8c86e551f41e7f7e7cd0f2761c5298e3c8e6a61b4e6e9306e82ad19c96a8c1132fdf7f12703ff5ab0f30ef17af8ab624a9139aa333feefd4408b128311369c24a5905bd9f56e8900ed178118004333db0890354a3ceafb3603518943588c8ad8d81bcdbe913f22d48f412008dd88e0444fb066c0d4f849b494cc1cdce050d60e7ff0090e6fe8214dbe32c35a5f86a6dfc558b15c99dab949c59945576e142d8d3d65a6ec59ebb4dc54e81a770fc3237a470ac98d40681b0151c62da88d8558bdc02661ebd344393901673d83313a83b0611c03fec33aba41c59492d7d5039159fd82cc796e2aa98964fbbf051fee70599a0448aa34fef3602aa80f514b2fcb74975a96d9493dd95de91f1b9d09c33dd2a00882c7a48811a90abaf0cf9b8459ba4a79d27de5fef9844cd00cfea1c2efe30f92d3531dada98016c053c5bfa2cd6b08a8fe378e743fa2a334cf7671680ff8f08eebec498610b5875c1db0f9f9adc8a7eb6f7cfe020441e818cc08a83156017c1f9872e6164258c4348415b26ed24251d86e2afa4152ee3c8f162fbf3d0627d92bdd5ddd1b0348930fea4a8f265042386e66faeadca848f8e0bee3fc6584f73a81f9a3b24c96b634ca9a827067cc91570ae32db5b116b6b9a2bbbb81eb199cac63bbbfdcdf49056410e3235f729611b89fffcb030fbb65c561a9e3ef34ea7c95cb2d872405c73ddd9045627525e7e1c3369971ffc6866f6468702f8f57cb970ef776bc5dc9cbefca828deadccea7740eb5710ecfe55cedcace6e8ab2c5de1cdcfe1c7c85675a9c9e2e1e6fa9380303277f27a860fd018c3a985841f82ea8d4a3d88bedef8ee06064c3c8f7aafd559c8fd5d0effac9048d8679c22a1392ed76bf4df6bdeb8118fc7cb9a562b1795485d0fb3218b2ebb14199a35c23a068838b65ec7b9229da15a3795f1227565b61bbc824f5d2bc662bf0601427fa8dc30158e27db893e5e612bbaa72340760873e6d12f8409ad2e511160764c3681b50bc1c41cddbb825ff75ab82d67fac1c57e9898ca5721b980e1d0748377b42b9f6426b6a79ec8995bc49810f1ab918080cb217e24cb77762d8d21c25e8175525a8a03efc8cb3e9da0ac7e8258200fdb4e8159bcd60d34a0096f2cd570815cf15508f089012b444498a2722726da6339e542fdbafa9678aa73ef0bf985d232e5e2991ad0770295ca7645d2c2449f99371b3a3403f3aa1c51bc8dcc98f7060c2bae8d0059502ad85681c621f4887396dbe6d4d27e091cbecacd51565dc79a85735a15c5418b45e4fb66c7bc811ed790bd67dc38c3454140a16597cc8d838d5939f6654623aa4013f68dd1ba35c7dd521f43b8bb94441eaa6a5ea27fac4768adc48c688ba7cbb7b36a1154de55a9b8a75d6eda30de4aff8c5f978eda22a99063ee9127fb2b569f34f36ab46a00732820a690a388ad9d164d7564e053261bdfea57d8cf3fca9ebe079c3f99f06d6b07a87bcf23a0749efba799ae0c1818ae14d92d8ce74c1ff7920b029599c66ee3a3b6541bb7237988fddb743f4fffc841c51857878d0b5a6cd208b906e6cde4fddcf9854361b54d390e219132dd3b184a46988fb4d5ab237a5f70f8ee7a8a75c1d6b3d91525ceebb16117d6ac4fa2ceda711fc338c7a1a160d0e4153f771b383eae9519f48a483d3305ccf4cb7e8a6606a3f613a8f427764b0320388f6c9d19ca1208080e4f2e4481b93fbf86d6aa21d1ea7e8c4d1b24b074b0fc637bee694b479d94c559d4c59b5bec42e126256d798a6bf3ade6a7908fa504212a01f1c67014cc06c9a4ade37d7ab3cbfa5529ba6c43f2d1fcd7a631af892754abd68f9bfb4a5c56f2cbbfa16f4fa86c35ee51fa67baa2885e8790e8bc51597d079009c44580a9d59eac25801676194b8be3650e4ae697ce55b8426dca1850973738d75ff074d2459923a90b2f25e348354628a92b65732e540f46517d1977acc23db05f94395922e6110d918131af0079681b4ffaf71dc809e106aecf16f5a5af791e77c9a83eaa040536819b37d97b58044a70a10a709378b20e5ac03fc8cf42399d41cf05a0da124ddcf71a216755dcc55c05941fd73eb6950ea97e6e5a0fc086a7ca329568c56560209a2dcc327ac9b5d24b31e6cc11eeda1e1650e040e7a8a8e3a78b501a295a8a1f6ad5d1e5a587c1cd7f49fd6d05fc2eead18ebd8eaa58cc105f8249961114b5923b76ce3492b34e563be264f720e25b56676c2602127d89cca7a31f62fff738b86f32bbdeb915956b2b6ed6e49767c5a751d7b6ab0cb6404e668172063e5ff941ef0be165c6fb178cfe7bd05f2a1e696373aaee2d8088cf379614320deefe77afbaef78c0115bcf56c90ea81287aece5d2d88133db195132f8a329dad71e3c0048037cdf269e5ff78e7b98ec19631911190ee6d4092823fd22f6e7d04f5d6d9685b94ce615a012074b68b159d308fe8f800727a9160445750d2c66ad3b054db63fa5ae08530bb102975a5a3b42bfe2d02c1fbfeb148ba41d00a89df7ce50578235c4956ac34b326334aae2e472ed14eb195b6d9f11e35f45ee6495c0676144c5c2e5247fd4e302e7731306dc8225e30da43b026ca970ea1b8a28280f8bd79b720f2c25969e439a3f645320f1210e59ec8471437dd08ba075bdc403adcae3c14a925cc8b81a662e0fbbba973430315062bf1793335119d8ab28748d82652f5dd0ad2c3525a626ed9c99e50b6ba6b768e5f6c0c48f6c7a264939c4ab77db133d44f74a3a25fc995fa217970ca6b022a262ecf98886429a2bd5f695c8bd35ab9da9d41b6d1b676d9abe8fd94e1ab58051c2ae5740b7b2398b27f08f0e53884419c797a31217a0bc85fa74ac9e333dd915b8a3210508535aada87f21ee44db93135af9ef9d47a0a4d05b17214fa72f49814d3e39b1225ef6d5167024f4e095a7bae46ccb61d2ecee491f9f306219bbc0b23f5db9dac56bed5d8f9a9c799332d827fca0710e3a1944de0ede9884f91e79898cd71d20241118c1d4a82964d386c9a04099d18fadd65ca8886a5daad40d9dc27e537e35a35da72723f7e053f8458b8a841a1bfadc5e95ff4c695ec40f808ad4c4477f9c565d8ec3b816dbdb2b5b1a42efe9227eb020b5d0e9002722f4fe476db25262a4eaf1509e461a2eb7708cbfc6b163ab0fe4e60402ebcdb39bbb6f1c31c4e472fe3513e451141fc30a2d0a9d0b4d7195e351dd7f2ee7c8eb1036ce6529fca028e6ed2101ef8eadae77655179d96dbc10003ba6b3523c24180e07a7f4a42c59d0c3967fd491f341fef19ef48cd006f67b2fd6c270fe208f218ed7e984274aeb847477e73263463bf5ed9d1f0986f1d50bc22dd12cffe4e9e4d7bc4325a8541c606c22b5bd51eea76c804359660bbf516c77f36f438c067f8b0dd7b09bb4c99bf760a181259296ed002e02354253956387fe0a96609e9a46febcd61e38893ebf1c88a44d38b17964915e4fd72bfce3f07d162a99e7be381b37cd0c29b506c7513ca05f4bd12b9ead03c4fdd8bf92000f1b1acf511f5059f0a162e7a1dd1275c8f6de60fecebf3b605b35f0eacceceef11998a46c0170faf92b2eb0e46382f20e46254fdc03b868ac7452fb4a0bba1136da4ee37680b40715aa453797f3dcc667349642c5c28948c1ecd543b3459e8837b6ec2af41a8311dc8019b71f565f7e6e4732e2104da8febf8d75071c035bbefdfd9c25347d3cd7e2ca391b6634b22a22ea0425888ed57f16d839b35f66709233a9b81cc78618790ff703af8ceaa339f9128ed6ea4469fc3b747ba37f7b801194fdda5d9fca4531c74f19d9c2f771a15f3e5d69f7e3e02936b091efae462539bfcd5691f92b378011e99a6cc950b8c401109127336bcc6651700b43c5d9f59098e0da76abe45995fc57e7c28bab2df58e34ce78667833583a44a9b8733c613c91c3c32d06fe0b188a246ac67bbf81346e8d6fe6232fb997c6d45689db27436c248cf645f5acecc88fcf694142b7ce0c73ebc5303414c6ce35dd1ad1f75ea5306177298c46d8be570c5da8345ff51a72fb25fc000f552ea2e4e6bd14441aa3d10441a900513f2571d9cfc4437c35fffbd7d4eacd2723fbda866a2f8a854fa26e3a2315aad8dabaf98714dfd1a7f382ca62f74037e159795a77f186083c6ce1a9a528e95157e864e92dca4c652796b66ba60975b18ff3107127b4ec38d349e956bd116c3e86e7c8da1e1e7ce505469a319a1be00c5f5b09eeec923ce3c2c5100a308914006abf623bf16f47bbef7aa3919809926bac4e7b46961a5a2d14df30917d7c4f54d8f5128a46e71ac7f10c6b20591a781055b8776fb9d87441f2789371a174a809dde157c4cf93d0803ee1eea498c4ec3227214b99dc54cd3200d4b7cd179eab165f946eb77fa8c4ccaf09d47e373fd8184af6042ea2325e82f14cd40b9c93ca5811804027ce13979187d71ca2173991750419a7d1e63cbb0e5f265726d626c8614deb2b0174cba1c77e620609a2d065db7d62237ce65c689327468bba815f224442647b55ea81a8a55e8bdb5ff0e80af99f00d71476a2d158688345b469423eaa3eccdaf34b50d0526d95740c30b136e4bd6c56efa247c1cc4b75e8ddeb4228a79267d409d5f041c9ce760f191ccf500e44c4bbada07d02c7377f9c389f62672235e1704285bff42d1496809fcfdad63738c92e593ae8c6c90e26361aedafbc613b9d38895944353da2ab4c9492429beb759a47b934dae7965a34828795733b982670b747e1b42748ed3eca4601d617119e92ec990c1951380910466641fa6cdf06561e9e530d08da42828132990c79fd87cb18170c149d72c8cb43313f0d7f8721f0e237a15f8dfdc61d32db02ab670c7614a960de9f9da91623a27770cc5cbca43bb92fda9e80b88831c976e08d6f21a97117503c97a5fcbff25cefa199e86c38c472b0e43af65d9e588f2d99540f55ce2a97516d7aeb55920ff3be2f566c1fbf7855de04821969cfce404bc53b7a0a010bc24bfb5bf87e26b02fb431f610b7e6a9bde967ecd23a6dfddb32421523f7254662a7f771e8d766fded3da12c096d1f01933c67b7cddc0fa867d036ddac0bcc457c252b86380802b2b57d1db64306aae7d649188c86d710fdd61a9127eee7d691b75d623bd13c282dc047b2513ae016a11d337026d1523474409f80ba1ac2877db5d866c75f0b42e60422a7410657deef9fe7badc94dc64a77fec062b4fa6a87d8abe8c6e919ed28dea5a79bdb1b690e4cc1909936c4ca2fa91d9b758d4a7b2b85a6b62291182055c4d561abad570b1f9a8d563d4393dd3dca46419331efc75d0a668fd9f494573e58f555451b55d30f93c1c2d1f3259c7a809a68e9531e971d2f54c2a6d1540b04b88d19ae78fcc7e7c51acdda3f156fa0210109c4cffbfb8cdce249c49454abdb3a2447470cf52b3f049bdf8c7c4566ceb0", 0xf31) sync() 01:36:00 executing program 1: [ 198.335524] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:03 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:03 executing program 3: 01:36:03 executing program 2: 01:36:03 executing program 5: 01:36:03 executing program 1: 01:36:03 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:03 executing program 3: 01:36:03 executing program 2: 01:36:03 executing program 5: bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000700)={&(0x7f0000000080), 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x160, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe95}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x160}}, 0x0) 01:36:03 executing program 1: openat$bsg(0xffffffffffffff9c, &(0x7f0000000400)='/dev/bsg\x00', 0x656482, 0x0) 01:36:03 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) read$char_usb(r0, 0x0, 0x0) [ 201.268720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:03 executing program 2: setresuid(0x0, 0xee01, 0xee01) setresuid(0xee00, 0x0, 0x0) 01:36:06 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:06 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 204.348126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:06 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:06 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 204.615529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:09 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:09 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e"], 0x15) r2 = dup(r1) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@noextend='noextend'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) umount2(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 207.341548] 9pnet: Insufficient options for proto=fd 01:36:09 executing program 2 (fault-call:3 fault-nth:0): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:09 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 207.364569] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:09 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:09 executing program 5: syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbdc6c9ab478b386dd6076403f00442f00fe800000000000000000000000000000fc0100000000000000000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000935c0000000800655800000000"], 0x0) 01:36:09 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 207.472541] FAULT_INJECTION: forcing a failure. [ 207.472541] name failslab, interval 1, probability 0, space 0, times 1 [ 207.479060] 9pnet: Insufficient options for proto=fd [ 207.530745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.543000] CPU: 1 PID: 13752 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 207.550892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.560272] Call Trace: [ 207.562869] dump_stack+0x1b2/0x283 [ 207.566609] should_fail.cold+0x10a/0x154 [ 207.570768] should_failslab+0xd6/0x130 [ 207.574746] __kmalloc_track_caller+0x2bc/0x400 [ 207.579415] ? strndup_user+0x5b/0xf0 [ 207.583217] memdup_user+0x22/0xa0 [ 207.587283] strndup_user+0x5b/0xf0 [ 207.590946] ? copy_mnt_ns+0xa30/0xa30 [ 207.594834] SyS_mount+0x39/0x120 [ 207.598310] ? copy_mnt_ns+0xa30/0xa30 [ 207.602199] do_syscall_64+0x1d5/0x640 [ 207.606094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 207.611283] RIP: 0033:0x45deb9 [ 207.614476] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 207.622182] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 207.629474] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 207.636751] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 207.644020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.651288] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:12 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:12 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x0, 0x3f}, 0x0, 0x0, 0x460, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x5, 0x7, 0x1, 0x1, 0x3f, 0x1, 0x7f, 0x6, 0x72, 0x0, 0x3, "e43d2bacb83e01f0a492c14880bcd2be504c81bdcfac06a93871f872d6f62c3b"}) 01:36:12 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7ffc, 0x101000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r2, 0x11934000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xe076, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)) gettid() gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:12 executing program 2 (fault-call:3 fault-nth:1): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:12 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 210.349702] 9pnet: Insufficient options for proto=fd [ 210.358959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.359004] FAULT_INJECTION: forcing a failure. [ 210.359004] name failslab, interval 1, probability 0, space 0, times 0 01:36:12 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 210.419142] 9pnet: Insufficient options for proto=fd [ 210.424230] CPU: 1 PID: 13788 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 210.432156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.441509] Call Trace: [ 210.444097] dump_stack+0x1b2/0x283 [ 210.447725] should_fail.cold+0x10a/0x154 [ 210.451877] should_failslab+0xd6/0x130 [ 210.455855] kmem_cache_alloc_trace+0x29a/0x3d0 [ 210.460557] ? copy_mnt_ns+0xa30/0xa30 [ 210.464446] copy_mount_options+0x59/0x2f0 [ 210.468681] ? copy_mnt_ns+0xa30/0xa30 [ 210.472568] SyS_mount+0x84/0x120 [ 210.476021] ? copy_mnt_ns+0xa30/0xa30 [ 210.479920] do_syscall_64+0x1d5/0x640 [ 210.483815] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 210.489002] RIP: 0033:0x45deb9 [ 210.492187] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 210.495742] 9pnet: Insufficient options for proto=fd [ 210.499911] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 210.499918] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:36:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 210.499923] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 210.499928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.499934] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) socket$inet6(0xa, 0xa, 0xa68b) 01:36:12 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:12 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0}], 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005060700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32=r4, @ANYBLOB="080002"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="200000fb10002b0a0000000000000000f00000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 210.582691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.661993] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 210.746830] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:15 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:15 executing program 2 (fault-call:3 fault-nth:2): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1, &(0x7f0000e4b000)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f000007d000)="b3", 0x1}]) r6 = socket$inet_udplite(0x2, 0x2, 0x88) io_cancel(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x2, r6, &(0x7f0000000080)="69da3391f948a0aba0b2734a6118fffc29ba4ca1888642e37352abbfabf2c563e99e45572cabece153aa97fa7ec00a5777f9c69952e160976a12be895ed8e6eb518db86b0f2211bc6782de55c4374a33f4ba2503fc61023d1c60a5134182e049bd0261259489f0c91202794e715853e6df4dfd31a1a1894c7cd6ad76bc7d4b733d249ced1a264b3ee5eba5b51f6fe0e4d24b689a5ce8516d7238991f7c38c2", 0x9f, 0x8, 0x0, 0x2, r2}, &(0x7f0000000140)) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:15 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb3fa29b4ad406915, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24084080}, 0x20008000) [ 213.374994] FAULT_INJECTION: forcing a failure. [ 213.374994] name failslab, interval 1, probability 0, space 0, times 0 [ 213.397759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.406813] CPU: 0 PID: 13859 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 213.414702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.424059] Call Trace: [ 213.426668] dump_stack+0x1b2/0x283 [ 213.430300] should_fail.cold+0x10a/0x154 [ 213.434467] should_failslab+0xd6/0x130 [ 213.438440] kmem_cache_alloc+0x28e/0x3c0 [ 213.442590] getname_flags+0xc8/0x550 [ 213.446428] user_path_at_empty+0x2a/0x50 [ 213.450575] do_mount+0x118/0x2a00 [ 213.454121] ? copy_mount_string+0x40/0x40 [ 213.458467] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 213.464180] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 213.469022] ? copy_mnt_ns+0xa30/0xa30 [ 213.472917] ? copy_mount_options+0x1fa/0x2f0 [ 213.477441] ? copy_mnt_ns+0xa30/0xa30 [ 213.481332] SyS_mount+0xa8/0x120 [ 213.485746] ? copy_mnt_ns+0xa30/0xa30 [ 213.490506] do_syscall_64+0x1d5/0x640 [ 213.495105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 213.500289] RIP: 0033:0x45deb9 [ 213.503495] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.512181] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 01:36:15 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:15 executing program 1: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 213.519447] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 213.526741] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 213.534030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.541296] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:15 executing program 2 (fault-call:3 fault-nth:3): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x430041) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:15 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb3fa29b4ad406915, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24084080}, 0x20008000) 01:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:15 executing program 1: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r4, 0x1}}, 0x18) [ 213.667021] FAULT_INJECTION: forcing a failure. [ 213.667021] name failslab, interval 1, probability 0, space 0, times 0 [ 213.717676] CPU: 0 PID: 13897 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 213.725671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.735024] Call Trace: [ 213.737613] dump_stack+0x1b2/0x283 [ 213.741245] should_fail.cold+0x10a/0x154 [ 213.745396] should_failslab+0xd6/0x130 [ 213.749375] kmem_cache_alloc+0x28e/0x3c0 [ 213.753525] getname_flags+0xc8/0x550 [ 213.757326] ? cache_alloc_refill+0x2fa/0x350 [ 213.761825] user_path_at_empty+0x2a/0x50 [ 213.765983] do_mount+0x118/0x2a00 [ 213.769522] ? do_raw_spin_unlock+0x164/0x220 [ 213.774027] ? copy_mount_string+0x40/0x40 [ 213.778264] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 213.783289] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 213.788135] ? copy_mnt_ns+0xa30/0xa30 [ 213.792033] ? copy_mount_options+0x1fa/0x2f0 [ 213.796530] ? copy_mnt_ns+0xa30/0xa30 [ 213.800424] SyS_mount+0xa8/0x120 [ 213.803879] ? copy_mnt_ns+0xa30/0xa30 [ 213.807776] do_syscall_64+0x1d5/0x640 [ 213.811673] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:36:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:15 executing program 1: mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:15 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x690040) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x1) write$P9_RRENAME(r4, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 'wlan0\x00', 0x20, 0x1, 0x20, [0x38, 0x31, 0x9e]}, 0x35, r5) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0xfff, 0x4206c0) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 213.816860] RIP: 0033:0x45deb9 [ 213.820051] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.827762] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 213.835032] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 213.842300] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 213.849568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 213.856844] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:15 executing program 2 (fault-call:3 fault-nth:4): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:16 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 214.006409] FAULT_INJECTION: forcing a failure. [ 214.006409] name failslab, interval 1, probability 0, space 0, times 0 [ 214.017085] 9pnet: Insufficient options for proto=fd [ 214.024337] CPU: 0 PID: 13927 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 214.032807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.042157] Call Trace: [ 214.044744] dump_stack+0x1b2/0x283 [ 214.048376] should_fail.cold+0x10a/0x154 [ 214.052530] should_failslab+0xd6/0x130 [ 214.056507] kmem_cache_alloc+0x28e/0x3c0 [ 214.060660] alloc_vfsmnt+0x23/0x7f0 [ 214.064374] ? _raw_read_unlock+0x29/0x40 [ 214.068526] vfs_kern_mount.part.0+0x27/0x470 [ 214.073027] do_mount+0xe53/0x2a00 [ 214.076570] ? copy_mount_string+0x40/0x40 [ 214.080807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 214.085827] ? copy_mnt_ns+0xa30/0xa30 [ 214.089896] ? copy_mount_options+0x1fa/0x2f0 [ 214.094394] ? copy_mnt_ns+0xa30/0xa30 [ 214.098280] SyS_mount+0xa8/0x120 [ 214.101732] ? copy_mnt_ns+0xa30/0xa30 [ 214.105654] do_syscall_64+0x1d5/0x640 [ 214.109574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 214.114768] RIP: 0033:0x45deb9 [ 214.117945] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 214.125635] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 214.132899] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 214.140188] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 214.148325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 214.155580] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2002, 0x0) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:18 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb3fa29b4ad406915, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24084080}, 0x20008000) 01:36:18 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:18 executing program 2 (fault-call:3 fault-nth:5): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000080)={0xffff, 0x1ff, 0x7, 0xf4, 0x3, [0x2, 0x1, 0x6, 0x3ff], [0xfffffffb, 0x5, 0xcdb9, 0x100], [0x9, 0x1, 0x5, 0x7], [0x9, 0x3, 0x2, 0x80000001]}) [ 216.611247] FAULT_INJECTION: forcing a failure. [ 216.611247] name failslab, interval 1, probability 0, space 0, times 0 [ 216.648758] 9pnet: Insufficient options for proto=fd 01:36:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 216.674014] CPU: 0 PID: 13947 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 216.681921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.691271] Call Trace: [ 216.693860] dump_stack+0x1b2/0x283 [ 216.697494] should_fail.cold+0x10a/0x154 [ 216.701641] should_failslab+0xd6/0x130 [ 216.705617] kmem_cache_alloc_trace+0x29a/0x3d0 [ 216.710314] v9fs_mount+0x54/0x860 [ 216.713883] ? alloc_pages_current+0x15d/0x260 [ 216.718460] ? __lockdep_init_map+0x100/0x560 [ 216.722958] mount_fs+0x92/0x2a0 [ 216.726327] vfs_kern_mount.part.0+0x5b/0x470 [ 216.730831] do_mount+0xe53/0x2a00 [ 216.731246] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.734373] ? retint_kernel+0x2d/0x2d [ 216.734387] ? copy_mount_string+0x40/0x40 [ 216.734401] ? __sanitizer_cov_trace_pc+0x41/0x50 [ 216.734411] ? copy_mount_options+0x1fa/0x2f0 [ 216.734424] ? copy_mnt_ns+0xa30/0xa30 [ 216.764283] SyS_mount+0xa8/0x120 [ 216.767735] ? copy_mnt_ns+0xa30/0xa30 [ 216.771626] do_syscall_64+0x1d5/0x640 [ 216.775519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 216.781073] RIP: 0033:0x45deb9 [ 216.784263] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 216.791975] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 216.799243] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 216.806512] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 216.813777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 01:36:18 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:18 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f00000000c0)={0x40, 0x20, &(0x7f0000000080)="90673b2542c5abf275a5d6ad8e1d00048b35f8e6a8e68b0fb87a3b9c804cbb207c73ea67fc8d57b25b4b40453ed40617573c345b4df92f", {0x3, 0x101, 0x47031eb9547ab496, 0x2, 0x5, 0x3, 0x7, 0x7ff}}) r4 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x0, 0x141180) getsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000600)=0x7, &(0x7f0000000640)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x7, 0x4, 0x2}) [ 216.821216] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:18 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 216.857229] 9pnet: Insufficient options for proto=fd 01:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 216.924674] 9pnet: Insufficient options for proto=fd [ 216.985816] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:19 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb3fa29b4ad406915, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24084080}, 0x20008000) 01:36:19 executing program 2 (fault-call:3 fault-nth:6): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:19 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:19 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1000000000000000, 0x40100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000001440)=""/245, 0xf5) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x0, 0x0) write$P9_RRENAME(r2, &(0x7f0000000240)={0x7, 0x15, 0x1}, 0x7) pwritev(r3, &(0x7f0000001340)=[{&(0x7f0000000080)="b6808d5e1ac09608a9e263b7531716af8af2dad50b4ec5f0d7571fd0190d35830783e1d4ec76044dbffee80432047c9f224c438c9bfae252807bd065965e8cec13ff2c4cc24406bf9fa8f52b7185550b0d8dfdee589ade17c705668cebbccc28adfc1e4b369000af7bf74c911442de804003d382bd8a280db8ac285b626f17a1431133903c49b1a7d4cd838b4bc0345bfa02b0fea57067fcd9c8c4b7beb8e6a8599a985d35fee7899cd37b510ea31117f52920d65f88fa6a63af058cc975c8ff5f30c9f07292de1a0d53a9", 0xcb}, {&(0x7f0000000180)="c06a3bc1881d8b6b1edfa50086e3d0e5fa0fc833eccc847aca53", 0x1a}, {&(0x7f00000001c0)="ca52c2aa1a16e4d7113d4cf080b34db2c3d6679a243158e0b8f19a48c89ad4260be1e26442d7413b388c26fd5debb814da4e074b4f67d7e41caedb1d870a956e2f008e614cab4ba9bb1226fd9f5cb7baab2c5c42be0934cd6e24f2827846", 0x5e}, {&(0x7f00000013c0)="05af3c29b7845cf442e2f63e36c7e43844695461ffd6e88bace891ed3eb40e498da44332a4d8d5a1419a6c80fd94f8253a5aa7037954b2262ff6a01cf5623d715d5e7f4fdc67788e259a2d2df80000000000000000000000000000000029d8856eee5ae95f6f434ad7ec5a4ae4c9c8f2cd8c02000000c2c49613ca91c5918c", 0x7f}, {&(0x7f00000002c0)="82d37d9d2459a86cb49a9ae30e02839dda634355bd568d83d51a00fdeac86426739a7404d413ffd47094e406a95b3b1ecc9601b575", 0x35}, {&(0x7f0000000300)="54250371f1cc3d99f04a754572f28dc7ae734008", 0x14}, {&(0x7f0000000340)="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", 0x1000}], 0x7, 0xb56, 0x5c5) 01:36:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:19 executing program 3: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10100, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = dup3(r1, r2, 0x0) ioctl$EVIOCGPROP(r4, 0x400445a0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x5, 0x7, 0xfe, 0x80000001}, {0xee2, 0x2, 0x0, 0x4010000}, {0x4a54, 0x80, 0xd8, 0x1}, {0x6, 0x7, 0x7}]}, 0x10) [ 217.074870] FAULT_INJECTION: forcing a failure. [ 217.074870] name failslab, interval 1, probability 0, space 0, times 0 [ 217.098560] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.114994] CPU: 0 PID: 14001 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 217.122921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.132277] Call Trace: [ 217.134865] dump_stack+0x1b2/0x283 [ 217.138519] should_fail.cold+0x10a/0x154 [ 217.142684] should_failslab+0xd6/0x130 [ 217.146661] kmem_cache_alloc_trace+0x29a/0x3d0 [ 217.151342] v9fs_mount+0x54/0x860 [ 217.154883] ? alloc_pages_current+0x15d/0x260 [ 217.159462] ? __lockdep_init_map+0x100/0x560 [ 217.163969] mount_fs+0x92/0x2a0 [ 217.167345] vfs_kern_mount.part.0+0x5b/0x470 [ 217.171844] do_mount+0xe53/0x2a00 [ 217.175388] ? do_raw_spin_unlock+0x164/0x220 [ 217.179549] 9pnet: Insufficient options for proto=fd [ 217.179887] ? copy_mount_string+0x40/0x40 [ 217.190182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 217.195196] ? copy_mnt_ns+0xa30/0xa30 [ 217.199104] ? copy_mount_options+0x1fa/0x2f0 [ 217.203598] ? copy_mnt_ns+0xa30/0xa30 [ 217.207488] SyS_mount+0xa8/0x120 [ 217.210941] ? copy_mnt_ns+0xa30/0xa30 [ 217.214831] do_syscall_64+0x1d5/0x640 [ 217.218723] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:36:19 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:19 executing program 2 (fault-call:3 fault-nth:7): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 217.223907] RIP: 0033:0x45deb9 [ 217.227096] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.234815] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 217.242081] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 217.249349] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 217.256618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 217.263884] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:19 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 01:36:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 217.351777] 9pnet: Insufficient options for proto=fd [ 217.383941] FAULT_INJECTION: forcing a failure. [ 217.383941] name failslab, interval 1, probability 0, space 0, times 0 [ 217.410935] CPU: 0 PID: 14028 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 217.417384] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.418826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.418831] Call Trace: [ 217.418849] dump_stack+0x1b2/0x283 [ 217.418867] should_fail.cold+0x10a/0x154 [ 217.447093] should_failslab+0xd6/0x130 [ 217.451070] __kmalloc_track_caller+0x2bc/0x400 [ 217.455738] ? v9fs_session_init+0x98/0x1540 [ 217.460143] ? trace_hardirqs_on+0x10/0x10 [ 217.464378] kstrdup+0x36/0x70 [ 217.467570] v9fs_session_init+0x98/0x1540 [ 217.471807] ? pcpu_alloc+0xbe0/0xf50 [ 217.475610] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 217.480455] ? v9fs_show_options+0x6b0/0x6b0 [ 217.484872] ? v9fs_mount+0x54/0x860 [ 217.488586] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 217.494039] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 217.499057] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 217.503902] v9fs_mount+0x73/0x860 [ 217.507464] ? alloc_pages_current+0x15d/0x260 [ 217.512043] ? __lockdep_init_map+0x100/0x560 [ 217.516531] mount_fs+0x92/0x2a0 [ 217.519909] vfs_kern_mount.part.0+0x5b/0x470 [ 217.524383] do_mount+0xe53/0x2a00 [ 217.527911] ? copy_mount_string+0x40/0x40 [ 217.532136] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 217.537142] ? copy_mnt_ns+0xa30/0xa30 [ 217.541025] ? copy_mount_options+0x1fa/0x2f0 [ 217.545496] ? copy_mnt_ns+0xa30/0xa30 [ 217.549360] SyS_mount+0xa8/0x120 [ 217.552806] ? copy_mnt_ns+0xa30/0xa30 [ 217.556703] do_syscall_64+0x1d5/0x640 [ 217.560591] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 217.565759] RIP: 0033:0x45deb9 [ 217.569192] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.576898] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 217.585207] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 217.592458] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 217.599731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 217.607008] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:21 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:21 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r2 = syz_mount_image$efs(&(0x7f0000000000)='efs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x6, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8dddf110906cd08fb8305f1b47bc3731b814f769f18cfcca7428ff740dc9a55dee8ed2b2beaec8a0493fb18d9e3d2469d2ca974d3693277111f3b5a9aa047b8c3b5772a8084b8aa47517bbc41755a7b805788656f169686bdeaabb8f1da0a5a73aff4d4ba5391b443573db448c0634b25b37344611b4a3315f490ce3dc6f97618e7816c8580473aa6c8e076a8a6934398b7a0a9ab8a49a4f3d554f66788", 0x9e, 0x5}, {&(0x7f0000000180)="5285b23775a2e609849f909b45c55b4eda1e2334e4cf850a9a6edf658a47f89c9a0eb56fb4d1125aa4aa3d4c194b0c10bc5e9dcf8f76d0cae43a2cf0a03cf61fc2c9288d0919b00e736b6835100480a286dbf89314e17ce0d087f9260890bc09b7f7c00a211a11f0119428ac872a77dc5aceb2318c98d630f67856a977d823b467c353007970f56525ab2248a566b4c551eeadd95ab3798bb4747467823bdb1a62a21667d89419eefaa782d223adff8538573b141a1b36b0e1920326fc8e72c9098a1565113042659145a885c46fadea9639e9e4be75263d9a0c05b54de46f9df65f7303cdb5fec32b99b92364c562ca2eea898977542f80", 0xf8, 0xffffffffffff466b}, {&(0x7f0000000280)="978717b1a0ed48294be68eb775fce2c6f5e9c740c83d4364affab644", 0x1c, 0x1f}, {&(0x7f00000002c0)="267f56b4db84af6ae69bfebf16bd474944e48811c0212829cad14fde74079b94f849e619a785b96fdb09374414bba534a33584245a1ec518a5b2cd60d6d621e5fae6061b843b7a0a727336b0b0ac23e7ada590a49b6e575dd1ea7d50752a90e67db872de6375aac26c962990ea86e20281eab8cab6ca", 0x76, 0x1add}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="4a58510b19643db75d6a4c7c0221132c9cecfcc5755b4e19faad04fb4e45078a291110d40572df57ef3cc62acbfe265d9927954eecd6abc8ea6f97ca2330c9f627b5ed8684fa99305962037e84482c6d3bdc197be7d5492757154a468eb5801c9a137d3ebeed4cf73ce57738de4f8652bd8e391ebe003be309b50a3864802467cb0a371c320efeaf2ae7cc95a9cab0db479152310298b65c229e270c3710a22b3aeb90ef802e04b70eb66c6c474e3b5da7ce801839e9542ebb877c7c50", 0xbd, 0x3}], 0xc0841, &(0x7f00000005c0)={[{'/dev/input/event#\x00'}, {'/dev/input/event#\x00'}, {'/dev/input/event#\x00'}, {'\x14)(*({]!'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/input/event#\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@hash='hash'}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/input/event#\x00'}}]}) readv(r2, &(0x7f0000001680)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) 01:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:21 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) 01:36:21 executing program 2 (fault-call:3 fault-nth:8): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:22 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 01:36:22 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 219.934063] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.951661] FAULT_INJECTION: forcing a failure. [ 219.951661] name failslab, interval 1, probability 0, space 0, times 0 01:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 220.028172] CPU: 0 PID: 14060 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 220.036104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.045458] Call Trace: [ 220.048049] dump_stack+0x1b2/0x283 [ 220.051683] should_fail.cold+0x10a/0x154 [ 220.055303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.055834] should_failslab+0xd6/0x130 [ 220.068378] __kmalloc_track_caller+0x2bc/0x400 [ 220.073072] ? v9fs_session_init+0xd1/0x1540 [ 220.077487] kstrdup+0x36/0x70 [ 220.080678] v9fs_session_init+0xd1/0x1540 [ 220.084912] ? pcpu_alloc+0xbe0/0xf50 [ 220.088715] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 220.093563] ? v9fs_show_options+0x6b0/0x6b0 [ 220.097996] ? v9fs_mount+0x54/0x860 [ 220.101710] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 220.107191] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 220.112670] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 220.117516] v9fs_mount+0x73/0x860 [ 220.121055] ? alloc_pages_current+0x15d/0x260 [ 220.125629] ? __lockdep_init_map+0x100/0x560 [ 220.130126] mount_fs+0x92/0x2a0 [ 220.133498] vfs_kern_mount.part.0+0x5b/0x470 [ 220.137997] do_mount+0xe53/0x2a00 [ 220.141546] ? copy_mount_string+0x40/0x40 [ 220.146743] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 220.151768] ? copy_mnt_ns+0xa30/0xa30 [ 220.155658] ? copy_mount_options+0x1fa/0x2f0 [ 220.156031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.160148] ? copy_mnt_ns+0xa30/0xa30 [ 220.160161] SyS_mount+0xa8/0x120 01:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 220.160170] ? copy_mnt_ns+0xa30/0xa30 [ 220.160183] do_syscall_64+0x1d5/0x640 [ 220.160198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 220.188971] RIP: 0033:0x45deb9 [ 220.192155] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.199861] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 220.207129] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 220.214408] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 220.221673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 01:36:22 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, 0x0, &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 220.228937] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 220.335065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:24 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:24 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) setuid(0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x2, &(0x7f0000000340)=[0xee00, r6]) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x2, &(0x7f0000000340)=[0xee00, r8]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {}, [{}, {0x2, 0x2}, {0x2, 0x6}], {0x4, 0x2}, [{}, {0x8, 0x0, 0xee00}, {0x8, 0x1, r6}, {0x8, 0x2, r8}, {0x8, 0x2}], {0x10, 0x6}}, 0x64, 0x1) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010006000000000002000300", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="a04a605b3ed073ebe3e41575", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r5, @ANYBLOB="040002000000000008000200", @ANYRES32=r8, @ANYBLOB="10000100000000002000070000000000"], 0x4c, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:24 executing program 2 (fault-call:3 fault-nth:9): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:24 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:25 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 222.967150] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.986242] FAULT_INJECTION: forcing a failure. [ 222.986242] name failslab, interval 1, probability 0, space 0, times 0 01:36:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 223.071827] CPU: 0 PID: 14130 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 223.079750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.089190] Call Trace: [ 223.091778] dump_stack+0x1b2/0x283 [ 223.095401] should_fail.cold+0x10a/0x154 [ 223.099549] should_failslab+0xd6/0x130 [ 223.103515] kmem_cache_alloc_trace+0x29a/0x3d0 [ 223.108177] p9_client_create+0x9c/0x12c0 [ 223.112326] ? fs_reclaim_release+0xd0/0x110 [ 223.116728] ? p9_client_flush+0x4c0/0x4c0 [ 223.120960] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 223.126399] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 223.131401] ? __lockdep_init_map+0x100/0x560 [ 223.135888] ? __raw_spin_lock_init+0x28/0x100 [ 223.140459] v9fs_session_init+0x1c5/0x1540 [ 223.144769] ? pcpu_alloc+0xbe0/0xf50 [ 223.148566] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 223.153400] ? v9fs_show_options+0x6b0/0x6b0 [ 223.157796] ? v9fs_mount+0x54/0x860 [ 223.161500] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 223.166940] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 223.171950] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 223.176785] v9fs_mount+0x73/0x860 [ 223.180314] ? alloc_pages_current+0x15d/0x260 [ 223.184882] ? __lockdep_init_map+0x100/0x560 [ 223.189365] mount_fs+0x92/0x2a0 [ 223.192720] vfs_kern_mount.part.0+0x5b/0x470 [ 223.197216] do_mount+0xe53/0x2a00 [ 223.200753] ? copy_mount_string+0x40/0x40 [ 223.204996] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 223.210014] ? copy_mnt_ns+0xa30/0xa30 [ 223.213890] ? copy_mount_options+0x1fa/0x2f0 [ 223.218372] ? copy_mnt_ns+0xa30/0xa30 [ 223.222508] SyS_mount+0xa8/0x120 [ 223.225967] ? copy_mnt_ns+0xa30/0xa30 [ 223.229843] do_syscall_64+0x1d5/0x640 [ 223.233725] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 223.238905] RIP: 0033:0x45deb9 [ 223.242077] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.249772] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 223.257039] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 223.264294] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 01:36:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:25 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 223.271548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 223.278814] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 223.308815] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8100000000000, 0x3c000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) getsockopt$inet_dccp_int(r4, 0x21, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$rds(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:25 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:25 executing program 2 (fault-call:3 fault-nth:10): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 223.519814] FAULT_INJECTION: forcing a failure. [ 223.519814] name failslab, interval 1, probability 0, space 0, times 0 01:36:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 223.575842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.580858] CPU: 0 PID: 14174 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 223.592337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.601686] Call Trace: [ 223.604275] dump_stack+0x1b2/0x283 [ 223.607923] should_fail.cold+0x10a/0x154 [ 223.613125] should_failslab+0xd6/0x130 [ 223.617106] __kmalloc_track_caller+0x2bc/0x400 [ 223.621787] ? p9_client_create+0x2e3/0x12c0 01:36:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 223.626199] kstrdup+0x36/0x70 [ 223.629427] p9_client_create+0x2e3/0x12c0 [ 223.633667] ? p9_client_flush+0x4c0/0x4c0 [ 223.637908] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 223.643360] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 223.648375] ? __lockdep_init_map+0x100/0x560 [ 223.652869] ? __raw_spin_lock_init+0x28/0x100 [ 223.657462] v9fs_session_init+0x1c5/0x1540 [ 223.661789] ? pcpu_alloc+0xbe0/0xf50 [ 223.665597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 223.670440] ? v9fs_show_options+0x6b0/0x6b0 [ 223.674854] ? v9fs_mount+0x54/0x860 [ 223.678572] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 223.684023] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 223.689041] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 223.692298] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.693892] v9fs_mount+0x73/0x860 [ 223.693904] ? alloc_pages_current+0x15d/0x260 [ 223.693913] ? __lockdep_init_map+0x100/0x560 [ 223.693924] mount_fs+0x92/0x2a0 [ 223.693938] vfs_kern_mount.part.0+0x5b/0x470 [ 223.693950] do_mount+0xe53/0x2a00 [ 223.728509] ? copy_mount_string+0x40/0x40 [ 223.732747] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 223.737761] ? copy_mnt_ns+0xa30/0xa30 [ 223.741648] ? copy_mount_options+0x1fa/0x2f0 [ 223.746140] ? copy_mnt_ns+0xa30/0xa30 [ 223.750033] SyS_mount+0xa8/0x120 [ 223.753574] ? copy_mnt_ns+0xa30/0xa30 [ 223.757488] do_syscall_64+0x1d5/0x640 [ 223.761386] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 223.766571] RIP: 0033:0x45deb9 01:36:25 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 01:36:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 01:36:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) [ 223.769755] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.777498] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 223.784764] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 223.792038] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 223.799303] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 223.806568] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 223.809014] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:25 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24092}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x3, 0x8, 0x5, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xbc25}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xeead}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x88c4}, 0x4000000) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) 01:36:25 executing program 2 (fault-call:3 fault-nth:11): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:25 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 01:36:26 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 223.990049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.004218] FAULT_INJECTION: forcing a failure. [ 224.004218] name failslab, interval 1, probability 0, space 0, times 0 [ 224.040436] CPU: 1 PID: 14243 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 224.048338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.057689] Call Trace: [ 224.060276] dump_stack+0x1b2/0x283 [ 224.063913] should_fail.cold+0x10a/0x154 [ 224.068070] should_failslab+0xd6/0x130 [ 224.072049] __kmalloc_track_caller+0x2bc/0x400 [ 224.076721] ? p9_client_create+0x2e3/0x12c0 [ 224.081165] kstrdup+0x36/0x70 [ 224.084361] p9_client_create+0x2e3/0x12c0 [ 224.088603] ? p9_client_flush+0x4c0/0x4c0 [ 224.092845] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 224.098295] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 224.103312] ? __lockdep_init_map+0x100/0x560 [ 224.107819] ? __raw_spin_lock_init+0x28/0x100 [ 224.112405] v9fs_session_init+0x1c5/0x1540 [ 224.116729] ? pcpu_alloc+0xbe0/0xf50 [ 224.120534] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.125397] ? v9fs_show_options+0x6b0/0x6b0 [ 224.129808] ? v9fs_mount+0x54/0x860 [ 224.133523] ? rcu_lockdep_current_cpu_online+0xed/0x140 01:36:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 224.138973] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 224.143994] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 224.148834] v9fs_mount+0x73/0x860 [ 224.152375] ? alloc_pages_current+0x15d/0x260 [ 224.156954] ? __lockdep_init_map+0x100/0x560 [ 224.161452] mount_fs+0x92/0x2a0 [ 224.164830] vfs_kern_mount.part.0+0x5b/0x470 [ 224.169325] do_mount+0xe53/0x2a00 [ 224.172873] ? copy_mount_string+0x40/0x40 [ 224.177125] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 224.182142] ? copy_mnt_ns+0xa30/0xa30 01:36:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 224.186989] ? copy_mount_options+0x1fa/0x2f0 [ 224.191488] ? copy_mnt_ns+0xa30/0xa30 [ 224.195399] SyS_mount+0xa8/0x120 [ 224.198856] ? copy_mnt_ns+0xa30/0xa30 [ 224.202744] do_syscall_64+0x1d5/0x640 [ 224.206637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.211834] RIP: 0033:0x45deb9 [ 224.215016] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.222744] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 224.230009] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:36:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) 01:36:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 224.237540] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 224.244806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 224.252075] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 224.261435] ptrace attach of "/root/syz-executor.4"[14267] was attempted by "/root/syz-executor.4"[14269] 01:36:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:26 executing program 2 (fault-call:3 fault-nth:12): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:26 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:26 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 224.351014] ptrace attach of "/root/syz-executor.4"[14278] was attempted by "/root/syz-executor.4"[14279] 01:36:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x331440, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000080)={{0x613f3fa8520032f5, 0x0, @descriptor="f93341dac2a178ea"}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 224.436143] ptrace attach of "/root/syz-executor.4"[14291] was attempted by "/root/syz-executor.4"[14293] [ 224.439412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.452366] FAULT_INJECTION: forcing a failure. [ 224.452366] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 224.466437] CPU: 1 PID: 14296 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 224.467574] 9pnet: Insufficient options for proto=fd [ 224.474313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.474317] Call Trace: [ 224.474334] dump_stack+0x1b2/0x283 [ 224.474348] should_fail.cold+0x10a/0x154 [ 224.474361] __alloc_pages_nodemask+0x22c/0x2720 [ 224.474376] ? __lock_acquire+0x5fc/0x3f20 [ 224.474391] ? unwind_get_return_address+0x51/0x90 [ 224.474401] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.474411] ? __save_stack_trace+0xa0/0x160 [ 224.474419] ? trace_hardirqs_on+0x10/0x10 [ 224.474427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.474435] ? depot_save_stack+0x10d/0x3e3 [ 224.474444] ? trace_hardirqs_on+0x10/0x10 [ 224.474459] ? kasan_kmalloc+0xeb/0x160 [ 224.474468] ? __kmalloc_track_caller+0x155/0x400 [ 224.474476] ? kstrdup+0x36/0x70 [ 224.474485] ? v9fs_session_init+0xd1/0x1540 [ 224.474492] ? v9fs_mount+0x73/0x860 [ 224.474500] ? mount_fs+0x92/0x2a0 [ 224.474510] ? vfs_kern_mount.part.0+0x5b/0x470 [ 224.474518] ? do_mount+0xe53/0x2a00 [ 224.474526] ? SyS_mount+0xa8/0x120 [ 224.474536] ? do_syscall_64+0x1d5/0x640 01:36:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:26 executing program 2 (fault-call:3 fault-nth:13): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 224.474545] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.474558] cache_grow_begin+0x8f/0x420 [ 224.474571] cache_alloc_refill+0x273/0x350 [ 224.474585] kmem_cache_alloc_trace+0x340/0x3d0 [ 224.474599] p9_client_create+0x9c/0x12c0 [ 224.474611] ? fs_reclaim_release+0xd0/0x110 [ 224.474625] ? p9_client_flush+0x4c0/0x4c0 [ 224.474636] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 224.474653] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 224.474662] ? __lockdep_init_map+0x100/0x560 [ 224.474674] ? __raw_spin_lock_init+0x28/0x100 [ 224.474686] v9fs_session_init+0x1c5/0x1540 [ 224.474696] ? pcpu_alloc+0xbe0/0xf50 [ 224.474710] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.474721] ? v9fs_show_options+0x6b0/0x6b0 [ 224.474734] ? v9fs_mount+0x54/0x860 [ 224.474743] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 224.474752] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 224.474762] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 224.474774] v9fs_mount+0x73/0x860 [ 224.474790] ? alloc_pages_current+0x15d/0x260 [ 224.474797] ? __lockdep_init_map+0x100/0x560 01:36:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 224.474808] mount_fs+0x92/0x2a0 [ 224.474821] vfs_kern_mount.part.0+0x5b/0x470 [ 224.474833] do_mount+0xe53/0x2a00 [ 224.474844] ? do_raw_spin_unlock+0x164/0x220 [ 224.474858] ? copy_mount_string+0x40/0x40 [ 224.474868] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 224.474878] ? copy_mnt_ns+0xa30/0xa30 [ 224.474889] ? copy_mount_options+0x1fa/0x2f0 [ 224.474899] ? copy_mnt_ns+0xa30/0xa30 [ 224.474909] SyS_mount+0xa8/0x120 [ 224.474918] ? copy_mnt_ns+0xa30/0xa30 [ 224.474929] do_syscall_64+0x1d5/0x640 [ 224.474944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 224.474951] RIP: 0033:0x45deb9 [ 224.474957] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 224.474967] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 224.474973] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 224.474978] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 224.474983] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c 01:36:26 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:26 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 224.474989] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 224.666597] FAULT_INJECTION: forcing a failure. [ 224.666597] name failslab, interval 1, probability 0, space 0, times 0 [ 224.726151] 9pnet: Insufficient options for proto=fd 01:36:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) setpgid(0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000080)=""/233, &(0x7f0000000000)=0xe9) 01:36:26 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:26 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 224.893631] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.907150] CPU: 1 PID: 14312 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 224.915047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.924396] Call Trace: [ 224.926982] dump_stack+0x1b2/0x283 [ 224.930631] should_fail.cold+0x10a/0x154 [ 224.934788] should_failslab+0xd6/0x130 [ 224.938766] __kmalloc_track_caller+0x2bc/0x400 [ 224.943434] ? p9_client_create+0x2e3/0x12c0 [ 224.947867] kstrdup+0x36/0x70 [ 224.951071] p9_client_create+0x2e3/0x12c0 [ 224.955312] ? p9_client_flush+0x4c0/0x4c0 [ 224.959550] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 224.965001] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 224.970033] ? __lockdep_init_map+0x100/0x560 [ 224.974526] ? __raw_spin_lock_init+0x28/0x100 [ 224.979109] v9fs_session_init+0x1c5/0x1540 [ 224.983427] ? pcpu_alloc+0xbe0/0xf50 [ 224.987231] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 224.992070] ? v9fs_show_options+0x6b0/0x6b0 [ 224.996483] ? v9fs_mount+0x54/0x860 [ 225.000199] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 225.005643] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 225.010655] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 225.015505] v9fs_mount+0x73/0x860 [ 225.019053] ? alloc_pages_current+0x15d/0x260 [ 225.023634] ? __lockdep_init_map+0x100/0x560 [ 225.028130] mount_fs+0x92/0x2a0 [ 225.032227] vfs_kern_mount.part.0+0x5b/0x470 [ 225.036725] do_mount+0xe53/0x2a00 [ 225.040289] ? retint_kernel+0x2d/0x2d [ 225.044184] ? copy_mount_string+0x40/0x40 [ 225.048420] ? audit_add_tree_rule.cold+0x2f/0x2f [ 225.053362] ? copy_mount_options+0x1fa/0x2f0 [ 225.057877] ? copy_mnt_ns+0xa30/0xa30 [ 225.061761] SyS_mount+0xa8/0x120 [ 225.065219] ? copy_mnt_ns+0xa30/0xa30 [ 225.066692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.069104] do_syscall_64+0x1d5/0x640 [ 225.069123] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 225.069131] RIP: 0033:0x45deb9 01:36:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 225.069136] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.097619] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 225.104975] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 225.112246] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 225.119513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 225.126779] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 225.178396] 9pnet: Insufficient options for proto=fd 01:36:27 executing program 2 (fault-call:3 fault-nth:14): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x38}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x810) 01:36:27 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 225.286667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.298782] 9pnet: Insufficient options for proto=fd [ 225.308955] FAULT_INJECTION: forcing a failure. [ 225.308955] name failslab, interval 1, probability 0, space 0, times 0 [ 225.343873] CPU: 1 PID: 14389 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 225.351768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.361122] Call Trace: [ 225.363725] dump_stack+0x1b2/0x283 [ 225.367354] should_fail.cold+0x10a/0x154 [ 225.371533] should_failslab+0xd6/0x130 [ 225.375513] __kmalloc_track_caller+0x2bc/0x400 [ 225.380209] ? parse_opts.part.0+0x76/0x2d0 [ 225.384530] kstrdup+0x36/0x70 [ 225.387719] parse_opts.part.0+0x76/0x2d0 [ 225.391871] ? p9_fd_show_options+0x190/0x190 [ 225.396367] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 225.401477] ? fs_reclaim_release+0xd0/0x110 [ 225.405893] p9_fd_create+0x86/0x3b0 [ 225.409696] ? p9_fd_create_tcp+0x440/0x440 [ 225.414021] ? __raw_spin_lock_init+0x28/0x100 [ 225.418600] p9_client_create+0x5fd/0x12c0 [ 225.422840] ? p9_client_flush+0x4c0/0x4c0 [ 225.427097] ? __lockdep_init_map+0x100/0x560 [ 225.431618] ? __raw_spin_lock_init+0x28/0x100 [ 225.436208] v9fs_session_init+0x1c5/0x1540 [ 225.440530] ? pcpu_alloc+0xbe0/0xf50 [ 225.444335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 225.449185] ? v9fs_show_options+0x6b0/0x6b0 [ 225.453591] ? v9fs_mount+0x54/0x860 [ 225.457324] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 225.462774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 225.467791] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 225.472632] v9fs_mount+0x73/0x860 [ 225.476198] ? alloc_pages_current+0x15d/0x260 [ 225.480804] ? __lockdep_init_map+0x100/0x560 [ 225.485300] mount_fs+0x92/0x2a0 [ 225.488670] vfs_kern_mount.part.0+0x5b/0x470 [ 225.493167] do_mount+0xe53/0x2a00 [ 225.496718] ? copy_mount_string+0x40/0x40 [ 225.500956] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 225.505973] ? copy_mnt_ns+0xa30/0xa30 [ 225.509865] ? copy_mount_options+0x1fa/0x2f0 [ 225.514359] ? copy_mnt_ns+0xa30/0xa30 [ 225.518255] SyS_mount+0xa8/0x120 [ 225.521706] ? copy_mnt_ns+0xa30/0xa30 [ 225.525612] do_syscall_64+0x1d5/0x640 [ 225.529516] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 225.534698] RIP: 0033:0x45deb9 01:36:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 01:36:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882c75b", 0xa4}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 225.537884] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.545486] 9pnet: Insufficient options for proto=fd [ 225.545592] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 225.557941] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 225.565206] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 225.572469] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 225.579744] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:27 executing program 2 (fault-call:3 fault-nth:15): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 01:36:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:27 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000080)={0x9, 0x1, 0x0, 0x407, 0x3ff, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x1a4c2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r3 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r4 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r5 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) gettid() gettid() syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x18000, 0x0) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 225.657059] 9pnet: Insufficient options for proto=fd 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 225.742260] 9pnet: Insufficient options for proto=fd [ 225.752558] FAULT_INJECTION: forcing a failure. [ 225.752558] name failslab, interval 1, probability 0, space 0, times 0 [ 225.808056] CPU: 1 PID: 14437 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 225.815959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.825315] Call Trace: [ 225.827915] dump_stack+0x1b2/0x283 [ 225.831545] should_fail.cold+0x10a/0x154 [ 225.835696] should_failslab+0xd6/0x130 [ 225.839671] __kmalloc+0x2c1/0x400 [ 225.843219] ? match_number+0x9d/0x200 [ 225.847105] match_number+0x9d/0x200 [ 225.850821] ? match_strdup+0xa0/0xa0 [ 225.854642] ? memcpy+0x35/0x50 [ 225.857923] parse_opts.part.0+0x1b5/0x2d0 [ 225.862165] ? p9_fd_show_options+0x190/0x190 [ 225.866657] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 225.871761] ? fs_reclaim_release+0xd0/0x110 [ 225.876179] p9_fd_create+0x86/0x3b0 [ 225.879896] ? p9_fd_create_tcp+0x440/0x440 [ 225.884218] ? __raw_spin_lock_init+0x28/0x100 [ 225.888797] p9_client_create+0x5fd/0x12c0 [ 225.893040] ? p9_client_flush+0x4c0/0x4c0 [ 225.897291] ? __lockdep_init_map+0x100/0x560 [ 225.901788] ? __raw_spin_lock_init+0x28/0x100 [ 225.906371] v9fs_session_init+0x1c5/0x1540 [ 225.910719] ? pcpu_alloc+0xbe0/0xf50 [ 225.914527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 225.919374] ? v9fs_show_options+0x6b0/0x6b0 [ 225.923786] ? v9fs_mount+0x54/0x860 [ 225.927501] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 225.932956] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 225.937983] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 225.942830] v9fs_mount+0x73/0x860 [ 225.946376] ? alloc_pages_current+0x15d/0x260 [ 225.950956] ? __lockdep_init_map+0x100/0x560 [ 225.955129] 9pnet: Insufficient options for proto=fd [ 225.955450] mount_fs+0x92/0x2a0 [ 225.963900] vfs_kern_mount.part.0+0x5b/0x470 [ 225.968396] do_mount+0xe53/0x2a00 [ 225.971941] ? copy_mount_string+0x40/0x40 [ 225.976177] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 225.981188] ? copy_mnt_ns+0xa30/0xa30 [ 225.985073] ? copy_mount_options+0x1fa/0x2f0 [ 225.989570] ? copy_mnt_ns+0xa30/0xa30 [ 225.993457] SyS_mount+0xa8/0x120 [ 225.996933] ? copy_mnt_ns+0xa30/0xa30 [ 226.000818] do_syscall_64+0x1d5/0x640 01:36:27 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}], [], 0x6b}}) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:27 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:28 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:28 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}, {@posixacl='posixacl'}], [], 0x6b}}) [ 226.004719] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 226.009907] RIP: 0033:0x45deb9 [ 226.013099] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.020805] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 226.028100] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 226.035389] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 226.042656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 226.049927] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c 01:36:28 executing program 2 (fault-call:3 fault-nth:16): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:28 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc090) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 226.085608] 9pnet: Insufficient options for proto=fd 01:36:28 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 226.151082] FAULT_INJECTION: forcing a failure. [ 226.151082] name failslab, interval 1, probability 0, space 0, times 0 [ 226.163762] CPU: 1 PID: 14481 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 226.171649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.180996] Call Trace: [ 226.183583] dump_stack+0x1b2/0x283 [ 226.187216] should_fail.cold+0x10a/0x154 [ 226.191365] should_failslab+0xd6/0x130 [ 226.195342] __kmalloc+0x2c1/0x400 [ 226.198907] ? match_number+0x9d/0x200 [ 226.202818] match_number+0x9d/0x200 [ 226.206560] ? match_strdup+0xa0/0xa0 [ 226.210361] ? memcpy+0x35/0x50 [ 226.213646] parse_opts.part.0+0x1b5/0x2d0 [ 226.217882] ? p9_fd_show_options+0x190/0x190 [ 226.222382] ? fs_reclaim_release+0xd0/0x110 [ 226.226799] p9_fd_create+0x86/0x3b0 [ 226.230514] ? p9_fd_create_tcp+0x440/0x440 [ 226.234917] ? __raw_spin_lock_init+0x28/0x100 [ 226.239501] p9_client_create+0x5fd/0x12c0 [ 226.243740] ? p9_client_flush+0x4c0/0x4c0 [ 226.247994] ? __lockdep_init_map+0x100/0x560 [ 226.252489] ? __raw_spin_lock_init+0x28/0x100 [ 226.257076] v9fs_session_init+0x1c5/0x1540 [ 226.261396] ? pcpu_alloc+0xbe0/0xf50 [ 226.265202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 226.270055] ? v9fs_show_options+0x6b0/0x6b0 [ 226.274462] ? v9fs_mount+0x54/0x860 [ 226.278877] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 226.284320] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 226.289328] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 226.294157] v9fs_mount+0x73/0x860 [ 226.297684] ? alloc_pages_current+0x15d/0x260 [ 226.302257] ? __lockdep_init_map+0x100/0x560 [ 226.306751] mount_fs+0x92/0x2a0 [ 226.310109] vfs_kern_mount.part.0+0x5b/0x470 [ 226.314604] do_mount+0xe53/0x2a00 [ 226.318159] ? copy_mount_string+0x40/0x40 [ 226.322382] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 226.327390] ? copy_mnt_ns+0xa30/0xa30 [ 226.331253] ? copy_mount_options+0x1fa/0x2f0 [ 226.335742] ? copy_mnt_ns+0xa30/0xa30 [ 226.339615] SyS_mount+0xa8/0x120 [ 226.343058] ? copy_mnt_ns+0xa30/0xa30 [ 226.346957] do_syscall_64+0x1d5/0x640 [ 226.350847] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 226.356972] RIP: 0033:0x45deb9 [ 226.360138] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.367823] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 226.375086] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 226.382351] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 226.389609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 226.396858] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 226.410421] 9pnet: Insufficient options for proto=fd 01:36:30 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:30 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}], [], 0x6b}}) 01:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:30 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:30 executing program 3: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x440, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffffffffff5) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x2, 0xfffffff8}) 01:36:30 executing program 2 (fault-call:3 fault-nth:17): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:30 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x282100, 0x0) ioctl$CHAR_RAW_FRASET(r1, 0x1264, &(0x7f0000000080)=0x10000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 228.745466] nla_parse: 2 callbacks suppressed [ 228.745472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.767546] FAULT_INJECTION: forcing a failure. [ 228.767546] name failslab, interval 1, probability 0, space 0, times 0 01:36:30 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}], [], 0x6b}}) [ 228.809844] CPU: 1 PID: 14507 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 228.818445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.827796] Call Trace: [ 228.830384] dump_stack+0x1b2/0x283 [ 228.834015] should_fail.cold+0x10a/0x154 [ 228.838175] should_failslab+0xd6/0x130 [ 228.842157] kmem_cache_alloc_trace+0x29a/0x3d0 [ 228.846833] p9_fd_create+0x135/0x3b0 [ 228.851529] ? p9_fd_create_tcp+0x440/0x440 [ 228.855885] ? __raw_spin_lock_init+0x28/0x100 01:36:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 228.860468] p9_client_create+0x5fd/0x12c0 [ 228.864710] ? p9_client_flush+0x4c0/0x4c0 [ 228.868948] ? __lockdep_init_map+0x100/0x560 [ 228.873540] ? __raw_spin_lock_init+0x28/0x100 [ 228.878154] v9fs_session_init+0x1c5/0x1540 [ 228.882477] ? pcpu_alloc+0xbe0/0xf50 [ 228.886307] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 228.891180] ? v9fs_show_options+0x6b0/0x6b0 [ 228.895594] ? v9fs_mount+0x54/0x860 [ 228.899319] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 228.904770] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 228.906281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.909788] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 228.909801] v9fs_mount+0x73/0x860 [ 228.909810] ? alloc_pages_current+0x15d/0x260 [ 228.909822] ? __lockdep_init_map+0x100/0x560 [ 228.935773] mount_fs+0x92/0x2a0 [ 228.939155] vfs_kern_mount.part.0+0x5b/0x470 [ 228.943676] do_mount+0xe53/0x2a00 [ 228.947225] ? copy_mount_string+0x40/0x40 [ 228.951457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 228.956473] ? copy_mnt_ns+0xa30/0xa30 01:36:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 228.960359] ? copy_mount_options+0x1fa/0x2f0 [ 228.964854] ? copy_mnt_ns+0xa30/0xa30 [ 228.968743] SyS_mount+0xa8/0x120 [ 228.972197] ? copy_mnt_ns+0xa30/0xa30 [ 228.976087] do_syscall_64+0x1d5/0x640 [ 228.980330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 228.985523] RIP: 0033:0x45deb9 [ 228.988735] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 228.996447] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 229.003713] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:36:31 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 01:36:31 executing program 2 (fault-call:3 fault-nth:18): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 229.010981] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 229.018250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 229.025132] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.025516] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 229.138885] FAULT_INJECTION: forcing a failure. [ 229.138885] name failslab, interval 1, probability 0, space 0, times 0 [ 229.150257] CPU: 0 PID: 14557 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 229.158135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.167485] Call Trace: [ 229.170098] dump_stack+0x1b2/0x283 [ 229.173729] should_fail.cold+0x10a/0x154 [ 229.177880] should_failslab+0xd6/0x130 [ 229.181859] kmem_cache_alloc_trace+0x47/0x3d0 [ 229.186446] p9_client_prepare_req.part.0+0x4ea/0xb60 [ 229.191648] p9_client_rpc+0x170/0x1520 [ 229.195629] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 229.200684] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 229.206051] ? p9_pollwait+0x18e/0x1f0 [ 229.209940] ? p9_conn_create+0x4b0/0x4b0 [ 229.214090] ? pipe_poll+0x24f/0x2c0 [ 229.217807] ? p9_fd_poll+0x237/0x2e0 [ 229.221610] ? p9_conn_create+0x3aa/0x4b0 [ 229.225757] ? p9_fd_create+0x293/0x3b0 [ 229.229731] ? p9_fd_create_tcp+0x440/0x440 [ 229.234087] p9_client_create+0x92f/0x12c0 [ 229.238306] ? p9_client_flush+0x4c0/0x4c0 [ 229.242611] ? __lockdep_init_map+0x100/0x560 [ 229.247089] ? __raw_spin_lock_init+0x28/0x100 [ 229.251686] v9fs_session_init+0x1c5/0x1540 [ 229.256084] ? pcpu_alloc+0xbe0/0xf50 [ 229.259908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 229.264761] ? v9fs_show_options+0x6b0/0x6b0 [ 229.269173] ? v9fs_mount+0x54/0x860 [ 229.272867] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 229.278303] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 229.283319] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 229.288404] v9fs_mount+0x73/0x860 [ 229.291924] ? alloc_pages_current+0x15d/0x260 [ 229.296491] ? __lockdep_init_map+0x100/0x560 [ 229.300967] mount_fs+0x92/0x2a0 [ 229.304314] vfs_kern_mount.part.0+0x5b/0x470 [ 229.308786] do_mount+0xe53/0x2a00 [ 229.312320] ? copy_mount_string+0x40/0x40 [ 229.316548] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 229.321554] ? copy_mnt_ns+0xa30/0xa30 [ 229.325420] ? copy_mount_options+0x1fa/0x2f0 [ 229.329927] ? copy_mnt_ns+0xa30/0xa30 [ 229.334746] SyS_mount+0xa8/0x120 [ 229.338179] ? copy_mnt_ns+0xa30/0xa30 [ 229.342054] do_syscall_64+0x1d5/0x640 [ 229.345923] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 229.351102] RIP: 0033:0x45deb9 [ 229.354267] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 229.361951] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 229.369200] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 229.376451] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 229.383706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 229.390993] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 229.398268] 9pnet: Couldn't grow tag array 01:36:33 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:33 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname'}}], [], 0x6b}}) 01:36:33 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 01:36:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x72d040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x404200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000002140)={{0x1, 0x0, 0x80, {0x2000, 0xf000, 0x2}}, "2fe5527ef559f4aad955c9246ecce6aac05ba84b74d50ec757c1a622f265a6ca3f8fad7a3c4be3d17eb256203edc0db70272e465208aa3155a50becdbc67e11079a5d86265584dba8dee247ecbfa02447268b17c818d5ab891516c27e82568d166b3eea4b7e731e3ee8285c08810e482fe383fe1c59e345c504b9c229727422d0727ca6afb1b2a1c4d1fd5fce21489e530cc0bc68e95cbbe80f229618cd85e2a319252a3e6f4b847b0d398f32cfac9bed6a6d1bbb3c9c117e01f854f57674927b5ad37d0d4fb57792a4f560feb0dc18c27775edd4acd07a7ee261853950853b4722d4fb9ba6702bb31017931af65e6c1cc5c4326ca0e57ccebaaf2c6faf88772fbbe9a846f2fe5637bc4c01ab62e355c1b26e4ddeb0034fe4402aee334e77f4c917193438bccb8fda43adb2c9a3a188b2e34f5d83dfc486960712e4d765658d7eaea9cf774905d5b4f4ea8aa6f777c84910a21464bdcc36f2ae4a94c3b37a3c7d8c8e2da5b8519718803544b28af8e4ee788510236fcc6e365d5d9e42bd1fee729325a0174caaff333dbe9ee1164b5d6f81fa8f79eae09e8f03c4f1dd80327217e6d9b2a4635a0c81719d5602172e1f9b5a0d7dfacb85e043f37dccf2e863aaee697285b492976fe4c7dccb5dd064d33162a25922d42cdb14e792a632c49437c027450d99b6c5150bb2dadc9f511c71e3101c7525f8a57b3a1fe66003410f90471117846a016ce734b73b7f2315dc2c649fc441aa74bfefef0e3e9fda79e01cee43879e18e4fcbe8554c4d06530bf23dab65498017945260643f071bfd182c5f8c6c398cd9cd671a71c0e3f15098a3da2873ce4aa540b7f7b7749d75142f1bac6ae48816a03f879dc5f308171922e26323811457b06a4c70332f2546b1cf79cede94038e4e19ce4495bbf517c13989015a0d987a8c17df0944f2a9a555f2752f7bd1820e4feb6996d715bb1a18da48998a2fea1cb8a0ed31198440be858a4348ada4448ec7dd9c4c86c4f865df120838e72579edfa7e85c749e9a063dc1f33555ae09521ad575e1bd023750c77b52e73490d3adf6f672bd243e58f39a2543bf9b183a5ad4718d107873af293fafdcecfaa42cd2b10622dae93d1c30e5a7a84777480cd1816ffc5284e46f2d50a682a28464215c3af96f6b90e6d9fe20fa7c0646bfb1e03e81a508462de71b781e3daf9bbd092039b309a52c46486dee9d80b9e99c3f83e798ba433bb778e53a4498c37d24ec17417d53ecc9f73d73cff996e73d5b6c49f236867f1ab0f5cc080c95ba702d36d408b97832fb6c3086b6e191074ebf6050d0bea732f57ec9c181dd277063a9d18cdea135b937b8062f752bca221626c0a46a2d11276356ed0696d14d82bd1ffa67b8a8dc001215fa92336defa326b4227edb8a972b9a333d7b1c892f62c7503d833cfb7404f5820414e109fd7ace1e4388114102f43ec1946b1ab834ef19988635166a61c113f6409201934acb467d39e16558760792c5f86a015a8ad9ba19912fa5be3b013a279a91f1e4de52c9c971cb13000e6b2e7bc3795f4d6c5f166334e7e8e3fcdf183c8dea5c77be74b0a331633196aa3e5c67b57b83cac9f559bdede9f8a788a9416a57436f1a51870704b3050c3e2be9318ec7a2a48f2d61ad91f37dc3476c9cc30b22b59d8ad29e7143b5f460ef2b1f5ef9ab5590411f439e7ba41aa4dc2e12ba4f561b147397ee1ebc3b4b90d71b0218783987b193520c5a276c3bab0ee4245a55bb48139e6e2b6bfd48df59558d256bc16776a5dc0df543f04bcb40498b3b6ab4cd92da43dc272fef711281f394e1764133a5a29593861dccc01f021024149c72cd7cb3befccfb95de162a2f02f2a3d538c9e933216d93dae0c09994da4faa63cdc362c049fe087c36bac052b9ff8137188621d54dc12e3ad7778c185cd32a9776f6d9ea30d077750be095965f47542c755bd8a3964b928ed75f2795471936b6898ab233c12313d668f6f49f4fa0d9db097b7f9e1bcd5fb3850fdfe6ba9bcc01b8cf8ad208564216f7231ff684fa2baaa269ac3cb2a6e5b7a73ffa76a845755976789e320fb08efce0f9ba36f1f59da3324806fbd4705130ac37cb8e4b3d50955ec0981588a8f57b6715e72217e0ed55011b354b948ee58a2d15198d1887881ac582e6846d34cb4b4511c79e78c70ba34865f6001b44fc0f16c4fc3b7bcdc998c60b8d16cb7a9bcee612a3c1347877b7979644e0141b9dfa3c5aa1b8f00414037f5c00c72d54d9d501ce78430693f2dd3b7f8bf5b676730b546a8a78920958a1796696c0acfaa31372588c9c489fbf44dd27a25d392169ffd85d473cb37186b83596740d4f4bb2652cedb4aef6c145963d29a05ae15cc5ade96251d850634352852899cd84486af7d03740e0cd6c8389384ec46097fabd756475b15fc4767ef38948312823fdb119ceda58641a8d0bf1b02eb44bd1654b6cda808433c0860b4318683aab1444e09d61fdfbad4cdf563d0f89098aeba38115b3434a5eebe4109f805af3e2747ba321e973230c3e0e7722cf1e87f779a71c868cf05e8a80a36b0005faac2f7ffd2fbfc4cfd16dec9c544d314224c236911c1191a0c292037a1ed26b18cf2bc2cbdb728831eff98a47c02b7beab9c0a78193dd92b6d210f6bd3f3fb76823c8b728756a1d7d8ac3c6a96d6bdcd38feff90ed66f14627a8ede9166ec1ba963922a34b64816028d4a2e5746bf811fca967be2259325c6828ffda02413599feaea58e9d9fc68a9b40bd8d19a5bd8a7fee78eb282426e5c509cb4f704f97f1239f4300f6fc956fa0c11a618a2f34e62ebc773b58b8878f5709f7d5144947c6261766ee43bb463cf1fd4d3996215be9707567974f866ac41e3b54919e00f0c995b12e12eb97938d33ace59168fb3092d97a68959324a60e4eacb51b467ed9b6e5197a808a3fc7f4726507f1d469e480bf580a0d02ddcf78f5e1dab3c32b30dc957ad6b2c0d842779c3da72f0cf20eda06464baa8550887a2be0881136186ad616e27f472cdd9ee5a544bd8016087a4ad693f0db3388b2e19b806908f42337769e95b6a94dcbd81b723af075548fe83608978adc72ff2a2b7ba7e4e435ac61b82e7f7ea54b827619d098822f07e5f92e494a060ccf52d67f2214714307313c16f68abe132c5f59afaf9983b743be121216f72159a0e47279d36bf822dd1d88ac3703b12261ab8762da46661c3e781be1cbd42d234912417b5a76f3716ece83e58648c9ee46bc89eec22b022cca3185ed1faf30c9ea41eefe932fe44d70a18fb3b55baa43a720124b94904595ca6181b50b922fcf4747e7c047ae7d68b615e0783b60ac5806d8ed9f33dabfc0279423c17534350ed41c0c871d7aebe8390507be183d8df5dc93f7caaaefd16f83631a53559e8ce11f859c94ce4d4ee4401658251dde93c3c73fc5b0086a4a3e5dc73759b2c20ec87a66e5d434927292628b417538c4c448839b82491b045c50f6ed5b0d4428e797e314add34aeff45622f35c8b6ad4cc9d53612aaf1b6e8f1829c4fe7515f61b9b7a1da581589d729a261578b85b399a7cce2244ab5e86517c9ec53f75459eb1d38b9407ef9bca20685d74121a907162cac30f9ceccc17f41d272c58f3c3ff33e2126da24ee89d6a726c6222a97c52b027b68fa18fcfad917e7cb587be702c87030c3eaf69459c7569df1227b7dc6280737a8d74e9bd84e8138a01ff50fd92f7ebde71acfbca987c5dc1186dc982934710a667a93033f30c54e369a7d12870c3112a729246675ffb17ee5d19ff6cc01f0720d78a1f09c63f234e24a7077d27db969196b8cba1d32e0d598ea3ccc49974df90bcde7211ebc17f94616557bb746f49990c15ae39a325827961c371efc370146571fa5327f8601a6ead4e232f5ba000261652b63f7477733b513b9d1acc9f6967522927bc4902d72a1e4b715fe6161d7bf84dc053337a8718f08d5df4b443fd6601bde8782df9284e46a26b64a67e221d997ecf013d5b0b4e63334f7e720250416c1d51d87c54be308e8449a09dbc611c38f984fbc7d07e8bf551beb2215ee8be83a189bfaba8b3d1fb03f39c0995c985cbf8cf50b10656d20de785a9b7713ea858607f16ccb5368f56f57d68c36d315285664c6028407cf6632d5d3cd2c47a413cce36e6bce5c579701215918c8f565f08a7c1bd773ef5392eace278298fe27f8f35ec96619355917d502900f99848ebad43ebecfdd3fa749c2f7d85396a4bdd90c6b08e0b12a8f593b519007ca48f9a0216c89066dca030b6c25bf1b31f774ffbd66b2079b2c54a62bafe5f198519c04d366dba3eeb65526b837446142ea9b8fe3168d4bf94616473fdc186dc5c271213d508c87c741c2baad20d302133d19338489a2d804584c04cd849459a1d8c6de6ed65ef5b167ac3a936df834b0a7a9360e4480b4d346f43cb7aa75d6404ea8cb6733d43d013f637f4159464fec458c922a8b4e754ce2d732b01ab74dda983ac5aa7490c814f21a8b1f071c028eb23b1040525fa0196cd228e119d89c3d5c0a8f0a603c36c16c4d7a127fe8821f009e3c3f26556958ac8f7388faa7570155e541c8af08502bf547dff36d2cc481a3eb094ed77eee952b7542c7d47fe585a94ce7fd73e10792300f60f9311d92f83c5672411109edf9a2ad4e7be3f83dd49b10df8b7883e5e870c53fe3f8f87d3e925c69ebf48598bae7fd6b7c34ef8a56dc7a5ceac7b1bfa321dc337e5ed94f6e0b1a90c670d013886e2b979cdf158e03169f7e5ee881ea4f380e5fbd9f305e4f374de970ea9aef22230891f2a86b599687662e121378b75c44d5fc1197f6b91616aec4aaefb5b3d08624cda5f8a3ae320e1f247f1a9f232601c90b67a702d872deaffb9bc8fc5513f8fa02cfba10f7c9a075caa88f0edca7022c2843cd3bee8bc84544a7a55bf6c1ff8cfeb94b3f81deb85c5dc9343165cfc5cd6dece2951e6bebdb6c49b91cd3a494eab737caf9629797cc416d14d902f56492a7179ba2ab2c29bd18ca6cdeaf64eac71182524ae6875d2de0ef5ce87cdc4d35981ca366903bfc93033e55de9d1a42879a4173089201cd4d30a8aac362d76231bf635487862f13b587c8f2a763e9337a18840f66a39868ab3bfd4f773edd8b7997bc5cfa478577155de511f01c16a4de390ea390c9afeb3c20504c8d89a6774ac1c9360aae4331174a459f5e71fe738c15d92904bb7b8737ec1436767df49340d2ed79fbb7eb4b41a3ad22f2a47c72059790fc00a3b139bd1ed1fabdadbdc0338e70c7efc19f72d7840e2944e1229b3ee4d2b9a37b3c3494ac787be35c36257ece57009b2cc66b4b86e917aa7e48a6f87d88a32f6fb7a5b185e1d98231c6be1f0abe53cd8814d2a70c94cdb5f26fc78c73c1ef37df0836b8c77907a29f1cb165da906ad46ae6259a6c0744c640296bc1bd92c3fa67e5213e5bb346a60a9361227a086d378a36edd79b082698588d4da4f994e23a0d2f7cfbb3fba9fa3a93f9937349a2a15ee0efdbec4c063d70e08bd9f57bb59acfe29656a1d568f6d88cdce3c2320720cf5c0c552715d5e44870a4e3c6f5b8c1608abe8e0111f65f0292dba70b73b27973c69618fe5ce54afeeb202adcb10307fece8bcaa08c2f0c42dc8ad1c336c15a50dbff222e096ce9e0d0c6512637dc21854806a0ea9787e0a126f897507bc872b992eaf83e9b2d2eb4e35bf224c6fbaecd3ae590cba1883bd08011b260258a7ca24e67a04c4edd2f962ac1c1efc5ce4b96298a9d509ca2a95cf59befd040fcddc2a84d7b60", "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"}) r4 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r5 = epoll_create(0x10000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) r6 = gettid() r7 = gettid() r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000180)={r5}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r8, 0xf50f, 0x0) r9 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) sync_file_range(0xffffffffffffffff, 0x5, 0x8e30, 0x4) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000040)) 01:36:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:33 executing program 2 (fault-call:3 fault-nth:19): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:33 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 01:36:33 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r1) write$FUSE_LSEEK(r3, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x400}}, 0x18) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f00000000c0)=0x5) [ 231.798120] FAULT_INJECTION: forcing a failure. [ 231.798120] name failslab, interval 1, probability 0, space 0, times 0 [ 231.817838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.826921] CPU: 1 PID: 14583 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 231.834851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.844210] Call Trace: [ 231.846800] dump_stack+0x1b2/0x283 [ 231.850433] should_fail.cold+0x10a/0x154 [ 231.854585] should_failslab+0xd6/0x130 [ 231.858588] kmem_cache_alloc_trace+0x29a/0x3d0 [ 231.863347] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 231.868548] p9_client_rpc+0x170/0x1520 [ 231.872530] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 231.877550] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 231.882918] ? p9_pollwait+0x18e/0x1f0 [ 231.886805] ? p9_conn_create+0x4b0/0x4b0 [ 231.890959] ? pipe_poll+0x24f/0x2c0 [ 231.894672] ? p9_fd_poll+0x237/0x2e0 [ 231.898478] ? p9_conn_create+0x3aa/0x4b0 [ 231.902628] ? p9_fd_create+0x293/0x3b0 [ 231.906696] ? p9_fd_create_tcp+0x440/0x440 [ 231.911021] p9_client_create+0x92f/0x12c0 [ 231.915259] ? p9_client_flush+0x4c0/0x4c0 [ 231.919499] ? __lockdep_init_map+0x100/0x560 [ 231.924002] ? __raw_spin_lock_init+0x28/0x100 [ 231.928592] v9fs_session_init+0x1c5/0x1540 [ 231.932917] ? pcpu_alloc+0xbe0/0xf50 [ 231.936749] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 231.941619] ? v9fs_show_options+0x6b0/0x6b0 01:36:34 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) [ 231.946062] ? v9fs_mount+0x54/0x860 [ 231.949791] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 231.955239] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 231.960257] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 231.965124] v9fs_mount+0x73/0x860 [ 231.968677] ? alloc_pages_current+0x15d/0x260 [ 231.973260] ? __lockdep_init_map+0x100/0x560 [ 231.977756] mount_fs+0x92/0x2a0 [ 231.981137] vfs_kern_mount.part.0+0x5b/0x470 [ 231.985637] do_mount+0xe53/0x2a00 [ 231.989185] ? copy_mount_string+0x40/0x40 [ 231.993421] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 231.998462] ? copy_mnt_ns+0xa30/0xa30 [ 232.002459] ? copy_mount_options+0x1fa/0x2f0 [ 232.006954] ? copy_mnt_ns+0xa30/0xa30 [ 232.010837] SyS_mount+0xa8/0x120 [ 232.014281] ? copy_mnt_ns+0xa30/0xa30 [ 232.018184] do_syscall_64+0x1d5/0x640 [ 232.022056] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 232.027250] RIP: 0033:0x45deb9 [ 232.030420] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.038153] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 01:36:34 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 01:36:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 232.045442] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 232.052691] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 232.059944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 232.067192] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 232.084179] 9pnet: Couldn't grow tag array 01:36:34 executing program 2 (fault-call:3 fault-nth:20): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 232.149251] FAULT_INJECTION: forcing a failure. [ 232.149251] name failslab, interval 1, probability 0, space 0, times 0 [ 232.166122] CPU: 1 PID: 14614 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 232.174043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.183748] Call Trace: [ 232.186341] dump_stack+0x1b2/0x283 [ 232.189971] should_fail.cold+0x10a/0x154 [ 232.194122] should_failslab+0xd6/0x130 [ 232.198101] __kmalloc+0x2c1/0x400 [ 232.201643] ? p9_fcall_alloc+0x19/0x90 [ 232.205621] p9_fcall_alloc+0x19/0x90 [ 232.209422] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 232.214618] p9_client_rpc+0x170/0x1520 [ 232.218594] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 232.223609] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 232.226939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.228972] ? p9_pollwait+0x18e/0x1f0 [ 232.241760] ? p9_conn_create+0x4b0/0x4b0 [ 232.245909] ? pipe_poll+0x24f/0x2c0 [ 232.249624] ? p9_fd_poll+0x237/0x2e0 [ 232.253422] ? p9_conn_create+0x3aa/0x4b0 [ 232.257570] ? p9_fd_create+0x293/0x3b0 [ 232.261552] ? p9_fd_create_tcp+0x440/0x440 [ 232.265879] p9_client_create+0x92f/0x12c0 [ 232.270115] ? p9_client_flush+0x4c0/0x4c0 [ 232.274355] ? __lockdep_init_map+0x100/0x560 [ 232.278852] ? __raw_spin_lock_init+0x28/0x100 [ 232.283437] v9fs_session_init+0x1c5/0x1540 [ 232.287765] ? pcpu_alloc+0xbe0/0xf50 [ 232.291570] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 232.296417] ? v9fs_show_options+0x6b0/0x6b0 [ 232.300829] ? v9fs_mount+0x54/0x860 [ 232.304544] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 232.309996] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 232.315017] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 232.319873] v9fs_mount+0x73/0x860 [ 232.323411] ? alloc_pages_current+0x15d/0x260 [ 232.327989] ? __lockdep_init_map+0x100/0x560 [ 232.332484] mount_fs+0x92/0x2a0 [ 232.335867] vfs_kern_mount.part.0+0x5b/0x470 [ 232.340386] do_mount+0xe53/0x2a00 [ 232.343935] ? copy_mount_string+0x40/0x40 [ 232.348250] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 232.353614] ? copy_mnt_ns+0xa30/0xa30 [ 232.357500] ? copy_mount_options+0x1fa/0x2f0 [ 232.361996] ? copy_mnt_ns+0xa30/0xa30 [ 232.365890] SyS_mount+0xa8/0x120 [ 232.369336] ? copy_mnt_ns+0xa30/0xa30 [ 232.373222] do_syscall_64+0x1d5/0x640 [ 232.377099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 232.382280] RIP: 0033:0x45deb9 [ 232.385461] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 232.393153] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 232.400419] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 232.407672] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 232.414941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 232.422199] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 232.434004] 9pnet: Couldn't grow tag array 01:36:36 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:36 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 01:36:36 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2002, 0x142) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x4e23, 0xffffff81, @mcast2, 0x2}}, 0x0, 0x0, 0x4c, 0x0, "194b18d77417b7c1ecfa4076a278b374fe106724769913784bd5629986a24997c6221b0c811b06a1ee2357a4baf7f84d9b69d3b6fb20cfc68949fb8697cdf42d19f660df7d13e4275ac0ba9c15d9aafa"}, 0xd8) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) statx(r2, &(0x7f0000000180)='./file0\x00', 0x100, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) read$FUSE(r3, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002300)={0x200, 0x0, r5, [{{0x5, 0x0, 0x237a, 0x6, 0x1ff, 0x400, {0x3, 0x38, 0x7f, 0x3, 0x4, 0x0, 0x401, 0x103, 0x90, 0x4000, 0x3, r6, 0xee00, 0x9, 0x1}}, {0x3, 0x400, 0x5, 0x4, '/}\xfd[\xf8'}}, {{0x5, 0x3, 0x2, 0x146, 0x7, 0xffff, {0x4, 0x7, 0x5, 0x80000000, 0x140000000000000, 0x2e6, 0x7, 0x0, 0x81, 0x4000, 0x1, r8, r9, 0x5, 0x200}}, {0x4, 0x4, 0x12, 0x8, '/dev/input/event#\x00'}}, {{0x2, 0x2, 0x4, 0x401, 0x8, 0x7fffffff, {0x3, 0x100000001, 0x80000000, 0x40, 0x7fffffff, 0xffffffff, 0x20, 0x7f, 0x8, 0xc000, 0x464, 0x0, 0x0, 0x4, 0x5}}, {0x3, 0x2, 0x5, 0x9, '#}*^^'}}]}, 0x200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:36 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:36 executing program 2 (fault-call:3 fault-nth:21): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 234.791418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.817146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 01:36:36 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) [ 234.839418] FAULT_INJECTION: forcing a failure. [ 234.839418] name failslab, interval 1, probability 0, space 0, times 0 [ 234.851924] CPU: 0 PID: 14649 Comm: syz-executor.2 Not tainted 4.14.206-syzkaller #0 [ 234.859821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.869227] Call Trace: [ 234.871895] dump_stack+0x1b2/0x283 [ 234.875558] should_fail.cold+0x10a/0x154 [ 234.879712] should_failslab+0xd6/0x130 [ 234.883690] __kmalloc+0x2c1/0x400 [ 234.887244] ? p9_fcall_alloc+0x19/0x90 01:36:36 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 234.891223] p9_fcall_alloc+0x19/0x90 [ 234.895032] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 234.900228] p9_client_rpc+0x170/0x1520 [ 234.904216] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 234.909245] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 234.914608] ? p9_pollwait+0x18e/0x1f0 [ 234.915495] xt_hashlimit: overflow, try lower: 0/0 [ 234.918490] ? p9_conn_create+0x4b0/0x4b0 [ 234.918502] ? pipe_poll+0x24f/0x2c0 [ 234.918513] ? p9_fd_poll+0x237/0x2e0 [ 234.918524] ? p9_conn_create+0x3aa/0x4b0 [ 234.918534] ? p9_fd_create+0x293/0x3b0 [ 234.918543] ? p9_fd_create_tcp+0x440/0x440 [ 234.918555] p9_client_create+0x92f/0x12c0 [ 234.918570] ? p9_client_flush+0x4c0/0x4c0 [ 234.918582] ? __lockdep_init_map+0x100/0x560 [ 234.918594] ? __raw_spin_lock_init+0x28/0x100 [ 234.918608] v9fs_session_init+0x1c5/0x1540 [ 234.918619] ? pcpu_alloc+0xbe0/0xf50 [ 234.918632] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 234.918643] ? v9fs_show_options+0x6b0/0x6b0 [ 234.918656] ? v9fs_mount+0x54/0x860 01:36:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x10, 0x8000000000000003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r1, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 234.918666] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 234.918676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 234.918688] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 234.918699] v9fs_mount+0x73/0x860 [ 234.918708] ? alloc_pages_current+0x15d/0x260 [ 234.918715] ? __lockdep_init_map+0x100/0x560 [ 234.918726] mount_fs+0x92/0x2a0 [ 234.918740] vfs_kern_mount.part.0+0x5b/0x470 [ 234.918752] do_mount+0xe53/0x2a00 [ 234.918769] ? copy_mount_string+0x40/0x40 [ 234.918778] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 234.918789] ? copy_mnt_ns+0xa30/0xa30 [ 234.918800] ? copy_mount_options+0x1fa/0x2f0 [ 234.918810] ? copy_mnt_ns+0xa30/0xa30 [ 234.918821] SyS_mount+0xa8/0x120 [ 234.918829] ? copy_mnt_ns+0xa30/0xa30 [ 234.918841] do_syscall_64+0x1d5/0x640 [ 234.918858] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 234.918866] RIP: 0033:0x45deb9 [ 234.918871] RSP: 002b:00007f4db0a05c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.918882] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 234.918887] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:36:37 executing program 1 (fault-call:3 fault-nth:0): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:37 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 234.918893] RBP: 00007f4db0a05ca0 R08: 00000000200005c0 R09: 0000000000000000 [ 234.918898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 234.918904] R13: 00007fffa0c951df R14: 00007f4db0a069c0 R15: 000000000118bf2c [ 234.987090] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.123654] 9pnet: Couldn't grow tag array 01:36:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 235.167574] xt_hashlimit: overflow, try lower: 0/0 [ 235.200977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.220210] FAULT_INJECTION: forcing a failure. [ 235.220210] name failslab, interval 1, probability 0, space 0, times 0 [ 235.257230] CPU: 0 PID: 14689 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 235.265189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.274540] Call Trace: [ 235.277128] dump_stack+0x1b2/0x283 [ 235.280760] should_fail.cold+0x10a/0x154 [ 235.285008] should_failslab+0xd6/0x130 [ 235.289010] __kmalloc_track_caller+0x2bc/0x400 [ 235.293678] ? strndup_user+0x5b/0xf0 [ 235.297485] memdup_user+0x22/0xa0 [ 235.301050] strndup_user+0x5b/0xf0 [ 235.304676] ? copy_mnt_ns+0xa30/0xa30 [ 235.308581] SyS_mount+0x39/0x120 [ 235.312052] ? copy_mnt_ns+0xa30/0xa30 [ 235.315963] do_syscall_64+0x1d5/0x640 [ 235.319863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 235.325053] RIP: 0033:0x45deb9 [ 235.328246] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.335980] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 235.343251] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 235.350540] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 235.357806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.365072] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:39 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:39 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:39 executing program 2 (fault-call:3 fault-nth:22): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:39 executing program 1 (fault-call:3 fault-nth:1): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:39 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x10000, 0xc80c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000001280)={0x0, "84ba5fc1dd1ea0724119db6542687c24e4143a114b4ab88e57da69976afc8057916bbcb37ec888179d4182e556f138a9a044638ab39190d5a9f46d6eda2f901ef69583c4059a1b4db85558fc5fadf08eb23894656361074fbc2c338772bd3a3f456834b1e034b61f9b03f38b522b374245d6be0175cbd2a78e58a6ed6eafb2e7"}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000180)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000240)={{r3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x2, 0x1, 0x4, 0x0, 0x0, 0x7f}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000280)={0x0, r3, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000040)={0x0, r3, "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", "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"}) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 237.862337] FAULT_INJECTION: forcing a failure. [ 237.862337] name failslab, interval 1, probability 0, space 0, times 0 [ 237.873437] xt_hashlimit: overflow, try lower: 0/0 [ 237.881187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.887038] CPU: 0 PID: 14714 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 237.897635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.906987] Call Trace: 01:36:39 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 237.909575] dump_stack+0x1b2/0x283 [ 237.913235] should_fail.cold+0x10a/0x154 [ 237.917385] should_failslab+0xd6/0x130 [ 237.921363] kmem_cache_alloc_trace+0x29a/0x3d0 [ 237.926293] ? copy_mnt_ns+0xa30/0xa30 [ 237.930185] copy_mount_options+0x59/0x2f0 [ 237.934444] ? copy_mnt_ns+0xa30/0xa30 [ 237.938357] SyS_mount+0x84/0x120 [ 237.941811] ? copy_mnt_ns+0xa30/0xa30 [ 237.945699] do_syscall_64+0x1d5/0x640 [ 237.948243] 9pnet: Insufficient options for proto=fd [ 237.949590] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:36:40 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 237.949599] RIP: 0033:0x45deb9 [ 237.949604] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.949615] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 237.949620] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 237.949631] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 237.974609] ptrace attach of "/root/syz-executor.4"[14725] was attempted by "/root/syz-executor.4"[14728] [ 237.978023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:36:40 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:40 executing program 1 (fault-call:3 fault-nth:2): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) [ 237.978030] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:40 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$afs(&(0x7f0000000040)='afs\x00', &(0x7f0000000080)='./file0\x00', 0xb, 0x8, &(0x7f0000000900)=[{&(0x7f0000000140)="bbecc0075648389ca1e8bafe63b7f56241fc2fb953f69ffd8064daa908091cb05353e179e6312cbf5c4be153ada32565e6f022276e3c9b6490a256514fb69cbb65619af9e26fe985b47f3ab705bf3340fac472781883a91d6c2c3a2b8704003288c032a6e4a9af87352295", 0x6b, 0x8001}, {&(0x7f0000000280)="21054408d10e5f28e45278c8832152844b23740763b823883ecd8a31fe405b6b75ce9e1ff35c55c8db8b06c04296822bfe69e0e7772a4da849d2bf915782ba62b969feb0e8a2bbb3f30f2b8b896d3dedec276cbc567fa60cacd9422abf914e53714cc679dc9c99982c43c93356fb387bcdb64909d86e830055cdcebfc8bba3f30a6e267bd5b2d599411cf0a934005bccdb57b89b690c9dc021e4b72148e219ecbe012ca2c828d76559b33654739635c103cf30338c555923d78aa4bc0153faee4555fcc8ccbc4eb17e722d0f37d32ee401ec981f5bf81746f343291c10018f799c825afb4839ec02804376fbf870e3", 0xef, 0x9}, {&(0x7f0000000380)="e96d5677576b78ab8cd3d959169c31d0be0d02d36b3f39a9bbb7bb46c6bc9a1bae6a3852d7fab75e136e4f2256104fe44e8b7a282d582c750de03c420b671165cb669dab9ebed2a9354d6537161dbe99f238a2110584c258d9bb01e6e70c7b96962edad7b17593c0533c7099b468f18af0e9a6a61e722530ccbbe6bb9583483d481d8f16b92d9f95c85d912288c42ccf9bd8d4d843e9057bd3f389bd6d23825b5508509729a6c2185588d682cf351fae0412e5d5327b24523fe4a404a2e9e481e5870f", 0xc3, 0x1}, {&(0x7f0000000480)="210b741e467182057a95d054643269f70eb9d6ad096e224ff3a5460a977ec55004e853ad74827b103dfcaee408d008e6c1d41ffce3023750ba76a5b7f7282a369f3d1bf74b8c6df1767327aabe5a247305061972e713246bb0273851305bd12af457aa565ef06cfd21d50d3d5c5258f6de39a70a8f8a9b534aad69271c9eed2564e65f78934b90536a9dde267e044f", 0x8f, 0x80}, {&(0x7f0000000640)="46a02a9183bc47fac045efb81bdbbe7a80539f3596e6449e60e4a0182015122eb631d81db3819b418984da88e09d0524a996d7fbc322c0c7c77109ffef7a78e5ab94699a6cc0dd8d5c876e56c53d0f49177c22b313ff0541b0433f25b4c6bbb0eb2800f10c73a5b1306b7e7e867d1a11cad9ef690e8f588f456b154d8dc972d7d24954980f072574653434ab60de07646be44e7a0bf34a", 0x97, 0x593}, {&(0x7f0000000700)="f51df7c621bdc7e8ed77e824ba679103f1ca194e2ce92e05d070a74da4b0447c1a2f28feb94869c802cfe62e36c4a2dddd3770255e3fd2178c76064f763760414af11e3eebcbf4783834ef447b8c1b96c1a9629800488b43dbcc113b7cb9e7cac20856d20ad829730db1f01cfd60b06ab1e0633a3f730240860289d4ca45f7cd584d5693aa5494c1b6f4effc6ea08d57e4890593c061d88394ebecedac04a2d04754a9a5f97026fede8ec899e2b21af7b0192cf2457bdf744494e9ec5c6ce920c9f1b673663b76da65ab31b0a4af62570a9b2521d92e8b6cc5efc6bbce9aaa2884068ffed7ede9b1cd2f411d29a247b015335a13e3", 0xf5, 0x2}, {&(0x7f00000000c0)="b6e757fb958a10", 0x7, 0x1}, {&(0x7f0000000800)="a46abe24287327704149060561cb8ad75b690a41774e170321f610bb0a3a7aefb619d0aa2ad94c6f945a67b057229fb0d8545185b84724e8ceeeeaaf43ba6a39eb88cb86755cf02ef9ee47d28cc9983418f27ccc47923c78a08ac336e7c85fd3179ea96e305af26cc7b0f67edd308c809804416911d7a30210bf0b6a685aebdd617a40c866cdda95a9a9eba033cd68c1847997c2eb3bc00ba6a481e5c5bee30d7e387eff6e40ae6ed3adf413673bbd2ace1c4779f8bb22419ce939403c2463fdb0c4abd6ec3cbfff879cb8059b5b7b7dcc46c3d365932f274ea7bd1ab710474ecf64c0f24440ff7fc9b1bf9eb45bbbcd1f", 0xf1, 0x5}], 0x10010c2, &(0x7f0000000540)={[{@flock_openafs='flock=openafs'}, {@flock_write='flock=write'}, {@flock_openafs='flock=openafs'}, {@flock_strict='flock=strict'}, {@flock_write='flock=write'}, {@source={'source'}}, {@flock_local='flock=local'}], [{@hash='hash'}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000009c0)='./file0\x00') 01:36:40 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 238.100671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.130285] FAULT_INJECTION: forcing a failure. [ 238.130285] name failslab, interval 1, probability 0, space 0, times 0 [ 238.183568] CPU: 0 PID: 14747 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 238.191474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.200849] Call Trace: [ 238.203456] dump_stack+0x1b2/0x283 [ 238.207099] should_fail.cold+0x10a/0x154 [ 238.211257] should_failslab+0xd6/0x130 [ 238.215246] kmem_cache_alloc+0x28e/0x3c0 [ 238.219394] getname_flags+0xc8/0x550 [ 238.223201] user_path_at_empty+0x2a/0x50 [ 238.227351] do_mount+0x118/0x2a00 [ 238.230897] ? retint_kernel+0x2d/0x2d [ 238.234796] ? copy_mount_string+0x40/0x40 [ 238.239035] ? copy_mount_options+0x150/0x2f0 [ 238.243551] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 238.248396] ? copy_mount_options+0x1fa/0x2f0 [ 238.252893] ? copy_mnt_ns+0xa30/0xa30 [ 238.256809] SyS_mount+0xa8/0x120 [ 238.260283] ? copy_mnt_ns+0xa30/0xa30 [ 238.264699] do_syscall_64+0x1d5/0x640 [ 238.268598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 238.273785] RIP: 0033:0x45deb9 01:36:40 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000180)) r4 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_to_bridge\x00', 0x5, 0x5, 0x101}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000000c0)=r7) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r7) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{}, r7, 0xc, @inherit={0x70, &(0x7f0000001540)=ANY=[@ANYBLOB="00000000000000000500000000000000f506000000070000080000000000000017000000000000000400000000000000060000000000000007000000000000000300000000000000c6060000000000001b0000000000000014000000000000e1e9afa5747c2f3670320df61c6ed9d3004f75157130ff3d609d18e9244b50"]}, @subvolid=0x3ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, r7, 0x10, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0x1ff, 0x6, {0x10, 0x2, 0x7, 0x401, 0x4}, [0x20, 0xd9, 0x6]}}, @subvolid=0x4}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r7) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000100)=r7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"0dc2acbe4467ff7bb482a941510413cd", 0x0, r7, {0xfffffffffffffffb, 0x2}, {0x6, 0x4}, 0x8, [0x101, 0x3, 0x100, 0xdc, 0x8, 0x3, 0x2, 0x0, 0x4, 0x3f, 0x9, 0x8, 0x7, 0x2, 0x292, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, r7, 0x18, @inherit={0x68, &(0x7f0000000080)={0x0, 0x4, 0x200, 0x6, {0x8, 0x7ff, 0xfff, 0x6, 0x2}, [0x4, 0x8, 0x9, 0x2]}}, @name="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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:40 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x101a004, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfsroot={'smackfsroot', 0x3d, '\a!'}}], 0x6b}}) 01:36:40 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 238.276994] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 238.284701] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 238.292572] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 238.299834] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 238.307100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.314366] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:40 executing program 1 (fault-call:3 fault-nth:3): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:40 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:40 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) syz_open_dev$char_raw(&(0x7f0000000040)='/dev/raw/raw#\x00', 0x0, 0x12040) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x100020, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@msize={'msize'}}], [], 0x6b}}) [ 238.417969] FAULT_INJECTION: forcing a failure. [ 238.417969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 238.429794] CPU: 0 PID: 14788 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 238.437673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.447027] Call Trace: [ 238.449616] dump_stack+0x1b2/0x283 [ 238.453258] should_fail.cold+0x10a/0x154 [ 238.457422] __alloc_pages_nodemask+0x22c/0x2720 [ 238.462187] ? __lock_acquire+0x5fc/0x3f20 [ 238.466432] ? is_bpf_text_address+0xb8/0x150 [ 238.470937] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 238.475779] ? __kernel_text_address+0x9/0x30 [ 238.480281] ? trace_hardirqs_on+0x10/0x10 [ 238.484515] ? __save_stack_trace+0xa0/0x160 [ 238.488925] ? depot_save_stack+0x10d/0x3e3 [ 238.493250] ? kasan_kmalloc+0x139/0x160 [ 238.497311] ? kasan_kmalloc+0xeb/0x160 [ 238.501315] cache_grow_begin+0x8f/0x420 [ 238.505381] cache_alloc_refill+0x273/0x350 [ 238.509708] kmem_cache_alloc+0x333/0x3c0 [ 238.513856] getname_flags+0xc8/0x550 [ 238.517667] user_path_at_empty+0x2a/0x50 [ 238.521724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.521821] do_mount+0x118/0x2a00 [ 238.533922] ? copy_mount_string+0x40/0x40 [ 238.538162] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 238.543183] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 238.548027] ? copy_mnt_ns+0xa30/0xa30 [ 238.551938] ? copy_mount_options+0x1fa/0x2f0 [ 238.556428] ? copy_mnt_ns+0xa30/0xa30 [ 238.560316] SyS_mount+0xa8/0x120 [ 238.564201] ? copy_mnt_ns+0xa30/0xa30 [ 238.568084] do_syscall_64+0x1d5/0x640 [ 238.572009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 238.577178] RIP: 0033:0x45deb9 [ 238.580392] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 238.588102] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 238.595378] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 238.602635] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 238.609908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 238.617161] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:43 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:43 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:43 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r1) r2 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r3 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r4 = gettid() r5 = gettid() r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x127000, 0x0) connect$l2tp6(r6, &(0x7f0000000080)={0xa, 0x0, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x1}, 0x20) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r7, &(0x7f0000000180)={r3}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}], [], 0x6b}}) 01:36:43 executing program 1 (fault-call:3 fault-nth:4): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:43 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, &(0x7f0000000180)) r4 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_to_bridge\x00', 0x5, 0x5, 0x101}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f00000000c0)=r7) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)=r7) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{}, r7, 0xc, @inherit={0x70, &(0x7f0000001540)=ANY=[@ANYBLOB="00000000000000000500000000000000f506000000070000080000000000000017000000000000000400000000000000060000000000000007000000000000000300000000000000c6060000000000001b0000000000000014000000000000e1e9afa5747c2f3670320df61c6ed9d3004f75157130ff3d609d18e9244b50"]}, @subvolid=0x3ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, r7, 0x10, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0x1ff, 0x6, {0x10, 0x2, 0x7, 0x401, 0x4}, [0x20, 0xd9, 0x6]}}, @subvolid=0x4}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)=r7) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000100)=r7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"0dc2acbe4467ff7bb482a941510413cd", 0x0, r7, {0xfffffffffffffffb, 0x2}, {0x6, 0x4}, 0x8, [0x101, 0x3, 0x100, 0xdc, 0x8, 0x3, 0x2, 0x0, 0x4, 0x3f, 0x9, 0x8, 0x7, 0x2, 0x292, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000100)={{}, r7, 0x18, @inherit={0x68, &(0x7f0000000080)={0x0, 0x4, 0x200, 0x6, {0x8, 0x7ff, 0xfff, 0x6, 0x2}, [0x4, 0x8, 0x9, 0x2]}}, @name="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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x6, 0x10001]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 241.079686] FAULT_INJECTION: forcing a failure. [ 241.079686] name failslab, interval 1, probability 0, space 0, times 0 [ 241.121549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.144733] CPU: 1 PID: 14831 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 241.152632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.162863] Call Trace: [ 241.165449] dump_stack+0x1b2/0x283 [ 241.169106] should_fail.cold+0x10a/0x154 [ 241.173266] should_failslab+0xd6/0x130 [ 241.177245] kmem_cache_alloc+0x28e/0x3c0 [ 241.181394] alloc_vfsmnt+0x23/0x7f0 [ 241.185130] ? _raw_read_unlock+0x29/0x40 [ 241.189291] vfs_kern_mount.part.0+0x27/0x470 [ 241.193791] do_mount+0xe53/0x2a00 [ 241.197346] ? copy_mount_string+0x40/0x40 [ 241.201585] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 241.206630] ? copy_mnt_ns+0xa30/0xa30 [ 241.210521] ? copy_mount_options+0x1fa/0x2f0 [ 241.215020] ? copy_mnt_ns+0xa30/0xa30 01:36:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x0, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 241.218934] SyS_mount+0xa8/0x120 [ 241.222386] ? copy_mnt_ns+0xa30/0xa30 [ 241.226275] do_syscall_64+0x1d5/0x640 [ 241.230176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 241.234817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.235361] RIP: 0033:0x45deb9 [ 241.235367] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.235377] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 241.235383] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:36:43 executing program 1 (fault-call:3 fault-nth:5): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:43 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:43 executing program 5 (fault-call:2 fault-nth:0): clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 241.235393] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 241.235399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 241.235404] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 241.336079] FAULT_INJECTION: forcing a failure. [ 241.336079] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 241.347233] FAULT_INJECTION: forcing a failure. [ 241.347233] name failslab, interval 1, probability 0, space 0, times 0 [ 241.354488] CPU: 1 PID: 14858 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 241.366957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.376310] Call Trace: [ 241.378898] dump_stack+0x1b2/0x283 [ 241.382527] should_fail.cold+0x10a/0x154 [ 241.386680] __alloc_pages_nodemask+0x22c/0x2720 [ 241.391437] ? trace_hardirqs_on+0x10/0x10 [ 241.395673] ? _find_next_bit+0xdb/0x100 [ 241.399746] ? pcpu_alloc+0xbe0/0xf50 [ 241.403550] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 241.408404] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 241.413876] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 241.418895] alloc_pages_current+0x155/0x260 [ 241.423300] ? __lockdep_init_map+0x100/0x560 [ 241.427792] get_zeroed_page+0x19/0x50 [ 241.431673] mount_fs+0x1c7/0x2a0 [ 241.435123] vfs_kern_mount.part.0+0x5b/0x470 [ 241.439615] do_mount+0xe53/0x2a00 [ 241.443156] ? copy_mount_string+0x40/0x40 [ 241.447389] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 241.453107] ? copy_mnt_ns+0xa30/0xa30 [ 241.456991] ? copy_mount_options+0x1fa/0x2f0 [ 241.461477] ? copy_mnt_ns+0xa30/0xa30 [ 241.465352] SyS_mount+0xa8/0x120 [ 241.468795] ? copy_mnt_ns+0xa30/0xa30 [ 241.472672] do_syscall_64+0x1d5/0x640 [ 241.476562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 241.481740] RIP: 0033:0x45deb9 [ 241.484921] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 241.492642] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 241.499901] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 241.507159] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 241.514416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 241.521675] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 241.528951] CPU: 0 PID: 14860 Comm: syz-executor.5 Not tainted 4.14.206-syzkaller #0 [ 241.536842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.546192] Call Trace: [ 241.548782] dump_stack+0x1b2/0x283 [ 241.552421] should_fail.cold+0x10a/0x154 [ 241.556571] should_failslab+0xd6/0x130 [ 241.560546] kmem_cache_alloc_node_trace+0x25a/0x400 [ 241.565655] __kmalloc_node+0x38/0x70 [ 241.569452] kvmalloc_node+0x46/0xd0 [ 241.573165] xt_alloc_table_info+0x6a/0xe0 [ 241.577403] do_ipt_set_ctl+0x1b1/0x39e [ 241.581401] ? compat_do_ipt_set_ctl+0x140/0x140 [ 241.586249] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 241.591552] nf_setsockopt+0x5f/0xb0 [ 241.595270] ip_setsockopt+0x94/0xb0 [ 241.598985] raw_setsockopt+0xac/0xd0 [ 241.602788] SyS_setsockopt+0x110/0x1e0 [ 241.606771] ? SyS_recv+0x40/0x40 [ 241.610229] ? SyS_clock_settime+0x1a0/0x1a0 [ 241.614639] ? do_syscall_64+0x4c/0x640 [ 241.618614] ? SyS_recv+0x40/0x40 [ 241.622100] do_syscall_64+0x1d5/0x640 [ 241.626010] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 241.631203] RIP: 0033:0x45deb9 [ 241.634391] RSP: 002b:00007fce55bf2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.642097] RAX: ffffffffffffffda RBX: 000000000002f540 RCX: 000000000045deb9 [ 241.649364] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 241.656620] RBP: 00007fce55bf2ca0 R08: 0000000000000308 R09: 0000000000000000 [ 241.663929] R10: 0000000020000340 R11: 0000000000000246 R12: 0000000000000000 [ 241.671183] R13: 00007ffea4b8658f R14: 00007fce55bf39c0 R15: 000000000118bf2c 01:36:46 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:46 executing program 1 (fault-call:3 fault-nth:6): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:46 executing program 5: clone(0x26048500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2, 0x0) write$ppp(r1, &(0x7f0000000240)="089a6dab462ca3ee00d61061ffc680e3433d0bdf3607bed1965dbe524f0eaba90e487a81e146b52c6ea23b3f739d34f14e031c5d4590da3d1d9e8e2e", 0x3c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2121080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x18}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x90) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0x4599, 0x3) 01:36:46 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000080)=[0x0], 0x1}, 0x20) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$6lowpan_control(r3, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 1', 0x1b) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000000)) 01:36:46 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000589000/0x1000)=nil, 0x1000, 0x2000003, 0x10, r2, 0xffffc000) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000280)) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000040)={0x3, 0x4, {}, {0xee01}, 0x4, 0x8}) 01:36:46 executing program 5: clone(0x36300d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 244.117336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.121232] FAULT_INJECTION: forcing a failure. [ 244.121232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.194934] CPU: 0 PID: 14889 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 244.202849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.212211] Call Trace: [ 244.214816] dump_stack+0x1b2/0x283 [ 244.218441] should_fail.cold+0x10a/0x154 [ 244.222604] __alloc_pages_nodemask+0x22c/0x2720 [ 244.227368] ? trace_hardirqs_on+0x10/0x10 [ 244.231631] ? pcpu_alloc+0xbe0/0xf50 [ 244.235543] ? gfp_pfmemalloc_allowed+0x150/0x150 01:36:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 244.240394] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 244.245842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 244.250863] alloc_pages_current+0x155/0x260 [ 244.255270] ? __lockdep_init_map+0x100/0x560 [ 244.259771] get_zeroed_page+0x19/0x50 [ 244.263658] mount_fs+0x1c7/0x2a0 [ 244.267117] vfs_kern_mount.part.0+0x5b/0x470 [ 244.271613] do_mount+0xe53/0x2a00 [ 244.275182] ? do_raw_spin_unlock+0x164/0x220 [ 244.279682] ? copy_mount_string+0x40/0x40 [ 244.283920] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 244.288936] ? copy_mnt_ns+0xa30/0xa30 [ 244.290602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.292836] ? copy_mount_options+0x1fa/0x2f0 [ 244.292847] ? copy_mnt_ns+0xa30/0xa30 [ 244.292859] SyS_mount+0xa8/0x120 [ 244.292868] ? copy_mnt_ns+0xa30/0xa30 [ 244.292879] do_syscall_64+0x1d5/0x640 [ 244.292896] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 244.292904] RIP: 0033:0x45deb9 [ 244.292909] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 244.292919] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 01:36:46 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x506a8000) epoll_create(0x1ff) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, &(0x7f0000000000)={0x1, 0x7, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0xb) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 244.292925] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 244.292929] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 244.292935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 244.292940] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x40010, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140), 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) epoll_create(0x10000) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="3f01022cc0daaae8525dc020aa9fea348631810a9a089c24ce9f53d5c514acb62e25d361b70f4905220f43553a50c5819db716779daf00"/69, @ANYRES32, @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={[], 0x10, 0x4, 0x5, 0x1f, 0x9, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000)=0x62, 0x4) [ 244.535080] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 244.638042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x240, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x18}}, 0x884) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:49 executing program 1 (fault-call:3 fault-nth:7): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:49 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() setxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x3}, [{0x2, 0x4, r3}, {0x2, 0x2}], {0x4, 0x4}, [{0x8, 0x7, r4}, {0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x1, r6}, {0x8, 0x2, 0xee00}, {0x8, 0x1, r7}, {0x8, 0x4, 0xee01}, {0x8, 0x4, 0xee01}, {0x8, 0x6, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x3}}, 0x74, 0x1) r8 = dup(r1) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:49 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, [], 0x1}, 0xee3, 0x2, 0x1, 0x9, 0x7, 0xde3}, &(0x7f0000000040)=0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 01:36:49 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 247.154378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.167314] FAULT_INJECTION: forcing a failure. [ 247.167314] name failslab, interval 1, probability 0, space 0, times 0 [ 247.204752] CPU: 1 PID: 14977 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 247.212662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.222012] Call Trace: [ 247.224599] dump_stack+0x1b2/0x283 [ 247.228231] should_fail.cold+0x10a/0x154 [ 247.232389] should_failslab+0xd6/0x130 [ 247.236448] __kmalloc_track_caller+0x2bc/0x400 [ 247.241118] ? v9fs_session_init+0x98/0x1540 [ 247.245527] ? trace_hardirqs_on+0x10/0x10 [ 247.249766] kstrdup+0x36/0x70 [ 247.252966] v9fs_session_init+0x98/0x1540 [ 247.257230] ? pcpu_alloc+0xbe0/0xf50 [ 247.261036] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 247.265882] ? v9fs_show_options+0x6b0/0x6b0 [ 247.270295] ? v9fs_mount+0x54/0x860 [ 247.274015] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.279486] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.284505] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 247.289351] v9fs_mount+0x73/0x860 [ 247.292921] ? alloc_pages_current+0x15d/0x260 [ 247.299146] ? __lockdep_init_map+0x100/0x560 [ 247.303644] mount_fs+0x92/0x2a0 [ 247.307006] vfs_kern_mount.part.0+0x5b/0x470 [ 247.311595] do_mount+0xe53/0x2a00 [ 247.315135] ? retint_kernel+0x2d/0x2d [ 247.319023] ? copy_mount_string+0x40/0x40 [ 247.323272] ? copy_mount_options+0x185/0x2f0 [ 247.327748] ? copy_mount_options+0x18f/0x2f0 [ 247.332309] ? copy_mount_options+0x1fa/0x2f0 [ 247.336801] ? copy_mnt_ns+0xa30/0xa30 [ 247.340767] SyS_mount+0xa8/0x120 [ 247.344198] ? copy_mnt_ns+0xa30/0xa30 [ 247.348092] do_syscall_64+0x1d5/0x640 01:36:49 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 247.352072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 247.357249] RIP: 0033:0x45deb9 [ 247.360425] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 247.368120] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 247.375383] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 247.382647] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 247.389920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 247.397176] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:49 executing program 1 (fault-call:3 fault-nth:8): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:49 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r4 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = gettid() r6 = gettid() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r4}) read(r4, &(0x7f0000000040)=""/32, 0x20) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="db6be77484fe8239277fe866784d8184a8d82270b230f27596be86ed5687906aeef113b6cd1daadda8ae2dbecda0a58800d420f858f77782ac180399547dda8d56cfb8cc0d8114da1e6c0f9c5854db287cd9cf2fd91d5fc1c9cca7442ee996feb182cf4f3f65ee9c0c1e0cab40ce2d9dda8d0eb20e081c7c494595ae496ca20a05796406531d87ee38bce2b9761f9bd90b1055299cdbff641608f47a14f1de7d77aa350884db693f9a564ca394348016bd6a0d0aba40301c511f80e3bbf32992d55dd8ca58"]) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x1, 0x4}) [ 247.483461] FAULT_INJECTION: forcing a failure. [ 247.483461] name failslab, interval 1, probability 0, space 0, times 0 [ 247.517273] CPU: 1 PID: 15008 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 247.525177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.534545] Call Trace: [ 247.537138] dump_stack+0x1b2/0x283 [ 247.540767] should_fail.cold+0x10a/0x154 [ 247.544948] should_failslab+0xd6/0x130 [ 247.548928] kmem_cache_alloc_trace+0x29a/0x3d0 [ 247.553607] p9_client_create+0x9c/0x12c0 [ 247.557754] ? fs_reclaim_release+0xd0/0x110 [ 247.562173] ? p9_client_flush+0x4c0/0x4c0 [ 247.566410] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.571859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.576896] ? __lockdep_init_map+0x100/0x560 [ 247.581397] ? __raw_spin_lock_init+0x28/0x100 [ 247.586008] v9fs_session_init+0x1c5/0x1540 [ 247.590331] ? pcpu_alloc+0xbe0/0xf50 [ 247.594134] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 247.598984] ? v9fs_show_options+0x6b0/0x6b0 [ 247.603396] ? v9fs_mount+0x54/0x860 [ 247.607114] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.613637] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.618653] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 247.623520] v9fs_mount+0x73/0x860 [ 247.627065] ? alloc_pages_current+0x15d/0x260 01:36:49 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000084a852a9013f851f1b9e071390080211a4c92661b89aa7871c369e96066f9e1135000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000e2748fff248084a5cceb7438308a25412e4abab7807290b0e29bea43af190d70181173c224e62c42a1d1e15dd0378dbedd11c62a8d"]) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x4006010, 0xffffffffffffffff, 0xbcbfa000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x1e00, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 01:36:49 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = gettid() r4 = gettid() r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000180)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={r5}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 247.631649] ? __lockdep_init_map+0x100/0x560 [ 247.636236] mount_fs+0x92/0x2a0 [ 247.639611] vfs_kern_mount.part.0+0x5b/0x470 [ 247.644139] do_mount+0xe53/0x2a00 [ 247.647686] ? copy_mount_string+0x40/0x40 [ 247.651923] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.656943] ? copy_mnt_ns+0xa30/0xa30 [ 247.660835] ? copy_mount_options+0x1fa/0x2f0 [ 247.665342] ? copy_mnt_ns+0xa30/0xa30 [ 247.669227] SyS_mount+0xa8/0x120 [ 247.672685] ? copy_mnt_ns+0xa30/0xa30 [ 247.676587] do_syscall_64+0x1d5/0x640 01:36:49 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0x490, {0x40, 0x2, 0x3}, 0x38, r1, r2, 0x20, 0x5, 0x401, 0x3e0, 0x100, 0x8, 0x101, 0x7fff, 0x100, 0x4, 0x79e, 0x6, 0x8, 0x0, 0x3}}, 0xa0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000026c0)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0x0, 0x0, 0x148, 0x158, 0x148, 0x1e8, 0x240, 0x240, 0x1e8, 0x240, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0x64}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@set1={{0x28, 'set\x00'}, {{0x1, 0x2, 0x1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 01:36:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r4 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = gettid() r6 = gettid() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ptrace$setopts(0x4206, r6, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r4}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="03210439a914b6f95734154034f2c1c4d7a54c60115b3c333b61095a9563f6f36e599648e9e87b78403bcb86410d35a2788e0eee7d7454e8a078364aaf54ada84ded8a1b7146c2cd5f7c7ecf0f3375e1c4cef2988262d2939dad4ca6452c3cba3a3688826887a1a7c39bf3a6a3b362a5a58c3f5f6a821191318f6a1c0e27b7ec036e73d1084bb2fe95169de95f813260a5e4aad5e90dbd8594d3b31e75cf2447162d2ffe879d5b56dcd5ddcec7d95a3bf97e708d313a", 0xb6, r7}, 0x68) [ 247.680481] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 247.685689] RIP: 0033:0x45deb9 [ 247.688894] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 247.696599] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 247.703866] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 247.711132] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 247.718402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 247.725674] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 247.761431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:49 executing program 1 (fault-call:3 fault-nth:9): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) [ 247.811821] Cannot find set identified by id 1 to match 01:36:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x4, 0x70bd2c, 0x25dfdbf9, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20004000) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r6 = syz_mount_image$pvfs2(&(0x7f0000000180)='pvfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x7, &(0x7f0000000700)=[{&(0x7f0000000200)="f51a7181b9f1d5b0171ad5d16e9b039641a56347b090f7b63cbf8fecf3e943e5d3decda4f3d644021022c637a6ec7f31d84ffd702c39c37ac8452bede1c7bde3d3ba553a2ea8a27a91ef2448a234a20a71da14b5fd3e77539095d731bac51fbd6ff0b45c23780932b303b83f097e1bd5eebacc4baec4954f7bfae946a5c1bf96044fef8b6cf5f5e037a2eb2ea8b2993f287ae51afacf0892169dbcf0f88a10b18370798aa795ad75ab5b6272b6ebfb8884a70f05b908030ec2f222a7dd05590e9e09bc2427df196265eadbc824eb74355fc8f8b64d132c4bf9", 0xd9, 0xfffffffffffffda9}, {&(0x7f00000009c0)="7d4334e3da191fadcd4ee3a042a1784f9c11916ac33b56b87adcec9a5a4b95d48555f5986d462db76441861e47a0113b8dbb492cc3c4e0f3cb5d051c5dc5a4aaabd9a6", 0x43, 0x80000001}, {&(0x7f0000000380)="44894f36da1d471add12409034ff981763f943550d95b7acfe3ede4a52128f6ef4c1119d3f6a1e6ebfb1f93aab10ae078dd2f5e0edf8393241f7091b6000087b095ca5bf39be7947ab5e8d94b6b3431c36ff2b3aad52326ef646bb3e344503d43c70abb6e2089a2ea1e38787d92218399bcadf6d60b9b5bea2ab7ac34b7778b5b9da2c36ece11530d5", 0x89, 0x7f}, {&(0x7f0000000440)="1d4f9609ce8ae7719f140a9dbff6965d1c4815026603148e9aced077936889a47d4b10150e9ae44c6a13e5fc11a1374e8c5b05414a22a5bd878554bd35d019dba114901d0044080b", 0x48, 0x8}, {&(0x7f00000004c0)="ed2b636e3ab0841dbf3980c605ff2eaf701aaa7fdafa2bd1d5dfcb85ad6f8acd4a5dc667cedea8a81a28ab3f08027f7781e19cc285c3207f146946031e584bc53388daa9b218ba99aafd87ffbaeb84896643ca8e141a3688948268d6afa7efacf119a571e4ae75f1d1e4fc05a4e6db5ad60199957ec189697295348135e41c6b3470587370ccfab322339c05f229d78e91aada5f84832b1ec52b29bc7c2c8a13af7fddabd80d45547add34886b34e8a66e3650aff514c9348db49a6fa81176b7a593cc142c584a85d1b744d5c933c34586e8883d0be39ea600bc4280", 0xdc, 0x6}, {&(0x7f00000005c0)="1b18a82438a13d639ef5ae9411b0d934f1b2b6f57d08303d705045ba7828e05a1d942cc3372bb3f1ba1b2d957699125243889d156ef9885d6b3a3b5ef7a82668bdac26f4bb5adcbd25e55173e1048ddb0a9cb2b9c1c7c7f5f922a94420efd17dad53f0875cd6cde322efb8b3965a080e309e4b8501c762", 0x77, 0x7}, {&(0x7f0000000640)="a2d086d841defa69884ec5dccb04b4509bc57f18f13194fc6a841d7a2e2a65a90cdbb6dc989e9caa03ca331a4c4715ae8a7dee2b1cca39926c86af95601e989f2ee9457ef342dc1700d73a6a83ba5c09906dd5e50a4f3d5d953e3591e73d454b2d700e293cbf27c2226a4eb2c44775e2df411e469b4f91400feb8ad99d7033f13cca91d73985812e88966499a35286c2dc1f30d0d64acfb36489", 0x9a, 0x7f}], 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="54495043002c417567cbc096b2c44d345993a6d7b2767679b8342d9a5a1f3e6741040bcc94650bd943423aeeb5b6eb9475fa8177a1bc39d55fa7891261609bfe3de542dbac4a819b17dbc34c7473334d74476f37ec7dc9e1388d14b760d64a4e39dfaa732c5d262c2e5b3a2c28002c657569643c", @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d262c4027292c2c736d61636b6673726f6f743d2f6465762f7a65726f002c646566636f6e746578743d756e636f6e66696e65645f752c736d61636b66737472616e736d7574653d54495043002c61707072616973655f747970653d696d617369672c66736d616769633d307830303030307e5b52221c987b501c30303030303006303030352c657569643d", @ANYRESDEC=0xee01, @ANYBLOB=',permit_directio,\x00']) r7 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r8 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000008c0)={0x400, 0x1, 0x3, 0x0, 0x0, [{{r6}, 0x100}, {{r2}, 0x1ff}, {{r7}, 0xda8}]}) 01:36:49 executing program 5: clone(0x27a292419c7451c3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0xd8, 0x0, 0x148, 0xd8, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffff00, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xffffff00, 'hsr0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x8, 0x3, 0x10}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) [ 247.870972] Cannot find set identified by id 1 to match [ 247.907288] FAULT_INJECTION: forcing a failure. [ 247.907288] name failslab, interval 1, probability 0, space 0, times 0 [ 247.936917] CPU: 1 PID: 15058 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 247.944826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.954188] Call Trace: [ 247.956777] dump_stack+0x1b2/0x283 [ 247.961274] should_fail.cold+0x10a/0x154 [ 247.965423] should_failslab+0xd6/0x130 [ 247.969401] kmem_cache_alloc_trace+0x29a/0x3d0 [ 247.974164] p9_client_create+0x9c/0x12c0 [ 247.978316] ? fs_reclaim_release+0xd0/0x110 [ 247.982727] ? p9_client_flush+0x4c0/0x4c0 [ 247.986961] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 247.992435] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 247.997453] ? __lockdep_init_map+0x100/0x560 [ 248.001954] ? __raw_spin_lock_init+0x28/0x100 [ 248.006543] v9fs_session_init+0x1c5/0x1540 [ 248.010875] ? pcpu_alloc+0xbe0/0xf50 [ 248.014701] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 248.019546] ? v9fs_show_options+0x6b0/0x6b0 [ 248.023962] ? v9fs_mount+0x54/0x860 [ 248.027670] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 248.033118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 248.038132] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 248.042979] v9fs_mount+0x73/0x860 [ 248.046517] ? alloc_pages_current+0x15d/0x260 [ 248.051108] ? __lockdep_init_map+0x100/0x560 [ 248.055604] mount_fs+0x92/0x2a0 [ 248.058986] vfs_kern_mount.part.0+0x5b/0x470 [ 248.063481] do_mount+0xe53/0x2a00 [ 248.067016] ? copy_mount_string+0x40/0x40 [ 248.071247] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 248.076264] ? copy_mnt_ns+0xa30/0xa30 [ 248.080148] ? copy_mount_options+0x1fa/0x2f0 [ 248.084649] ? copy_mnt_ns+0xa30/0xa30 [ 248.088536] SyS_mount+0xa8/0x120 [ 248.091987] ? copy_mnt_ns+0xa30/0xa30 [ 248.095875] do_syscall_64+0x1d5/0x640 [ 248.099770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 248.104954] RIP: 0033:0x45deb9 [ 248.108135] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.115840] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 248.123194] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 248.130460] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 248.137729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 248.145018] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:52 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$char_raw(&(0x7f00000001c0)='/dev/raw/raw#\x00', 0x0, 0x80000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000880)=0xe8) syz_mount_image$vxfs(&(0x7f0000000440)='vxfs\x00', &(0x7f0000000480)='./file0\x00', 0x200, 0x3, &(0x7f0000000700)=[{&(0x7f00000004c0)="263e6ad58e680fdbb4a93687b89116ab93e22762204e5e6c2b33fa23b2f990816768a46c9de28448c1244502f67db7fba5255c874caca8c35197a3e796a9660e46020b97009f14c26c1a415535035ce6fd8d3d2d5f1ef0ce3e08991dc4178cfbef9caa0ce2c2846d480371b4061bf9c3b819dda8a2b5f140b1cdc1c4524d7494d2bc10fd1b9494d5c6a337153a355412b6ba497b5676557fc3d31a69b1b4c3773e8f01967eb06d19c4294ebcab6444a86842b93d73ce9eee8b4f", 0xba, 0x7}, {&(0x7f0000000580)="438c498d94d18b4122539b1473e275a25ccf82742dd57ac20cc3c2907c2b405ef1bf455e9103d27879b637517dfdd63335390a66e2bb2811d9b1144353d41b929f40b7343d5b01f0397f941b5eef402c6ca8741ff3275a197e071ad73f24bb7032f9049be07fbf15a7aa07e7937516997354fd558fe65cbc21393d56", 0x7c, 0x401}, {&(0x7f0000000600)="5e14e69d2d46f1d97fa52d8c5c890655d2ade8ab4e7b4bd5a641f317061e8d034368833007440e238629f7736ab996f17070aae6817debe8665d7bf130d8c2ed954f4dd044242291b0afbb7343747261d4d5a7c176a09ea9f78fedd4c4f5be1e4efe00289f68b9119ade8f7f1e45a72ebe4fab68ea7478ee041aa88cfdff3717bebfd5a72c7df7ce23421a113d7aeebe7ff1a6e430ebbb7655f12cc7088b00a8e83f9530a3bffdcb86dbde1c37efdb4218c217cf64be9706830547d794654ebd6b10852d363a47425820f0d5718b7c3d9ed46783e38731d4db80500663564a1b3053a648b14bf03022eda9258bc96d0dea1ce51b3036d0", 0xf7, 0xcd34}], 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='func,FIRMWARE_CHECK,r[,euid,FIRMWARE_CHECK,,!{@,.^,root,obj_type=@[:,smackfsroot=rootcontext,rootcontext=system_u,uid>', @ANYRESDEC=r4, @ANYBLOB="2c658e69643c", @ANYRESDEC=r3, @ANYBLOB=',rootcontext=system_u,\x00']) setuid(r3) syz_mount_image$nilfs2(&(0x7f00000000c0)='nilfs2\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x1, &(0x7f0000000180)=[{&(0x7f0000000280)="0b1a6aa573768dbee2eaa73d110abda3ca36d9bda29d4fdd2c05d81c5e849bb94f0a98f9cd1ce9c8b474184ed23c78d9cc73dad4280a64c01c4c000da9824a24afa02572759f3a703d66f6ebafc251484c79e853cc498303d7177ea06952099aa7421d44b1f658f4b251e94f1596f67c50e504135bb77111c41ac94af856dcf6915264ef408a5ff225c750dcd5cc1d58f35f3e431f9b3f19c1b98a379d99a93dd7dfb22a533c926f373fda590a0804a7f9e55c6a2a", 0xb5}], 0x2000008, &(0x7f0000000980)={[{@norecovery='norecovery'}, {@order_relaxed='order=relaxed'}, {@norecovery='norecovery'}, {@snapshot={'snapshot', 0x3d, 0x1}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_gt={'uid>', r4}}, {@dont_appraise='dont_appraise'}, {@obj_role={'obj_role', 0x3d, 'euid<'}}, {@seclabel='seclabel'}, {@fsname={'fsname', 0x3d, '9p\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77817b19ef435879ad3f66646e6f2d", @ANYRESHEX=r5, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) 01:36:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:52 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x101, 0x410000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:52 executing program 1 (fault-call:3 fault-nth:10): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x6) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:52 executing program 5: clone(0xa6100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000000)={0x0, 0xff, 0x7, 0x1}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = getegid() setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'os2.', '\x00'}, &(0x7f0000000300)='mask', 0x4, 0x1) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x202000, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x40}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}], [{@obj_role={'obj_role', 0x3d, '{*\'&-$-%-^^:#%'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@smackfshat={'smackfshat', 0x3d, '^.--#&@'}}, {@euid_eq={'euid'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@dont_measure='dont_measure'}]}}) [ 250.462095] FAULT_INJECTION: forcing a failure. [ 250.462095] name failslab, interval 1, probability 0, space 0, times 0 [ 250.491721] vxfs: WRONG superblock magic 498c4300 at 1 [ 250.493648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.513616] vxfs: WRONG superblock magic 00000000 at 8 [ 250.518979] CPU: 0 PID: 15090 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 250.526869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.532780] vxfs: can't find superblock. [ 250.536218] Call Trace: [ 250.536241] dump_stack+0x1b2/0x283 [ 250.536258] should_fail.cold+0x10a/0x154 [ 250.550715] should_failslab+0xd6/0x130 [ 250.555470] kmem_cache_alloc_trace+0x29a/0x3d0 [ 250.560136] p9_idpool_create+0x3c/0x120 [ 250.564301] p9_client_create+0x1d4/0x12c0 [ 250.568527] ? fs_reclaim_release+0xd0/0x110 [ 250.572931] ? p9_client_flush+0x4c0/0x4c0 [ 250.577343] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 250.583045] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.588170] ? __lockdep_init_map+0x100/0x560 [ 250.592658] ? __raw_spin_lock_init+0x28/0x100 [ 250.597243] v9fs_session_init+0x1c5/0x1540 [ 250.601583] ? pcpu_alloc+0xbe0/0xf50 [ 250.605392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 250.610237] ? v9fs_show_options+0x6b0/0x6b0 [ 250.615520] ? v9fs_mount+0x54/0x860 [ 250.621067] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 250.626606] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.631896] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 250.636744] v9fs_mount+0x73/0x860 [ 250.640288] ? alloc_pages_current+0x15d/0x260 [ 250.644861] ? __lockdep_init_map+0x100/0x560 [ 250.651354] mount_fs+0x92/0x2a0 [ 250.654731] vfs_kern_mount.part.0+0x5b/0x470 [ 250.659236] do_mount+0xe53/0x2a00 [ 250.662772] ? copy_mount_string+0x40/0x40 [ 250.671201] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 250.676209] ? copy_mnt_ns+0xa30/0xa30 [ 250.680085] ? copy_mount_options+0x1fa/0x2f0 [ 250.684568] ? copy_mnt_ns+0xa30/0xa30 [ 250.688445] SyS_mount+0xa8/0x120 [ 250.691917] ? copy_mnt_ns+0xa30/0xa30 [ 250.695799] do_syscall_64+0x1d5/0x640 [ 250.699746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 250.704942] RIP: 0033:0x45deb9 01:36:52 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 250.708124] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.715824] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 250.723091] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 250.730359] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 250.737619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 250.744879] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:52 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x5c}}, 0x40) [ 250.796480] vxfs: WRONG superblock magic 498c4300 at 1 [ 250.804147] vxfs: WRONG superblock magic 00000000 at 8 01:36:52 executing program 1 (fault-call:3 fault-nth:11): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:52 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) iopl(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000000)={0x1, [0x0]}) 01:36:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 250.852886] Bluetooth: hci4 command 0x0406 tx timeout [ 250.858470] Bluetooth: hci0 command 0x0406 tx timeout [ 250.865750] 9pnet: Insufficient options for proto=fd [ 250.879642] vxfs: can't find superblock. [ 250.913110] Bluetooth: hci5 command 0x0406 tx timeout [ 250.927711] Bluetooth: hci1 command 0x0406 tx timeout [ 250.939723] Bluetooth: hci3 command 0x0406 tx timeout 01:36:53 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x80000, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 250.963914] Bluetooth: hci2 command 0x0406 tx timeout [ 250.969594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.008077] FAULT_INJECTION: forcing a failure. [ 251.008077] name failslab, interval 1, probability 0, space 0, times 0 [ 251.039976] CPU: 0 PID: 15138 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 251.051804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.062637] Call Trace: [ 251.065852] dump_stack+0x1b2/0x283 [ 251.069570] should_fail.cold+0x10a/0x154 [ 251.074809] should_failslab+0xd6/0x130 [ 251.078875] __kmalloc_track_caller+0x2bc/0x400 [ 251.083561] ? p9_client_create+0x2e3/0x12c0 [ 251.088252] kstrdup+0x36/0x70 [ 251.091534] p9_client_create+0x2e3/0x12c0 [ 251.095775] ? p9_client_flush+0x4c0/0x4c0 [ 251.100973] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 251.106424] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 251.111439] ? __lockdep_init_map+0x100/0x560 [ 251.115937] ? __raw_spin_lock_init+0x28/0x100 [ 251.120522] v9fs_session_init+0x1c5/0x1540 [ 251.124883] ? pcpu_alloc+0xbe0/0xf50 [ 251.128687] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 251.133620] ? v9fs_show_options+0x6b0/0x6b0 [ 251.138049] ? v9fs_mount+0x54/0x860 [ 251.141761] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 251.147209] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 251.153041] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 251.160400] v9fs_mount+0x73/0x860 [ 251.163968] ? alloc_pages_current+0x15d/0x260 [ 251.168546] ? __lockdep_init_map+0x100/0x560 [ 251.173069] mount_fs+0x92/0x2a0 [ 251.176436] vfs_kern_mount.part.0+0x5b/0x470 [ 251.181545] do_mount+0xe53/0x2a00 [ 251.186744] ? copy_mount_string+0x40/0x40 [ 251.191030] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 251.196073] ? copy_mnt_ns+0xa30/0xa30 [ 251.199964] ? copy_mount_options+0x1fa/0x2f0 [ 251.204628] ? copy_mnt_ns+0xa30/0xa30 [ 251.208517] SyS_mount+0xa8/0x120 [ 251.211998] ? copy_mnt_ns+0xa30/0xa30 [ 251.216164] do_syscall_64+0x1d5/0x640 [ 251.222661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 251.227850] RIP: 0033:0x45deb9 [ 251.231045] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.238777] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 251.246050] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:36:53 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766649a5473", @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) [ 251.253402] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 251.260670] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 251.267947] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:53 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:53 executing program 5: clone(0x1c680000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000000)=0x8, 0x4) 01:36:53 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) syz_extract_tcp_res(&(0x7f0000000700), 0xffffffff, 0xffff) syz_mount_image$jffs2(&(0x7f0000000040)='jffs2\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x6, &(0x7f0000000500)=[{&(0x7f00000000c0)="edacf760b56690653679d5647d1efe1f4dc9e0f6ba1ff8fa134a7ddd1f89d8841f96f25f6a0a41c81c7180de696bea5b70e06395", 0x34, 0x8001}, {&(0x7f0000000280)="c6342e0c6ad65c3da54b6ffbbbe803b3943498974e0fd0e42dec1de837c0128b0c81de19714b055e390a46311df26c1c1e1507ecac851747853b4db3b53e61e59836978177f653ce2d3ffa3079787cf4477674e38097851538a8b44d2ecd830e511099e7340cec3e6463824b3c830c234a902757176fbc0ede5387056e05fee5f321f1789c46edd49908d9f6cf2dae655ef88d4b79a53fd1bb8d0f7b1a1e6942a082bae3593a070b7e9814199f77e1706b017c505428d4b21854660e9ed143892559e45e980745d5da04fe27f5577945004d1ef2ac819e8c", 0xd8, 0xce32}, {&(0x7f0000000140)="9f3e70c426a6da6f50057645e5ab89816d5f2b230229070d4ef8509d1659462c7333f732f959e98837d4164b4b3d14f29a1cf0049278ec8ec81cabbd743e1072376bb593b46b5ec1f96888c776e2569c0f6c1794b7aa2a3b681fc717f8e68c23f20891a0487d56358d3554f92f31e9785c0502875cea53df4f93eb557d5083c4937ae52f56d431a048f31165e5f84327cb6e8b2b1f4471c50385609d864ab77c96c7b4ed10c81cf22cf300a1dfed8f3c2baa3136d64b93aabe025105", 0xbc, 0x3}, {&(0x7f0000000380)="97f6ab8916af72cce57486b409de2549231eb72393a40ebca2e4947fb069dc5bc21a1698997498190bcf892d868165ec2462c66a77b0e32addafe6b57676613918090afdc9c08077bff7fb069150e4d34ebe92c8eaf85db2ec8944ade0a91972db", 0x61, 0x800}, {&(0x7f0000000400)="ccf99089511f5dbe087cc537241c17615371019e917da66a23dd22079d8028dc735e5e3b186270b3ac66720c7646a8504e66753202cc829ff97246ace9fe3182e241fc03559d2cf3ca31250401ec2d", 0x4f, 0x4}, {&(0x7f0000000480)="402ca8594f9a38979eeab1e81a13a34ac95c43f219d808069d7266d75c981774ea65298ba2e3f5f17cbc9c52a3291cdffb734c16d0a86b55e53a158410b322feff641546c324377f464d9e57c7e4d6b876cf9f5fd6447df6da3684209b3eea128787", 0x62, 0x5}], 0x40000, &(0x7f0000000640)={[{@compr_lzo='compr=lzo'}, {@compr_zlib='compr=zlib'}, {@compr_zlib='compr=zlib'}, {@compr_none='compr=none'}], [{@pcr={'pcr', 0x3d, 0x2}}, {@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}, {@context={'context', 0x3d, 'sysadm_u'}}]}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/attr/exec\x00', 0x2, 0x0) [ 251.378214] 9pnet: Insufficient options for proto=fd [ 251.400257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 251.535737] print_req_error: I/O error, dev loop2, sector 0 [ 251.611258] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db7", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:55 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000280)=""/236) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r4, 0x793}, &(0x7f0000000080)=0x8) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:36:55 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:36:55 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x20a400) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x51, r4, 0x2, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000092}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) r7 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x401, 0x600) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=r6, 0x4) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x56}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x100010, r1, 0x83000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:55 executing program 1 (fault-call:3 fault-nth:12): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 253.828201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.836407] FAULT_INJECTION: forcing a failure. [ 253.836407] name failslab, interval 1, probability 0, space 0, times 0 [ 253.865663] CPU: 1 PID: 15219 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 253.874083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.883436] Call Trace: [ 253.886028] dump_stack+0x1b2/0x283 [ 253.889669] should_fail.cold+0x10a/0x154 [ 253.893831] should_failslab+0xd6/0x130 [ 253.897814] __kmalloc+0x2c1/0x400 [ 253.901353] ? match_strdup+0x58/0xa0 [ 253.905156] match_strdup+0x58/0xa0 [ 253.908787] p9_client_create+0x3ba/0x12c0 [ 253.913038] ? p9_client_flush+0x4c0/0x4c0 [ 253.917271] ? __lockdep_init_map+0x100/0x560 [ 253.921773] ? __raw_spin_lock_init+0x28/0x100 [ 253.926340] v9fs_session_init+0x1c5/0x1540 [ 253.930645] ? pcpu_alloc+0xbe0/0xf50 [ 253.934427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 253.939267] ? v9fs_show_options+0x6b0/0x6b0 [ 253.943666] ? v9fs_mount+0x54/0x860 [ 253.947358] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 253.952814] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 253.957822] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 253.962644] v9fs_mount+0x73/0x860 [ 253.966165] ? alloc_pages_current+0x15d/0x260 [ 253.970734] ? __lockdep_init_map+0x100/0x560 [ 253.975241] mount_fs+0x92/0x2a0 [ 253.978625] vfs_kern_mount.part.0+0x5b/0x470 [ 253.983145] do_mount+0xe53/0x2a00 [ 253.986693] ? copy_mount_string+0x40/0x40 [ 253.990915] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 253.995920] ? copy_mnt_ns+0xa30/0xa30 [ 253.999805] ? copy_mount_options+0x1fa/0x2f0 [ 254.004281] ? copy_mnt_ns+0xa30/0xa30 [ 254.008238] SyS_mount+0xa8/0x120 [ 254.011681] ? copy_mnt_ns+0xa30/0xa30 [ 254.015562] do_syscall_64+0x1d5/0x640 [ 254.019456] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.024622] RIP: 0033:0x45deb9 01:36:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:56 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xccc1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 254.027800] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.036481] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 254.043728] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 254.050975] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 254.058222] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 254.065473] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:56 executing program 1 (fault-call:3 fault-nth:13): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:56 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000080)='udf\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3, &(0x7f0000001200)=[{&(0x7f0000000100)="96bcc00ca73a9214c10d29c12a4c9e41560b11fdca57c1252293da30ae4f68cc27fe0691a22136a7f772d09e1376199364e4b2b2a1a5aba9adb2b6513898036de6cb75082e6e6c85d7ccb9c333065726e1a315dec9f0505a1a182cd8b4089635bf2a3e", 0x63, 0x1f}, {&(0x7f0000000180)="b5701921c06355e406b9e2d84fc998197111b6d215acd6f6c9e7229642882939d6f6550db59c7e6fb47a3ad2e6617c5aa042d245ba6b99681c49d565125e021326612db30000da277a5b4d66440bd66b97fb6f9123b349a970a4964f67a4f090c65d68c7b689095bc86acaeb3f85a78d43242c6856b1eb", 0x77, 0xf51}, {&(0x7f0000000200)="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", 0x1000, 0x8}], 0x8, &(0x7f0000001280)={[{@utf8='utf8'}, {@gid={'gid'}}, {@umask={'umask', 0x3d, 0x81}}, {@novrs='novrs'}], [{@obj_type={'obj_type', 0x3d, '/dev/input/event#\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f0000001300)='/dev/sg#\x00', 0x281, 0x4c1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]) [ 254.117774] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:56 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x56, 0x5, 0x4, 0x4, 0x4, 0x81}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00', 'wlan0\x00', {}, {}, 0x11, 0x3, 0x64}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x4, @broadcast, 0x4, 0x9, [0x1d, 0xe, 0x25, 0x16, 0x40, 0x0, 0xe, 0xb, 0x8, 0x36, 0x24, 0x3f, 0xb, 0xe, 0x20, 0x1e], 0x2, 0x20, 0x2000000000000007}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) 01:36:56 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 254.175295] FAULT_INJECTION: forcing a failure. [ 254.175295] name failslab, interval 1, probability 0, space 0, times 0 [ 254.234150] CPU: 1 PID: 15245 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 254.242054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.251403] Call Trace: [ 254.253994] dump_stack+0x1b2/0x283 [ 254.257629] should_fail.cold+0x10a/0x154 [ 254.262735] should_failslab+0xd6/0x130 [ 254.266712] kmem_cache_alloc_trace+0x29a/0x3d0 [ 254.271386] p9_idpool_create+0x3c/0x120 [ 254.275453] p9_client_create+0x57a/0x12c0 [ 254.279705] ? p9_client_flush+0x4c0/0x4c0 [ 254.283943] ? __lockdep_init_map+0x100/0x560 [ 254.288520] ? __raw_spin_lock_init+0x28/0x100 [ 254.293109] v9fs_session_init+0x1c5/0x1540 [ 254.297431] ? pcpu_alloc+0xbe0/0xf50 [ 254.301031] UDF-fs: bad mount option "obj_type=/dev/input/event#" or missing value [ 254.301249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 254.313949] ? v9fs_show_options+0x6b0/0x6b0 [ 254.318360] ? v9fs_mount+0x54/0x860 [ 254.322074] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 254.327525] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 254.332544] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 254.337380] v9fs_mount+0x73/0x860 [ 254.340902] ? alloc_pages_current+0x15d/0x260 [ 254.345479] ? __lockdep_init_map+0x100/0x560 [ 254.349971] mount_fs+0x92/0x2a0 [ 254.353328] vfs_kern_mount.part.0+0x5b/0x470 [ 254.357808] do_mount+0xe53/0x2a00 [ 254.361330] ? copy_mount_string+0x40/0x40 [ 254.365552] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 254.370578] ? copy_mnt_ns+0xa30/0xa30 [ 254.374458] ? copy_mount_options+0x1fa/0x2f0 [ 254.378979] ? copy_mnt_ns+0xa30/0xa30 [ 254.382873] SyS_mount+0xa8/0x120 [ 254.386304] ? copy_mnt_ns+0xa30/0xa30 [ 254.390178] do_syscall_64+0x1d5/0x640 [ 254.394063] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 254.399236] RIP: 0033:0x45deb9 [ 254.402410] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.410107] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 254.417371] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 254.427398] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 01:36:56 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000680)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000000), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffff, 0xff000000, 0xa, 0x2, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x6, 0x4, 0x5, 0xea76, 0x4, 0x32, 'geneve1\x00', 'wlan1\x00', {}, {0xff}, 0x0, 0x16d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x32}, @remote, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4cb7, 0x6, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x3ff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x418) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xa9b, 0x476600) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)) [ 254.434644] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 254.441891] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 254.477252] print_req_error: I/O error, dev loop3, sector 0 [ 254.496737] UDF-fs: bad mount option "obj_type=/dev/input/event#" or missing value [ 254.506982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:36:58 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db7", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:36:58 executing program 1 (fault-call:3 fault-nth:14): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:36:58 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x150, 0x0, 0x148, 0x0, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x1}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x3}, {0x2, 0x5}, 0x6, 0x5}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 01:36:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x34440) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x2f17) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x6}, 0x4) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:36:58 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x0, 0x3, 0x3}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) recvmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, &(0x7f0000000380)=""/220, 0xdc}, 0x100c0) 01:36:58 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x40000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 256.872115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.882088] FAULT_INJECTION: forcing a failure. [ 256.882088] name failslab, interval 1, probability 0, space 0, times 0 [ 256.924536] CPU: 1 PID: 15309 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 256.932440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.941818] Call Trace: [ 256.944406] dump_stack+0x1b2/0x283 [ 256.948037] should_fail.cold+0x10a/0x154 [ 256.952188] should_failslab+0xd6/0x130 [ 256.956168] __kmalloc+0x2c1/0x400 [ 256.959711] ? match_number+0x9d/0x200 [ 256.963607] match_number+0x9d/0x200 [ 256.967322] ? match_strdup+0xa0/0xa0 [ 256.971146] ? memcpy+0x35/0x50 [ 256.974429] parse_opts.part.0+0x1b5/0x2d0 [ 256.978671] ? p9_fd_show_options+0x190/0x190 [ 256.983167] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 256.988275] ? fs_reclaim_release+0xd0/0x110 [ 256.992693] p9_fd_create+0x86/0x3b0 [ 256.993472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.996405] ? p9_fd_create_tcp+0x440/0x440 [ 256.996419] ? __raw_spin_lock_init+0x28/0x100 [ 256.996434] p9_client_create+0x5fd/0x12c0 [ 257.018095] ? p9_client_flush+0x4c0/0x4c0 01:36:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:36:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 257.022339] ? __lockdep_init_map+0x100/0x560 [ 257.026833] ? __raw_spin_lock_init+0x28/0x100 [ 257.031446] v9fs_session_init+0x1c5/0x1540 [ 257.035771] ? pcpu_alloc+0xbe0/0xf50 [ 257.039575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 257.044441] ? v9fs_show_options+0x6b0/0x6b0 [ 257.048855] ? v9fs_mount+0x54/0x860 [ 257.052593] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 257.058069] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 257.063116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 257.067961] v9fs_mount+0x73/0x860 [ 257.071498] ? alloc_pages_current+0x15d/0x260 [ 257.076079] ? __lockdep_init_map+0x100/0x560 [ 257.080577] mount_fs+0x92/0x2a0 [ 257.083950] vfs_kern_mount.part.0+0x5b/0x470 [ 257.088449] do_mount+0xe53/0x2a00 [ 257.092005] ? copy_mount_string+0x40/0x40 [ 257.092928] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.096238] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 257.096250] ? copy_mnt_ns+0xa30/0xa30 [ 257.096261] ? copy_mount_options+0x1fa/0x2f0 [ 257.096271] ? copy_mnt_ns+0xa30/0xa30 [ 257.096283] SyS_mount+0xa8/0x120 01:36:59 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 257.125543] ? copy_mnt_ns+0xa30/0xa30 [ 257.129428] do_syscall_64+0x1d5/0x640 [ 257.133318] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 257.138501] RIP: 0033:0x45deb9 [ 257.141684] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 257.149390] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 257.156654] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 257.163921] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 01:36:59 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7, 0x0, 0x40}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}, {0xfe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3f, 0x0, 0x7, '\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x9, 0x0, 0x6, 0x1ff}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) [ 257.171190] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 257.174886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.178453] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:36:59 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = dup(0xffffffffffffffff) setxattr$security_ima(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@md5={0x1, "74248d442a4e68c5bc56808131ef2a06"}, 0x11, 0x1) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x6, 0x8, 0x10000}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'dfltuid'}}], 0x6b}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1ff, @empty, 0x3}, {0xa, 0x4e22, 0x1, @ipv4={[], [], @broadcast}, 0x9}, 0xffffffffffffffff, 0x7}}, 0x48) [ 257.360603] 9pnet: Insufficient options for proto=fd [ 257.412386] 9pnet: Insufficient options for proto=fd 01:37:01 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db7", 0x52}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)) r2 = gettid() r3 = gettid() r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000180)={r1}) r5 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f00000001c0)=ANY=[], 0x51, 0x0) msgctl$IPC_STAT(r6, 0x2, &(0x7f0000000080)=""/27) r7 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x2008}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000000)={0x2002}) r8 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$EVIOCGPROP(r8, 0x400445a0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000380)=""/4096) 01:37:01 executing program 1 (fault-call:3 fault-nth:15): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:01 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f00000000c0)={{{0x3a}}, 0xb6, 0x1, &(0x7f0000000000)="6973ccfab2465e28e83dbf253b1e4187280e88c16ba2905a995290b05c7181546f26dc8a89367be620c31d8abe521ca6312dbe083e989723f703158ba130f59d85527521fa68acfa8d65d555b80b6d7c8dc793ba6c5d014db5adcda77de90509749c7a7ad35e1a9d941c236491b9db65057f57548bdeacf2b03420cf7e192258623cafb7b1bcc098537e9a5d12f8d8af7a73899f5d01cd5eb546f25a15ba68e8a00229ff29df6cab64ff7d512fc6c517b2b78d3636fe"}) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r1, 0xfffffffffff) keyctl$get_keyring_id(0x0, r1, 0x7) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:01 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00']) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000280)=0x95, 0x4) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000180)={0xa10000, 0x20, 0x0, r2, 0x0, &(0x7f0000000140)={0x990a2e, 0x7, [], @value64=0x9}}) [ 259.885599] FAULT_INJECTION: forcing a failure. [ 259.885599] name failslab, interval 1, probability 0, space 0, times 0 [ 259.899686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.913729] 9pnet: Insufficient options for proto=fd [ 259.918923] CPU: 0 PID: 15381 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 259.926811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.936947] Call Trace: [ 259.939534] dump_stack+0x1b2/0x283 [ 259.943176] should_fail.cold+0x10a/0x154 [ 259.947336] should_failslab+0xd6/0x130 [ 259.951312] __kmalloc+0x2c1/0x400 [ 259.954864] ? match_number+0x9d/0x200 [ 259.958758] match_number+0x9d/0x200 [ 259.962473] ? match_strdup+0xa0/0xa0 [ 259.966278] ? memcpy+0x35/0x50 [ 259.969561] parse_opts.part.0+0x1b5/0x2d0 [ 259.973796] ? p9_fd_show_options+0x190/0x190 [ 259.978311] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 259.983413] ? fs_reclaim_release+0xd0/0x110 [ 259.987828] p9_fd_create+0x86/0x3b0 [ 259.991549] ? p9_fd_create_tcp+0x440/0x440 [ 259.995871] ? __raw_spin_lock_init+0x28/0x100 [ 260.002107] p9_client_create+0x5fd/0x12c0 [ 260.006348] ? p9_client_flush+0x4c0/0x4c0 [ 260.009943] 9pnet: Insufficient options for proto=fd [ 260.010603] ? __lockdep_init_map+0x100/0x560 [ 260.010617] ? __raw_spin_lock_init+0x28/0x100 [ 260.010631] v9fs_session_init+0x1c5/0x1540 [ 260.010642] ? pcpu_alloc+0xbe0/0xf50 [ 260.010656] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 260.037739] ? v9fs_show_options+0x6b0/0x6b0 [ 260.042156] ? v9fs_mount+0x54/0x860 [ 260.045868] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 260.051321] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 260.056424] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 260.061272] v9fs_mount+0x73/0x860 [ 260.064813] ? alloc_pages_current+0x15d/0x260 [ 260.070474] ? __lockdep_init_map+0x100/0x560 [ 260.074970] mount_fs+0x92/0x2a0 [ 260.078327] vfs_kern_mount.part.0+0x5b/0x470 [ 260.082809] do_mount+0xe53/0x2a00 [ 260.086338] ? do_raw_spin_unlock+0x164/0x220 [ 260.090905] ? copy_mount_string+0x40/0x40 [ 260.095155] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 260.100152] ? copy_mnt_ns+0xa30/0xa30 [ 260.104027] ? copy_mount_options+0x1fa/0x2f0 [ 260.108513] ? copy_mnt_ns+0xa30/0xa30 [ 260.112393] SyS_mount+0xa8/0x120 [ 260.115824] ? copy_mnt_ns+0xa30/0xa30 [ 260.119692] do_syscall_64+0x1d5/0x640 [ 260.123566] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 260.128741] RIP: 0033:0x45deb9 [ 260.131932] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.139629] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 260.146878] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 260.154127] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 260.161373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 260.168621] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:02 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pwrite64(r1, &(0x7f0000000200)="2633d5c907156d494cc60257b77b08e1196ce13b8b299acdf063fd6f23a551bf40d446aa6d0f77986a77267e5ad90f2e7d7f3fb0f31b8909499e85c014cb410adc60d6f8769f4647b546b4a73c0742934c5a802e7341d81eaafb622fb8c4951163cf59924af73521fb523c241cc58491e79e70576364733cf97bf0d569a41f86a7f268cbd287", 0x86, 0x8) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x77}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x4) 01:37:02 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r4 = epoll_create(0x10000) fchdir(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@private, @in6=@initdev}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = gettid() r6 = gettid() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r4}) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x71, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)={r9, 0x67a}, &(0x7f00000000c0)=0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x51f81693e4a9b152, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 260.196234] 9pnet: Insufficient options for proto=fd 01:37:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:02 executing program 1 (fault-call:3 fault-nth:16): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 260.287690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.292191] FAULT_INJECTION: forcing a failure. [ 260.292191] name failslab, interval 1, probability 0, space 0, times 0 [ 260.312033] CPU: 1 PID: 15414 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 260.319928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.329278] Call Trace: [ 260.331866] dump_stack+0x1b2/0x283 [ 260.335517] should_fail.cold+0x10a/0x154 [ 260.339674] should_failslab+0xd6/0x130 [ 260.343650] __kmalloc+0x2c1/0x400 [ 260.347220] ? match_number+0x9d/0x200 [ 260.351134] match_number+0x9d/0x200 [ 260.354850] ? match_strdup+0xa0/0xa0 [ 260.359348] ? memcpy+0x35/0x50 [ 260.362661] parse_opts.part.0+0x1b5/0x2d0 [ 260.366903] ? p9_fd_show_options+0x190/0x190 [ 260.371404] ? fs_reclaim_release+0xd0/0x110 [ 260.375827] p9_fd_create+0x86/0x3b0 [ 260.379542] ? p9_fd_create_tcp+0x440/0x440 [ 260.383866] ? __raw_spin_lock_init+0x28/0x100 [ 260.388448] p9_client_create+0x5fd/0x12c0 [ 260.392696] ? p9_client_flush+0x4c0/0x4c0 [ 260.396956] ? __lockdep_init_map+0x100/0x560 [ 260.401450] ? __raw_spin_lock_init+0x28/0x100 [ 260.406036] v9fs_session_init+0x1c5/0x1540 [ 260.410357] ? pcpu_alloc+0xbe0/0xf50 [ 260.414166] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 260.419010] ? v9fs_show_options+0x6b0/0x6b0 [ 260.423423] ? v9fs_mount+0x54/0x860 [ 260.427137] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 260.432586] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 260.437632] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 260.442492] v9fs_mount+0x73/0x860 [ 260.446050] ? alloc_pages_current+0x15d/0x260 [ 260.450617] ? __lockdep_init_map+0x100/0x560 [ 260.455100] mount_fs+0x92/0x2a0 [ 260.458458] vfs_kern_mount.part.0+0x5b/0x470 [ 260.462947] do_mount+0xe53/0x2a00 [ 260.466478] ? copy_mount_string+0x40/0x40 [ 260.470706] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 260.475710] ? copy_mnt_ns+0xa30/0xa30 [ 260.479586] ? copy_mount_options+0x1fa/0x2f0 [ 260.484089] ? copy_mnt_ns+0xa30/0xa30 [ 260.488053] SyS_mount+0xa8/0x120 [ 260.491499] ? copy_mnt_ns+0xa30/0xa30 [ 260.495381] do_syscall_64+0x1d5/0x640 [ 260.499254] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 260.504433] RIP: 0033:0x45deb9 [ 260.507619] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.515309] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 260.522559] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 260.529808] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 01:37:02 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xd8, 0x9, 0xde, 0x10, @empty, @ipv4={[], [], @loopback}, 0x1, 0x7, 0x4, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x6f8, 0x0, 0x894d572daf5ca1b8, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x75, 0x4, "11d9e4b671e5e913965787aeaa1e164eb20119ee75dc3a21cc1e90528df309fde7b386bbdf24833cf55b35d97171b02483b1b21eb61054eae0c069e824339f61546ac24693490b92bb5b35ff0d5af103bd7f9662f14555883bc08d659a06a7c8488a321db43a2c14ad52d7274bf74cfb49"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x184, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xbb, 0x4, "f5615b3907b97b7c4fa431bebab3c91ffc67b3785b99724249b82425dfeb99d34fe87a8948b7166b6db38dc794d6947e6a5a879268ab65b73b94de9cb8aa3840e18adcbda0ecca138c4bd3a76d5d7b9780e7e0cb84f89e1fb68db8db16a43c0eff02df77400903711459a5d3f0c94c36910edc7b12ae1ef95caaafb5dac4e4b6433c266fa6d199e04fa5e1f14af70e2e998ad98d6987792afd272c9dbbd35ec941f778967c2643f10d20d79c5084e22564f0c3628f31aa"}, @ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'NOTRACK\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'hashlimit\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e55}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'multiport\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x458, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x16c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x97\'\'%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xac\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x61}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'multiport\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x57bc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[*#&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'raw\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}]}]}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'hashlimit\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "8d539fd890a0d294f7d3a780582dc8220331ac5c3e4bd213bb965b381260863470ab812edc19a7a4c2dc1afde77ed28e1a484bba23fef0b27fe2e49bce2b2455c3fcc55665b700e4a5cac1b41458b171718230e4496d570be7dde5d33ddb51fc36c17fa31159e9a4f5af79489a175228ac7bb4203f93669130bb13b36ccef8e1bd4d928b4a56e69ff37c01e71e6e96ad754a7905863d3de09c6913febfe204b3f9625d752e827895f5e97a7df2e10fc087dc45541c9b85c09755c5fec1cd"}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'NOTRACK\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb1e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "2611f4e6df658853f7de33f07f824ff7f1240a7f83d3cef0413ba7c6b2211b33e96384e501b077730198bb9ec91c745bae687efc605c2c626e301d02"}, @ETHTOOL_A_BITSET_VALUE={0xeb, 0x4, "50ab5443b4088d7d50ea8cd064fd0fa740859a2ebb7539502b738a5b1c7287f0f3c5308419b06523e46efce9329a45b3d73dc2a9c6bb1b674daa85952eab7103fabc6d1b9c83fe45c288c57a74b5fd49999d63e4adbf6c803c771f5fdca3011e502b2f691da362a56ed04335ac993653e7d2508dca6d6c8519a541bf6dd9da6ff93af45f42b6a08e32398a0319e3a308947d76e3226e737782b298d4450fca6919b6fae35244676617e851ef1085001c76b76fc2987da68f7062a19370d4e922909a15ebc7a0d8fd7ff79ba53752d1cd1ac6fdfc7a1bf3cd5ca250cd51134e5d90d107ed42e182"}]}, @ETHTOOL_A_EEE_MODES_OURS={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x6f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}, {0x0, 0x0, [0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 260.537055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 260.544330] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 260.561472] 9pnet: Insufficient options for proto=fd 01:37:04 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22a", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:04 executing program 1 (fault-call:3 fault-nth:17): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:04 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = accept(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80) ioctl$sock_ifreq(r3, 0x891d, &(0x7f0000000100)={'macsec0\x00', @ifru_hwaddr=@dev}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:04 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="4b0000009617dca1168956d63897bf17d2447de8d3e1af1e6965769233b4b60c593a20a07b0b86f00d5f15d1bcfa284adaf1f430b82629d5a016383a05411df9"], &(0x7f00000000c0)=0x53) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x71, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x64c}, &(0x7f0000000140)=0x8) r4 = accept4$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000100)=0x6e, 0x80000) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 01:37:04 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @local}, @in6=@private2}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x10, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@cache_loose='cache=loose'}], [], 0x6b}}) [ 262.937526] FAULT_INJECTION: forcing a failure. [ 262.937526] name failslab, interval 1, probability 0, space 0, times 0 [ 262.948752] CPU: 0 PID: 15452 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 262.956637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.966596] Call Trace: [ 262.969190] dump_stack+0x1b2/0x283 [ 262.972820] should_fail.cold+0x10a/0x154 [ 262.977930] should_failslab+0xd6/0x130 [ 262.981911] kmem_cache_alloc_trace+0x47/0x3d0 [ 262.986504] p9_client_prepare_req.part.0+0x4ea/0xb60 [ 262.991701] p9_client_rpc+0x170/0x1520 [ 262.995686] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 263.000742] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 263.003895] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.006123] ? p9_pollwait+0x18e/0x1f0 [ 263.006145] ? p9_conn_create+0x4b0/0x4b0 [ 263.006156] ? pipe_poll+0x24f/0x2c0 [ 263.006166] ? p9_fd_poll+0x237/0x2e0 [ 263.006179] ? p9_conn_create+0x3aa/0x4b0 [ 263.035376] ? p9_fd_create+0x293/0x3b0 [ 263.039351] ? p9_fd_create_tcp+0x440/0x440 [ 263.043677] p9_client_create+0x92f/0x12c0 [ 263.047943] ? p9_client_flush+0x4c0/0x4c0 [ 263.052161] ? __lockdep_init_map+0x100/0x560 [ 263.056641] ? __raw_spin_lock_init+0x28/0x100 [ 263.061205] v9fs_session_init+0x1c5/0x1540 [ 263.065533] ? pcpu_alloc+0xbe0/0xf50 [ 263.069341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 263.074180] ? v9fs_show_options+0x6b0/0x6b0 [ 263.078587] ? v9fs_mount+0x54/0x860 [ 263.082292] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 263.088590] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 263.093588] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 263.098425] v9fs_mount+0x73/0x860 [ 263.101954] ? alloc_pages_current+0x15d/0x260 [ 263.106532] ? __lockdep_init_map+0x100/0x560 [ 263.111023] mount_fs+0x92/0x2a0 [ 263.114393] vfs_kern_mount.part.0+0x5b/0x470 [ 263.118899] do_mount+0xe53/0x2a00 [ 263.122430] ? copy_mount_string+0x40/0x40 [ 263.126643] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 263.131648] ? copy_mnt_ns+0xa30/0xa30 [ 263.135515] ? copy_mount_options+0x1fa/0x2f0 [ 263.140002] ? copy_mnt_ns+0xa30/0xa30 [ 263.143886] SyS_mount+0xa8/0x120 [ 263.147333] ? copy_mnt_ns+0xa30/0xa30 [ 263.151222] do_syscall_64+0x1d5/0x640 [ 263.155117] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 263.160299] RIP: 0033:0x45deb9 [ 263.163475] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.171172] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 263.178420] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:37:05 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000001880)='/dev/md0\x00', 0x100, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000001800)='keyring\x00', &(0x7f0000001840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001780)=[{&(0x7f0000000080)="9c608de78c637e88947d985ed452bf849fe7b6d09505755f119476203310492b3e4423f0e5b64da6549eb4aef58cb3975e8649840a9034c676bd5bb182810f69be5659757a58804148897dc7a5dc80bc4bbffcbecc9cbd6497b1bbca9ae89c461ea0164b6e4df35ecd3c6d94fd36febfc0d045b35a81b0f551697f13bc74ac27774cd33d4f563c3a63453fb534e2f6", 0x8f}, {&(0x7f0000000680)="8f654c88279cb97c7fa77188acfed5ef9922c0703989bc6fcd4712ee4d8659aad1fef4aac9fb610e96dd09b0790fe1338635499a5c190d2bbfec36493602ff41ae4ed25ef7a8256cb0bff38de6e799e2d96db16a9669b2ca953f53eac5f9f3fab922c5c916f0139ce89df618ec26549f784fd3fd55296b72f1b8ae78dfd5c2bdc3d8eaba59466e69a561b55d96736d0672e5c2e42a1fc46bb33c183b942ca3fa0e52ac66d7e8f76e26a3136281f95946ab5658022f73b03d43e42afbe26f0dfbd3351082e105d0d0dc80658e883ff8110c204a8bd74bd6dc15c3387396c08ab6aed39fb6b7632aff5b71894fb2f06843979a1f556bb756212553d1f1862f6029390c6b55abfb5ce61e0c1f776dbed84a64930c6704afeab7b5687702644c3c0d2f04bf84ad0ad072a25ad89671b626dc05205ce387e03986e65035cabf6668244ca79d6001b0678d8bb8d0bbac88aacbef7303b77fee30533574537d169d62c016784a91d8680a718cda6f169ccfdcf3ab365a8445c7834ed22177656bfa12f1fd21ea725be4122d548fee4f967842d941fd31d2ab95dc7f53795016432c1752561c303f0760b2da1c0fe791a36b22ad998da8d7b90e69dae9da40220c1d4e91dd345c6140cac21ee45f52428b7fd09ae260998f0b7682692fb1d325122827aee1a225c0eae9df4cfd49d3829fd405aea6938aec5d0b02dfad50fd3ce61077b2c7a22b531be175b2d2a7d5e15a4585ba9fb365ec96f485daaec4e99f34b87dd4083130c9cc9c61a5825051134983ec52589e51b3e27a463d06a090d75631876c9060a20dd9d849b99aa2c5e2f236b33b629bfdda9a64f6a743c09ac68f8a773a313bfb2a54386ab0faa7fdff7beb8dfce3d6e9831a95d7d7b99ec8bc9df679adf1a0e1237fa6d5192cdbd1f0744c2e982746bc468c6810d1198bd9255295baf028145c287bd1028d3e460736fddd0ff0bf0887c6a8b92a471a70f9ad8a9766dbcf5f56bec7cdab5177dff32d4960bcc6e1b031b18bac3db4d792d732184e3c9373cc1bf2d679df28cae50f6998802f9993a48650dfaf559388168468ae43cf130053f962d5557a2883c0b37f35405622081fa45ac7cc1eb896fda3b750674059f0b03647f167c4625b135272df2cca89f552bc0815a2797668bbc3e8d4d3399b26f85409170d79a1ae8fef43c8be741e06b0b60dc52ffa6f0d6c944c115360ec48cef1a9d5f74a15b36238078468d5dccd3da200da3ef0201871aa614bb7f9bc01a25b978deb077a3291353a73c3d27ece4d836804b92dbc6a62a69057dd717a40c5a6bdf7f3f69c89ea4686aefd61a9642bcbdb16ac25380192c31dd4609e256909995f2eb32bb7228986967c678a121229e39b864b1c7d73ef445e285b52b9e8cb238c969dda9143c5e26dab5a277e90a49fc788b3f832a21bfb5396afd286b6c4e38eb0928972a270a728d3d1f169a1a92ab3703f306303c4e2bf9d84d233566581e52489ea0218e93f2f37200123b9893f41bd74d1f3132f39659b07dbab2b1a12a7f2f5ef76bf3c3d63bcda82e02eb1e4b21419ed27f2acccd6533f713cc03103d1ef3ae1cd17e24dee91970dffa0aeba879d5ad2f8da9c026cc0023ddd0dfe066e9c3be473706985f3e5380a515a52553e11d3280d1ac2698b6bfa2f63df705a5c414e72c75e304499c70a19d3153d9f4121ee9b3a5d24b1d610253792e45f562014815c1fe0fe923e09625c81fc528db4f5068be455eb46238cf5147cb2f34d63425b65485944e0b9ab56f47a00a512aff5a76ff31d1cea3503654b4f92edcc1b988b403779a952f930a6a0918e3d8a8c47dbd9a4e39c1d32bf3aadc0c8f767f2811b91a842f6f22b20594bb3e488160d92623dc195f01b587d73b474f0d57c16ba9d9c9bd82398d1e5caa16f50b26bf2564788788d44a4eba68cee83332813ba078e4170e8a52c0216aa62795c658cca9e0ef378cabb9a9d56d2f0fdb0d6f5acef62bc2d0c2d0ee2988b8b3230ca061c1115b14c2e34515ac71ed33149af5b6c4c8b75d79d0a053149df183513957e1f8c3bbd8033f37c56ec28f661a106e774386c034e9d952c353ee60205cf8760305e04a275918a60def6021e5d2358ea1a9ffc81bd768b25b9e75f74e2c9365c511c6f17cfaa00d537961cd0343fa76209a3ec43f8de63a29832640eaf7b5ec8e3c7bdc441ca3dc7275acecc099b289db9407392fb2d6a3299994a4cbfeaab93ed3d9d99049787551a877313337f0815adaa6cf38187775dc7b2a4f14519909c05c9b3d03fb7d4762f81b751573333401b84e0b92be8346d78bc98f58f2c5edc84f937f14535ca65c986e8ddb9dede4bb15488110b610aead1be58f6a987f017b220c055d05d4692aaea7437b74d4371f811008c71886b980e3449ff02e22e61708539b3678469e05971bb1bd96717676e596e08d56281e20eedf928960f5c8e84cf0a65ddeba001ec377bc31003d6f6fc6c427712df177e4517005479b07996fbeec70a9c80df1690b316c3535224939da08f377600ef999c41aff0e671dee884f73e26a01d8f39b3be6af7f30fd17edc6524dda43f5c7bd189b650c85c28dc92c0cb57e8e6738dbf8eadc7ffb3380ed549a3e5f349774001707bed14d891b70b541a60119e71ac612cfef48332e5ab349009eb49e809cda6d52249e095bec088f75e849cc705662db36958bd8693515da08be0343b27f68622d19cc242f5ebdd13924aa7fb7d62674572cde67e0406d150bd5c2ef3f61878748be3876ab835c83f9a7819b52d563f9b23cc322bf6e969ffc7aa9b0db06bf703d334783ff3e1057c4de6d390fc1f38e1ddf7d86c05087ee68c38720afa839a77c3aef3da0af207111d8fa54631724564eb329e290ce6e287639fa7a68511606fcc4cd6e9d1441fd85d0f6b6a7c4585c4381192ed585321f1fb8dc43549c57899c170c67a6f02dce107996f2f9f3b72d4a714742146437b8f4189cd730c2d751f039090360f8a2b4561728ff31eaed71e41af2cbb3b9b5bf798123e75410adfc63aae70e2fac973f2544bb586b0302775a12be508337801fb8a5ab207fa9eff77002943691a818ffa3a8f77bb91427ef936051cca57a3964a0713d11e5944150c37b7e6761b09d08520fc130369259930c6e316bbabd4baa9f9c5604e22a613d791b2f891077be2a1f00cdf657379f1dfe18d13568aa4368d8e5847dd7acddd90d7877fc884b7283f3c5c96b89da46d0eaf7bfc364c0204089e8f1810de40a78f63ee15cd8b7d6b1b3acb231087de821b8ba5b3ed503f9e8ee13372ec4c8b327feccf21ee7bdd232c57d878643735fdf45dd1749d706c6e1f58197887ade552732921c5edb742314399dd09ad8a9ce08be257e3b5c9ad2abb7cd8737e8dbaf0860e27210ba4c092991e382fcdaef5c94abd2dbd4160d72e97cff98a120282badec66a870de4c638cc5272412695ba2dad3effdc7b77efca32df2dd8effc92b2f9e74adeae8262f8b0aa18b243cbbb701301bbeacb22509ada706ae51dd110fbbb79a678d57b33cb182e968d66b44f597c2f4f398ce2651b6e812548075cf99cc27ca3cf094267b7c8d73554c540e213505ebe0683ce5508e69b6b4f8cd01519f8f236e5b46c14429e80b74445671ddbca5c96190bb6f47c33c5d5d9d47c7ee2564f04e4a7cf55bbeb74b4c36e0b856c0f76c43b26f6fac3af65c9e373e7d2adc1a351ab7e8f787e8baefe60aaf9f3493da5c74ad2d399ca95e341848fbeea0cacd8b940b4fae98588cbe742efc4127f2998a014795ec5b18d27e26e7893278f8aba84a82d433cb836313f282a4d755661f33a8bce5160557a5520e64d530ad9313dcf35ec05a3342ba56f21f69ed3b0f4a913061949dd5a90c3e88df34eab81abc1719de4959642ef2525f1964ef9869ce75faeab4d7c2e5573e09d8705b4c759a673b8530d715f55fdf8e1da49daf3d2c8986e26add8b1bedba954ad0955ee4a084435218d9fdb28e2af6eb9b16a46dfdb08f1908926be3b63e10667eb7af46d7c5527218799956d40a53b4c4d6d5ec3e3635a6f4b05e24a44bc923e3ce9164496f68dbfde1f39000bfb82801754e15c3c9f88f78093801c1ac60f3feaa082ad2bba95d54f3fb5056007520b6e410598528ca790f3997767bb3dd38f7bf6916cf8b98f905781f10966a046a5ae901bec5b2e211999b15b1150aac6d60fa0e87f83b928431182a3ef585fcd70e93496bc882085ff99305eb10418eeaeb18e59bf1bca1eaadadc7778c8f3b63ce818f53fd87fb2fdbcc32d12e8af38f41808d74c076f6d9371854981c8b40732413262065882ee3043d7a33f83d6e7dd6cfcd4da1da646f089a5895cd78eec20697a69ef05f210577127794b92c8cd3fc9ac26c08553dd6dc4543fecd2f147bab744f724bcb6e10a86a207179288ac9846ea30da66b36d9cd603ceba7f9881d2204f3a74039d7a5b15e605d56b5b875396304dd3932253f50cc23101d45f0c765dc66adf4345c64bcacb737bda39dbce8a5097559c373377e5af84ec1c7facdf14e706083134e0858a1b3156d349132d785c51be3e07adb191183d0a0fb054bfc959dd8d47cd8cfcdddb178731dcee8c5af6e16e76c8d57fe81fb829984608b2c131b8f2602f447d708c699e5a366c4a6378a2afc481adf63975f95f5111da85696e6acb86933dbef3c6ff9fa1ae025b3c1b64a0d68e6ef4d3780349afa4cd85b01df07dee23c090cee3354d4564813bcbea252b61a2d7a5edb3169e71845e1b384f490d1f33ff2ae9f2aab3cd6f784c6f7e9d9d987509ef7be6f805107462f6733abdf873d4da1a7588c2aa64d3468b280f9a43b938be07fbf10ee785d91438bedc1028dc84b3dc1ccafe95e3dac6f7f15233e7346a664de56039b3211686293ce8137bb9f6a67f7dc8f9c9a8aebde8c82a2c9dfebef4bea4c31b3c5256ca2a8259b98e5ec6ff2d45123458d01ff03e604c060948dca2db3c92e0788e83e85ccd608e33fa1d58c819608674676cd583a9539db0acefbf9bff6295d03ea0dc1bda7f64fedee59a47a79586490918e7e92551eeed85afd64f4197b657fe6f1fec8fd3d8ecc15b8d0724322907619e537f140add0c480dce9a6c455cfe40fca06a53c02afdab139f93691bc6ff4ea9787624109b517d8cc670b033747368d4a2ba7fd284f62087a54dc61f267bdbf851cff24714da9fbac564bffee4993851f3af0591ff9f35c9902f2f743ca1af5218dee5e59c957cbaf177315bb6d0862a957e3ce877f09d1574edf0ed77cb3cceaecc136dc37a2f26937d834b8379612a81de38029f2f3a781909a5a9998697d9a9615bcf2d4cb0b1bb0bf0771309b7dc954d04ca2b494f0e286da7af0ebbb26a5272ad65b52a6b2e953d789d4ca3f3134bea6baf5ccee48c744ab630b9681a52ce55772c3ea2068b972c5fe5a096fa5dd7b04303df35bb11abb32a581ee734edfb79e270414eb496db7626dd5cc24e695015b0ccfc3d3c8c8a3e26d6e4b634ac4604e2f670ee7f580ad908637a1810282fe1e58edc22e4bb4aba37b0d315216a2fdfd6e3725a858e7b79c5ca68d520a97e02ede3c503fe5f4a9347f54c2afeb98cbf9a2abd60420d6f7ee34612ae250e6e512d2ff3bbc97be5db6adc0f8340ff7705fcda850f65a704f0d4e8f2873f9ec42106d066374f0940090545f5e74ca8b5a9edd2455868f88015fbb4911e60ac12683d6cf809d1648ed7d5ee0cf6e37ed4869f38b25fb4b65c0ecde0632fd138938e5bc0e16e2111ad", 0x1000}, {&(0x7f0000000140)="66f552b0fb1414974c5b8cd84b190dd26d0bbee57d50ae31ba9c6905b9dc3f943d70b5eb9c38fd490d28125eede7460bd1ad6b1c4ac8da70a43c6c0c5ff4d6ad51c32e24ecfa684e7da92cfc288aa0bca6235611c7208447f44ed419a0b26f8fad8330f7125433d37c61d2ba0a8c51ee07", 0x71}, {&(0x7f00000001c0)="56beb2aed033b61296a0acefd2ca737328920ccaef0d10ccf9b6d9a4f38c269e24df80c4286974e1a1d89aaa4560579d849261c980704890ec950ede4f7758e2ba", 0x41}, {&(0x7f0000000240)="d1a5960bf4cb10fb63ce7f916eb7691bab05f1146d0008eadf2d394057ba3bec727b21f928b08937554170798af74dda0174c3c2dbc0338cbf932178fc106f16284f7529a34cfb44ac9ffd8004a7fc1f3b1095b48e305e89eac820d38e3417b4c786d4a6e2f0c3a65905e46846d920dc7e6b4e2510aa53539df54d4b38a1022992", 0x81}, {&(0x7f0000000300)="cb959754c68317bd8ff72e8f9a106b014ad792235044d77a0e57a9c41d6135a146dfbb5924c17525663f4cc2eafada6b46ff970f26a8e108a85558", 0x3b}, {&(0x7f0000001680)="737d6e35e570d53bbf80bb382ff4fc84ca9288bd7e09b12033c489d95f09082b9a9b0b208cbe5a27396ca306d5f0b2a7c17ebbaa3c14c2", 0x37}, {&(0x7f00000016c0)="7f69203dec652b934a2445e1f471e187c290db49dc56341285ba9678d18377fd935c9b2f1ea9643ba8b5f55414dde7c500f1e4f94db48991770bf69ce57b4fdecab8274196cbf0a99e469c420f0093997df9ebf5268ef67a197834eecbec3ec2a20b7862568a1ad5be947653713770d57d7b065c0c307e54bbdda454c5b9b1f6d1834518e550cf", 0x87}], 0x8, r2) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:05 executing program 1 (fault-call:3 fault-nth:18): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) [ 263.185674] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 263.192933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 263.200186] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 263.207451] 9pnet: Couldn't grow tag array 01:37:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r3 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r4 = gettid() r5 = gettid() r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r8 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000000)) gettid() gettid() syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r6, &(0x7f0000000180)={r8}) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r6}, "23d99bf56a8a23ece683e0fcd3615fd3a929c514252166061adb98524be465e69e6aee0e0d8b9abfbd30209902528029db6675a455d1615863f1879d0ce3cbc259fa8f0d227a92e5ff72cdc194853029667666f657dddc05417a6ee84233f35d2794b620f24a36ee8cb5a12d54bf92fba0ef6f0f0bd1d097c2227abfe257fd887bf46693d0886db55da6767cfa45792d8118d01f0383635f29c989eee0d853d713802f38e25e5baaba477662d95450ed109974135fd522cdbf53b0caa0f87483df11c8f93b2e0ed5ee9145db67190facf4b2c80e8969ef5f1537b8e07c20180739b5837b7b424e86a89f22276947bd028bde5ef8c86c311244333f9faac0b1266250bb60d633e1bc2450cab5e638ce1ba8cb40ec1ad2d58e690f9bcaa7ec650fc2daeb46a341101da3819eab3c1d68720654924089c936bdd8cebf3dee3a06b541db068a8474b18ef02c3be09448929931898d5268f8923ca4ed8ba80b4ae2741d8dc59f71ae2fb346c48ee78158c8957ff5d8defa554b67310f0d1363205a852f0d18895f813bad86fa6b445afae8f89b2497cacfd586f28252225969b46619c76c72176cc638c6602663a3675b738bb06d9f47ce45d2753af4c2091f542381b1b17d8eb0dfdc74891cba7aab324725addf83ada1436ea09fc7863b0ec6de11e565363603c7ff1a32ff49d399ff3e9377109cfc572a3fe8a769f544785924ada695674a72001df34c4bb8f90481624956646fa4abb3eb6d595f4055bab336330e17096c338b2e32a153a4802b2be51bc6ed8758a1d249375fd2959aae37e503d18409512a2412bb218e0f6508ee50a6136eb785fa933ec0cda8a77ad9a48cb673cc7ff7dd8be578c084ea5e0a6a1e8c9ee2a1ebc0d8b44a8fdf16dacbe73e67ff6d04e6699414089751a81065e44a36eca4b26d5bc0d99f9f0e97772826bc42f22b31b94561ba85644f13b7df9adecd8f2d63caf448cc7a40cf0fa6d65bb99a1f668e919204345f2bdc2116c9b24fc47021c1886080779f9604dc9cd1a9bbc31a147353350ef9cc461643818087f35f29b6843ab9672729e4bbed29abedd75113a7487e5bb3d5fa301ecbce98c84634471ba8c61f95cddd47fd1659f17804425a1f5eaad2ba88daff9f3ba76fca602ae6d62592d623eb43695a3320a144321ed04968029bef59f1d782f9fee16b3a71e1307dd1bd5c3757ee612eba25ba14b2f7cecf8db9db4f6210975e8eb2a8bf3581b4b99acab21a4e875b4f914a6f7ae0668929452cd0f658cb2e8a53f7345945bc92ae8eaf9f52ecd6568f964a6b998c11f22f37e10c4fcaccdaee2cbfbabfeecc7f7d9ab1d79e5e73f0f81e01c10efb5b55cdd47824fc133ecfb690fe9ff03890f84488e6dd6c666e38ef843724387fd189aa20099c2efd9a01493696baa157e7b1df4228bc007c1f696fad36e7a1bbcc9ccef000f22e874f475f54851f7887bfb2ef16c42d280feef227eb23bc4af7e5c4aa59a6fc0957fa0178c28c399eb222decdffee415a27a186db496e4ddc46901d0c295ad53e1d42b22ecd20dfd7aa2e6d46c02ddbd8005bccc672580618e006487af0d2db4f83a2a75a323b88046b1766737b40a449a9c251ed1841e9dccd4c8b20ec25f8e5bba12cdc7bbd308b40cdede2ca187608552a60c8388bdd372bcac5e3d9b3c25b747ae6bc97849b12adfbc87829ca1fcc1c727454c8d04c7133bb4b775a25964f5ee35d4e0289204dacdefd408dad2c6e8cf255a982773d06f0a695deae1dfae604b817495469825a242484f605e1e23bce0b3179715c53fd9382196b24a4e34165cc32204e4714b430e82f66c339cd6c6e575eee36af3eba98ee4d44811bf98d53ec1009f09e7380ba18a74c0ada1d9b9f5bd69e496b47fdb8c69532030ee80ea03de5075bd062ac06fd1457c69182fe22d92fdcdabaf731eb5176eca17302d5081e279b5f3a9e3a5ffcaf0f9a859fb99681b9004caa3fca5e8b75114635c97e4948fdf95ce3a214c2a4721ef60f113c4e16d54d7dbfef4e5c8a36f07db97168e0d7245eaaa3c54e195b4897a135ea194ad5a8a0e252994e0a7cca5631051a82ddb4d00207709081f3e774e5410d3fe5d7ba33ef99720400b43507426d5ea38539ba7da9a1b6d182c38254238d4d6fe7bc5b47ad94c0020e6b1753bbd81230ad08a8fa5d392c1c41c91300b31dfc4242b555c4512210550f0f86b504dfe736e0ab3e0deeedd5a0764b9032d62b5f875ffc8bdb954015d6f25244c3c755a6091b35a1a40d35040c9ee46aa5d85bbf0e642d0aac923d43711d78a2cb0558b9bf0a4d69398461f9327ef19e408db0cf9b12c3fa4613bf1b84962024a608b5968ef7b398f97c8d8648f2ec3d5875008790f020cf234667a9bfe9a4e0b09c79cc4d2f7f0144a26d5d979a7dc9d0f61d599272c4ad9e96b6b0bca65561d6386a7d856ebcf230dbdb6a56056570ef4696d54fc3452ea1e944f14c5dcd7e07600b3af2fb870496aeaccafd45cea118d15be467f9af9a83b5347eeefc4c89662dd650a9e362a217df322fd3b009348f7c86f8de4c1f7cfdc22e859d4ffd148a5bd9b44ca02612a4c7db425e02ed0cc743b10c56c2d300e890662adc901de06fe1f325468b1713d530fec36ffb16d63ac9a838e1d727671a16698801a021fed5ca7c3e017430602afbd952f7a205a8098e3f25252d61ab586f34a0b3cb6c3ee3c2a8aa5ceefed40337b1329b3fafc770b0e2d3322e528a3643e7d48301b8826f5c83e995312e05d77f17c955c5e7b937772dfbca6f08afdd1e5c648e82ebf4b57269202e9b91eb48fdd155eb1ca2047170bd09361cef75f37d851b35b590db82367c6054980c4227fdcce6050f02409cfe701c7740125c51146e9c1859d00492968bcc4d47d1d4f92e59f9cd075894210763c169f4b90b42f931cb7edd2cd48ac082a07abc00f07e0432be06913671facc681999235b59013e3ae0431238f54f35a25591907d50a9894637ad9f127104fd2f630d02e65ec169f001d1db126a9212dbd8e6ea7f21c4534285cacab421b1f2c6be81b6caf5b14d0b2f620729bbace8767606d06c6f9a4545d416fe5b9f150e223009597ad969444c8725ed83728ec656ecef67d0f7976b47f473686b5e5bcb1b924ec33bdb9715c289e6ce68b3bf8f30ec0518d942333f188fe37f212b8166410532f295d8fe081856eb0b40480d27064c01eab4e9f18003ce0d22f2e95183bd0c50746830898fa68cd0aaefb2dd15cabe4bf64157ffbe7105369623a1fbafef1d3f11f46f6bb0de16a022692ecd8b84e82f25e6e9e61e6387d0e34e1c1a2195d164c0eaa2d9c3f67f1cd40f3ed205075b152128f108ae08382611b450c6aa19094e402a0006de083534fa28789fda4dd8466fa4fd3df398c3b1db0fa1e6190bba2505667ce4f2d8e0d4c7df3f7c8aa6125fa7c96ebd8d9069315014f0ff5ef4cc39d9d154ff0170226433dfca80083368bb206c4f0a6708bb823cc3be3b37ff38c316ceeb0d01f3499494664029d70a1d077e2366d67167ba2cec767142ffb5551a67c432b167dfcc5a50be04ed2a109df331c6990faf3bb4969bd2b1f8f0fa397a5375ea2cd95487cfc6a46245d56c533d7f793fafa158fc52b76426290a11942e54a51f765b23ff88218ad81365d01db9d1fc3d6c3c05ca324227da9f8a95bb041f9bd9666b39993c61bfd0539781ea6a7103129fa6a9fc8e1e14ac3c43227e9c277d7906764a2192f61646e6527766501f15232f60d7d53c8c8f4a80039bb6cc007ae7f76ebf16a1deaf996269ba857626f6e58116b1df710b39da0be5a34036ba01cbadf76ed37c69456325a1b3855cb62a7ade46381dc277a5e3c7b06b416aa27f2eb8fa68d99695a656d11710e5224238933f4f86be1448b51733ef968bd3d174d4b3e2a0c9c155a82359b875bb2687d65e78f73cf6cab6efd3120f5a19f66e0b2fde5c3760a11a0e60774edce9a04b4b0c5674cdc7ef3a24002e6167ba17795a1154722a3fcbba6b24b659f716ad0896d95f8eea077fa94c0c3f546b02104ea9fb458592f1d5738a3501a6d796a5b9098d596a3947bb2f4a115311a3d25ed2a18ca146337aa67dd0f2c106016e74de7e7c38787c80b7b59712f6d570b778458f80d30e7678f7a5bb5cd504eccbdcb3e960055af690faeffbcabaf83a1e4661c8d0a87796cdb380490be01240b8615eac0979b52f94e530b90c0e3faa02c687b73159e67b6d18ebef45bd1588b2b00ea0bc2251be1ab4a6368d6fdcd236eb88bf1c8617305b86f38731a2d902f5339d403162434cd219d546a7814e85ae95f8dcd560e819a02aaa8170db4677163a63bd1597e617ba9d65d84a9877879f006f36590d49bd625b557b4ed7387e6e393adf3182bc2d562c422cad236caf127e713a48413f5a45573dad3a364ff25e34d6e8b8ab8039288ca7248325fbdf51e91ba33566aef1090d609290e6c064e151d811512dfa4385320ba4fafdd29b30c21afdf5d85b7804a2428eaa78c6f329887583fcbcd8d8a9ba1f805ae76abff0eb778c50cc3ef432f2babf4e613be2a48f49746877527424ebc82c864e0291dce0ded8b280c3d7c18afc779f5e85a6fb22dbaae69131bbb8f9a735704859cb55b22bf5972be1685ff9643f99f62962495ce16e403337f7a167bfce9317461939b03468ed28d017c83c5f396b4935d3e165bf73ba1c9806dc17cf8d48204787e1b8b9917610ffc0ae4f44bbaa61a85ca9e2390375a89408d2ab116cae3e6ec3513fad0f93142386eeacd56585659927d69954d0b23f7d3525fb4710c0499169e9cd4006c714e2e1db429a089cd202e57f9d3527f9a93376e0433260c0f14d7a7c5aacea66c4583a0f3f9d2f5b53f4e9483859f45d84c362f7adef4ecdffe3c903783170c8814fcaad1c45548100be0065aaf404e5ba0685af623ccb135f050d417731d615afaacc1aa1bcbaee8d507005ba5f5b102bfc448e76210e6d75ce3c1e41b15c7df507a9b35db4030a743425a8089c8bfbf22172634ef42ff9913148a8aa25b216b8c904aa21b1cbaea657fe7b985c3de1a35864fcf9f56b47abf3379a681df1cca197061ec707154b5ea9f938f05876b4c8ce1a755486d12b8733de4832a1568a8dd8f08ec632430f884064f6ef80df71d660f69fc4f27de7d4ea48bcce752a309b591e5fcf7cb8ec06c1a7a44c8b559dae2c9d7f401be5a01359a2e6efd38e35436796d235bf8038f86fbcb3b63ade6d23f1af67516c4a53c7030767ba73a1369cde08ba345b29851df142fdda60ea1b49bb78575441c97a7ddf10ea804e2a6b93ab0f9310f4cdb1d3c4e65f1989820310f22fff2646b6b7c028813320b854336ba300e7d005cc873368f8c593c4ad1856cdb163d3dd0eeb743425111f94ec573ae654641d0e43903573d6d7f21e8e29692ceef0724e371ab03733df5a700fbea57a19eff87095c9cd51ef5a75130482fd5d4fffc6fc775ea529ffac63e6efa195302e13d9941fc854e97c3b29a0e18ac1847a574d94c65a55a27a142b576d0742ed2932fffe5ec61ca8ccae7c413046c9a235352f5dc5d8338da3605dde01669d6edbecc3fcc646496f028420f24937ca4c3941e3a26dbea6bcc1fc61c5cdf290a9df5b3cb7f1b0edeed9a1bc8a26e0b3d1040301451b731787da0f3ee028fffe2b96bbf25ddd9b7d635fad1fa848d39f098c53c570b4beff4e40410b04f0465c4a026f9c56a10aacaa71ba8c1515d8f6ce9aaed61fd2cb6afd6b70f6048d"}) r9 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000000)={0x3, 'wg2\x00', {0xfb5}, 0x1}) [ 263.267576] FAULT_INJECTION: forcing a failure. [ 263.267576] name failslab, interval 1, probability 0, space 0, times 0 [ 263.278794] CPU: 0 PID: 15476 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 263.287366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.296715] Call Trace: [ 263.299307] dump_stack+0x1b2/0x283 [ 263.302935] should_fail.cold+0x10a/0x154 [ 263.307083] should_failslab+0xd6/0x130 [ 263.311058] kmem_cache_alloc_trace+0x47/0x3d0 [ 263.315647] p9_client_prepare_req.part.0+0x4ea/0xb60 [ 263.320843] p9_client_rpc+0x170/0x1520 [ 263.324830] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 263.329843] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 263.335208] ? p9_pollwait+0x18e/0x1f0 [ 263.339124] ? p9_conn_create+0x4b0/0x4b0 [ 263.343309] ? pipe_poll+0x24f/0x2c0 [ 263.347023] ? p9_fd_poll+0x237/0x2e0 [ 263.350822] ? p9_conn_create+0x3aa/0x4b0 [ 263.354971] ? p9_fd_create+0x293/0x3b0 [ 263.358945] ? p9_fd_create_tcp+0x440/0x440 [ 263.363272] p9_client_create+0x92f/0x12c0 [ 263.367510] ? p9_client_flush+0x4c0/0x4c0 [ 263.372008] ? __lockdep_init_map+0x100/0x560 [ 263.376501] ? __raw_spin_lock_init+0x28/0x100 [ 263.381086] v9fs_session_init+0x1c5/0x1540 [ 263.385407] ? pcpu_alloc+0xbe0/0xf50 [ 263.389210] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 263.394056] ? v9fs_show_options+0x6b0/0x6b0 [ 263.398467] ? v9fs_mount+0x54/0x860 [ 263.402181] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 263.407632] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 263.412653] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 263.417499] v9fs_mount+0x73/0x860 [ 263.421032] ? alloc_pages_current+0x15d/0x260 [ 263.425600] ? __lockdep_init_map+0x100/0x560 [ 263.430083] mount_fs+0x92/0x2a0 [ 263.433441] vfs_kern_mount.part.0+0x5b/0x470 [ 263.437948] do_mount+0xe53/0x2a00 [ 263.441471] ? copy_mount_string+0x40/0x40 [ 263.445715] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 263.450737] ? copy_mnt_ns+0xa30/0xa30 [ 263.455217] ? copy_mount_options+0x1fa/0x2f0 [ 263.459704] ? copy_mnt_ns+0xa30/0xa30 [ 263.463597] SyS_mount+0xa8/0x120 [ 263.467044] ? copy_mnt_ns+0xa30/0xa30 [ 263.470920] do_syscall_64+0x1d5/0x640 [ 263.474800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 263.479986] RIP: 0033:0x45deb9 [ 263.483183] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.490878] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 263.498140] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 263.505392] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 01:37:05 executing program 5: setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0xc) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:05 executing program 1 (fault-call:3 fault-nth:19): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:05 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000000c0), &(0x7f00000003c0)=0x4) syz_mount_image$udf(&(0x7f0000000040)='udf\x00', &(0x7f0000000080)='./file0\x00', 0xff, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000140)="abf8d837dd279ea3eb88cd28176ce9051fca96cd292d042fd9a0a241b59d66c723844aec7e65cb3cf2db7a7228b8c086ae7b21c0041f41fbe49b4a2e4c9739a4909f2eab9e9c83a72fbfa570b1341a4f5803979fe54b04c69dcbb280cab17fc42f1281f89fef646fb606b94505cbe53ef9fa51d6fb191f3a3413333da4d78d02d36ebce7f6288b503f575599f51f3f0088115792ddd7cbbd4ac29b0d611d6aa604b2f393eece09b3c423aedb64935f18fdc8ece7abb0", 0xb6}, {&(0x7f00000000c0), 0x0, 0x100}, {&(0x7f0000000240)="c92a2df45dc0da64d773f8b92b809b8d6671274c1436a62f6200b214b2fca517e448e0467524c7b05fbfa998c0f459f86174cf655dc493181795ef5d7965942eed5ad7b00fb6e720241aa42f3a8b", 0x4e, 0x9}], 0x80040, &(0x7f0000000340)={[{@uid_forget='uid=forget'}, {@gid_ignore='gid=ignore'}, {@anchor={'anchor', 0x3d, 0x200}}], [{@appraise='appraise'}, {@smackfsdef={'smackfsdef', 0x3d, 'posixacl'}}]}) r0 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 263.512660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 263.520013] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 263.527279] 9pnet: Couldn't grow tag array [ 263.576390] FAULT_INJECTION: forcing a failure. [ 263.576390] name failslab, interval 1, probability 0, space 0, times 0 [ 263.608298] CPU: 0 PID: 15496 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 263.616213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.625565] Call Trace: [ 263.628165] dump_stack+0x1b2/0x283 [ 263.631799] should_fail.cold+0x10a/0x154 [ 263.635954] should_failslab+0xd6/0x130 [ 263.639933] kmem_cache_alloc_trace+0x29a/0x3d0 [ 263.644608] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 263.649841] p9_client_rpc+0x170/0x1520 [ 263.653852] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 263.658872] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 263.664240] ? p9_pollwait+0x18e/0x1f0 [ 263.668135] ? p9_conn_create+0x4b0/0x4b0 [ 263.672288] ? pipe_poll+0x24f/0x2c0 [ 263.676018] ? p9_fd_poll+0x237/0x2e0 [ 263.679823] ? p9_conn_create+0x3aa/0x4b0 [ 263.683972] ? p9_fd_create+0x293/0x3b0 [ 263.687947] ? p9_fd_create_tcp+0x440/0x440 [ 263.692286] p9_client_create+0x92f/0x12c0 [ 263.696526] ? p9_client_flush+0x4c0/0x4c0 [ 263.700764] ? __lockdep_init_map+0x100/0x560 [ 263.705267] ? __raw_spin_lock_init+0x28/0x100 [ 263.709855] v9fs_session_init+0x1c5/0x1540 [ 263.714215] ? pcpu_alloc+0xbe0/0xf50 [ 263.718021] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 263.722871] ? v9fs_show_options+0x6b0/0x6b0 [ 263.727288] ? v9fs_mount+0x54/0x860 [ 263.731006] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 263.736466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 263.741475] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 263.746317] v9fs_mount+0x73/0x860 [ 263.749855] ? alloc_pages_current+0x15d/0x260 [ 263.754434] ? __lockdep_init_map+0x100/0x560 [ 263.758940] mount_fs+0x92/0x2a0 [ 263.762319] vfs_kern_mount.part.0+0x5b/0x470 [ 263.766839] do_mount+0xe53/0x2a00 [ 263.770385] ? copy_mount_string+0x40/0x40 [ 263.774618] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 263.779641] ? copy_mnt_ns+0xa30/0xa30 [ 263.783530] ? copy_mount_options+0x1fa/0x2f0 [ 263.788027] ? copy_mnt_ns+0xa30/0xa30 [ 263.791921] SyS_mount+0xa8/0x120 [ 263.795371] ? copy_mnt_ns+0xa30/0xa30 [ 263.799262] do_syscall_64+0x1d5/0x640 [ 263.803178] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 263.808362] RIP: 0033:0x45deb9 [ 263.811532] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.819219] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 263.826472] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 263.833730] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 263.841002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 263.848252] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 263.858267] 9pnet: Couldn't grow tag array [ 263.879553] 9pnet: Insufficient options for proto=fd [ 263.925689] 9pnet: Insufficient options for proto=fd 01:37:08 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22a", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x7, 0x4f, 0x65aa, 0x43, @empty, @loopback, 0x1, 0x1, 0x8, 0x7f}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x1, 0x8000, 0x40, 0x800, {{0x1a, 0x4, 0x2, 0x6, 0x68, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@end, @timestamp={0x44, 0x10, 0x68, 0x0, 0x8, [0x7, 0xe3a6, 0x20]}, @rr={0x7, 0x27, 0x81, [@local, @local, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1b, 0x41, [@local, @local, @local, @multicast2, @broadcast, @private=0xa010101]}]}}}}}) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:08 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) socketpair(0x1f, 0x3, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 01:37:08 executing program 1 (fault-call:3 fault-nth:20): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:08 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6b3c32fb2c7ca87f4b332dc55681ac677ac8feff14b73ef7ede6fdb3d7ee0dfd3d18b484861841deaaa0862d116e7f0ef53e3a4a5b45ad0b628a3fd304a2202368591cb979244c6c2977da10341edddd3aa4951fbe54"]) [ 266.007915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.011981] FAULT_INJECTION: forcing a failure. [ 266.011981] name failslab, interval 1, probability 0, space 0, times 0 [ 266.033558] CPU: 0 PID: 15541 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 266.041446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.050797] Call Trace: [ 266.053387] dump_stack+0x1b2/0x283 [ 266.057061] should_fail.cold+0x10a/0x154 [ 266.061341] should_failslab+0xd6/0x130 [ 266.065305] kmem_cache_alloc_trace+0x29a/0x3d0 [ 266.069972] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 266.075146] p9_client_rpc+0x170/0x1520 [ 266.079101] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 266.084116] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 266.089477] ? p9_pollwait+0x18e/0x1f0 [ 266.093350] ? p9_conn_create+0x4b0/0x4b0 [ 266.097756] ? pipe_poll+0x24f/0x2c0 [ 266.101469] ? p9_fd_poll+0x237/0x2e0 [ 266.105269] ? p9_conn_create+0x3aa/0x4b0 [ 266.109419] ? p9_fd_create+0x293/0x3b0 [ 266.113383] ? p9_fd_create_tcp+0x440/0x440 [ 266.117686] p9_client_create+0x92f/0x12c0 [ 266.121905] ? p9_client_flush+0x4c0/0x4c0 [ 266.126126] ? __lockdep_init_map+0x100/0x560 [ 266.130600] ? __raw_spin_lock_init+0x28/0x100 [ 266.135164] v9fs_session_init+0x1c5/0x1540 [ 266.139477] ? pcpu_alloc+0xbe0/0xf50 [ 266.143294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 266.148119] ? v9fs_show_options+0x6b0/0x6b0 [ 266.152512] ? v9fs_mount+0x54/0x860 [ 266.156226] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 266.161676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 266.166694] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 266.171532] v9fs_mount+0x73/0x860 [ 266.175051] ? alloc_pages_current+0x15d/0x260 [ 266.179626] ? __lockdep_init_map+0x100/0x560 [ 266.184115] mount_fs+0x92/0x2a0 [ 266.187473] vfs_kern_mount.part.0+0x5b/0x470 [ 266.191954] do_mount+0xe53/0x2a00 [ 266.195476] ? copy_mount_string+0x40/0x40 [ 266.199698] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 266.204710] ? copy_mnt_ns+0xa30/0xa30 [ 266.208586] ? copy_mount_options+0x1fa/0x2f0 [ 266.213078] ? copy_mnt_ns+0xa30/0xa30 [ 266.216962] SyS_mount+0xa8/0x120 [ 266.220405] ? copy_mnt_ns+0xa30/0xa30 [ 266.224289] do_syscall_64+0x1d5/0x640 [ 266.228190] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 266.233356] RIP: 0033:0x45deb9 [ 266.236536] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.245131] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 01:37:08 executing program 1 (fault-call:3 fault-nth:21): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) [ 266.252378] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 266.259629] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 266.266966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 266.274218] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 266.285071] 9pnet: Couldn't grow tag array 01:37:08 executing program 3: unshare(0x20000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r2 = epoll_create(0x10000) r3 = gettid() r4 = gettid() r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000180)={r2}) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'veth1_to_hsr\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f0000000080)={0xfffffffd, 0x8, 0x8}}}}) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)=""/54) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000001c0)={0x3f10, 0x0, 0x2}) 01:37:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:08 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = dup(r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x12100, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, &(0x7f0000000300)) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',posil,dfltuid=\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',k']) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x131a00, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000004c0)="492d7cf750d00c1142722e6f71830deb54fe3f16243be0f00dd1d4a70cd6ccd1b5df1b5c1facd79b894d9d20cca7cfc833a0f4438e6178b08125739ff945c04d50a286b87c575a32359680e7de711c834fc779463686d3494e5644181c1685a9b5172941ace4111f7537b7d1b6e6a2aa81b3e6383611d75034ab21d514", 0x7d) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x71, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000340)={r7, 0x7, 0x3000, 0x6, 0xfffffffe, 0x21f4}, 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x80000000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x78}}, 0x1, 0x7}, &(0x7f0000000280)=0x90) [ 266.400903] FAULT_INJECTION: forcing a failure. [ 266.400903] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.412730] CPU: 1 PID: 15567 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 266.421303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.428516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.430648] Call Trace: [ 266.430667] dump_stack+0x1b2/0x283 [ 266.430682] should_fail.cold+0x10a/0x154 01:37:08 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="2cb600f4", @ANYRES32=0x0], &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x71, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x9903, 0x0, 0x3, 0xfffffff7, 0x10001}, 0x14) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r5, &(0x7f0000000180)=0x4) [ 266.430693] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 266.430706] __alloc_pages_nodemask+0x22c/0x2720 [ 266.459714] ? depot_save_stack+0x10d/0x3e3 [ 266.464043] ? kasan_kmalloc+0xeb/0x160 [ 266.468023] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 266.472879] ? p9_client_prepare_req.part.0+0x8ce/0xb60 [ 266.478271] ? p9_client_rpc+0x170/0x1520 [ 266.482422] ? p9_client_create+0x92f/0x12c0 [ 266.486831] ? v9fs_session_init+0x1c5/0x1540 [ 266.491325] ? v9fs_mount+0x73/0x860 [ 266.495043] ? mount_fs+0x92/0x2a0 [ 266.498584] ? vfs_kern_mount.part.0+0x5b/0x470 [ 266.503261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 266.508105] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 266.513468] ? static_obj+0x50/0x50 [ 266.517103] ? trace_hardirqs_on+0x10/0x10 [ 266.521340] ? cache_alloc_refill+0x1da/0x350 [ 266.525843] cache_grow_begin+0x8f/0x420 [ 266.529912] cache_alloc_refill+0x273/0x350 [ 266.534247] __kmalloc+0x378/0x400 [ 266.537790] ? p9_fcall_alloc+0x19/0x90 [ 266.541761] p9_fcall_alloc+0x19/0x90 [ 266.545568] p9_client_prepare_req.part.0+0x86c/0xb60 [ 266.550767] p9_client_rpc+0x170/0x1520 [ 266.554750] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 266.559773] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 266.565143] ? p9_pollwait+0x18e/0x1f0 [ 266.569037] ? p9_conn_create+0x4b0/0x4b0 [ 266.573282] ? pipe_poll+0x24f/0x2c0 [ 266.576996] ? p9_fd_poll+0x237/0x2e0 [ 266.580815] ? p9_conn_create+0x3aa/0x4b0 [ 266.584966] ? p9_fd_create+0x293/0x3b0 [ 266.588937] ? p9_fd_create_tcp+0x440/0x440 [ 266.593271] p9_client_create+0x92f/0x12c0 [ 266.597508] ? p9_client_flush+0x4c0/0x4c0 [ 266.601747] ? __lockdep_init_map+0x100/0x560 [ 266.606256] ? __raw_spin_lock_init+0x28/0x100 [ 266.610839] v9fs_session_init+0x1c5/0x1540 [ 266.615163] ? pcpu_alloc+0xbe0/0xf50 [ 266.618967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 266.623809] ? v9fs_show_options+0x6b0/0x6b0 [ 266.628318] ? v9fs_mount+0x54/0x860 [ 266.632035] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 266.637483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 266.642499] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 266.647347] v9fs_mount+0x73/0x860 [ 266.651899] ? alloc_pages_current+0x15d/0x260 [ 266.656504] ? __lockdep_init_map+0x100/0x560 [ 266.661022] mount_fs+0x92/0x2a0 [ 266.664399] vfs_kern_mount.part.0+0x5b/0x470 [ 266.668899] do_mount+0xe53/0x2a00 [ 266.672449] ? copy_mount_string+0x40/0x40 [ 266.676691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 266.681707] ? copy_mnt_ns+0xa30/0xa30 [ 266.685594] ? copy_mount_options+0x1fa/0x2f0 [ 266.690092] ? copy_mnt_ns+0xa30/0xa30 [ 266.693981] SyS_mount+0xa8/0x120 [ 266.697431] ? copy_mnt_ns+0xa30/0xa30 [ 266.701321] do_syscall_64+0x1d5/0x640 [ 266.705221] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 266.710427] RIP: 0033:0x45deb9 [ 266.713612] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.721336] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 266.728597] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 266.735861] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 266.743123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 266.750396] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:08 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x2) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'security.', '/dev/input/event#\x00'}, &(0x7f00000000c0)='!/&\\\x00', 0x5, 0x3) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:11 executing program 1 (fault-call:3 fault-nth:22): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:11 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22a", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x272881) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000040)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) setuid(r6) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000080)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x401, 0x4e20, 0x804, 0xa, 0x80, 0xa0, 0x3b, 0x0, r6}, {0x0, 0x9, 0x1, 0x100000001, 0x2, 0x401, 0x8, 0xffffffff}, {0xbad, 0x8000, 0x5}, 0x4, 0x6e6bba, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x1e}, 0x4d4, 0xff}, 0x2, @in=@private=0xa010102, 0x3507, 0x0, 0x1, 0xb, 0x4, 0x5, 0x100}}, 0xe8) 01:37:11 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) removexattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@random={'btrfs.', '9p\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c706fd0327861636c2c6a6607000000643d", @ANYRESHEX=0x0, @ANYBLOB=',k']) 01:37:11 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 269.027308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.044277] FAULT_INJECTION: forcing a failure. [ 269.044277] name failslab, interval 1, probability 0, space 0, times 0 [ 269.079939] CPU: 0 PID: 15626 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 269.087840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.097192] Call Trace: [ 269.099769] dump_stack+0x1b2/0x283 [ 269.103395] should_fail.cold+0x10a/0x154 [ 269.107620] should_failslab+0xd6/0x130 [ 269.111583] __kmalloc+0x2c1/0x400 [ 269.115148] ? p9pdu_readf+0x345/0x1970 [ 269.119129] p9pdu_readf+0x345/0x1970 [ 269.122917] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 269.128815] ? p9pdu_writef+0xd0/0xd0 [ 269.132613] ? p9_fd_poll+0x237/0x2e0 [ 269.136407] ? p9_fd_create+0x293/0x3b0 [ 269.140369] ? p9_fd_create_tcp+0x440/0x440 [ 269.144679] p9_client_create+0x9b2/0x12c0 [ 269.148908] ? p9_client_flush+0x4c0/0x4c0 [ 269.153132] ? __lockdep_init_map+0x100/0x560 [ 269.157635] ? __raw_spin_lock_init+0x28/0x100 [ 269.162245] v9fs_session_init+0x1c5/0x1540 [ 269.166553] ? pcpu_alloc+0xbe0/0xf50 [ 269.170342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 269.175183] ? v9fs_show_options+0x6b0/0x6b0 [ 269.179580] ? v9fs_mount+0x54/0x860 [ 269.183285] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 269.188722] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 269.193727] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 269.198577] v9fs_mount+0x73/0x860 [ 269.202362] ? alloc_pages_current+0x15d/0x260 [ 269.206928] ? __lockdep_init_map+0x100/0x560 [ 269.211450] mount_fs+0x92/0x2a0 [ 269.214816] vfs_kern_mount.part.0+0x5b/0x470 [ 269.219298] do_mount+0xe53/0x2a00 [ 269.222832] ? assoc_array_gc+0x1051/0x1110 [ 269.227196] ? retint_kernel+0x2d/0x2d [ 269.231078] ? copy_mount_string+0x40/0x40 [ 269.235313] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 269.240149] ? copy_mount_options+0x1fa/0x2f0 [ 269.244664] ? copy_mnt_ns+0xa30/0xa30 [ 269.248541] SyS_mount+0xa8/0x120 [ 269.251987] ? copy_mnt_ns+0xa30/0xa30 [ 269.255872] do_syscall_64+0x1d5/0x640 [ 269.259751] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 269.264927] RIP: 0033:0x45deb9 [ 269.268108] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.276507] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 269.283765] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 269.291042] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 269.298298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 269.305553] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:11 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) sendto$inet(r2, &(0x7f0000000040)="7598590f4089e0996cc1ab0f651c844b3b79aa2b1919bc3bc2d5eff070d06fe1d33a0fa0c2934fc02a3293cf03614eb4fa1997df61b0bb0714f513d68f02a894", 0x40, 0x40080, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f00000001c0)='wfdno', 0x5) 01:37:11 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:11 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xa, 0x24ec0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x3d, 0x0, "1ad899a0c08975391501d5c34e815618b5c67ff0ba601b3a650dc1ce60609cae6b5e81b41855fb450633ec89d9b0f5212244445965cfe38d67e1ed1ce5f8920eeb474b24ba15653097d57402d5f90136"}, 0xd8) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000180)=""/103) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 01:37:11 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200900, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:11 executing program 3: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x1f, 0x401, 0xe60e00, 0x8001, 0x5}) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:11 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600080, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/169) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGPROP(r2, 0x400445a0, 0x0) 01:37:11 executing program 1 (fault-call:3 fault-nth:23): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 269.611285] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.628011] FAULT_INJECTION: forcing a failure. [ 269.628011] name failslab, interval 1, probability 0, space 0, times 0 [ 269.660884] CPU: 1 PID: 15683 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 269.668786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.678139] Call Trace: [ 269.680760] dump_stack+0x1b2/0x283 [ 269.684392] should_fail.cold+0x10a/0x154 [ 269.688543] should_failslab+0xd6/0x130 [ 269.692522] __kmalloc+0x2c1/0x400 [ 269.696063] ? p9_fcall_alloc+0x19/0x90 [ 269.700044] p9_fcall_alloc+0x19/0x90 [ 269.703882] p9_client_prepare_req.part.0+0x7f8/0xb60 [ 269.709082] p9_client_rpc+0x170/0x1520 [ 269.713064] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 269.718080] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 269.723443] ? p9_pollwait+0x18e/0x1f0 [ 269.727349] ? p9_conn_create+0x4b0/0x4b0 [ 269.731498] ? pipe_poll+0x24f/0x2c0 [ 269.735216] ? p9_fd_poll+0x237/0x2e0 [ 269.739011] ? p9_conn_create+0x3aa/0x4b0 [ 269.743147] ? p9_fd_create+0x293/0x3b0 [ 269.747156] ? p9_fd_create_tcp+0x440/0x440 [ 269.751461] p9_client_create+0x92f/0x12c0 [ 269.755685] ? p9_client_flush+0x4c0/0x4c0 [ 269.759903] ? __lockdep_init_map+0x100/0x560 [ 269.764389] ? __raw_spin_lock_init+0x28/0x100 [ 269.768989] v9fs_session_init+0x1c5/0x1540 [ 269.773304] ? pcpu_alloc+0xbe0/0xf50 [ 269.777099] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 269.781934] ? v9fs_show_options+0x6b0/0x6b0 [ 269.786342] ? v9fs_mount+0x54/0x860 [ 269.790051] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 269.795482] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 269.800480] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 269.805330] v9fs_mount+0x73/0x860 [ 269.808878] ? alloc_pages_current+0x15d/0x260 [ 269.813461] ? __lockdep_init_map+0x100/0x560 [ 269.817989] mount_fs+0x92/0x2a0 [ 269.821340] vfs_kern_mount.part.0+0x5b/0x470 [ 269.828512] do_mount+0xe53/0x2a00 [ 269.832065] ? copy_mount_string+0x40/0x40 [ 269.836297] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 269.841328] ? copy_mnt_ns+0xa30/0xa30 [ 269.845207] ? copy_mount_options+0x1fa/0x2f0 [ 269.849689] ? copy_mnt_ns+0xa30/0xa30 [ 269.853566] SyS_mount+0xa8/0x120 [ 269.857009] ? copy_mnt_ns+0xa30/0xa30 [ 269.860891] do_syscall_64+0x1d5/0x640 [ 269.864790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 269.869988] RIP: 0033:0x45deb9 [ 269.873163] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.880858] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 269.888107] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 269.895354] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 269.903132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 269.911087] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 269.922359] 9pnet: Couldn't grow tag array 01:37:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da", 0x90}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:14 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r4 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = gettid() r6 = gettid() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r4}) r8 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r9 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x1}) r10 = gettid() sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x0, 0x7d61970c94d997f1}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x1c8, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4d6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000000}}, {0x41, 0xb, 0x3}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf89}, {0x6, 0x11, 0x37}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4c}, {0x6, 0x11, 0x2ab}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x7ff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fd}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6c}, {0x6, 0x11, 0x6}}]}, 0x1c8}}, 0x24000000) gettid() r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r10, r6, 0x7, r11, &(0x7f0000000180)={r9}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESHEX=r6, @ANYRESHEX=r9, @ANYBLOB="6f6efd8d0b03308cef261c1f57791741af9b393cb3836dffe29c7f9e2e68997bd714ed2c57580d7072347a54cbbd937f517365c4d1c0b145db3a182d1225ee57c7ccd571172b1ac9d8da5e1c36a09687307a5d87b67702ba8520d07de9def3ead141f39717b1ba2d809f005c28c0ef790b6d9961620e204627bc4b7bcf903870a67a71ab93378f5b35ba9fc0cf13cf2a4baae7951293df99c55a1167fb3e3a9d80"]) 01:37:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'syzkaller1\x00', {0x20}, 0x100}) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:14 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0xf0, 0x0, 0x148, 0xf0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x33, 0x0, 0x64}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@addrtype={{0x0, 'addrtype\x00'}, {0xd82f079bf472783, 0x480, 0x1}}, @common=@unspec=@connlabel={{0x28, 'connlabel\x00'}, {0x8000, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x0, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ip={@multicast2, @empty, 0x0, 0xff, 'ip6erspan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x8}, 0x0, 0x70, 0xfffffffffffffd31}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffd23) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = gettid() r4 = gettid() r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000180)={r2}) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000280)) 01:37:14 executing program 1 (fault-call:3 fault-nth:24): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 272.050815] FAULT_INJECTION: forcing a failure. [ 272.050815] name failslab, interval 1, probability 0, space 0, times 0 [ 272.067566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.085365] CPU: 0 PID: 15713 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 272.094147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.103756] Call Trace: [ 272.106353] dump_stack+0x1b2/0x283 [ 272.110013] should_fail.cold+0x10a/0x154 [ 272.114849] should_failslab+0xd6/0x130 [ 272.118949] __kmalloc+0x2c1/0x400 [ 272.122477] ? p9pdu_readf+0x345/0x1970 [ 272.126471] p9pdu_readf+0x345/0x1970 [ 272.130251] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 272.135605] ? p9pdu_writef+0xd0/0xd0 [ 272.139396] ? p9_fd_poll+0x237/0x2e0 [ 272.143212] ? p9_fd_create+0x293/0x3b0 [ 272.147184] ? p9_fd_create_tcp+0x440/0x440 [ 272.151492] p9_client_create+0x9b2/0x12c0 [ 272.155726] ? p9_client_flush+0x4c0/0x4c0 [ 272.159962] ? __lockdep_init_map+0x100/0x560 [ 272.164439] ? __raw_spin_lock_init+0x28/0x100 [ 272.169022] v9fs_session_init+0x1c5/0x1540 [ 272.173339] ? pcpu_alloc+0xbe0/0xf50 [ 272.177129] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 272.181981] ? v9fs_show_options+0x6b0/0x6b0 [ 272.186373] ? v9fs_mount+0x54/0x860 [ 272.190078] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 272.195518] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 272.200528] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 272.205352] v9fs_mount+0x73/0x860 [ 272.208878] ? alloc_pages_current+0x15d/0x260 [ 272.213447] ? __lockdep_init_map+0x100/0x560 [ 272.217934] mount_fs+0x92/0x2a0 [ 272.221292] vfs_kern_mount.part.0+0x5b/0x470 [ 272.225767] do_mount+0xe53/0x2a00 [ 272.229304] ? copy_mount_string+0x40/0x40 [ 272.233536] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 272.238539] ? copy_mnt_ns+0xa30/0xa30 [ 272.242414] ? copy_mount_options+0x1fa/0x2f0 [ 272.246903] ? copy_mnt_ns+0xa30/0xa30 [ 272.250780] SyS_mount+0xa8/0x120 [ 272.254476] ? copy_mnt_ns+0xa30/0xa30 [ 272.258350] do_syscall_64+0x1d5/0x640 [ 272.262244] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 272.267422] RIP: 0033:0x45deb9 [ 272.270587] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.278291] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 272.285557] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 272.292807] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 01:37:14 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da", 0x90}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 272.300097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 272.307345] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:14 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) kexec_load(0x4, 0x0, &(0x7f00000000c0), 0x80000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x9, 0x2, 0x1, 0x9, 0x16, "1000ec707aae2fb4"}) 01:37:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/148) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:14 executing program 1 (fault-call:3 fault-nth:25): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:14 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x4a, @empty, 0x7}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000000c0)="02c59c2ced21c64a91342961cb0ea02a02fbb9fa1f27ac72812426f13b9e2b293d0d713ef203cc0d0464a1736f1a21", 0x2f}, {&(0x7f0000000140)="5d088d0ecba6ac0a8b8c3744e8222384df57ec896fc4b33219cf44dc219da31bfbec80eb7ec30c5684510c66606318393d5d115b739a99550c1e69f139793730cd97db56032523f024fb6999f93bbd716ab42e02179785753a2caada4e03e5860f3aa86f5861907b8300b6ea05ab61532301954d9f1586390f6382869a5f1c992d", 0x81}, {&(0x7f0000000380)="03202fb0ff541f5ba66187b8d79094862a91368432b0cb5d4507943e51c2422f2d5719e7cbd300ccea714741dbd5df747480125d5d8d1c73c235c4a04056a73daf362bcb7de9b659c5cf16740637fe453f0c34d5a2bc5af9401c9c01a738ac8b502ee30dbb6f1eb5bb3dfe54cb075cbfc5906c89cb68fbc225f8ae6055df1c86a10f4135fd0db7ab6fbb07d2caac3766a05f", 0x92}, {&(0x7f0000000440)}, {&(0x7f0000000480)="009b308ff5f2acc715adfc2715cdb9c9a372f7b2ecf55f3950426684ebda344ff7f3bf87ef91e6b4dfd5bd647cdf84027c646931d927b7702a132f8b1d2099b4b931294f309d4939645c251051a58bd2b6c0873a78", 0x55}, {&(0x7f0000000500)="a4c9747408b44bd3a1acdffafc207694747eb4a91e4d40e6a434c19d1dda6869cda5edf4e3447f2f6103286267edad3ed15d0c953d5848d86902d82717f2178932d1262386646f5117457641572c8786a30b220d7ddb9626e28eac6a3ba82da2c50f4a18715d0d586c1e4505ae0c192508787b29a5f276815a894fbd289bdc1fb75cdc8dd1676f956346248caccb0b1ce553f7bb58ffe833ff37fed9931ae0dbb3d880", 0xa3}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="a4a951963e2095e493ed8de863a516b001ad22922c5db2f0b4882989d842204f80b71f032773eef818c67b692c52e4d3ab93886154222716b6938305a8ae023bc489418802c009ef38408a4112b12822aca2c599cec461dcf5ecc8401b80e537a806da65cf95c589f3cee4", 0x6b}, {&(0x7f0000001640)="0d933addd416b2297fb1e589ff54d1b4ed71d494b80eb2a5bb939b76a82117157ccd11a632f188fd47c582397679e420a04be1058dd8a578a8d91bf9b44f366410e8c0694d333f", 0x47}], 0x9}, 0x840) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x800008, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6163636573733d616e792c64666c747569643d13e48c314a1db7a73499a8fd75ff27de9f23e53edc631e9a628083adce963ba1cdc433442a0f065dc7dbaf151caa4a327a5eb825980c0cbdd093d9a15447025bce0a9e989c504b5b05fa1650b1a72f97a2fa207d090a6fcc76a69a68d6fa885f13eca6df24a2135876ee3a05e226c3386ef4cf4fba276048332027f3a3722b0badaac4acff77ad8be7", @ANYRESHEX=0x0, @ANYBLOB=',k']) 01:37:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:14 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x82041, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e21, 0xfffffffc, @remote, 0xffff}}}, 0x84) r6 = openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 272.446549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:14 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 272.490388] FAULT_INJECTION: forcing a failure. [ 272.490388] name failslab, interval 1, probability 0, space 0, times 0 [ 272.518821] CPU: 1 PID: 15754 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 272.526717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.536068] Call Trace: [ 272.538665] dump_stack+0x1b2/0x283 [ 272.542299] should_fail.cold+0x10a/0x154 [ 272.546471] should_failslab+0xd6/0x130 [ 272.550451] __kmalloc_track_caller+0x2bc/0x400 [ 272.555122] ? v9fs_session_init+0x387/0x1540 [ 272.559650] kstrdup+0x36/0x70 [ 272.562842] v9fs_session_init+0x387/0x1540 [ 272.567170] ? v9fs_show_options+0x6b0/0x6b0 [ 272.571584] ? v9fs_mount+0x54/0x860 [ 272.575301] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 272.580927] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 272.585949] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 272.590804] v9fs_mount+0x73/0x860 [ 272.594344] ? alloc_pages_current+0x15d/0x260 [ 272.598921] ? __lockdep_init_map+0x100/0x560 [ 272.603416] mount_fs+0x92/0x2a0 [ 272.606809] vfs_kern_mount.part.0+0x5b/0x470 [ 272.611306] do_mount+0xe53/0x2a00 [ 272.614854] ? copy_mount_string+0x40/0x40 [ 272.619089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 272.624108] ? copy_mnt_ns+0xa30/0xa30 [ 272.627994] ? copy_mount_options+0x1fa/0x2f0 [ 272.633443] ? copy_mnt_ns+0xa30/0xa30 [ 272.637357] SyS_mount+0xa8/0x120 [ 272.640817] ? copy_mnt_ns+0xa30/0xa30 [ 272.644713] do_syscall_64+0x1d5/0x640 [ 272.648610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 272.653797] RIP: 0033:0x45deb9 [ 272.656978] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 272.664685] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 272.671977] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 272.679274] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 01:37:14 executing program 1 (fault-call:3 fault-nth:26): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) [ 272.686540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 272.693806] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:14 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) write$P9_RREAD(r1, &(0x7f0000000040)={0x8d, 0x75, 0x2, {0x82, "ea486a14779ff56c2d860445efaee4a1892794814ab2b25730246513cba4db13259948131a5931042a6c080a01a9bd166bddb5051a59779fb6319bc46ca6aac647c74186878ea1e4401234120c08cc8dcb19684bbe6eca7bb258b14d846ad43e5befac80578b55a2ad499619c4a90a4a90660d8c4e1f05012ef1e9060884f10dc2fd"}}, 0x8d) 01:37:14 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgroups(0x1, &(0x7f0000000340)=[r1]) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0x78, 0x0, 0x0, {0x1, 0xfff, 0x0, {0x0, 0x8, 0x2a, 0x3, 0x100000001, 0x0, 0x400, 0x1000, 0x6, 0x6000, 0x8, 0xffffffffffffffff, r1, 0x20, 0x2}}}, 0x78) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 272.793754] FAULT_INJECTION: forcing a failure. [ 272.793754] name failslab, interval 1, probability 0, space 0, times 0 [ 272.832142] CPU: 0 PID: 15787 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 272.840033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.848296] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.849899] Call Trace: [ 272.849917] dump_stack+0x1b2/0x283 [ 272.849933] should_fail.cold+0x10a/0x154 [ 272.849950] should_failslab+0xd6/0x130 [ 272.872787] kmem_cache_alloc_trace+0x29a/0x3d0 [ 272.877486] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 272.882691] p9_client_rpc+0x170/0x1520 [ 272.886677] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 272.892046] ? lock_acquire+0x170/0x3f0 [ 272.896021] ? lock_downgrade+0x740/0x740 [ 272.900171] ? lock_acquire+0x170/0x3f0 [ 272.904146] ? lock_downgrade+0x740/0x740 [ 272.908313] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 272.913419] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 272.918438] p9_client_attach+0x137/0x750 [ 272.922585] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 272.928124] ? v9fs_session_init+0xad1/0x1540 [ 272.932618] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 272.937627] v9fs_session_init+0xc03/0x1540 [ 272.941962] ? v9fs_show_options+0x6b0/0x6b0 [ 272.946369] ? v9fs_mount+0x54/0x860 [ 272.950086] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 272.955529] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 272.960547] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 272.965392] v9fs_mount+0x73/0x860 [ 272.968913] ? alloc_pages_current+0x15d/0x260 [ 272.973489] ? __lockdep_init_map+0x100/0x560 [ 272.977981] mount_fs+0x92/0x2a0 [ 272.982115] vfs_kern_mount.part.0+0x5b/0x470 [ 272.986593] do_mount+0xe53/0x2a00 [ 272.990141] ? copy_mount_string+0x40/0x40 [ 272.994364] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 272.999374] ? copy_mnt_ns+0xa30/0xa30 [ 273.003245] ? copy_mount_options+0x1fa/0x2f0 [ 273.007744] ? copy_mnt_ns+0xa30/0xa30 [ 273.011610] SyS_mount+0xa8/0x120 [ 273.015070] ? copy_mnt_ns+0xa30/0xa30 [ 273.018962] do_syscall_64+0x1d5/0x640 [ 273.022848] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 273.028018] RIP: 0033:0x45deb9 [ 273.031195] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.038896] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 273.046148] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 273.053413] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 273.060659] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 273.067918] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 273.078402] 9pnet: Couldn't grow tag array 01:37:17 executing program 1 (fault-call:3 fault-nth:27): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:17 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'/12, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) 01:37:17 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da", 0x90}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x1, @local, 0x900d}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0x1, [0x0]}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x71, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x6, 0xa903, 0x800e, 0x4, 0x7fff, 0x0, 0x7f, 0x8000, r1}, 0x20) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0x1ff) clone(0x6f142080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x0, 0x0, 0x1a0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'veth1_virt_wifi\x00', 'geneve1\x00', {0xff}, {0xff}, 0x0, 0x5, 0x4, 0x59}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b501f9a2298b44f210c9218a41649964b75b1288d5ccdbd446a337e8402a"}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 01:37:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250a0000000c00990004000000570000000800090005ac0f0050005080040005000a000400aa2d99370c49000011000100011860eb70fcbdf87fc44d10fe0000000400050011000100b7507dd889bb2bf94b81959f680000000500020003000000050009000000000009000700d0bab415c600000034005080040005000400060008000700010000000800070002000000040005000500090001000000040006000800030001ac0f0044fdaaae93b2d1df887fabcc4b286a62434b282c35aab9414a221a93420f2c23eeba063c29addb663b055f6cc10700a1b05c9d8ab30ec7404b70a8dd32a66574d9e4d3a2"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x3424d2a29164d2fb) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 275.401894] FAULT_INJECTION: forcing a failure. [ 275.401894] name failslab, interval 1, probability 0, space 0, times 0 01:37:17 executing program 2: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x3000) ioctl$TIOCCBRK(r1, 0x5428) [ 275.448562] ip6t_REJECT: TCP_RESET illegal for non-tcp 01:37:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x36) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 275.470162] CPU: 1 PID: 15832 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 275.478087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.487461] Call Trace: [ 275.490051] dump_stack+0x1b2/0x283 [ 275.493688] should_fail.cold+0x10a/0x154 [ 275.497849] should_failslab+0xd6/0x130 [ 275.501837] kmem_cache_alloc_trace+0x29a/0x3d0 [ 275.506512] p9_fid_create+0x47/0x3a0 [ 275.510316] p9_client_attach+0x6d/0x750 [ 275.514403] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 275.519942] ? v9fs_session_init+0xad1/0x1540 [ 275.525393] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 275.538527] v9fs_session_init+0xc03/0x1540 [ 275.542871] ? v9fs_show_options+0x6b0/0x6b0 [ 275.547290] ? v9fs_mount+0x54/0x860 [ 275.551026] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 275.556483] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 275.562466] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 275.567660] v9fs_mount+0x73/0x860 [ 275.571198] ? alloc_pages_current+0x15d/0x260 [ 275.575778] ? __lockdep_init_map+0x100/0x560 [ 275.580278] mount_fs+0x92/0x2a0 [ 275.583647] vfs_kern_mount.part.0+0x5b/0x470 [ 275.588171] do_mount+0xe53/0x2a00 [ 275.591744] ? retint_kernel+0x2d/0x2d [ 275.595632] ? copy_mount_string+0x40/0x40 [ 275.599883] ? copy_mount_options+0x185/0x2f0 [ 275.604385] ? copy_mount_options+0x18b/0x2f0 [ 275.608904] ? copy_mount_options+0x1fa/0x2f0 [ 275.613403] ? copy_mnt_ns+0xa30/0xa30 [ 275.616775] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 275.617294] SyS_mount+0xa8/0x120 [ 275.617304] ? copy_mnt_ns+0xa30/0xa30 [ 275.617317] do_syscall_64+0x1d5/0x640 [ 275.617333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 275.639761] RIP: 0033:0x45deb9 [ 275.642946] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.650656] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 275.657927] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 275.665201] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 275.672486] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 275.679768] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:17 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2f6465762f6e756c6c6230005dd4e39339f25b3231b1abbd07257eb01d557fd6448b96e7d0739ced65a45be8ec0eda0662e185bbad5ff385c39264ad62ce7cb6d5a3da1e8c504dd486ec4f7d757ea6f35e3f14fa744adcf8627c08a07de9201c81fd583ec2818e713f0054485e91e3f6ce534cfe15f684caf580f8b1c57732a862753841f8"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x51001, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:17 executing program 1 (fault-call:3 fault-nth:28): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:17 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 275.856563] FAULT_INJECTION: forcing a failure. [ 275.856563] name failslab, interval 1, probability 0, space 0, times 0 [ 275.880882] CPU: 1 PID: 15865 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 275.888778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.898127] Call Trace: [ 275.900727] dump_stack+0x1b2/0x283 [ 275.904382] should_fail.cold+0x10a/0x154 [ 275.909228] should_failslab+0xd6/0x130 [ 275.913240] kmem_cache_alloc_trace+0x29a/0x3d0 [ 275.917918] ? v9fs_session_init+0xad1/0x1540 [ 275.922413] v9fs_cache_session_get_cookie+0x103/0x1c0 [ 275.927883] v9fs_session_init+0xc92/0x1540 [ 275.932216] ? v9fs_show_options+0x6b0/0x6b0 [ 275.936632] ? v9fs_mount+0x54/0x860 [ 275.940359] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 275.945810] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 275.950830] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 275.955697] v9fs_mount+0x73/0x860 [ 275.959240] ? alloc_pages_current+0x15d/0x260 [ 275.963819] ? __lockdep_init_map+0x100/0x560 [ 275.968317] mount_fs+0x92/0x2a0 [ 275.971711] vfs_kern_mount.part.0+0x5b/0x470 [ 275.976213] do_mount+0xe53/0x2a00 [ 275.979761] ? copy_mount_string+0x40/0x40 [ 275.983995] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 275.989014] ? copy_mnt_ns+0xa30/0xa30 [ 275.992905] ? copy_mount_options+0x1fa/0x2f0 [ 275.997398] ? copy_mnt_ns+0xa30/0xa30 [ 276.001289] SyS_mount+0xa8/0x120 [ 276.004737] ? copy_mnt_ns+0xa30/0xa30 [ 276.008627] do_syscall_64+0x1d5/0x640 [ 276.012529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 276.017713] RIP: 0033:0x45deb9 [ 276.020902] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.028605] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 276.035874] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 276.043137] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 276.050401] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 276.057667] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:20 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:20 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8002, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x3, 0x101, 0x2, 0x0, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000002c0)={0x0}) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'macvlan1\x00', {0x1}, 0x32}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000340)={0x0, 'vlan0\x00', {}, 0x1f}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r4, 0x0, r5, 0x8}) write$P9_RSTATu(r1, &(0x7f0000000180)={0x6e, 0x7d, 0x2, {{0x0, 0x53, 0x3, 0x8cb, {0x0, 0x3}, 0x0, 0x0, 0x2, 0xfffffffffffff212, 0x8, 'nl80211\x00', 0x3, ',.!', 0x8, 'nl80211\x00', 0xd, '--*/!.)-,\xb2\\*\xe5'}, 0x6, 'vlan0\x00', 0x0, 0x0, 0xffffffffffffffff}}, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={r4, 0x1, r3, 0x484}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000040)=r4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000040)={r4, 0x0, r0, 0x1ff}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)=r4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r4, 0x47c, 0x3f}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:20 executing program 1 (fault-call:3 fault-nth:29): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:20 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq={'euid', 0x3d, r3}}], 0x6b}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) 01:37:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:20 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 278.451638] FAULT_INJECTION: forcing a failure. [ 278.451638] name failslab, interval 1, probability 0, space 0, times 0 [ 278.497990] CPU: 1 PID: 15902 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 278.505897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.515249] Call Trace: [ 278.517844] dump_stack+0x1b2/0x283 [ 278.521473] should_fail.cold+0x10a/0x154 [ 278.525625] should_failslab+0xd6/0x130 [ 278.529617] kmem_cache_alloc_trace+0x29a/0x3d0 [ 278.534301] ? v9fs_session_init+0xad1/0x1540 [ 278.538796] v9fs_cache_session_get_cookie+0x103/0x1c0 [ 278.538808] v9fs_session_init+0xc92/0x1540 [ 278.538827] ? v9fs_show_options+0x6b0/0x6b0 [ 278.538840] ? v9fs_mount+0x54/0x860 [ 278.538850] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 278.538859] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 278.538869] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 278.538883] v9fs_mount+0x73/0x860 [ 278.538891] ? alloc_pages_current+0x15d/0x260 [ 278.538899] ? __lockdep_init_map+0x100/0x560 [ 278.538910] mount_fs+0x92/0x2a0 [ 278.588831] vfs_kern_mount.part.0+0x5b/0x470 [ 278.593347] do_mount+0xe53/0x2a00 [ 278.596894] ? copy_mount_string+0x40/0x40 [ 278.601126] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 278.606141] ? copy_mnt_ns+0xa30/0xa30 [ 278.610025] ? copy_mount_options+0x1fa/0x2f0 [ 278.614541] ? copy_mnt_ns+0xa30/0xa30 [ 278.618441] SyS_mount+0xa8/0x120 [ 278.618451] ? copy_mnt_ns+0xa30/0xa30 [ 278.618463] do_syscall_64+0x1d5/0x640 [ 278.618481] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 278.618489] RIP: 0033:0x45deb9 [ 278.618494] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 01:37:20 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x7fff, 0x10, 0xffffffff, 0x7}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r2, 0x5}, 0x8) 01:37:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 278.618504] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 278.618510] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 278.618523] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 278.667541] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 278.674811] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:20 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) chown(&(0x7f0000000040)='./file0\x00', r4, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:37:20 executing program 3: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$ax25(r1, &(0x7f0000000080)={{0x3, @rose}, [@null, @default, @bcast, @default, @netrom, @default, @rose]}, &(0x7f0000000000)=0x48, 0x800) r2 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmmsg$sock(r2, &(0x7f0000000840)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0xf25d, @empty, 0xfefc}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000200)="e54a16161b316c215456ca075d39c45c2003beb42cc15250e959e793a79155e8d28c94cd61ce3955f27aebfe81258fbb42c8eb542019556f58c5d3f9f7198c6e47327ab4d7ad4ed711e0d3ae6eedbedcf55f8fccea97a3354684e52a1aa0c779ad075a8878c4543c55a778a0158aa104cd5409ee", 0x74}, {&(0x7f0000000280)="be64147e2be8bb89be35e970502f6ce2c899f6fb49ac4df2d911b4cfbfa656bfcd20fbfdc2423435fcdd0fbce02a834001fca230b2b908b9dcc9224c4337e013d5dd826812ff76d117c9e72b9370db36b94b6c6377555c7a38632cfde0422a8401dd8dac81ca5b19e61f6e23b667d4f59d5de99b681c7713f7a24311d3d15ecc3f20bf42cf9f7f93c833c2ea9a9a1ca382a3986a6394dfdb7d3c0740fccf5d0d65798e26e4b2eebd69609a19f78908bbc060013dce7da485bae2ae2494322c46f5840bb9acaeb447673e58cf5acd7dfe784f22881b456e69159f", 0xda}, {&(0x7f0000000380)="200fc4b60b784d69b8b5ba9112626256a4b5293a068f03ade9da185138fbe82100bd26634c7bbc92385dc82a7c7277aa3a91b44caa69", 0x36}, {&(0x7f00000003c0)="71d4f7884c14c7011ba2f5047c829aa0c27cdace655cdecd59c72e8c5c075e303048d75c7c47eab7b29154b6ba4bd14eca9ed7d06259499e034d5b733589683ac99a5c4ef87a16223274a4264a2987e687813baa5ebce9cdefee021dfd0436ffad89acf4314f244b84df9113c40ef61d53fa8912236ffca1ad9d0dc7df3fc1502446c2934b07a72d8e99cf1e62bbf46e6d86f9d42d871f9054e87d707dfcc6ac183ace9831a80416cb4aa4ee134602ea9eb0512a96d1c2287e65a98431484cf9c20e054cd5746ea988d6ec6909071f7499e34f5fb50719678c30180cd67faaa37c11da95d0168f18f6051393ed22ab3e3e", 0xf1}, {&(0x7f00000004c0)="cdc949ef3a1219dd37793eb7c8190af267c798c390000c127d6384dc7edf1c2a0300eb744ff2b4d6d82bf0885e9f713a5d324775718e0db2718621fef8a9f6deb605c0ae0beee6fc2e5a605cf0cf6c2cd95110bc78c1b26ff1607224c387d046bf49a98204fb0e9a2293d6d4d96093f07a1e623f8cbd0ffe1bbf466b35a966bcb0117aa78c86dc344376c7ffd72fc3ac5f66a7dcb5837a902ff23f37223c10aabedf78836347e43b81d91151e9a6e926d20eca4a1555c60a1cfec721c5fe5a3cbce70fd90b69a88d8a7b627afe9653943b69a221f4bd8669c601e7cb8c", 0xdd}, {&(0x7f00000005c0)="376f0f8b4d0a7a84d46c9bff4f161f56a0b2d77675f2aaa732ba319960e57275afc7a097d4b66514d1bca04fc4f9a5990262fb763630962497e328f2ff2f5762c2c19415c208502f9b98a9f346937e0d273a20fb3905fe2c2341e3a643f0b1d39db4d6fc9fab959cb51e70fc1749e2f1c7d8057dd56f3b62b8c092be241a4bdea3848ca171c56c1bfcb552e3f8bb101d5a864ac425faff8a1dbc339850b42ef94c58ecbc06ba496b0579f077b30c06e3049ac92c39e03c967f15c5929eaeff2506a804aa2a10f6af", 0xc8}, {&(0x7f00000006c0)="08d27e8b0824d501abf7076d2f6509c098d2245148e2bbdbb9381772c30f53fe75ab72f38c8ce03394b89c7d", 0x2c}], 0x7, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xfee8}}, @timestamping={{0x14, 0x1, 0x25, 0xe4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x90}}], 0x1, 0x20004000) ioctl$EVIOCGPROP(r1, 0x400445a0, 0x0) 01:37:20 executing program 1 (fault-call:3 fault-nth:30): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:20 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000021410052bbd7000fddbdf2508004400", @ANYRES32, @ANYBLOB="0800010002000000080001000100000005005400000000001a00020073797a31000000000900020073797a32000000000500540001000000"], 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x4000040) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000140)={{0x1, @addr=0x3}, "622e11a354961cc9b3346e117b9e6a7594ad07763c9f6de92395a22f78fefb67", 0x2}) [ 278.816121] FAULT_INJECTION: forcing a failure. [ 278.816121] name failslab, interval 1, probability 0, space 0, times 0 [ 278.849363] CPU: 0 PID: 15943 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 278.857262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.866610] Call Trace: [ 278.869206] dump_stack+0x1b2/0x283 [ 278.872858] should_fail.cold+0x10a/0x154 [ 278.877010] should_failslab+0xd6/0x130 [ 278.880982] __kmalloc+0x2c1/0x400 [ 278.884521] ? p9_fcall_alloc+0x19/0x90 [ 278.888502] ? __lockdep_init_map+0x100/0x560 [ 278.892996] p9_fcall_alloc+0x19/0x90 [ 278.896795] p9_client_prepare_req.part.0+0x86c/0xb60 [ 278.901992] p9_client_rpc+0x170/0x1520 [ 278.905971] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 278.911334] ? lock_acquire+0x170/0x3f0 [ 278.915307] ? lock_downgrade+0x740/0x740 [ 278.919459] ? lock_acquire+0x170/0x3f0 [ 278.923462] ? lock_downgrade+0x740/0x740 [ 278.927610] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 278.932712] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 278.937734] p9_client_attach+0x137/0x750 [ 278.941886] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 278.947427] ? v9fs_session_init+0xad1/0x1540 [ 278.952618] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 278.957638] v9fs_session_init+0xc03/0x1540 [ 278.961970] ? v9fs_show_options+0x6b0/0x6b0 [ 278.966381] ? v9fs_mount+0x54/0x860 [ 278.970101] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 278.975553] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 278.980569] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 278.985413] v9fs_mount+0x73/0x860 [ 278.988960] ? alloc_pages_current+0x15d/0x260 [ 278.993563] ? __lockdep_init_map+0x100/0x560 [ 278.998061] mount_fs+0x92/0x2a0 [ 279.001434] vfs_kern_mount.part.0+0x5b/0x470 [ 279.005963] do_mount+0xe53/0x2a00 [ 279.009510] ? copy_mount_string+0x40/0x40 [ 279.013744] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 279.018757] ? copy_mnt_ns+0xa30/0xa30 [ 279.022659] ? copy_mount_options+0x1fa/0x2f0 [ 279.027155] ? copy_mnt_ns+0xa30/0xa30 [ 279.031076] SyS_mount+0xa8/0x120 [ 279.034526] ? copy_mnt_ns+0xa30/0xa30 [ 279.038406] do_syscall_64+0x1d5/0x640 [ 279.042286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 279.047464] RIP: 0033:0x45deb9 [ 279.050641] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.058337] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 279.065612] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 279.072865] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 279.080120] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 279.088344] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 279.102108] 9pnet: Couldn't grow tag array 01:37:23 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x900) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) mmap(&(0x7f0000534000/0x1000)=nil, 0x1000, 0x100000b, 0x28011, r1, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:23 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x69a, 0x12) r4 = signalfd(r1, &(0x7f00000000c0)={[0x943]}, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname'}}, {@fscache='fscache'}, {@loose='loose'}, {@afid={'afid', 0x3d, 0x9}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, '\\'}}, {@obj_role={'obj_role', 0x3d, '-'}}]}}) 01:37:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:23 executing program 1 (fault-call:3 fault-nth:31): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 281.494278] FAULT_INJECTION: forcing a failure. [ 281.494278] name failslab, interval 1, probability 0, space 0, times 0 [ 281.547681] 9pnet: Insufficient options for proto=fd [ 281.559302] CPU: 0 PID: 15976 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 281.567202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.576552] Call Trace: [ 281.579147] dump_stack+0x1b2/0x283 [ 281.582778] should_fail.cold+0x10a/0x154 [ 281.586932] should_failslab+0xd6/0x130 [ 281.590910] kmem_cache_alloc_trace+0x29a/0x3d0 [ 281.595580] p9_client_prepare_req.part.0+0x8ce/0xb60 [ 281.600780] p9_client_rpc+0x170/0x1520 [ 281.604763] ? p9_client_prepare_req.part.0+0xb60/0xb60 [ 281.610143] ? lock_acquire+0x170/0x3f0 [ 281.614118] ? lock_downgrade+0x740/0x740 [ 281.618289] ? lock_acquire+0x170/0x3f0 [ 281.622285] ? lock_downgrade+0x740/0x740 [ 281.626438] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 281.631564] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 281.636590] p9_client_attach+0x137/0x750 [ 281.640741] ? p9_client_zc_rpc.constprop.0+0x1360/0x1360 [ 281.646276] ? v9fs_session_init+0xad1/0x1540 [ 281.650778] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 281.655799] v9fs_session_init+0xc03/0x1540 [ 281.660131] ? v9fs_show_options+0x6b0/0x6b0 [ 281.664549] ? v9fs_mount+0x54/0x860 [ 281.668284] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 281.673739] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 281.678758] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 281.683601] v9fs_mount+0x73/0x860 [ 281.687147] ? alloc_pages_current+0x15d/0x260 [ 281.692419] ? __lockdep_init_map+0x100/0x560 [ 281.696915] mount_fs+0x92/0x2a0 [ 281.700285] vfs_kern_mount.part.0+0x5b/0x470 [ 281.704789] do_mount+0xe53/0x2a00 [ 281.708331] ? do_raw_spin_unlock+0x164/0x220 [ 281.712838] ? copy_mount_string+0x40/0x40 [ 281.717096] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 281.722118] ? copy_mnt_ns+0xa30/0xa30 [ 281.726019] ? copy_mount_options+0x1fa/0x2f0 [ 281.730535] ? copy_mnt_ns+0xa30/0xa30 [ 281.734450] SyS_mount+0xa8/0x120 [ 281.737936] ? copy_mnt_ns+0xa30/0xa30 [ 281.741834] do_syscall_64+0x1d5/0x640 [ 281.746422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 281.751644] RIP: 0033:0x45deb9 [ 281.754861] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.762568] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 281.769835] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 281.777099] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 281.784367] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 281.791637] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:23 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000680)=""/4096) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x8001) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=""/79, &(0x7f0000000100)=0x4f) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000040)=""/33) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:23 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = accept4(r4, &(0x7f00000003c0)=@alg, &(0x7f0000000180)=0x80, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000240)={r5, r1, 0x0, 0x3d, &(0x7f0000000200)="da237b1cb16bf78c8665ac2c9154d5cba78fe4eea90a5a3ebac5a8743beb3a9f205586e34bc9c58dbb78bab05b42bd6f3e11c52573f3e51814a952ef71", 0x7, 0x1f, 0x5, 0x8, 0x4, 0x2, 0x1, 'syz1\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) getsockopt$netlink(r3, 0x10e, 0x2, &(0x7f0000000340)=""/49, &(0x7f0000000380)=0x31) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x2, 0x9, 0xff, 0x0, 0x7, 0xd8810, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0xfffffffffffff001, 0x2}, 0x4b200, 0x9, 0x7, 0x0, 0x5, 0x9}, r6, 0x3, 0xffffffffffffffff, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setresgid(0xffffffffffffffff, 0x0, 0xee00) setsockopt$RDS_CANCEL_SENT_TO(r7, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 01:37:23 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="080066646e6f3d0e5ecfe4494ea2307835221c3453a33a778b3a5b8f9efc2e74c1a13ab0604dfce390479f1a788d07bee4e2f55b7d29bd5a971dd2b9", @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) 01:37:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:23 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) [ 281.858269] 9pnet: Insufficient options for proto=fd [ 281.916625] 9pnet: Couldn't grow tag array 01:37:26 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f", 0x9a}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:26 executing program 3: ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r4 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = gettid() r6 = gettid() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r4}) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000000100)) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 01:37:26 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, 0x2, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x36d7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000000000}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048000}, 0x80) 01:37:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:26 executing program 1 (fault-call:3 fault-nth:32): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:26 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1d8, 0x240, 0x240, 0x1d8, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x47}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@tcpmss={{0x28, 'tcpmss\x00'}, {0x81, 0x3}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@CLUSTERIP={0x0, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x6, 0xc, [0x20, 0x2e, 0x14, 0x33, 0x19, 0x101, 0x1d, 0x12, 0x2b, 0x2f, 0x12, 0x14, 0x24, 0x12, 0x1, 0x26], 0x2, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x30c) [ 284.516896] FAULT_INJECTION: forcing a failure. [ 284.516896] name failslab, interval 1, probability 0, space 0, times 0 [ 284.537479] CPU: 1 PID: 16028 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 284.545385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.554740] Call Trace: [ 284.557329] dump_stack+0x1b2/0x283 [ 284.560974] should_fail.cold+0x10a/0x154 01:37:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 284.566444] should_failslab+0xd6/0x130 [ 284.570419] __kmalloc+0x2c1/0x400 [ 284.573972] ? __list_lru_init+0x67/0x710 [ 284.578125] __list_lru_init+0x67/0x710 [ 284.582111] sget_userns+0x4e4/0xc10 [ 284.585857] ? v9fs_kill_super+0x90/0x90 [ 284.589918] ? v9fs_kill_super+0x90/0x90 [ 284.594674] sget+0xd1/0x110 [ 284.597696] v9fs_mount+0x9e/0x860 [ 284.601237] ? alloc_pages_current+0x15d/0x260 [ 284.605832] ? __lockdep_init_map+0x100/0x560 [ 284.610335] mount_fs+0x92/0x2a0 [ 284.613706] vfs_kern_mount.part.0+0x5b/0x470 [ 284.619074] do_mount+0xe53/0x2a00 [ 284.622622] ? copy_mount_string+0x40/0x40 [ 284.626860] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 284.631879] ? copy_mnt_ns+0xa30/0xa30 [ 284.635765] ? copy_mount_options+0x1fa/0x2f0 [ 284.640286] ? copy_mnt_ns+0xa30/0xa30 [ 284.644172] SyS_mount+0xa8/0x120 [ 284.647620] ? copy_mnt_ns+0xa30/0xa30 [ 284.651511] do_syscall_64+0x1d5/0x640 [ 284.655407] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 284.660595] RIP: 0033:0x45deb9 01:37:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = accept4$x25(r2, &(0x7f0000000600), &(0x7f0000000640)=0x12, 0x80800) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000680)={0x7, 0x7, 0x1}, &(0x7f00000006c0)=0x28) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@any, 0x2}) getsockopt$inet6_dccp_int(r3, 0x21, 0x10, &(0x7f00000000c0), &(0x7f0000000080)=0x4) [ 284.663786] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.672108] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 284.679382] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 284.686655] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 284.693949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 284.701216] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:26 executing program 2: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x100}}, 0xd311, 0x1, 0x0, 0x1, 0x84, 0x1, 0xdc}, &(0x7f0000000140)=0x9c) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev\x00') bind$vsock_dgram(r3, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 01:37:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:26 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) [ 284.875981] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:29 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e14", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:29 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000640)={0xe4f, 0x401, [[], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], []]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) 01:37:29 executing program 1 (fault-call:3 fault-nth:33): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0x6f9, 0x4, [[], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], [], []]}) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:29 executing program 5: kexec_load(0x3, 0x6, &(0x7f0000001700)=[{&(0x7f0000000040)="d4ea31168a066ba59732c4c3ef67f7c197f8abd20d194008baa03b08a897f19ea1335b36d322e4c3fa0f3c7da61b4f9eda7470a0b44c10058ff0164006d58a43b35358e59917f257d97d3606be2b22d5815b4b3bb201d6ded83ccf182bd1f7141d38beb0f50734294e94bb599b84ee3680a5db678aae97217b26dfabb6c167d0754238ff4200943f5f3aa159cdc57120265ac6feb893168faba2e4d0663ede1f615ec1a836d68da42953aae51e97370b8abc8d8dccfc1c64df50aeefedb90c685de724b60321ad6370cab9d96c33e670da8aeaed76f5e84c5b1ea3e9ccc7848c0f8b03c91e031e0147d8d2626b4996", 0xef, 0x1, 0x83d}, {&(0x7f0000000140)="df6134ad8463de3768fe890be5b0fe72a66afbf6d00754d5b0cb7f44dbbab7533f1a89187af35f93e5686c01165b653cdb319ce0c03c3a83e899c063b3c3ca2da725824bfc8e0c44e8230683b4b898adc09e46606dc6d6fa7cf0ad9c3aa6974f830aae569139f491aec539961dca5b1bdab47f89a4a44539e3408ad9ad7c2a76f82d3dfed27298158119fd4ea91317e109a28ed210437747ad15997bd85092840f88e3f73d77407c13e7af2a9968d96840f12e9f3056aed5d2ed6bc36e7a574066a56bd09eb5746db08e9d38", 0xcc, 0x7ff, 0xb3}, {&(0x7f0000000240)="dec42d5259c498e61946f8b68191837976c9bc2e06787348d0365f706dc838e5060344e96e01ec2c6dff306930a68b38a87819fd486c4f5c6edbace93522a75d0a8faaf0899c6a17d3457669a138dceb09092a", 0x53, 0x40, 0x9}, {&(0x7f0000000680)="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", 0x1000, 0x3, 0x7ff}, {&(0x7f00000002c0), 0x0, 0xa7a, 0xfffffffffffffff8}, {&(0x7f0000001680)="31894fccc2eeb9301f74b12391095c5e00176535bd40e8619e909b264d88eaaa9040d886a507fba507040cb48d60b4f69694533cd501c9a0447303b2ea42034412f1d491a17082eb4e39f5f8ac70340fe70b403595ba746ed25b2c6e49106de1c47bd7b67ea612ccbf39e49e482e9df2a09cc5ff30b4f13fae", 0x79, 0x2, 0xc58}], 0x320000) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={r0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:29 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x137b) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) [ 287.557716] FAULT_INJECTION: forcing a failure. [ 287.557716] name failslab, interval 1, probability 0, space 0, times 0 [ 287.575504] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:29 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000000)=@n={0x3, 0xfd, @SEQ_NOTEON=@note=0x44, 0x9}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:29 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@msize={'msize'}}], [], 0x6b}}) [ 287.625692] CPU: 1 PID: 16091 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 287.633637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.642993] Call Trace: [ 287.645589] dump_stack+0x1b2/0x283 [ 287.649247] should_fail.cold+0x10a/0x154 [ 287.653409] should_failslab+0xd6/0x130 [ 287.657391] kmem_cache_alloc_trace+0x29a/0x3d0 [ 287.662066] ? v9fs_session_init+0xad1/0x1540 [ 287.666566] v9fs_cache_session_get_cookie+0x103/0x1c0 [ 287.671855] v9fs_session_init+0xc92/0x1540 [ 287.676207] ? v9fs_show_options+0x6b0/0x6b0 [ 287.680624] ? v9fs_mount+0x54/0x860 [ 287.684341] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 287.689793] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 287.694815] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 287.699663] v9fs_mount+0x73/0x860 [ 287.703214] ? alloc_pages_current+0x15d/0x260 [ 287.707821] ? __lockdep_init_map+0x100/0x560 [ 287.713304] mount_fs+0x92/0x2a0 [ 287.716675] vfs_kern_mount.part.0+0x5b/0x470 [ 287.721205] do_mount+0xe53/0x2a00 01:37:29 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) r4 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r5 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x210833, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRES16=r4, @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=r0, @ANYRESHEX=0x0]) [ 287.724752] ? copy_mount_string+0x40/0x40 [ 287.728996] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 287.734014] ? copy_mnt_ns+0xa30/0xa30 [ 287.737907] ? copy_mount_options+0x1fa/0x2f0 [ 287.742404] ? copy_mnt_ns+0xa30/0xa30 [ 287.746294] SyS_mount+0xa8/0x120 [ 287.749748] ? copy_mnt_ns+0xa30/0xa30 [ 287.753639] do_syscall_64+0x1d5/0x640 [ 287.757537] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 287.762722] RIP: 0033:0x45deb9 [ 287.765918] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 01:37:29 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x6c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x99}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffe}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x43}, 0x4040010) 01:37:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 287.773714] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 287.781010] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 287.788281] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 287.795547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 287.803163] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 287.911440] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 01:37:32 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e14", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:32 executing program 1 (fault-call:3 fault-nth:34): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:32 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) semctl$GETVAL(0xffffffffffffffff, 0x3, 0xc, &(0x7f0000000000)=""/165) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:32 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x9, 0x2c8203) iopl(0x95) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r1, 0x400445a0, 0x0) 01:37:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:32 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}, {0x0}], 0x0, &(0x7f0000014a00)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000ac0)="c7442400cc000000c74424028903eff5ff1c2466b8f1008ed866b813000f00d066f3420fc775026641d9d00f00d3b916020000b800000080ba000000000f30c4e2e10a747cfbf30f350f9d4100", 0x4d}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x0, 0x70, 0x9, 0x4, 0x9, 0x1, 0x0, 0x2, 0x41260, 0xd2403b7d6e7b359b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext, 0x1200, 0x4, 0xaef, 0x4, 0x8, 0x80, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc000) dup(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f0000000140)=@caif=@rfm={0x25, 0x0, "cd1e4b3ff3c500745875ea3661b900"}, 0x80, 0x0}}], 0x1, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x8) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 01:37:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x400000, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000000)) 01:37:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:32 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = dup2(r0, r0) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x180000) [ 290.588714] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.591584] FAULT_INJECTION: forcing a failure. [ 290.591584] name failslab, interval 1, probability 0, space 0, times 0 [ 290.682390] CPU: 1 PID: 16163 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 290.690308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.699659] Call Trace: [ 290.702249] dump_stack+0x1b2/0x283 [ 290.705609] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.705876] should_fail.cold+0x10a/0x154 [ 290.718604] should_failslab+0xd6/0x130 [ 290.722583] kmem_cache_alloc_trace+0x29a/0x3d0 [ 290.727251] ? v9fs_session_init+0xad1/0x1540 [ 290.731750] v9fs_cache_session_get_cookie+0x103/0x1c0 [ 290.737031] v9fs_session_init+0xc92/0x1540 [ 290.741362] ? v9fs_show_options+0x6b0/0x6b0 [ 290.745866] ? v9fs_mount+0x54/0x860 [ 290.749575] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 290.755039] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 290.760049] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 290.764886] v9fs_mount+0x73/0x860 [ 290.768430] ? alloc_pages_current+0x15d/0x260 [ 290.773027] ? __lockdep_init_map+0x100/0x560 [ 290.777523] mount_fs+0x92/0x2a0 [ 290.780926] vfs_kern_mount.part.0+0x5b/0x470 [ 290.785417] do_mount+0xe53/0x2a00 [ 290.788984] ? do_raw_spin_unlock+0x164/0x220 [ 290.793480] ? copy_mount_string+0x40/0x40 [ 290.797707] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 290.802714] ? copy_mnt_ns+0xa30/0xa30 [ 290.806595] ? copy_mount_options+0x1fa/0x2f0 [ 290.811099] ? copy_mnt_ns+0xa30/0xa30 [ 290.814986] SyS_mount+0xa8/0x120 [ 290.818435] ? copy_mnt_ns+0xa30/0xa30 [ 290.822322] do_syscall_64+0x1d5/0x640 [ 290.826212] entry_SYSCALL_64_after_hwframe+0x46/0xbb 01:37:32 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000480)) r3 = dup(r1) r4 = socket(0x2b, 0x800, 0x5) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000400)='veth0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f00000000c0)={0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="0100eaff", @ANYRES32=0x0], &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r6, 0x7, 0x8000}, &(0x7f0000000600)=0xc) ioctl$IOCTL_STOP_ACCEL_DEV(r5, 0x40096101, &(0x7f00000003c0)={{&(0x7f0000000340)={'KERNEL\x00', {&(0x7f0000000200)=@adf_dec={@format={'Dc', '4', 'NumConcurrentRequests\x00'}, {0x22360c89}, {&(0x7f0000000100)=@adf_dec={@normal='NumberDcInstances\x00'}}}}, {&(0x7f00000002c0)={'KERNEL\x00'}}}}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r5, 0xc0105303, &(0x7f0000000000)={0x9, 0x20, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x381083) fcntl$getflags(r7, 0x408) [ 290.831392] RIP: 0033:0x45deb9 [ 290.834570] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 290.842271] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 290.849527] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 290.856873] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 290.864139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 290.871397] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:32 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r1 = epoll_create(0x10000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000040)={0x3, @bcast, 0xee00}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) geteuid() 01:37:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 291.028199] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.116188] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 01:37:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e14", 0x9f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:35 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x3fc) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f00000009c0)=0x80, 0x4) syz_mount_image$squashfs(&(0x7f0000000040)='squashfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x8, &(0x7f0000000840)=[{&(0x7f00000000c0)="81fe547eac5fdbd3675ba9f6a6502983e96e12322bb8378fb49fb447affd13c00748ddcc5236874eb8fe3d85abb02dfb12194d8446c89a5f4b84fcf23761e07d2d2c6dea2a9592654544850175e34b37daa71e3d2be3eee209ff4982f31f3b6fb6eff6e01329b8e9e2d7175d9880253cd49d", 0x72, 0x4}, {&(0x7f0000000140)="2214d80d630fcdf83af3c7b28bd597317f3024c99a82615cf22914ff7a", 0x1d}, {&(0x7f0000000180)="7c8af5cbd5deac4b527a9fcecc7c151f5fabcacfd707d79cd22f33fa55888f98f0f7ac21cb480c57afb584ea5d3e58725c43e1618094870007131a8d272ad793f7f5bcd04ba21af96a5f3bcf267624621c2db8c25dc0b7e57eb37d6dd61e4202bcdec39aacc11313", 0x68, 0xfff}, {&(0x7f0000000200)="896907f4aed988241a3567ec3371bdc50450f84e107faa085a7030185ce9e668799a8d40919a4cc10ec3c54db9d233c07cad45b36b0da463209fbe39c79a302df3d20ac0bad4dc445e55f342eb8227619f8f9decedcbbe8f6774938e0d4528fd4416aac900c28efb9b4d6db06ffd66b39db36f156c02cfd412aa7f58e7f5a77ced2e863f47bf9738cd2308dc522027bf625167f54506ff17d1ee", 0x9a, 0xae1e}, {&(0x7f0000000680)="3d32d8042e28700beb84fcac5f33951f40fd041eb1f60da8ab029444a4b669ecc47addea4b78086b646725a2915815a0eca6958f0da02bcda76b107970ddf0170dfe3477d237c1f3ab2be22fbf2d3cfd4ea44c31660f1d2c4d4e7a825b1950da460b13c319a87db2dd2043e481c0a58510f6e98b5892795e425151abaa91604221dc47257806639db0ace29e56543fb3f332c15e25da8f02bffa6a306c2e03b374f0304a1f6f2a66a3a4099f75d15f3e6634b818c5b09c3991d251e588feaf1e1884f61e1c1348d5bc433bbd4c5f8896", 0xd0, 0x20}, {&(0x7f00000002c0)="ad94aeb0ccbc9ab3ca69335d2e7c4a1f5688fa1b5af3297155299e", 0x1b, 0xd1}, {&(0x7f0000000300)="f98533e367eac2e6053fcea36ca93880f4f5e81ddafad43bd30ae6b60f11623cdfa9309f504f751ccaa82d35ff00"/61, 0x3d, 0x2}, {&(0x7f0000000780)="6750ffa899dfdc3523f6054546bc9d626078d3469eb3d6130ad7acff9734139a20d47f2cbc98adc53d4627a426625d32f5c198ae77e6d6243963244502542d861809041880bc51f23a460d7cf5337a3c8c3b83f49e7d8800ccd99b60b315f69971e53fccfbf9d1047cd92eca18ef17c7c3521c8e53be3eae3d2d73a7697f38c78b4eee80b1e40ef757d7a1ded70e2fc921de674f347032bb25bcd54b8cf022", 0x9f, 0x3ae}], 0x900420, &(0x7f0000000900)=ANY=[@ANYBLOB="7b152c72617700ed90242c7d277d2c4354002c282c726177002c7569643e", @ANYRES64=0x0, @ANYBLOB=',smackfshat=-,fsmagic=0x0000000000000101,defcontext=root,func=FILE_IHECK,smackfstransmute=}{{-!,\x00']) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x1) socket$inet(0x2, 0x1, 0x2) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) r3 = gettid() r4 = gettid() r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r5, &(0x7f0000000180)={r2}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x49a101) r6 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x12}) gettid() r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:35 executing program 1 (fault-call:3 fault-nth:35): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:35 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="747294fa733dbb996f3d00"/20, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) [ 293.623245] FAULT_INJECTION: forcing a failure. [ 293.623245] name failslab, interval 1, probability 0, space 0, times 0 01:37:35 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r4 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = gettid() r6 = gettid() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r4}) sendmmsg$sock(r7, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="3dc340ff662afe14bb67ea364b536398c1601263d2327c262d1f35512ac113089245779c9a6b012edd6ce962c548c465f93e44832d2453d7fc7d32aa07c9bcb49d6404eb6c2b2ffbc7bf67eac1dc5fd56f41174157dfae9d96e03f1519bb8029f0af883966e3b59d16f18a838f16df596b058e17fbdde2b9a08d28efd0d9874a6ffb54678dce44f8eedf7c6b0a91d6b8d3a55dc31711ebc4ec01310aa72961ba93eba942a5e22759dd9ab77fac393fa4cc278d063cc2b54e0a5579e6befaa436d986ee47949f24dd66ece10246a02908965c04b6b02333592c8a022746d0c4e210ce5a705a61889ee5", 0xe9}, {&(0x7f0000000200)="68c45625895295961f1192ec8d69c8a8379befbfc89cc213f2a6f0b9a5fa8691ea72e779db5cc6841631d976918977202ca7a25150d6ee8be0f5027ea664a4352ee5d209172d", 0x46}, {&(0x7f0000000280)="0ee625202b2a1b12af778290e38d26bde05b4330be144ea88f621979600ccf91af59ebca3e7427b72ea460fce2c3023ce5b2b53b90dd8db143d7e895cbe1a05cb1048a67bdc8dbbdb1ba2b5e2b15fe86eecf85c772d0f49f6d47ea84a90fdd82e4d0", 0x62}], 0x3, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8a}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x90}}], 0x1, 0x24040000) [ 293.680556] CPU: 1 PID: 16227 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 293.689425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.698772] Call Trace: [ 293.701354] dump_stack+0x1b2/0x283 [ 293.704966] should_fail.cold+0x10a/0x154 [ 293.709097] should_failslab+0xd6/0x130 [ 293.713062] kmem_cache_alloc+0x28e/0x3c0 [ 293.717212] __fscache_acquire_cookie+0xd6/0x41c [ 293.721968] v9fs_cache_session_get_cookie+0x95/0x1c0 [ 293.727150] v9fs_session_init+0xc92/0x1540 [ 293.731461] ? v9fs_show_options+0x6b0/0x6b0 [ 293.735852] ? v9fs_mount+0x54/0x860 [ 293.739572] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 293.745021] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 293.750027] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 293.754865] v9fs_mount+0x73/0x860 [ 293.758407] ? alloc_pages_current+0x15d/0x260 [ 293.763017] ? __lockdep_init_map+0x100/0x560 [ 293.767493] mount_fs+0x92/0x2a0 [ 293.770841] vfs_kern_mount.part.0+0x5b/0x470 [ 293.775328] do_mount+0xe53/0x2a00 [ 293.778868] ? copy_mount_string+0x40/0x40 [ 293.783100] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 293.788203] ? copy_mnt_ns+0xa30/0xa30 [ 293.792071] ? copy_mount_options+0x1fa/0x2f0 [ 293.796545] ? copy_mnt_ns+0xa30/0xa30 [ 293.800411] SyS_mount+0xa8/0x120 [ 293.803866] ? copy_mnt_ns+0xa30/0xa30 [ 293.807747] do_syscall_64+0x1d5/0x640 [ 293.811645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 293.816814] RIP: 0033:0x45deb9 [ 293.819983] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 01:37:35 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d666422529565eedb49bc7eb248a0262a1f5e7a7f3c18d994cfd1c156b1870cd65df60bd65ff05056e07b8937ed33a31ecbb3", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',k']) r3 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r4 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)) r5 = gettid() r6 = gettid() r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000180)={r4}) r8 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r9 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r8, &(0x7f0000000140)={0x8000000b}) 01:37:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "af206e0e60a99cda9469f6928e3f6ec6611a2d37181f33fab868c91adf88d83d95aca6c5d037d30d9a120a8c7189941408aff60a88ccb531ea389836ece68c94eca175a582d5dcbc55f710cb53061308d4290d0410a6354aaa0f462f1ccaac77d30102e72652ec45adf271eee1e832bf58e1d380676ee4da94e89fde07913a0faa19f798b7f19a45de401f11e079c6cce608c840bcaf4a10241fffad8c3b6d1a75dea3e7b477e075b96de41db2db34c071661360fb7c684f52c678bb1e685a346381fd8bdbc3299f7f63ab7dca49215a62b22beec465e73d0f7d473db185ef1a6cfa79e21a0fb9364a332a5414cc603e6685b6beaa4855fa11c950096196c958"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 293.827685] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 293.834947] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 293.842205] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 293.849472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 293.856725] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:35 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x6, 0x428, 0x1000, 0x0, 0x4, 0x7ff}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[], 0x208e24b) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000180)=0x3, 0x4) readahead(r4, 0x2f, 0x7) mmap(&(0x7f0000232000/0x2000)=nil, 0x2000, 0x2, 0x28011, r2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:35 executing program 1 (fault-call:3 fault-nth:36): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) [ 293.957898] 9pnet: Could not find request transport: fd"R•eîÛI¼~²H &*^z<Ù”ÏÑÁV±‡ Ö]ö Ö_ðPVà{‰7í3£˳0x0000000000000003 01:37:36 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 294.027981] FAULT_INJECTION: forcing a failure. [ 294.027981] name failslab, interval 1, probability 0, space 0, times 0 [ 294.072029] CPU: 1 PID: 16274 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 294.079951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.089302] Call Trace: [ 294.091931] dump_stack+0x1b2/0x283 [ 294.095567] should_fail.cold+0x10a/0x154 [ 294.099721] should_failslab+0xd6/0x130 [ 294.103697] kmem_cache_alloc_trace+0x29a/0x3d0 [ 294.108369] sget_userns+0x102/0xc10 [ 294.112092] ? v9fs_kill_super+0x90/0x90 [ 294.116156] ? v9fs_kill_super+0x90/0x90 [ 294.120218] sget+0xd1/0x110 [ 294.123239] v9fs_mount+0x9e/0x860 [ 294.126779] ? alloc_pages_current+0x15d/0x260 [ 294.131367] ? __lockdep_init_map+0x100/0x560 [ 294.135879] mount_fs+0x92/0x2a0 [ 294.139256] vfs_kern_mount.part.0+0x5b/0x470 [ 294.143759] do_mount+0xe53/0x2a00 [ 294.147341] ? copy_mount_string+0x40/0x40 [ 294.151581] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 294.156617] ? copy_mnt_ns+0xa30/0xa30 [ 294.161460] ? copy_mount_options+0x1fa/0x2f0 [ 294.165963] ? copy_mnt_ns+0xa30/0xa30 [ 294.169852] SyS_mount+0xa8/0x120 [ 294.173308] ? copy_mnt_ns+0xa30/0xa30 [ 294.177206] do_syscall_64+0x1d5/0x640 [ 294.181105] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 294.186296] RIP: 0033:0x45deb9 [ 294.189479] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.197185] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 294.204468] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 294.211762] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 294.219029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 294.226313] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c 01:37:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="d11b370ae2cd1113eaf7d91a96f6f60aaef8d2e88d9d60cbde26719174db1874c20aecea715146614cd7c611a67aa8ec1785ff801304561b683a916ba74c7a061b81fdefbbfa2dd309626caad6bd87632db786e072ad3b6ce8915347a5ffff6c8c31a9eea0fca991265ed77ce03e734a9df29079b775481336c22ab2c97164b422d867c67c5bad41c326dfe7c4b6f8da79726f21a810d15cf83f286e9a2e148c1882", 0xa2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@empty, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, 0xe8) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 01:37:38 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 01:37:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) 01:37:38 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x501240, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x4200, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=r3, r4, 0x23, 0x4, r5}, 0x14) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/schedstat\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f0000000340)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x570, 0x3d0, 0xf8, 0x300, 0x0, 0xf8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000040), {[{{@ipv6={@local, @private2={0xfc, 0x2, [], 0x1}, [0xffffff00, 0x0, 0x0, 0xff], [0xffffff00, 0xff, 0xaab9c9e2eea5578, 0xff], 'team0\x00', 'sit0\x00', {0xff}, {}, 0x3b, 0x21, 0x1, 0xc0}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x7}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x81}}}, {{@ipv6={@mcast2, @loopback, [0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'wg1\x00', {}, {}, 0x2c, 0x5, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7fff, 0x1, 0x1}}}, {{@ipv6={@mcast2, @empty, [0xff000000, 0x0, 0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xff000000, 0xff], 'veth0_to_team\x00', 'wg1\x00', {0xff}, {0x988b04024f25bab7}, 0x1d, 0x7, 0x5, 0x9}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x2, 0x4, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1000, 0x5, @ipv4=@broadcast, 0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x10}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) bind$nfc_llcp(r7, &(0x7f0000000280)={0x27, 0x1, 0x0, 0x7, 0xc3, 0x5, "09fee3b64d5ae6d72bb97f55bb1e72754392ac237eadf16594f2519dd8e1e2e1dc3180beedd4d3b5a6772e1b6a50b7131a0c736e5445216847c7385edda945", 0x18}, 0x60) 01:37:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:38 executing program 1 (fault-call:3 fault-nth:37): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}], [], 0x6b}}) 01:37:38 executing program 5: clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0x2, 0xffffffc1}}) [ 296.641197] FAULT_INJECTION: forcing a failure. [ 296.641197] name failslab, interval 1, probability 0, space 0, times 0 [ 296.648395] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.691004] CPU: 1 PID: 16301 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 [ 296.698919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.708274] Call Trace: [ 296.710862] dump_stack+0x1b2/0x283 [ 296.714492] should_fail.cold+0x10a/0x154 [ 296.718648] should_failslab+0xd6/0x130 [ 296.722635] __kmalloc+0x2c1/0x400 [ 296.726178] ? register_shrinker+0x1ab/0x220 [ 296.730593] register_shrinker+0x1ab/0x220 [ 296.734837] sget_userns+0x9aa/0xc10 [ 296.738553] ? v9fs_kill_super+0x90/0x90 [ 296.742612] ? v9fs_kill_super+0x90/0x90 [ 296.746673] sget+0xd1/0x110 [ 296.749693] v9fs_mount+0x9e/0x860 [ 296.753232] ? alloc_pages_current+0x15d/0x260 [ 296.757811] ? __lockdep_init_map+0x100/0x560 [ 296.762304] mount_fs+0x92/0x2a0 [ 296.765674] vfs_kern_mount.part.0+0x5b/0x470 [ 296.770173] do_mount+0xe53/0x2a00 [ 296.773731] ? copy_mount_string+0x40/0x40 [ 296.777967] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 296.782984] ? copy_mnt_ns+0xa30/0xa30 [ 296.786976] ? copy_mount_options+0x1fa/0x2f0 [ 296.791500] ? copy_mnt_ns+0xa30/0xa30 [ 296.795399] SyS_mount+0xa8/0x120 [ 296.798852] ? copy_mnt_ns+0xa30/0xa30 [ 296.802741] do_syscall_64+0x1d5/0x640 [ 296.806640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 296.811828] RIP: 0033:0x45deb9 [ 296.815019] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.822727] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 296.830018] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 01:37:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x4000, 0x0) ioctl$EVIOCGPROP(r0, 0x400445a0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)) 01:37:38 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x18, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000044}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e733d66422c7266646e6f3d6564e8ec2fa89d76ecf0148d94368ad7dfddfd9e8726c03aea2042cfa237ac58aecc451a877f6b1d238ae1aa1eda9d4a735dbf7eccc209af961af4dbebe200", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',fscontext=user_u,fscontext=user_u,k']) 01:37:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x148, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 01:37:38 executing program 5: clone(0x24106900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x0, 0x148, 0x180, 0x148, 0x210, 0x240, 0x240, 0x210, 0x240, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) r2 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000680)={0x0, 0x80000000, @status={[0xbc77, 0x3, 0xffff, 0x1, 0x7ff, 0x2]}, [0x80, 0xadf, 0xffff, 0x6, 0x7, 0x101, 0x8, 0xfffffffffffffffc, 0x200, 0xcc, 0x6, 0x5, 0x5, 0x2, 0x1, 0x7447, 0x3, 0x1, 0x200, 0x0, 0x3, 0x2, 0x5, 0x10001, 0x100000000, 0x2, 0x100, 0xffffffffffffff7f, 0xffffffffffff8001, 0x80000001, 0x40, 0x100000001, 0xffffffffffffff5d, 0x41b6, 0x1f, 0x20, 0x5, 0x7, 0x8, 0x3000000000000, 0x8, 0x200, 0xffffffff, 0x3, 0xfe1, 0x40f, 0x81, 0x0, 0xbb4, 0x8e4e, 0x6, 0x100000001, 0xfffffffffffffffb, 0x2, 0x401, 0x3, 0xb688, 0x100000000, 0x44c2, 0x5, 0x977b, 0x71, 0x8001, 0x6]}) [ 296.837281] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 296.844552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 296.851822] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 296.891242] 9pnet: Found fid 0 not clunked [ 296.903986] ================================================================== [ 296.911605] BUG: KASAN: use-after-free in p9_client_clunk+0x1fc/0x240 [ 296.912020] 9pnet: Could not find request transport: fB [ 296.918179] Read of size 8 at addr ffff88809e867500 by task syz-executor.1/16301 [ 296.918184] [ 296.918193] CPU: 1 PID: 16301 Comm: syz-executor.1 Not tainted 4.14.206-syzkaller #0 01:37:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'tunl0\x00', {0x1}, 0x1ff}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@posixacl='posixacl'}, {@dfltuid={'dfltuid'}}], [], 0x6b}}) [ 296.918199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.918202] Call Trace: [ 296.918216] dump_stack+0x1b2/0x283 [ 296.918230] print_address_description.cold+0x54/0x1d3 [ 296.918241] kasan_report_error.cold+0x8a/0x194 [ 296.918250] ? p9_client_clunk+0x1fc/0x240 [ 296.918258] __asan_report_load8_noabort+0x68/0x70 [ 296.918268] ? p9_client_clunk+0x1fc/0x240 [ 296.918277] p9_client_clunk+0x1fc/0x240 [ 296.918289] v9fs_mount+0x69f/0x860 [ 296.988063] ? alloc_pages_current+0x15d/0x260 [ 296.992644] ? __lockdep_init_map+0x100/0x560 [ 296.995759] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.997135] mount_fs+0x92/0x2a0 [ 296.997151] vfs_kern_mount.part.0+0x5b/0x470 [ 296.997169] do_mount+0xe53/0x2a00 [ 297.017148] ? copy_mount_string+0x40/0x40 [ 297.021405] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 297.026425] ? copy_mnt_ns+0xa30/0xa30 [ 297.030311] ? copy_mount_options+0x1fa/0x2f0 [ 297.034813] ? copy_mnt_ns+0xa30/0xa30 [ 297.038701] SyS_mount+0xa8/0x120 [ 297.042162] ? copy_mnt_ns+0xa30/0xa30 [ 297.046080] do_syscall_64+0x1d5/0x640 [ 297.050405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 297.055592] RIP: 0033:0x45deb9 [ 297.058778] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 297.066486] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 297.073757] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 297.081023] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 297.088290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 297.095566] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 297.102842] [ 297.104521] Allocated by task 16301: [ 297.108237] kasan_kmalloc+0xeb/0x160 [ 297.112036] kmem_cache_alloc_trace+0x131/0x3d0 [ 297.116702] p9_fid_create+0x47/0x3a0 [ 297.120506] p9_client_attach+0x6d/0x750 [ 297.124562] v9fs_session_init+0xc03/0x1540 [ 297.128875] v9fs_mount+0x73/0x860 [ 297.132410] mount_fs+0x92/0x2a0 [ 297.135796] vfs_kern_mount.part.0+0x5b/0x470 [ 297.140313] do_mount+0xe53/0x2a00 [ 297.143848] SyS_mount+0xa8/0x120 [ 297.147295] do_syscall_64+0x1d5/0x640 [ 297.151200] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 297.156376] [ 297.157999] Freed by task 16301: [ 297.161362] kasan_slab_free+0xc3/0x1a0 [ 297.165329] kfree+0xc9/0x250 [ 297.168428] p9_client_destroy.cold+0x67/0xaa [ 297.172918] v9fs_session_close+0x45/0x2c0 [ 297.177152] v9fs_kill_super+0x49/0x90 [ 297.181035] deactivate_locked_super+0x6c/0xd0 [ 297.185599] sget_userns+0x9c4/0xc10 [ 297.189393] sget+0xd1/0x110 [ 297.192396] v9fs_mount+0x9e/0x860 [ 297.195940] mount_fs+0x92/0x2a0 [ 297.199286] vfs_kern_mount.part.0+0x5b/0x470 [ 297.203762] do_mount+0xe53/0x2a00 [ 297.207310] SyS_mount+0xa8/0x120 [ 297.210745] do_syscall_64+0x1d5/0x640 [ 297.214632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 297.219818] [ 297.221428] The buggy address belongs to the object at ffff88809e867500 [ 297.221428] which belongs to the cache kmalloc-96 of size 96 [ 297.233895] The buggy address is located 0 bytes inside of [ 297.233895] 96-byte region [ffff88809e867500, ffff88809e867560) [ 297.246444] The buggy address belongs to the page: [ 297.251365] page:ffffea00027a19c0 count:1 mapcount:0 mapping:ffff88809e867000 index:0xffff88809e867f80 [ 297.261508] flags: 0xfff00000000100(slab) [ 297.265643] raw: 00fff00000000100 ffff88809e867000 ffff88809e867f80 0000000100000017 [ 297.273510] raw: ffffea000267bde0 ffffea0002883aa0 ffff88813fe824c0 0000000000000000 [ 297.281365] page dumped because: kasan: bad access detected [ 297.287057] [ 297.288688] Memory state around the buggy address: [ 297.293604] ffff88809e867400: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 297.300940] ffff88809e867480: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 297.308276] >ffff88809e867500: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 297.315620] ^ [ 297.318965] ffff88809e867580: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 297.326310] ffff88809e867600: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 297.333663] ================================================================== [ 297.341014] Disabling lock debugging due to kernel taint [ 297.354091] Kernel panic - not syncing: panic_on_warn set ... [ 297.354091] [ 297.361473] CPU: 1 PID: 16301 Comm: syz-executor.1 Tainted: G B 4.14.206-syzkaller #0 [ 297.370560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.379904] Call Trace: [ 297.382490] dump_stack+0x1b2/0x283 [ 297.386115] panic+0x1f9/0x42d [ 297.389309] ? add_taint.cold+0x16/0x16 [ 297.393306] ? ___preempt_schedule+0x16/0x18 [ 297.397710] kasan_end_report+0x43/0x49 [ 297.401688] kasan_report_error.cold+0xa7/0x194 [ 297.406356] ? p9_client_clunk+0x1fc/0x240 [ 297.410585] __asan_report_load8_noabort+0x68/0x70 [ 297.415512] ? p9_client_clunk+0x1fc/0x240 [ 297.419750] p9_client_clunk+0x1fc/0x240 [ 297.423812] v9fs_mount+0x69f/0x860 [ 297.427438] ? alloc_pages_current+0x15d/0x260 [ 297.432012] ? __lockdep_init_map+0x100/0x560 [ 297.436502] mount_fs+0x92/0x2a0 [ 297.439866] vfs_kern_mount.part.0+0x5b/0x470 [ 297.444359] do_mount+0xe53/0x2a00 [ 297.447909] ? copy_mount_string+0x40/0x40 [ 297.452145] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 297.457163] ? copy_mnt_ns+0xa30/0xa30 [ 297.461049] ? copy_mount_options+0x1fa/0x2f0 [ 297.465539] ? copy_mnt_ns+0xa30/0xa30 [ 297.469430] SyS_mount+0xa8/0x120 [ 297.472866] ? copy_mnt_ns+0xa30/0xa30 [ 297.476745] do_syscall_64+0x1d5/0x640 [ 297.480612] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 297.485780] RIP: 0033:0x45deb9 [ 297.488948] RSP: 002b:00007fba86d5ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 297.496649] RAX: ffffffffffffffda RBX: 0000000000021800 RCX: 000000000045deb9 [ 297.503895] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000000000 [ 297.511140] RBP: 00007fba86d5aca0 R08: 00000000200005c0 R09: 0000000000000000 [ 297.518384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 297.525631] R13: 00007ffd52085f9f R14: 00007fba86d5b9c0 R15: 000000000118bf2c [ 297.533418] Kernel Offset: disabled [ 297.537029] Rebooting in 86400 seconds..