862] ? do_mount+0x69e/0x1fb0 [ 1143.022565] ? lock_acquire+0x1e4/0x540 [ 1143.026522] ? fs_reclaim_acquire+0x20/0x20 [ 1143.030854] ? lock_downgrade+0x8f0/0x8f0 [ 1143.034991] ? check_same_owner+0x340/0x340 [ 1143.039306] ? rcu_note_context_switch+0x730/0x730 [ 1143.044229] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1143.048623] __should_failslab+0x124/0x180 [ 1143.052859] should_failslab+0x9/0x14 [ 1143.056644] kmem_cache_alloc_trace+0x2cb/0x780 [ 1143.061302] ? kasan_unpoison_shadow+0x35/0x50 [ 1143.065881] ? kasan_kmalloc+0xc4/0xe0 [ 1143.069761] v9fs_mount+0x61/0x900 [ 1143.073293] ? v9fs_drop_inode+0x150/0x150 [ 1143.077514] legacy_get_tree+0x118/0x440 [ 1143.081563] vfs_get_tree+0x1cb/0x5c0 [ 1143.085353] do_mount+0x6c1/0x1fb0 [ 1143.088885] ? kasan_check_write+0x14/0x20 [ 1143.093108] ? copy_mount_string+0x40/0x40 [ 1143.097339] ? kasan_kmalloc+0xc4/0xe0 [ 1143.101224] ? kmem_cache_alloc_trace+0x318/0x780 [ 1143.106055] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1143.111581] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1143.117104] ? copy_mount_options+0x285/0x380 [ 1143.121588] ksys_mount+0x12d/0x140 [ 1143.125212] __x64_sys_mount+0xbe/0x150 [ 1143.129173] do_syscall_64+0x1b9/0x820 [ 1143.133046] ? finish_task_switch+0x1d3/0x870 [ 1143.137527] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1143.142439] ? syscall_return_slowpath+0x31d/0x5e0 [ 1143.147365] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1143.152370] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1143.157370] ? perf_trace_sys_enter+0xb10/0xb10 [ 1143.162037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1143.166869] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1143.172040] RIP: 0033:0x455e29 [ 1143.175240] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1143.195292] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1143.203001] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1143.210274] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1143.217541] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1143.224794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1143.232047] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000009 [ 1143.247254] FAULT_INJECTION: forcing a failure. [ 1143.247254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1143.259130] CPU: 0 PID: 32384 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1143.267552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.276906] Call Trace: [ 1143.279489] dump_stack+0x1c9/0x2b4 [ 1143.283109] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1143.288302] should_fail.cold.4+0xa/0x11 [ 1143.292360] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1143.297473] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 1143.302572] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 1143.307665] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 1143.312770] ? perf_tp_event+0xc40/0xc40 [ 1143.316828] ? perf_tp_event+0xc40/0xc40 [ 1143.320885] ? memset+0x31/0x40 [ 1143.324168] ? perf_trace_lock+0x49d/0x920 [ 1143.328660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1143.334202] ? should_fail+0x246/0xd86 [ 1143.338084] ? zap_class+0x740/0x740 [ 1143.341792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1143.346893] ? zap_class+0x740/0x740 [ 1143.350605] __alloc_pages_nodemask+0x36e/0xdb0 [ 1143.355616] ? strndup_user+0x77/0xd0 [ 1143.360679] ? ksys_mount+0x3c/0x140 [ 1143.364404] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1143.369411] ? proc_fail_nth_write+0x9e/0x210 [ 1143.373913] ? kasan_check_read+0x11/0x20 [ 1143.378075] ? lock_acquire+0x1e4/0x540 [ 1143.382038] ? fs_reclaim_acquire+0x20/0x20 [ 1143.386356] ? lock_downgrade+0x8f0/0x8f0 [ 1143.390511] ? lock_release+0xa30/0xa30 [ 1143.394482] ? check_same_owner+0x340/0x340 [ 1143.398813] ? lock_release+0xa30/0xa30 [ 1143.402792] cache_grow_begin+0x91/0x710 [ 1143.406856] kmem_cache_alloc_trace+0x6a5/0x780 [ 1143.411536] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1143.417078] copy_mount_options+0x5f/0x380 [ 1143.421316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1143.426849] ksys_mount+0xd0/0x140 [ 1143.430384] __x64_sys_mount+0xbe/0x150 [ 1143.434354] do_syscall_64+0x1b9/0x820 [ 1143.438248] ? finish_task_switch+0x1d3/0x870 [ 1143.442741] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1143.447673] ? syscall_return_slowpath+0x31d/0x5e0 [ 1143.452599] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1143.457626] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1143.462634] ? perf_trace_sys_enter+0xb10/0xb10 [ 1143.467307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1143.472151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1143.477344] RIP: 0033:0x455e29 [ 1143.480517] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1143.499905] RSP: 002b:00007f8c06fc6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1143.507609] RAX: ffffffffffffffda RBX: 00007f8c06fc76d4 RCX: 0000000000455e29 [ 1143.514890] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 1143.522161] RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 04:22:03 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x4d20020000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:03 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d}, 0x2c}, {@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1143.529421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1143.536684] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000002 [ 1143.544969] 9pnet: Could not find request transport: fi 04:22:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:03 executing program 2 (fault-call:3 fault-nth:10): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1143.575462] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1143.586354] 9pnet: Insufficient options for proto=fd [ 1143.609408] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1143.663316] FAULT_INJECTION: forcing a failure. [ 1143.663316] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.674648] CPU: 1 PID: 32412 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1143.683058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.692407] Call Trace: [ 1143.694990] dump_stack+0x1c9/0x2b4 [ 1143.698612] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1143.703810] ? perf_trace_lock+0xde/0x920 [ 1143.707951] should_fail.cold.4+0xa/0x11 [ 1143.712002] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1143.717100] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1143.722112] ? lock_acquire+0x1e4/0x540 [ 1143.726085] ? is_bpf_text_address+0xae/0x170 [ 1143.730581] ? lock_downgrade+0x8f0/0x8f0 [ 1143.734724] ? lock_release+0xa30/0xa30 [ 1143.738704] ? lock_acquire+0x1e4/0x540 [ 1143.742669] ? fs_reclaim_acquire+0x20/0x20 [ 1143.746990] ? lock_downgrade+0x8f0/0x8f0 [ 1143.751143] ? is_bpf_text_address+0xd7/0x170 [ 1143.755634] ? check_same_owner+0x340/0x340 [ 1143.759945] ? __kernel_text_address+0xd/0x40 [ 1143.764427] ? rcu_note_context_switch+0x730/0x730 [ 1143.769349] __should_failslab+0x124/0x180 [ 1143.773574] should_failslab+0x9/0x14 [ 1143.777362] kmem_cache_alloc_trace+0x2cb/0x780 [ 1143.782025] ? save_stack+0xa9/0xd0 [ 1143.785646] p9_client_create+0x114/0x16c9 [ 1143.789868] ? vfs_get_tree+0x1cb/0x5c0 [ 1143.793833] ? do_mount+0x6c1/0x1fb0 [ 1143.797534] ? ksys_mount+0x12d/0x140 [ 1143.801324] ? do_syscall_64+0x1b9/0x820 [ 1143.805373] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1143.810730] ? p9_client_read+0xc60/0xc60 [ 1143.814876] ? lock_acquire+0x1e4/0x540 [ 1143.818847] ? fs_reclaim_acquire+0x20/0x20 [ 1143.823155] ? lock_downgrade+0x8f0/0x8f0 [ 1143.827294] ? lock_release+0xa30/0xa30 [ 1143.831268] ? __lockdep_init_map+0x105/0x590 [ 1143.835753] ? lockdep_init_map+0x9/0x10 [ 1143.839803] ? kasan_check_write+0x14/0x20 [ 1143.844027] ? __init_rwsem+0x1cc/0x2a0 [ 1143.847989] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1143.852999] ? __kmalloc_track_caller+0x311/0x760 [ 1143.857834] ? save_stack+0xa9/0xd0 [ 1143.861451] ? save_stack+0x43/0xd0 [ 1143.865063] ? kasan_kmalloc+0xc4/0xe0 [ 1143.868950] ? kmem_cache_alloc_trace+0x152/0x780 [ 1143.873794] ? memcpy+0x45/0x50 [ 1143.877067] v9fs_session_init+0x21a/0x1a80 [ 1143.881388] ? rcu_note_context_switch+0x730/0x730 [ 1143.886308] ? do_mount+0x69e/0x1fb0 [ 1143.890021] ? lock_acquire+0x1e4/0x540 [ 1143.893987] ? v9fs_show_options+0x7e0/0x7e0 [ 1143.898385] ? lock_release+0xa30/0xa30 [ 1143.902349] ? check_same_owner+0x340/0x340 [ 1143.906657] ? lock_downgrade+0x8f0/0x8f0 [ 1143.910799] ? kasan_unpoison_shadow+0x35/0x50 [ 1143.915371] ? kasan_kmalloc+0xc4/0xe0 [ 1143.919252] ? kmem_cache_alloc_trace+0x318/0x780 [ 1143.924096] ? kasan_unpoison_shadow+0x35/0x50 [ 1143.928675] ? kasan_kmalloc+0xc4/0xe0 [ 1143.932556] v9fs_mount+0x7c/0x900 [ 1143.936085] ? v9fs_drop_inode+0x150/0x150 [ 1143.940317] legacy_get_tree+0x118/0x440 [ 1143.944730] vfs_get_tree+0x1cb/0x5c0 [ 1143.948521] do_mount+0x6c1/0x1fb0 [ 1143.952062] ? kasan_check_read+0x11/0x20 [ 1143.956202] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1143.960609] ? copy_mount_string+0x40/0x40 [ 1143.964834] ? retint_kernel+0x10/0x10 [ 1143.968717] ? copy_mount_options+0x1f0/0x380 [ 1143.973216] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 1143.978060] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1143.983582] ? copy_mount_options+0x285/0x380 [ 1143.988068] ksys_mount+0x12d/0x140 [ 1143.991684] __x64_sys_mount+0xbe/0x150 [ 1143.995647] do_syscall_64+0x1b9/0x820 [ 1143.999518] ? finish_task_switch+0x1d3/0x870 [ 1144.004001] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1144.008924] ? syscall_return_slowpath+0x31d/0x5e0 [ 1144.013839] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1144.018845] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1144.023868] ? perf_trace_sys_enter+0xb10/0xb10 [ 1144.028525] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1144.033360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1144.038533] RIP: 0033:0x455e29 [ 1144.041703] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:22:04 executing program 3 (fault-call:4 fault-nth:3): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:04 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d}, 0x2c}, {@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:04 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x9000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1144.060976] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1144.068678] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1144.075934] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1144.083190] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1144.090444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1144.097708] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000a [ 1144.146551] 9pnet: Insufficient options for proto=fd [ 1144.168232] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1144.188993] 9pnet: Insufficient options for proto=fd [ 1144.198849] FAULT_INJECTION: forcing a failure. [ 1144.198849] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1144.210702] CPU: 1 PID: 32419 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1144.219119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.228484] Call Trace: [ 1144.231098] dump_stack+0x1c9/0x2b4 [ 1144.234744] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1144.239950] should_fail.cold.4+0xa/0x11 [ 1144.244025] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1144.249139] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 1144.253575] ? finish_task_switch+0x1d3/0x870 [ 1144.258082] ? lock_downgrade+0x8f0/0x8f0 [ 1144.262224] ? finish_task_switch+0x18a/0x870 [ 1144.266731] ? kasan_check_read+0x11/0x20 [ 1144.270891] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1144.275310] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1144.279899] ? compat_start_thread+0x80/0x80 [ 1144.284323] ? trace_hardirqs_on+0xd/0x10 [ 1144.288481] ? _raw_spin_unlock_irq+0x27/0x70 [ 1144.293013] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1144.298587] ? should_fail+0x246/0xd86 [ 1144.302478] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1144.307578] __alloc_pages_nodemask+0x36e/0xdb0 [ 1144.312239] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1144.317247] ? __sched_text_start+0x8/0x8 [ 1144.321406] ? kernel_text_address+0x79/0xf0 [ 1144.325824] ? lock_acquire+0x1e4/0x540 [ 1144.330416] ? fs_reclaim_acquire+0x20/0x20 [ 1144.334750] ? lock_downgrade+0x8f0/0x8f0 [ 1144.338898] ? lock_release+0xa30/0xa30 [ 1144.342877] ? check_same_owner+0x340/0x340 [ 1144.347198] ? save_stack+0xa9/0xd0 [ 1144.350837] cache_grow_begin+0x91/0x710 [ 1144.354892] kmem_cache_alloc+0x689/0x760 [ 1144.359048] getname_flags+0xd0/0x5a0 [ 1144.362852] user_path_at_empty+0x2d/0x50 [ 1144.366984] do_mount+0x180/0x1fb0 [ 1144.370510] ? check_same_owner+0x340/0x340 [ 1144.374826] ? lock_release+0xa30/0xa30 [ 1144.378786] ? copy_mount_string+0x40/0x40 [ 1144.383010] ? retint_kernel+0x10/0x10 [ 1144.386893] ? copy_mount_options+0x213/0x380 [ 1144.391372] ? copy_mount_options+0x1a1/0x380 [ 1144.395861] ? __sanitizer_cov_trace_pc+0x20/0x50 [ 1144.400690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1144.406211] ? copy_mount_options+0x285/0x380 [ 1144.410702] ksys_mount+0x12d/0x140 [ 1144.414946] __x64_sys_mount+0xbe/0x150 [ 1144.418915] do_syscall_64+0x1b9/0x820 [ 1144.422797] ? finish_task_switch+0x1d3/0x870 [ 1144.427285] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1144.432209] ? syscall_return_slowpath+0x31d/0x5e0 [ 1144.437140] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1144.442151] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1144.447160] ? perf_trace_sys_enter+0xb10/0xb10 [ 1144.451839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1144.456684] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1144.461865] RIP: 0033:0x455e29 [ 1144.465060] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1144.484257] RSP: 002b:00007f8c06fc6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1144.491979] RAX: ffffffffffffffda RBX: 00007f8c06fc76d4 RCX: 0000000000455e29 [ 1144.499257] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 1144.506518] RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 04:22:04 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5428, &(0x7f0000000080)) 04:22:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:04 executing program 2 (fault-call:3 fault-nth:11): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:04 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fw,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:04 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2204d, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1144.513782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1144.521057] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000003 [ 1144.559801] 9pnet: Could not find request transport: fw 04:22:04 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d}, 0x2c}, {@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1144.575051] FAULT_INJECTION: forcing a failure. [ 1144.575051] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.586424] CPU: 0 PID: 32445 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1144.594835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1144.604192] Call Trace: [ 1144.606818] dump_stack+0x1c9/0x2b4 [ 1144.610498] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1144.615683] ? perf_trace_lock+0xde/0x920 [ 1144.619820] should_fail.cold.4+0xa/0x11 [ 1144.623869] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1144.628959] ? save_stack+0xa9/0xd0 [ 1144.632569] ? save_stack+0x43/0xd0 [ 1144.636193] ? kasan_kmalloc+0xc4/0xe0 [ 1144.640070] ? __kmalloc_track_caller+0x14a/0x760 [ 1144.644898] ? kstrdup+0x39/0x70 [ 1144.648263] ? v9fs_session_init+0xdd/0x1a80 [ 1144.652670] ? v9fs_mount+0x7c/0x900 [ 1144.656373] ? vfs_get_tree+0x1cb/0x5c0 [ 1144.660333] ? do_mount+0x6c1/0x1fb0 [ 1144.664032] ? __x64_sys_mount+0xbe/0x150 [ 1144.668165] ? do_syscall_64+0x1b9/0x820 [ 1144.672225] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1144.677592] ? lock_acquire+0x1e4/0x540 [ 1144.681576] ? fs_reclaim_acquire+0x20/0x20 [ 1144.685884] ? lock_downgrade+0x8f0/0x8f0 [ 1144.690024] ? check_same_owner+0x340/0x340 [ 1144.694337] ? rcu_note_context_switch+0x730/0x730 [ 1144.699255] __should_failslab+0x124/0x180 [ 1144.703482] should_failslab+0x9/0x14 [ 1144.707281] __kmalloc_track_caller+0x2c4/0x760 [ 1144.711947] ? save_stack+0xa9/0xd0 [ 1144.715558] ? save_stack+0x43/0xd0 [ 1144.719169] ? kasan_kmalloc+0xc4/0xe0 [ 1144.723043] ? kmem_cache_alloc_trace+0x152/0x780 [ 1144.727872] ? v9fs_session_init+0x115/0x1a80 [ 1144.732373] kstrdup+0x39/0x70 [ 1144.735555] v9fs_session_init+0x115/0x1a80 [ 1144.739860] ? rcu_note_context_switch+0x730/0x730 [ 1144.744773] ? do_mount+0x69e/0x1fb0 [ 1144.748476] ? lock_acquire+0x1e4/0x540 [ 1144.752435] ? fs_reclaim_acquire+0x20/0x20 [ 1144.756753] ? v9fs_show_options+0x7e0/0x7e0 [ 1144.761235] ? lock_release+0xa30/0xa30 [ 1144.765196] ? check_same_owner+0x340/0x340 [ 1144.769507] ? kasan_unpoison_shadow+0x35/0x50 [ 1144.774089] ? kasan_kmalloc+0xc4/0xe0 [ 1144.777965] ? kmem_cache_alloc_trace+0x318/0x780 [ 1144.782793] ? kasan_unpoison_shadow+0x35/0x50 [ 1144.787362] ? kasan_kmalloc+0xc4/0xe0 [ 1144.791248] v9fs_mount+0x7c/0x900 [ 1144.794773] ? v9fs_drop_inode+0x150/0x150 [ 1144.798994] legacy_get_tree+0x118/0x440 [ 1144.803056] vfs_get_tree+0x1cb/0x5c0 [ 1144.806846] do_mount+0x6c1/0x1fb0 [ 1144.810391] ? kasan_check_write+0x14/0x20 [ 1144.814620] ? copy_mount_string+0x40/0x40 [ 1144.818844] ? kasan_kmalloc+0xc4/0xe0 [ 1144.822740] ? kmem_cache_alloc_trace+0x318/0x780 [ 1144.827579] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1144.833109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1144.838633] ? copy_mount_options+0x285/0x380 [ 1144.843116] ksys_mount+0x12d/0x140 [ 1144.846739] __x64_sys_mount+0xbe/0x150 [ 1144.850703] do_syscall_64+0x1b9/0x820 [ 1144.854595] ? finish_task_switch+0x1d3/0x870 [ 1144.859078] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1144.863996] ? syscall_return_slowpath+0x31d/0x5e0 [ 1144.868918] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1144.873922] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1144.878924] ? perf_trace_sys_enter+0xb10/0xb10 [ 1144.883578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1144.888428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1144.893614] RIP: 0033:0x455e29 [ 1144.896783] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1144.915998] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 04:22:05 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x1000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1144.923701] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1144.930952] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1144.938219] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1144.945475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1144.952734] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000b [ 1144.962000] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:05 executing program 3 (fault-call:4 fault-nth:4): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:05 executing program 2 (fault-call:3 fault-nth:12): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1144.989493] 9pnet: Could not find request transport: fw [ 1145.018279] 9pnet: Insufficient options for proto=fd 04:22:05 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fI,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1145.074819] 9pnet: Insufficient options for proto=fd [ 1145.099811] FAULT_INJECTION: forcing a failure. [ 1145.099811] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.111162] CPU: 0 PID: 32462 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1145.119590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.128961] Call Trace: [ 1145.131607] dump_stack+0x1c9/0x2b4 [ 1145.135275] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1145.140526] ? perf_trace_lock+0x49d/0x920 [ 1145.144808] should_fail.cold.4+0xa/0x11 [ 1145.148877] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1145.154018] ? kasan_check_write+0x14/0x20 [ 1145.158308] ? zap_class+0x740/0x740 [ 1145.162571] ? debug_check_no_obj_freed+0x30b/0x595 [ 1145.167859] ? path_lookupat.isra.45+0x27d/0xbf0 [ 1145.172619] ? trace_hardirqs_off+0xd/0x10 [ 1145.176849] ? quarantine_put+0x10d/0x1b0 [ 1145.181006] ? lock_acquire+0x1e4/0x540 [ 1145.184981] ? fs_reclaim_acquire+0x20/0x20 [ 1145.190538] ? lock_downgrade+0x8f0/0x8f0 [ 1145.195057] ? check_same_owner+0x340/0x340 [ 1145.199372] ? lock_downgrade+0x8f0/0x8f0 [ 1145.203524] ? rcu_note_context_switch+0x730/0x730 [ 1145.208458] __should_failslab+0x124/0x180 [ 1145.212693] should_failslab+0x9/0x14 [ 1145.216497] kmem_cache_alloc_trace+0x2cb/0x780 [ 1145.221172] ? kasan_check_write+0x14/0x20 [ 1145.225400] ? do_raw_read_unlock+0x3f/0x60 [ 1145.229737] vfs_new_fs_context+0x5a/0x700 [ 1145.233975] do_mount+0x5cf/0x1fb0 [ 1145.237507] ? kasan_check_read+0x11/0x20 [ 1145.241648] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1145.246055] ? copy_mount_string+0x40/0x40 [ 1145.250283] ? kasan_kmalloc+0xc4/0xe0 [ 1145.254167] ? kmem_cache_alloc_trace+0x318/0x780 [ 1145.259026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.264577] ? copy_mount_options+0x285/0x380 [ 1145.269069] ksys_mount+0x12d/0x140 [ 1145.272691] __x64_sys_mount+0xbe/0x150 [ 1145.276659] do_syscall_64+0x1b9/0x820 [ 1145.280535] ? finish_task_switch+0x1d3/0x870 [ 1145.285032] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1145.289955] ? syscall_return_slowpath+0x31d/0x5e0 [ 1145.294876] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1145.299886] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1145.304897] ? perf_trace_sys_enter+0xb10/0xb10 [ 1145.309566] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1145.314410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.319590] RIP: 0033:0x455e29 [ 1145.322765] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1145.342242] RSP: 002b:00007f8c06fc6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.349965] RAX: ffffffffffffffda RBX: 00007f8c06fc76d4 RCX: 0000000000455e29 [ 1145.358153] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 1145.365428] RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 [ 1145.372686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1145.379943] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000004 [ 1145.389564] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:05 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d}, 0x2c}, {@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:05 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x3000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1145.398231] FAULT_INJECTION: forcing a failure. [ 1145.398231] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.412487] CPU: 1 PID: 32469 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1145.420895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1145.430262] Call Trace: [ 1145.432846] dump_stack+0x1c9/0x2b4 [ 1145.436464] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1145.441641] ? trace_hardirqs_on+0x10/0x10 [ 1145.445912] should_fail.cold.4+0xa/0x11 [ 1145.449962] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1145.455053] ? trace_hardirqs_on+0x10/0x10 [ 1145.459288] ? set_pageblock_migratetype+0x40/0x40 [ 1145.464208] ? kasan_check_read+0x11/0x20 [ 1145.468344] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1145.472917] ? perf_trace_lock+0xde/0x920 [ 1145.477054] ? perf_trace_lock+0xde/0x920 [ 1145.481186] ? zap_class+0x740/0x740 [ 1145.484886] ? zap_class+0x740/0x740 [ 1145.488600] ? lock_acquire+0x1e4/0x540 [ 1145.492579] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1145.498111] ? kernel_poison_pages+0x136/0x220 [ 1145.502852] ? kasan_unpoison_shadow+0x35/0x50 [ 1145.507422] ? kasan_alloc_pages+0x38/0x40 [ 1145.511643] ? get_page_from_freelist+0x107a/0x4620 [ 1145.516664] __should_failslab+0x124/0x180 [ 1145.520893] should_failslab+0x9/0x14 [ 1145.524684] kmem_cache_alloc+0x47/0x760 [ 1145.528732] ? lock_acquire+0x1e4/0x540 [ 1145.532694] ? is_bpf_text_address+0xae/0x170 [ 1145.537177] ? lock_downgrade+0x8f0/0x8f0 [ 1145.541316] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 1145.547033] idr_get_free+0x887/0x10d0 [ 1145.550913] ? radix_tree_iter_tag_clear+0xd0/0xd0 [ 1145.555845] ? __kernel_text_address+0xd/0x40 [ 1145.560325] ? unwind_get_return_address+0x61/0xa0 [ 1145.565249] ? save_stack+0xa9/0xd0 [ 1145.568862] ? save_stack+0x43/0xd0 [ 1145.572475] ? kasan_kmalloc+0xc4/0xe0 [ 1145.576349] ? kmem_cache_alloc_trace+0x152/0x780 [ 1145.581190] ? p9_idpool_create+0x42/0x120 [ 1145.585422] ? p9_client_create+0x286/0x16c9 [ 1145.589816] ? v9fs_session_init+0x21a/0x1a80 [ 1145.594306] ? v9fs_mount+0x7c/0x900 [ 1145.598011] ? legacy_get_tree+0x118/0x440 [ 1145.602234] ? do_mount+0x6c1/0x1fb0 [ 1145.605939] ? ksys_mount+0x12d/0x140 [ 1145.609723] ? __x64_sys_mount+0xbe/0x150 [ 1145.613867] ? do_syscall_64+0x1b9/0x820 [ 1145.617929] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.623277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.628629] ? lock_downgrade+0x8f0/0x8f0 [ 1145.632782] idr_alloc_u32+0x1d4/0x3a0 [ 1145.636673] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 1145.641938] ? p9_idpool_get+0x23/0x70 [ 1145.645811] ? check_same_owner+0x340/0x340 [ 1145.650121] idr_alloc+0x111/0x1b0 [ 1145.653649] ? idr_alloc_u32+0x3a0/0x3a0 [ 1145.657698] ? do_raw_spin_lock+0xc1/0x200 [ 1145.661922] p9_idpool_get+0x3d/0x70 [ 1145.665637] p9_client_create+0x369/0x16c9 [ 1145.669869] ? vfs_get_tree+0x1cb/0x5c0 [ 1145.673828] ? do_mount+0x6c1/0x1fb0 [ 1145.677536] ? ksys_mount+0x12d/0x140 [ 1145.681325] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.686677] ? p9_client_read+0xc60/0xc60 [ 1145.690814] ? lock_acquire+0x1e4/0x540 [ 1145.694774] ? fs_reclaim_acquire+0x20/0x20 [ 1145.699084] ? lock_downgrade+0x8f0/0x8f0 [ 1145.703218] ? lock_release+0xa30/0xa30 [ 1145.707176] ? __lockdep_init_map+0x105/0x590 [ 1145.711663] ? kasan_check_write+0x14/0x20 [ 1145.715880] ? __init_rwsem+0x1cc/0x2a0 [ 1145.719838] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1145.724840] ? __kmalloc_track_caller+0x311/0x760 [ 1145.729683] ? save_stack+0xa9/0xd0 [ 1145.733307] ? save_stack+0x43/0xd0 [ 1145.736918] ? kasan_kmalloc+0xc4/0xe0 [ 1145.740799] ? kmem_cache_alloc_trace+0x152/0x780 [ 1145.745639] ? memcpy+0x45/0x50 [ 1145.748927] v9fs_session_init+0x21a/0x1a80 [ 1145.753236] ? rcu_note_context_switch+0x730/0x730 [ 1145.758150] ? do_mount+0x69e/0x1fb0 [ 1145.761856] ? lock_acquire+0x1e4/0x540 [ 1145.765817] ? v9fs_show_options+0x7e0/0x7e0 [ 1145.770212] ? lock_release+0xa30/0xa30 [ 1145.774171] ? check_same_owner+0x340/0x340 [ 1145.778481] ? kasan_unpoison_shadow+0x35/0x50 [ 1145.783049] ? kasan_kmalloc+0xc4/0xe0 [ 1145.786923] ? kmem_cache_alloc_trace+0x318/0x780 [ 1145.791753] ? kasan_unpoison_shadow+0x35/0x50 [ 1145.796322] ? kasan_kmalloc+0xc4/0xe0 [ 1145.800305] v9fs_mount+0x7c/0x900 [ 1145.803837] ? v9fs_drop_inode+0x150/0x150 [ 1145.808062] legacy_get_tree+0x118/0x440 [ 1145.812120] vfs_get_tree+0x1cb/0x5c0 [ 1145.815907] do_mount+0x6c1/0x1fb0 [ 1145.819693] ? check_same_owner+0x340/0x340 [ 1145.824003] ? lock_release+0xa30/0xa30 [ 1145.833352] ? copy_mount_string+0x40/0x40 [ 1145.837573] ? retint_kernel+0x10/0x10 [ 1145.841448] ? copy_mount_options+0x1a1/0x380 [ 1145.845929] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1145.850759] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1145.856281] ? copy_mount_options+0x285/0x380 [ 1145.860763] ksys_mount+0x12d/0x140 [ 1145.864376] __x64_sys_mount+0xbe/0x150 [ 1145.868350] do_syscall_64+0x1b9/0x820 [ 1145.872233] ? syscall_slow_exit_work+0x500/0x500 [ 1145.877060] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1145.881984] ? syscall_return_slowpath+0x31d/0x5e0 [ 1145.886899] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1145.891900] ? perf_trace_sys_enter+0xb10/0xb10 [ 1145.896554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1145.901394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1145.906589] RIP: 0033:0x455e29 [ 1145.909771] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1145.928997] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1145.936695] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1145.943966] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 04:22:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000400", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1145.951225] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1145.958478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1145.965731] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000c [ 1146.009120] 9pnet: Insufficient options for proto=fd [ 1146.019154] 9pnet: Could not find request transport: fI [ 1146.061179] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:06 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x545d, &(0x7f0000000080)) 04:22:06 executing program 2 (fault-call:3 fault-nth:13): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000080}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:06 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x3f00, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:06 executing program 3 (fault-call:4 fault-nth:5): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:06 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fg,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:06 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d}, 0x2c}, {@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:06 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1146.168860] 9pnet: Insufficient options for proto=fd [ 1146.183817] 9pnet: Could not find request transport: fg [ 1146.196515] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1146.210439] 9pnet: Insufficient options for proto=fd [ 1146.213135] FAULT_INJECTION: forcing a failure. [ 1146.213135] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.227039] CPU: 1 PID: 32507 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1146.235442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.244836] Call Trace: [ 1146.247422] dump_stack+0x1c9/0x2b4 [ 1146.251042] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1146.256218] ? putname+0xf2/0x130 [ 1146.259657] ? filename_lookup+0x397/0x510 [ 1146.263880] ? perf_trace_lock+0xde/0x920 [ 1146.268019] should_fail.cold.4+0xa/0x11 [ 1146.272067] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1146.277184] ? kasan_check_write+0x14/0x20 [ 1146.281412] ? do_raw_spin_lock+0xc1/0x200 [ 1146.285632] ? zap_class+0x740/0x740 [ 1146.289336] ? debug_check_no_obj_freed+0x30b/0x595 [ 1146.294351] ? path_lookupat.isra.45+0x27d/0xbf0 [ 1146.299098] ? trace_hardirqs_off+0xd/0x10 [ 1146.303319] ? quarantine_put+0x10d/0x1b0 [ 1146.307463] ? lock_acquire+0x1e4/0x540 [ 1146.311689] ? fs_reclaim_acquire+0x20/0x20 [ 1146.316001] ? lock_downgrade+0x8f0/0x8f0 [ 1146.320144] ? check_same_owner+0x340/0x340 [ 1146.324458] ? lock_downgrade+0x8f0/0x8f0 [ 1146.328608] ? rcu_note_context_switch+0x730/0x730 [ 1146.333528] __should_failslab+0x124/0x180 [ 1146.337753] should_failslab+0x9/0x14 [ 1146.341984] kmem_cache_alloc_trace+0x2cb/0x780 [ 1146.346665] ? kasan_check_write+0x14/0x20 [ 1146.350897] ? do_raw_read_unlock+0x3f/0x60 [ 1146.355211] vfs_new_fs_context+0x5a/0x700 [ 1146.359439] do_mount+0x5cf/0x1fb0 [ 1146.362971] ? kasan_check_write+0x14/0x20 [ 1146.367197] ? copy_mount_string+0x40/0x40 [ 1146.371418] ? retint_kernel+0x10/0x10 [ 1146.375299] ? __sanitizer_cov_trace_const_cmp8+0x1/0x20 [ 1146.380919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1146.386456] ? copy_mount_options+0x285/0x380 [ 1146.390963] ksys_mount+0x12d/0x140 [ 1146.394596] __x64_sys_mount+0xbe/0x150 [ 1146.398566] do_syscall_64+0x1b9/0x820 [ 1146.402442] ? finish_task_switch+0x1d3/0x870 [ 1146.406945] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1146.411877] ? syscall_return_slowpath+0x31d/0x5e0 [ 1146.416809] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1146.421816] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1146.426908] ? perf_trace_sys_enter+0xb10/0xb10 [ 1146.431580] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1146.436417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1146.441600] RIP: 0033:0x455e29 [ 1146.444774] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1146.464001] RSP: 002b:00007f8c06fc6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1146.471708] RAX: ffffffffffffffda RBX: 00007f8c06fc76d4 RCX: 0000000000455e29 [ 1146.478977] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 1146.486244] RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 [ 1146.493603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1146.500870] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000005 [ 1146.516429] FAULT_INJECTION: forcing a failure. [ 1146.516429] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.527721] CPU: 0 PID: 32517 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1146.536128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1146.545481] Call Trace: [ 1146.548086] dump_stack+0x1c9/0x2b4 [ 1146.551710] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1146.556905] ? perf_trace_lock+0xde/0x920 [ 1146.561070] should_fail.cold.4+0xa/0x11 [ 1146.565134] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1146.570237] ? save_stack+0xa9/0xd0 [ 1146.573859] ? save_stack+0x43/0xd0 [ 1146.577507] ? kasan_kmalloc+0xc4/0xe0 [ 1146.581400] ? __kmalloc_track_caller+0x14a/0x760 [ 1146.586266] ? kstrdup+0x39/0x70 [ 1146.589629] ? p9_client_create+0x48f/0x16c9 [ 1146.594040] ? v9fs_session_init+0x21a/0x1a80 [ 1146.598550] ? legacy_get_tree+0x118/0x440 [ 1146.602788] ? vfs_get_tree+0x1cb/0x5c0 [ 1146.607111] ? ksys_mount+0x12d/0x140 [ 1146.610908] ? __x64_sys_mount+0xbe/0x150 [ 1146.615060] ? do_syscall_64+0x1b9/0x820 [ 1146.619117] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1146.625106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1146.630659] ? node_tag_clear+0xc0/0x1c0 [ 1146.634722] ? lock_acquire+0x1e4/0x540 [ 1146.638707] ? fs_reclaim_acquire+0x20/0x20 [ 1146.643034] ? lock_downgrade+0x8f0/0x8f0 [ 1146.647200] ? check_same_owner+0x340/0x340 [ 1146.651526] ? p9_idpool_get+0x4a/0x70 [ 1146.655425] ? rcu_note_context_switch+0x730/0x730 [ 1146.660358] __should_failslab+0x124/0x180 [ 1146.664611] should_failslab+0x9/0x14 [ 1146.668428] __kmalloc+0x2c8/0x760 [ 1146.671968] ? match_wildcard+0x3c0/0x3c0 [ 1146.676110] ? match_strdup+0x5e/0xa0 [ 1146.679918] match_strdup+0x5e/0xa0 [ 1146.683545] p9_client_create+0x6c9/0x16c9 [ 1146.687794] ? p9_client_read+0xc60/0xc60 [ 1146.691938] ? lock_acquire+0x1e4/0x540 [ 1146.695907] ? fs_reclaim_acquire+0x20/0x20 [ 1146.700229] ? lock_release+0xa30/0xa30 [ 1146.704197] ? __lockdep_init_map+0x105/0x590 [ 1146.708691] ? kasan_check_write+0x14/0x20 [ 1146.712920] ? __init_rwsem+0x1cc/0x2a0 [ 1146.716909] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1146.721931] ? __kmalloc_track_caller+0x311/0x760 [ 1146.726770] ? save_stack+0xa9/0xd0 [ 1146.730404] ? save_stack+0x43/0xd0 [ 1146.734026] ? kasan_kmalloc+0xc4/0xe0 [ 1146.737906] ? kmem_cache_alloc_trace+0x152/0x780 [ 1146.742740] ? memcpy+0x45/0x50 [ 1146.746027] v9fs_session_init+0x21a/0x1a80 [ 1146.750356] ? rcu_note_context_switch+0x730/0x730 [ 1146.755296] ? do_mount+0x69e/0x1fb0 [ 1146.759008] ? lock_acquire+0x1e4/0x540 [ 1146.762993] ? v9fs_show_options+0x7e0/0x7e0 [ 1146.767404] ? lock_release+0xa30/0xa30 [ 1146.771370] ? check_same_owner+0x340/0x340 [ 1146.775687] ? lock_downgrade+0x8f0/0x8f0 [ 1146.779827] ? kasan_unpoison_shadow+0x35/0x50 [ 1146.784496] ? kasan_kmalloc+0xc4/0xe0 [ 1146.788383] ? kmem_cache_alloc_trace+0x318/0x780 [ 1146.793213] ? kasan_unpoison_shadow+0x35/0x50 [ 1146.798051] ? kasan_kmalloc+0xc4/0xe0 [ 1146.801934] v9fs_mount+0x7c/0x900 [ 1146.805468] ? v9fs_drop_inode+0x150/0x150 [ 1146.809698] legacy_get_tree+0x118/0x440 [ 1146.813755] vfs_get_tree+0x1cb/0x5c0 [ 1146.817555] do_mount+0x6c1/0x1fb0 [ 1146.821110] ? check_same_owner+0x340/0x340 [ 1146.825427] ? lock_release+0xa30/0xa30 [ 1146.829416] ? copy_mount_string+0x40/0x40 [ 1146.833642] ? kasan_kmalloc+0xc4/0xe0 [ 1146.837533] ? kmem_cache_alloc_trace+0x318/0x780 [ 1146.842373] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1146.847994] ? _copy_from_user+0xdf/0x150 [ 1146.852135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1146.857669] ? copy_mount_options+0x285/0x380 [ 1146.862159] ksys_mount+0x12d/0x140 [ 1146.865778] __x64_sys_mount+0xbe/0x150 [ 1146.869747] do_syscall_64+0x1b9/0x820 [ 1146.874160] ? finish_task_switch+0x1d3/0x870 [ 1146.878649] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1146.883567] ? syscall_return_slowpath+0x31d/0x5e0 [ 1146.888499] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1146.893506] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1146.898517] ? perf_trace_sys_enter+0xb10/0xb10 [ 1146.903181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1146.908025] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1146.913206] RIP: 0033:0x455e29 [ 1146.916382] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1146.935600] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1146.943301] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1146.950560] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1146.957819] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1146.965076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 04:22:07 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fR,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:07 executing program 3 (fault-call:4 fault-nth:6): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1146.972334] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000d 04:22:07 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:07 executing program 2 (fault-call:3 fault-nth:14): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1147.039904] 9pnet: Could not find request transport: fR [ 1147.077234] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:07 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xfeffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1147.091969] 9pnet: Insufficient options for proto=fd [ 1147.133673] FAULT_INJECTION: forcing a failure. [ 1147.133673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1147.136649] FAULT_INJECTION: forcing a failure. [ 1147.136649] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.145521] CPU: 1 PID: 32533 Comm: syz-executor3 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1147.145531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1147.145535] Call Trace: [ 1147.145559] dump_stack+0x1c9/0x2b4 [ 1147.145587] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1147.185912] should_fail.cold.4+0xa/0x11 [ 1147.190873] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1147.196000] ? is_bpf_text_address+0xae/0x170 [ 1147.200493] ? lock_downgrade+0x8f0/0x8f0 [ 1147.204642] ? trace_hardirqs_on+0x10/0x10 [ 1147.208888] ? kasan_check_read+0x11/0x20 [ 1147.213038] ? rcu_is_watching+0x8c/0x150 [ 1147.217186] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1147.221864] ? is_bpf_text_address+0xd7/0x170 [ 1147.226379] ? perf_trace_lock+0xde/0x920 [ 1147.230542] ? __kernel_text_address+0xd/0x40 [ 1147.235040] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1147.240584] ? should_fail+0x246/0xd86 [ 1147.244474] ? zap_class+0x740/0x740 [ 1147.248204] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1147.253324] __alloc_pages_nodemask+0x36e/0xdb0 [ 1147.258003] ? save_stack+0xa9/0xd0 [ 1147.261650] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1147.266684] ? ksys_mount+0x12d/0x140 [ 1147.270494] ? do_syscall_64+0x1b9/0x820 [ 1147.274552] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.279920] ? trace_hardirqs_off+0xd/0x10 [ 1147.284170] ? lock_acquire+0x1e4/0x540 [ 1147.288148] ? fs_reclaim_acquire+0x20/0x20 [ 1147.292465] ? lock_downgrade+0x8f0/0x8f0 [ 1147.296610] ? lock_release+0xa30/0xa30 [ 1147.300582] ? check_same_owner+0x340/0x340 [ 1147.304906] cache_grow_begin+0x91/0x710 [ 1147.308969] __kmalloc_track_caller+0x684/0x760 [ 1147.313637] ? legacy_parse_monolithic+0xc1/0x1d0 [ 1147.318485] kmemdup+0x24/0x50 [ 1147.321681] legacy_parse_monolithic+0xc1/0x1d0 [ 1147.326355] ? legacy_validate+0x210/0x210 [ 1147.330593] do_mount+0x69e/0x1fb0 [ 1147.334135] ? check_same_owner+0x340/0x340 [ 1147.338465] ? lock_release+0xa30/0xa30 [ 1147.342710] ? copy_mount_string+0x40/0x40 [ 1147.347293] ? retint_kernel+0x10/0x10 [ 1147.351183] ? copy_mount_options+0x1f0/0x380 [ 1147.355693] ? copy_mount_options+0x206/0x380 [ 1147.360220] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1147.365753] ? copy_mount_options+0x285/0x380 [ 1147.370258] ksys_mount+0x12d/0x140 [ 1147.373884] __x64_sys_mount+0xbe/0x150 [ 1147.377857] do_syscall_64+0x1b9/0x820 [ 1147.381743] ? finish_task_switch+0x1d3/0x870 [ 1147.386237] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1147.391164] ? syscall_return_slowpath+0x31d/0x5e0 [ 1147.396093] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1147.401113] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1147.406130] ? perf_trace_sys_enter+0xb10/0xb10 [ 1147.411058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1147.415911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.421121] RIP: 0033:0x455e29 [ 1147.424309] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1147.443567] RSP: 002b:00007f8c06fc6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1147.451277] RAX: ffffffffffffffda RBX: 00007f8c06fc76d4 RCX: 0000000000455e29 [ 1147.458544] RDX: 0000000020000900 RSI: 0000000020000000 RDI: 0000000000000000 [ 1147.465846] RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 [ 1147.473114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1147.480394] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000006 [ 1147.487689] CPU: 0 PID: 32542 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1147.496196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1147.505572] Call Trace: [ 1147.508203] dump_stack+0x1c9/0x2b4 [ 1147.511844] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1147.517059] ? kernel_text_address+0x79/0xf0 [ 1147.521469] ? perf_trace_lock+0xde/0x920 [ 1147.525613] should_fail.cold.4+0xa/0x11 [ 1147.529673] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1147.534788] ? save_stack+0xa9/0xd0 [ 1147.538410] ? save_stack+0x43/0xd0 [ 1147.542061] ? kasan_kmalloc+0xc4/0xe0 [ 1147.545951] ? kmem_cache_alloc_trace+0x152/0x780 [ 1147.550799] ? v9fs_session_init+0x21a/0x1a80 [ 1147.555294] ? v9fs_mount+0x7c/0x900 [ 1147.559033] ? vfs_get_tree+0x1cb/0x5c0 [ 1147.563019] ? do_mount+0x6c1/0x1fb0 [ 1147.566727] ? ksys_mount+0x12d/0x140 [ 1147.570520] ? __x64_sys_mount+0xbe/0x150 [ 1147.574661] ? do_syscall_64+0x1b9/0x820 [ 1147.578714] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.584074] ? lock_downgrade+0x8f0/0x8f0 [ 1147.588220] ? lock_acquire+0x1e4/0x540 [ 1147.592377] ? fs_reclaim_acquire+0x20/0x20 [ 1147.596694] ? lock_downgrade+0x8f0/0x8f0 [ 1147.600838] ? check_same_owner+0x340/0x340 [ 1147.605169] ? rcu_note_context_switch+0x730/0x730 [ 1147.610090] ? do_raw_spin_lock+0xc1/0x200 [ 1147.614334] __should_failslab+0x124/0x180 [ 1147.618579] should_failslab+0x9/0x14 [ 1147.622383] kmem_cache_alloc_trace+0x2cb/0x780 [ 1147.627051] ? kmem_cache_alloc_trace+0x318/0x780 [ 1147.631892] ? __lockdep_init_map+0x105/0x590 [ 1147.636408] p9_idpool_create+0x42/0x120 [ 1147.640481] p9_client_create+0x286/0x16c9 [ 1147.644711] ? vfs_get_tree+0x1cb/0x5c0 [ 1147.648689] ? do_mount+0x6c1/0x1fb0 [ 1147.652669] ? ksys_mount+0x12d/0x140 [ 1147.656470] ? do_syscall_64+0x1b9/0x820 [ 1147.660544] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.665913] ? p9_client_read+0xc60/0xc60 [ 1147.670062] ? lock_acquire+0x1e4/0x540 [ 1147.674052] ? fs_reclaim_acquire+0x20/0x20 [ 1147.678366] ? lock_downgrade+0x8f0/0x8f0 [ 1147.682521] ? lock_release+0xa30/0xa30 [ 1147.686486] ? __lockdep_init_map+0x105/0x590 [ 1147.690977] ? kasan_check_write+0x14/0x20 [ 1147.695226] ? __init_rwsem+0x1cc/0x2a0 [ 1147.699190] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1147.704203] ? __kmalloc_track_caller+0x311/0x760 [ 1147.709041] ? save_stack+0xa9/0xd0 [ 1147.712676] ? save_stack+0x43/0xd0 [ 1147.716299] ? kasan_kmalloc+0xc4/0xe0 [ 1147.720176] ? kmem_cache_alloc_trace+0x152/0x780 [ 1147.725098] ? memcpy+0x45/0x50 [ 1147.728373] v9fs_session_init+0x21a/0x1a80 [ 1147.732685] ? rcu_note_context_switch+0x730/0x730 [ 1147.737605] ? do_mount+0x69e/0x1fb0 [ 1147.741319] ? lock_acquire+0x1e4/0x540 [ 1147.745312] ? v9fs_show_options+0x7e0/0x7e0 [ 1147.749824] ? lock_release+0xa30/0xa30 [ 1147.753799] ? check_same_owner+0x340/0x340 [ 1147.758271] ? kasan_unpoison_shadow+0x35/0x50 [ 1147.762853] ? kasan_kmalloc+0xc4/0xe0 [ 1147.766735] ? kmem_cache_alloc_trace+0x318/0x780 [ 1147.771574] ? kasan_unpoison_shadow+0x35/0x50 [ 1147.776152] ? kasan_kmalloc+0xc4/0xe0 [ 1147.780039] v9fs_mount+0x7c/0x900 [ 1147.783684] ? v9fs_drop_inode+0x150/0x150 [ 1147.787912] legacy_get_tree+0x118/0x440 [ 1147.791969] vfs_get_tree+0x1cb/0x5c0 [ 1147.795766] do_mount+0x6c1/0x1fb0 [ 1147.799306] ? kasan_check_write+0x14/0x20 [ 1147.803537] ? copy_mount_string+0x40/0x40 [ 1147.807767] ? retint_kernel+0x10/0x10 [ 1147.811656] ? __sanitizer_cov_trace_const_cmp4+0x5/0x20 [ 1147.817107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1147.822662] ? copy_mount_options+0x285/0x380 [ 1147.827152] ksys_mount+0x12d/0x140 [ 1147.830776] __x64_sys_mount+0xbe/0x150 [ 1147.834744] do_syscall_64+0x1b9/0x820 [ 1147.838621] ? syscall_slow_exit_work+0x500/0x500 [ 1147.843457] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1147.848379] ? syscall_return_slowpath+0x31d/0x5e0 [ 1147.853304] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1147.858317] ? perf_trace_sys_enter+0xb10/0xb10 [ 1147.862987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1147.867832] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1147.873018] RIP: 0033:0x455e29 [ 1147.876196] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1147.895496] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1147.903213] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1147.910502] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1147.917775] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1147.925035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1147.932294] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000e 04:22:08 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000080)) 04:22:08 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fp,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000007fffffe00", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:08 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:08 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xfdffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:08 executing program 2 (fault-call:3 fault-nth:15): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:08 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1148.005756] 9pnet: Could not find request transport: fp [ 1148.029242] 9pnet: Insufficient options for proto=fd [ 1148.038899] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:08 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fQ,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:08 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1148.131104] FAULT_INJECTION: forcing a failure. [ 1148.131104] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.142439] CPU: 1 PID: 32576 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1148.150940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.160307] Call Trace: [ 1148.162917] dump_stack+0x1c9/0x2b4 [ 1148.166562] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1148.171862] ? perf_trace_lock+0xde/0x920 [ 1148.176040] should_fail.cold.4+0xa/0x11 [ 1148.180126] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1148.185251] ? __save_stack_trace+0x8d/0xf0 [ 1148.189605] ? save_stack+0xa9/0xd0 [ 1148.193258] ? save_stack+0x43/0xd0 [ 1148.196907] ? __kasan_slab_free+0x11a/0x170 [ 1148.201317] ? kfree+0xd9/0x260 [ 1148.204588] ? p9_client_create+0x7f5/0x16c9 [ 1148.209000] ? v9fs_session_init+0x21a/0x1a80 [ 1148.213494] ? v9fs_mount+0x7c/0x900 [ 1148.217198] ? legacy_get_tree+0x118/0x440 [ 1148.221423] ? vfs_get_tree+0x1cb/0x5c0 [ 1148.225400] ? lock_acquire+0x1e4/0x540 [ 1148.229368] ? fs_reclaim_acquire+0x20/0x20 [ 1148.233701] ? lock_downgrade+0x8f0/0x8f0 [ 1148.237861] ? check_same_owner+0x340/0x340 [ 1148.242172] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1148.247262] ? rcu_note_context_switch+0x730/0x730 [ 1148.252188] __should_failslab+0x124/0x180 [ 1148.256413] should_failslab+0x9/0x14 [ 1148.260203] kmem_cache_alloc_trace+0x2cb/0x780 [ 1148.264880] ? __kasan_slab_free+0x131/0x170 [ 1148.269287] p9_idpool_create+0x42/0x120 [ 1148.273343] p9_client_create+0x87a/0x16c9 [ 1148.277572] ? p9_client_read+0xc60/0xc60 [ 1148.281713] ? lock_acquire+0x1e4/0x540 [ 1148.285697] ? fs_reclaim_acquire+0x20/0x20 [ 1148.290032] ? lock_release+0xa30/0xa30 [ 1148.293998] ? __lockdep_init_map+0x105/0x590 [ 1148.298495] ? kasan_check_write+0x14/0x20 [ 1148.302717] ? __init_rwsem+0x1cc/0x2a0 [ 1148.306685] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1148.311701] ? __kmalloc_track_caller+0x311/0x760 [ 1148.316548] ? save_stack+0xa9/0xd0 [ 1148.320172] ? save_stack+0x43/0xd0 [ 1148.323788] ? kasan_kmalloc+0xc4/0xe0 [ 1148.327672] ? kmem_cache_alloc_trace+0x152/0x780 [ 1148.332504] ? memcpy+0x45/0x50 [ 1148.335778] v9fs_session_init+0x21a/0x1a80 [ 1148.340102] ? rcu_note_context_switch+0x730/0x730 [ 1148.345031] ? do_mount+0x69e/0x1fb0 [ 1148.348754] ? lock_acquire+0x1e4/0x540 [ 1148.352741] ? v9fs_show_options+0x7e0/0x7e0 [ 1148.357148] ? lock_release+0xa30/0xa30 [ 1148.361110] ? check_same_owner+0x340/0x340 [ 1148.365416] ? lock_downgrade+0x8f0/0x8f0 [ 1148.369551] ? kasan_unpoison_shadow+0x35/0x50 [ 1148.374126] ? kasan_kmalloc+0xc4/0xe0 [ 1148.378005] ? kmem_cache_alloc_trace+0x318/0x780 [ 1148.382842] ? kasan_unpoison_shadow+0x35/0x50 [ 1148.387410] ? kasan_kmalloc+0xc4/0xe0 [ 1148.391290] v9fs_mount+0x7c/0x900 [ 1148.394829] ? v9fs_drop_inode+0x150/0x150 [ 1148.399051] legacy_get_tree+0x118/0x440 [ 1148.403110] vfs_get_tree+0x1cb/0x5c0 [ 1148.406900] do_mount+0x6c1/0x1fb0 [ 1148.410435] ? kasan_check_read+0x11/0x20 [ 1148.414582] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1148.418991] ? copy_mount_string+0x40/0x40 [ 1148.423227] ? kasan_kmalloc+0xc4/0xe0 [ 1148.427103] ? kmem_cache_alloc_trace+0x318/0x780 [ 1148.431955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.437753] ? copy_mount_options+0x285/0x380 [ 1148.442242] ksys_mount+0x12d/0x140 [ 1148.445882] __x64_sys_mount+0xbe/0x150 [ 1148.449858] do_syscall_64+0x1b9/0x820 [ 1148.453739] ? finish_task_switch+0x1d3/0x870 [ 1148.458236] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1148.463671] ? syscall_return_slowpath+0x31d/0x5e0 [ 1148.469029] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1148.474034] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1148.479040] ? perf_trace_sys_enter+0xb10/0xb10 [ 1148.483704] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1148.488536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1148.493723] RIP: 0033:0x455e29 [ 1148.496902] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1148.516103] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1148.524592] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 04:22:08 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xf4ffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:08 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1148.531846] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1148.539103] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1148.546369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1148.553625] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000f [ 1148.565460] 9pnet: Could not find request transport: fQ 04:22:08 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fV,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:08 executing program 2 (fault-call:3 fault-nth:16): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1148.609907] 9pnet: Insufficient options for proto=fd 04:22:08 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xe087, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1148.636966] 9pnet: Could not find request transport: fV [ 1148.642824] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1148.647077] 9pnet: Insufficient options for proto=fd [ 1148.682142] FAULT_INJECTION: forcing a failure. [ 1148.682142] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.693498] CPU: 1 PID: 32601 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1148.701922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1148.711396] Call Trace: [ 1148.714002] dump_stack+0x1c9/0x2b4 [ 1148.717927] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1148.723120] ? perf_trace_lock+0xde/0x920 [ 1148.727260] should_fail.cold.4+0xa/0x11 [ 1148.731323] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1148.736416] ? lock_acquire+0x1e4/0x540 [ 1148.740386] ? is_bpf_text_address+0xae/0x170 [ 1148.745649] ? lock_downgrade+0x8f0/0x8f0 [ 1148.749790] ? lock_release+0xa30/0xa30 [ 1148.753758] ? kasan_check_read+0x11/0x20 [ 1148.757894] ? rcu_is_watching+0x8c/0x150 [ 1148.762032] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1148.766699] ? lock_acquire+0x1e4/0x540 [ 1148.770683] ? fs_reclaim_acquire+0x20/0x20 [ 1148.774991] ? lock_downgrade+0x8f0/0x8f0 [ 1148.779136] ? __kernel_text_address+0xd/0x40 [ 1148.783621] ? __save_stack_trace+0x8d/0xf0 [ 1148.787943] ? check_same_owner+0x340/0x340 [ 1148.792254] ? rcu_note_context_switch+0x730/0x730 [ 1148.797182] __should_failslab+0x124/0x180 [ 1148.801448] should_failslab+0x9/0x14 [ 1148.805265] __kmalloc_track_caller+0x2c4/0x760 [ 1148.809921] ? v9fs_session_init+0x21a/0x1a80 [ 1148.814402] ? v9fs_mount+0x7c/0x900 [ 1148.818105] ? legacy_get_tree+0x118/0x440 [ 1148.822335] ? vfs_get_tree+0x1cb/0x5c0 [ 1148.826297] ? do_mount+0x6c1/0x1fb0 [ 1148.830003] ? ksys_mount+0x12d/0x140 [ 1148.833793] ? __x64_sys_mount+0xbe/0x150 [ 1148.837948] ? do_syscall_64+0x1b9/0x820 [ 1148.842003] ? parse_opts+0x176/0x500 [ 1148.845799] kstrdup+0x39/0x70 [ 1148.848981] parse_opts+0x176/0x500 [ 1148.852597] ? lock_acquire+0x1e4/0x540 [ 1148.856557] ? p9_fd_poll+0x2b0/0x2b0 [ 1148.860343] ? lock_downgrade+0x8f0/0x8f0 [ 1148.864488] ? lock_release+0xa30/0xa30 [ 1148.868454] ? check_same_owner+0x340/0x340 [ 1148.872763] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1148.877853] ? kasan_unpoison_shadow+0x35/0x50 [ 1148.882431] ? kasan_kmalloc+0xc4/0xe0 [ 1148.886305] p9_fd_create+0x8b/0x3f0 [ 1148.890020] ? p9_fd_show_options+0x1c0/0x1c0 [ 1148.894503] ? __raw_spin_lock_init+0x2d/0x100 [ 1148.899072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1148.904602] p9_client_create+0x915/0x16c9 [ 1148.908837] ? p9_client_read+0xc60/0xc60 [ 1148.912974] ? lock_acquire+0x1e4/0x540 [ 1148.916935] ? fs_reclaim_acquire+0x20/0x20 [ 1148.921249] ? lock_release+0xa30/0xa30 [ 1148.925208] ? __lockdep_init_map+0x105/0x590 [ 1148.929692] ? kasan_check_write+0x14/0x20 [ 1148.933910] ? __init_rwsem+0x1cc/0x2a0 [ 1148.937868] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1148.942880] ? __kmalloc_track_caller+0x311/0x760 [ 1148.947708] ? save_stack+0xa9/0xd0 [ 1148.951319] ? save_stack+0x43/0xd0 [ 1148.954929] ? kasan_kmalloc+0xc4/0xe0 [ 1148.958809] ? kmem_cache_alloc_trace+0x152/0x780 [ 1148.963636] ? memcpy+0x45/0x50 [ 1148.966909] v9fs_session_init+0x21a/0x1a80 [ 1148.971226] ? rcu_note_context_switch+0x730/0x730 [ 1148.976142] ? do_mount+0x69e/0x1fb0 [ 1148.979845] ? lock_acquire+0x1e4/0x540 [ 1148.983805] ? v9fs_show_options+0x7e0/0x7e0 [ 1148.988212] ? lock_release+0xa30/0xa30 [ 1148.992173] ? check_same_owner+0x340/0x340 [ 1148.996481] ? lock_downgrade+0x8f0/0x8f0 [ 1149.000704] ? kasan_unpoison_shadow+0x35/0x50 [ 1149.005271] ? kasan_kmalloc+0xc4/0xe0 [ 1149.009156] ? kmem_cache_alloc_trace+0x318/0x780 [ 1149.013982] ? kasan_unpoison_shadow+0x35/0x50 [ 1149.018550] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1149.023293] v9fs_mount+0x7c/0x900 [ 1149.026820] ? v9fs_drop_inode+0x150/0x150 [ 1149.031061] legacy_get_tree+0x118/0x440 [ 1149.035294] vfs_get_tree+0x1cb/0x5c0 [ 1149.039081] do_mount+0x6c1/0x1fb0 [ 1149.042604] ? check_same_owner+0x340/0x340 [ 1149.046909] ? lock_release+0xa30/0xa30 [ 1149.050878] ? copy_mount_string+0x40/0x40 [ 1149.055100] ? kasan_kmalloc+0xc4/0xe0 [ 1149.058984] ? kmem_cache_alloc_trace+0x318/0x780 [ 1149.063814] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1149.069337] ? _copy_from_user+0xdf/0x150 [ 1149.073471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1149.078993] ? copy_mount_options+0x285/0x380 [ 1149.083490] ksys_mount+0x12d/0x140 [ 1149.087104] __x64_sys_mount+0xbe/0x150 [ 1149.091239] do_syscall_64+0x1b9/0x820 [ 1149.095113] ? finish_task_switch+0x1d3/0x870 [ 1149.099602] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1149.104519] ? syscall_return_slowpath+0x31d/0x5e0 [ 1149.109438] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1149.114440] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1149.119451] ? perf_trace_sys_enter+0xb10/0xb10 [ 1149.124109] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1149.128953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1149.134129] RIP: 0033:0x455e29 [ 1149.137298] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1149.156764] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1149.164457] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1149.171710] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 04:22:08 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fb,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1149.178963] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1149.186221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1149.194522] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000010 [ 1149.201961] 9pnet: Insufficient options for proto=fd [ 1149.232095] 9pnet: Could not find request transport: fb [ 1149.265754] 9pnet: Could not find request transport: fb 04:22:09 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5460, &(0x7f0000000080)) 04:22:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000238", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:09 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xa00, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:09 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:09 executing program 2 (fault-call:3 fault-nth:17): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:09 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd-', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:09 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23c00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1149.439509] 9pnet: Insufficient options for proto=fd [ 1149.440617] FAULT_INJECTION: forcing a failure. [ 1149.440617] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.455923] CPU: 0 PID: 32633 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1149.464327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1149.473676] Call Trace: [ 1149.476296] dump_stack+0x1c9/0x2b4 [ 1149.479918] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1149.485106] ? __kernel_text_address+0xd/0x40 [ 1149.489587] ? unwind_get_return_address+0x61/0xa0 [ 1149.494504] should_fail.cold.4+0xa/0x11 [ 1149.498551] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1149.503643] ? save_stack+0xa9/0xd0 [ 1149.507268] ? save_stack+0x43/0xd0 [ 1149.510879] ? kasan_kmalloc+0xc4/0xe0 [ 1149.514753] ? __kmalloc_track_caller+0x14a/0x760 [ 1149.519580] ? kstrdup+0x39/0x70 [ 1149.522932] ? p9_client_create+0x48f/0x16c9 [ 1149.527325] ? v9fs_session_init+0x21a/0x1a80 [ 1149.531807] ? legacy_get_tree+0x118/0x440 [ 1149.536027] ? vfs_get_tree+0x1cb/0x5c0 [ 1149.539983] ? do_mount+0x6c1/0x1fb0 [ 1149.543702] ? ksys_mount+0x12d/0x140 [ 1149.547486] ? __x64_sys_mount+0xbe/0x150 [ 1149.551620] ? do_syscall_64+0x1b9/0x820 [ 1149.555666] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1149.561038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1149.566573] ? node_tag_clear+0xc0/0x1c0 [ 1149.570623] ? lock_acquire+0x1e4/0x540 [ 1149.574582] ? fs_reclaim_acquire+0x20/0x20 [ 1149.578888] ? lock_downgrade+0x8f0/0x8f0 [ 1149.583026] ? check_same_owner+0x340/0x340 [ 1149.587333] ? p9_idpool_get+0x4a/0x70 [ 1149.591204] ? rcu_note_context_switch+0x730/0x730 [ 1149.596121] __should_failslab+0x124/0x180 [ 1149.600344] should_failslab+0x9/0x14 [ 1149.604131] __kmalloc+0x2c8/0x760 [ 1149.607656] ? match_wildcard+0x3c0/0x3c0 [ 1149.611785] ? match_strdup+0x5e/0xa0 [ 1149.615571] match_strdup+0x5e/0xa0 [ 1149.619198] p9_client_create+0x6c9/0x16c9 [ 1149.623420] ? p9_client_read+0xc60/0xc60 [ 1149.627552] ? kasan_check_read+0x11/0x20 [ 1149.631687] ? lock_acquire+0x1e4/0x540 [ 1149.635645] ? fs_reclaim_acquire+0x20/0x20 [ 1149.639964] ? lock_release+0xa30/0xa30 [ 1149.643923] ? __lockdep_init_map+0x105/0x590 [ 1149.648414] ? kasan_check_write+0x14/0x20 [ 1149.652649] ? __init_rwsem+0x1cc/0x2a0 [ 1149.656615] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1149.661618] ? __kmalloc_track_caller+0x311/0x760 [ 1149.666445] ? save_stack+0xa9/0xd0 [ 1149.670056] ? save_stack+0x43/0xd0 [ 1149.673671] ? kasan_kmalloc+0xc4/0xe0 [ 1149.677545] ? kmem_cache_alloc_trace+0x152/0x780 [ 1149.682377] ? memcpy+0x45/0x50 [ 1149.685649] v9fs_session_init+0x21a/0x1a80 [ 1149.689958] ? rcu_note_context_switch+0x730/0x730 [ 1149.694882] ? do_mount+0x69e/0x1fb0 [ 1149.698588] ? lock_acquire+0x1e4/0x540 [ 1149.702550] ? v9fs_show_options+0x7e0/0x7e0 [ 1149.706944] ? lock_release+0xa30/0xa30 [ 1149.710906] ? check_same_owner+0x340/0x340 [ 1149.715218] ? kasan_unpoison_shadow+0x35/0x50 [ 1149.719786] ? kasan_kmalloc+0xc4/0xe0 [ 1149.723675] ? kmem_cache_alloc_trace+0x318/0x780 [ 1149.728504] ? kasan_unpoison_shadow+0x35/0x50 [ 1149.733078] ? kasan_kmalloc+0xc4/0xe0 [ 1149.736953] v9fs_mount+0x7c/0x900 [ 1149.740479] ? v9fs_drop_inode+0x150/0x150 [ 1149.744702] legacy_get_tree+0x118/0x440 [ 1149.748752] vfs_get_tree+0x1cb/0x5c0 [ 1149.752550] do_mount+0x6c1/0x1fb0 [ 1149.756083] ? kasan_check_write+0x14/0x20 [ 1149.760304] ? copy_mount_string+0x40/0x40 [ 1149.764523] ? kasan_kmalloc+0xc4/0xe0 [ 1149.768398] ? kmem_cache_alloc_trace+0x318/0x780 [ 1149.773227] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1149.778751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1149.784275] ? copy_mount_options+0x285/0x380 [ 1149.788770] ksys_mount+0x12d/0x140 [ 1149.792384] __x64_sys_mount+0xbe/0x150 [ 1149.796345] do_syscall_64+0x1b9/0x820 [ 1149.800216] ? finish_task_switch+0x1d3/0x870 [ 1149.804698] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1149.809612] ? syscall_return_slowpath+0x31d/0x5e0 [ 1149.814531] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1149.819537] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1149.824537] ? perf_trace_sys_enter+0xb10/0xb10 [ 1149.829192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1149.834026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1149.839199] RIP: 0033:0x455e29 [ 1149.842365] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1149.861557] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1149.869251] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1149.876504] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1149.883756] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1149.891011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1149.898280] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000011 [ 1149.909858] 9pnet: Could not find request transport: fd-rfdno=0x0000000000000013 [ 1149.921586] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:10 executing program 2 (fault-call:3 fault-nth:18): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:10 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x49200200, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1149.937313] 9pnet: Insufficient options for proto=fd [ 1149.944750] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1149.959366] 9pnet: Could not find request transport: fd-rfdno=0x0000000000000017 04:22:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000005", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:10 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'r.dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:10 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100006000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1150.024979] FAULT_INJECTION: forcing a failure. [ 1150.024979] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.036316] CPU: 1 PID: 32651 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1150.044726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.054678] Call Trace: [ 1150.057282] dump_stack+0x1c9/0x2b4 [ 1150.060932] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1150.066145] ? perf_trace_lock+0xde/0x920 [ 1150.070340] should_fail.cold.4+0xa/0x11 [ 1150.074421] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1150.079554] ? __save_stack_trace+0x8d/0xf0 [ 1150.083909] ? save_stack+0x43/0xd0 [ 1150.087574] ? __kasan_slab_free+0x11a/0x170 [ 1150.091997] ? kasan_slab_free+0xe/0x10 [ 1150.095987] ? kfree+0xd9/0x260 [ 1150.097850] 9pnet: Insufficient options for proto=fd [ 1150.099279] ? match_int+0x23/0x30 [ 1150.099297] ? parse_opts+0x32c/0x500 [ 1150.099313] ? p9_fd_create+0x8b/0x3f0 [ 1150.099331] ? p9_client_create+0x915/0x16c9 [ 1150.119995] ? v9fs_session_init+0x21a/0x1a80 [ 1150.124489] ? v9fs_mount+0x7c/0x900 [ 1150.128203] ? lock_acquire+0x1e4/0x540 [ 1150.132266] ? fs_reclaim_acquire+0x20/0x20 [ 1150.136575] ? lock_downgrade+0x8f0/0x8f0 [ 1150.140712] ? check_same_owner+0x340/0x340 [ 1150.145024] ? rcu_note_context_switch+0x730/0x730 [ 1150.149945] __should_failslab+0x124/0x180 [ 1150.154224] should_failslab+0x9/0x14 [ 1150.158063] __kmalloc+0x2c8/0x760 [ 1150.161596] ? match_number.isra.0+0xbf/0x280 [ 1150.166120] match_number.isra.0+0xbf/0x280 [ 1150.170430] ? match_strdup+0xa0/0xa0 [ 1150.174218] ? match_wildcard+0x3c0/0x3c0 [ 1150.178352] ? do_syscall_64+0x1b9/0x820 [ 1150.182401] match_int+0x23/0x30 [ 1150.185758] parse_opts+0x32c/0x500 [ 1150.189376] ? p9_fd_poll+0x2b0/0x2b0 [ 1150.193166] ? lock_downgrade+0x8f0/0x8f0 [ 1150.197301] ? lock_release+0xa30/0xa30 [ 1150.201262] ? check_same_owner+0x340/0x340 [ 1150.205568] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1150.210661] ? kasan_unpoison_shadow+0x35/0x50 [ 1150.215229] ? kasan_kmalloc+0xc4/0xe0 [ 1150.219107] p9_fd_create+0x8b/0x3f0 [ 1150.222807] ? p9_fd_show_options+0x1c0/0x1c0 [ 1150.227290] ? __raw_spin_lock_init+0x2d/0x100 [ 1150.231860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1150.237386] p9_client_create+0x915/0x16c9 [ 1150.241614] ? p9_client_read+0xc60/0xc60 [ 1150.245749] ? lock_acquire+0x1e4/0x540 [ 1150.249709] ? fs_reclaim_acquire+0x20/0x20 [ 1150.254236] ? lock_release+0xa30/0xa30 [ 1150.258195] ? __lockdep_init_map+0x105/0x590 [ 1150.262693] ? kasan_check_write+0x14/0x20 [ 1150.266913] ? __init_rwsem+0x1cc/0x2a0 [ 1150.270872] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1150.275875] ? __kmalloc_track_caller+0x311/0x760 [ 1150.280704] ? save_stack+0xa9/0xd0 [ 1150.284317] ? save_stack+0x43/0xd0 [ 1150.287928] ? kasan_kmalloc+0xc4/0xe0 [ 1150.291800] ? kmem_cache_alloc_trace+0x152/0x780 [ 1150.296641] ? memcpy+0x45/0x50 [ 1150.299912] v9fs_session_init+0x21a/0x1a80 [ 1150.304229] ? rcu_note_context_switch+0x730/0x730 [ 1150.309145] ? do_mount+0x69e/0x1fb0 [ 1150.312848] ? lock_acquire+0x1e4/0x540 [ 1150.316821] ? v9fs_show_options+0x7e0/0x7e0 [ 1150.321218] ? lock_release+0xa30/0xa30 [ 1150.325182] ? check_same_owner+0x340/0x340 [ 1150.329490] ? lock_downgrade+0x8f0/0x8f0 [ 1150.333631] ? kasan_unpoison_shadow+0x35/0x50 [ 1150.338197] ? kasan_kmalloc+0xc4/0xe0 [ 1150.342086] ? kmem_cache_alloc_trace+0x318/0x780 [ 1150.346918] ? kasan_unpoison_shadow+0x35/0x50 [ 1150.351486] ? kasan_kmalloc+0xc4/0xe0 [ 1150.355364] v9fs_mount+0x7c/0x900 [ 1150.358906] ? v9fs_drop_inode+0x150/0x150 [ 1150.363129] legacy_get_tree+0x118/0x440 [ 1150.367177] vfs_get_tree+0x1cb/0x5c0 [ 1150.370967] do_mount+0x6c1/0x1fb0 [ 1150.374505] ? check_same_owner+0x340/0x340 [ 1150.378814] ? lock_release+0xa30/0xa30 [ 1150.382775] ? copy_mount_string+0x40/0x40 [ 1150.386996] ? kasan_kmalloc+0xc4/0xe0 [ 1150.390875] ? kmem_cache_alloc_trace+0x318/0x780 [ 1150.395703] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1150.401226] ? _copy_from_user+0xdf/0x150 [ 1150.405367] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1150.410891] ? copy_mount_options+0x285/0x380 [ 1150.415375] ksys_mount+0x12d/0x140 [ 1150.418991] __x64_sys_mount+0xbe/0x150 [ 1150.422958] do_syscall_64+0x1b9/0x820 [ 1150.426829] ? finish_task_switch+0x1d3/0x870 [ 1150.431310] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1150.436224] ? syscall_return_slowpath+0x31d/0x5e0 [ 1150.441139] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1150.446152] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1150.451154] ? perf_trace_sys_enter+0xb10/0xb10 [ 1150.455810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1150.460655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1150.465829] RIP: 0033:0x455e29 [ 1150.469000] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1150.488203] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1150.495900] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1150.503163] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1150.510419] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1150.517672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1150.524928] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000012 [ 1150.532389] 9pnet: Insufficient options for proto=fd [ 1150.555615] 9pnet: Insufficient options for proto=fd 04:22:10 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:10 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1150.570473] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1150.573239] 9pnet: Insufficient options for proto=fd 04:22:10 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5416, &(0x7f0000000080)) 04:22:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000500", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:10 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'r/dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:10 executing program 2 (fault-call:3 fault-nth:19): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:10 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x22048, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:10 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf53b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1150.937744] FAULT_INJECTION: forcing a failure. [ 1150.937744] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.949109] CPU: 1 PID: 32687 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1150.949744] 9pnet: Insufficient options for proto=fd [ 1150.957514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1150.957520] Call Trace: [ 1150.957545] dump_stack+0x1c9/0x2b4 [ 1150.957562] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1150.957578] ? kfree+0xd9/0x260 [ 1150.957593] ? parse_opts+0x3b8/0x500 [ 1150.957610] ? perf_trace_lock+0xde/0x920 [ 1150.957627] should_fail.cold.4+0xa/0x11 [ 1150.957642] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1150.957658] ? kasan_check_write+0x14/0x20 [ 1150.957669] ? do_raw_spin_lock+0xc1/0x200 [ 1150.957682] ? trace_hardirqs_off+0xd/0x10 [ 1150.957695] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1150.957713] ? trace_hardirqs_off+0xd/0x10 [ 1150.957723] ? quarantine_put+0x10d/0x1b0 [ 1150.957740] ? lock_acquire+0x1e4/0x540 [ 1150.957753] ? fs_reclaim_acquire+0x20/0x20 [ 1150.957767] ? lock_downgrade+0x8f0/0x8f0 [ 1150.957784] ? check_same_owner+0x340/0x340 [ 1150.957797] ? p9_fd_poll+0x2b0/0x2b0 [ 1150.957811] ? rcu_note_context_switch+0x730/0x730 [ 1150.957825] __should_failslab+0x124/0x180 [ 1150.957845] should_failslab+0x9/0x14 [ 1151.063509] kmem_cache_alloc_trace+0x2cb/0x780 [ 1151.068183] ? kasan_unpoison_shadow+0x35/0x50 [ 1151.072754] ? kasan_kmalloc+0xc4/0xe0 [ 1151.076629] p9_fd_create+0x1a7/0x3f0 [ 1151.080444] ? p9_fd_show_options+0x1c0/0x1c0 [ 1151.084952] ? __raw_spin_lock_init+0x2d/0x100 [ 1151.089525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.095065] p9_client_create+0x915/0x16c9 [ 1151.099292] ? p9_client_read+0xc60/0xc60 [ 1151.103436] ? lock_acquire+0x1e4/0x540 [ 1151.107398] ? fs_reclaim_acquire+0x20/0x20 [ 1151.111712] ? lock_release+0xa30/0xa30 [ 1151.115674] ? __lockdep_init_map+0x105/0x590 [ 1151.120158] ? kasan_check_write+0x14/0x20 [ 1151.124382] ? __init_rwsem+0x1cc/0x2a0 [ 1151.128348] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1151.133356] ? __kmalloc_track_caller+0x311/0x760 [ 1151.138185] ? save_stack+0xa9/0xd0 [ 1151.141799] ? save_stack+0x43/0xd0 [ 1151.145411] ? kasan_kmalloc+0xc4/0xe0 [ 1151.149288] ? kmem_cache_alloc_trace+0x152/0x780 [ 1151.154120] ? memcpy+0x45/0x50 [ 1151.157392] v9fs_session_init+0x21a/0x1a80 [ 1151.161704] ? rcu_note_context_switch+0x730/0x730 [ 1151.166621] ? do_mount+0x69e/0x1fb0 [ 1151.170336] ? lock_acquire+0x1e4/0x540 [ 1151.174299] ? v9fs_show_options+0x7e0/0x7e0 [ 1151.178698] ? lock_release+0xa30/0xa30 [ 1151.182659] ? check_same_owner+0x340/0x340 [ 1151.186968] ? lock_downgrade+0x8f0/0x8f0 [ 1151.191973] ? kasan_unpoison_shadow+0x35/0x50 [ 1151.196543] ? kasan_kmalloc+0xc4/0xe0 [ 1151.200422] ? kmem_cache_alloc_trace+0x318/0x780 [ 1151.205251] ? kasan_unpoison_shadow+0x35/0x50 [ 1151.209818] ? kasan_kmalloc+0xc4/0xe0 [ 1151.213697] v9fs_mount+0x7c/0x900 [ 1151.217223] ? v9fs_drop_inode+0x150/0x150 [ 1151.221456] legacy_get_tree+0x118/0x440 [ 1151.225508] vfs_get_tree+0x1cb/0x5c0 [ 1151.229296] do_mount+0x6c1/0x1fb0 [ 1151.232823] ? check_same_owner+0x340/0x340 [ 1151.237130] ? lock_release+0xa30/0xa30 [ 1151.241096] ? copy_mount_string+0x40/0x40 [ 1151.245317] ? retint_kernel+0x10/0x10 [ 1151.249193] ? copy_mount_options+0x1f0/0x380 [ 1151.253687] ? copy_mount_options+0x1f6/0x380 [ 1151.258183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.263710] ? copy_mount_options+0x285/0x380 [ 1151.268203] ksys_mount+0x12d/0x140 [ 1151.271820] __x64_sys_mount+0xbe/0x150 [ 1151.275788] do_syscall_64+0x1b9/0x820 [ 1151.279664] ? finish_task_switch+0x1d3/0x870 [ 1151.284167] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1151.289090] ? syscall_return_slowpath+0x31d/0x5e0 [ 1151.294015] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1151.299034] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1151.304062] ? perf_trace_sys_enter+0xb10/0xb10 [ 1151.308721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1151.313556] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1151.318733] RIP: 0033:0x455e29 [ 1151.321905] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1151.341111] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1151.348814] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1151.356082] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1151.363371] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1151.370653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1151.377924] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000013 04:22:11 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xfffffff6, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1151.386778] 9pnet: Insufficient options for proto=fd [ 1151.402609] 9pnet: Insufficient options for proto=fd [ 1151.411820] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:11 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x4000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000001", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:11 executing program 2 (fault-call:3 fault-nth:20): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:11 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfqno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1151.436888] 9pnet: Insufficient options for proto=fd [ 1151.525159] 9pnet: Insufficient options for proto=fd [ 1151.531638] 9pnet: Insufficient options for proto=fd [ 1151.533100] FAULT_INJECTION: forcing a failure. [ 1151.533100] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.548028] CPU: 0 PID: 32715 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1151.556447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1151.565792] Call Trace: [ 1151.568375] dump_stack+0x1c9/0x2b4 [ 1151.571998] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1151.577183] ? perf_trace_lock+0xde/0x920 [ 1151.581321] ? is_bpf_text_address+0xae/0x170 [ 1151.585811] should_fail.cold.4+0xa/0x11 [ 1151.589867] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1151.594986] ? lock_acquire+0x1e4/0x540 [ 1151.598956] ? is_bpf_text_address+0xae/0x170 [ 1151.603464] ? lock_acquire+0x1e4/0x540 [ 1151.607441] ? add_wait_queue+0x1b9/0x2b0 [ 1151.611580] ? lock_downgrade+0x8f0/0x8f0 [ 1151.615724] ? kasan_check_read+0x11/0x20 [ 1151.619893] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1151.624311] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1151.628903] ? kasan_check_write+0x14/0x20 [ 1151.633134] ? trace_hardirqs_on+0xd/0x10 [ 1151.637273] ? lock_acquire+0x1e4/0x540 [ 1151.641248] ? p9_client_prepare_req.part.9+0x534/0xcd0 [ 1151.646604] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 1151.651882] __should_failslab+0x124/0x180 [ 1151.656118] should_failslab+0x9/0x14 [ 1151.659912] kmem_cache_alloc_trace+0x4b/0x780 [ 1151.664486] ? kasan_check_write+0x14/0x20 [ 1151.668714] ? do_raw_spin_lock+0xc1/0x200 [ 1151.672947] p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 1151.678138] ? p9_free_req.isra.8+0x140/0x140 [ 1151.682624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.688167] ? sock_poll+0x274/0x4b0 [ 1151.691881] ? kernel_sendpage_locked+0x120/0x120 [ 1151.696716] ? p9_conn_create+0x730/0x730 [ 1151.700885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.706416] p9_client_rpc+0x1bd/0x1400 [ 1151.710381] ? p9_fd_poll+0x1e0/0x2b0 [ 1151.714175] ? p9_conn_create+0x55b/0x730 [ 1151.718316] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1151.723674] ? ksys_dup3+0x690/0x690 [ 1151.727377] ? check_same_owner+0x340/0x340 [ 1151.731687] ? p9_fd_poll+0x2b0/0x2b0 [ 1151.735483] ? kasan_kmalloc+0xc4/0xe0 [ 1151.739363] ? kasan_unpoison_shadow+0x35/0x50 [ 1151.743942] ? p9_fd_show_options+0x1c0/0x1c0 [ 1151.748425] ? __raw_spin_lock_init+0x2d/0x100 [ 1151.752999] p9_client_create+0xd09/0x16c9 [ 1151.757234] ? p9_client_read+0xc60/0xc60 [ 1151.761375] ? kasan_check_read+0x11/0x20 [ 1151.765516] ? lock_acquire+0x1e4/0x540 [ 1151.769478] ? fs_reclaim_acquire+0x20/0x20 [ 1151.773793] ? lock_release+0xa30/0xa30 [ 1151.777855] ? __lockdep_init_map+0x105/0x590 [ 1151.782345] ? kasan_check_write+0x14/0x20 [ 1151.786567] ? __init_rwsem+0x1cc/0x2a0 [ 1151.790533] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1151.795544] ? __kmalloc_track_caller+0x311/0x760 [ 1151.800388] ? save_stack+0xa9/0xd0 [ 1151.804016] ? save_stack+0x43/0xd0 [ 1151.807629] ? kasan_kmalloc+0xc4/0xe0 [ 1151.811507] ? kmem_cache_alloc_trace+0x152/0x780 [ 1151.816340] ? memcpy+0x45/0x50 [ 1151.819617] v9fs_session_init+0x21a/0x1a80 [ 1151.823942] ? rcu_note_context_switch+0x730/0x730 [ 1151.828864] ? do_mount+0x69e/0x1fb0 [ 1151.832575] ? lock_acquire+0x1e4/0x540 [ 1151.836540] ? v9fs_show_options+0x7e0/0x7e0 [ 1151.840952] ? lock_release+0xa30/0xa30 [ 1151.844921] ? check_same_owner+0x340/0x340 [ 1151.849229] ? lock_downgrade+0x8f0/0x8f0 [ 1151.853379] ? kasan_unpoison_shadow+0x35/0x50 [ 1151.857960] ? kasan_kmalloc+0xc4/0xe0 [ 1151.861837] ? kmem_cache_alloc_trace+0x318/0x780 [ 1151.866675] ? kasan_unpoison_shadow+0x35/0x50 [ 1151.871265] ? kasan_kmalloc+0xc4/0xe0 [ 1151.875149] v9fs_mount+0x7c/0x900 [ 1151.878686] ? v9fs_drop_inode+0x150/0x150 [ 1151.882918] legacy_get_tree+0x118/0x440 [ 1151.887238] vfs_get_tree+0x1cb/0x5c0 [ 1151.891036] do_mount+0x6c1/0x1fb0 [ 1151.894567] ? check_same_owner+0x340/0x340 [ 1151.898893] ? lock_release+0xa30/0xa30 [ 1151.902864] ? copy_mount_string+0x40/0x40 [ 1151.907093] ? kasan_kmalloc+0xc4/0xe0 [ 1151.910977] ? kmem_cache_alloc_trace+0x318/0x780 [ 1151.915815] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1151.921346] ? _copy_from_user+0xdf/0x150 [ 1151.925488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1151.931022] ? copy_mount_options+0x285/0x380 [ 1151.935510] ksys_mount+0x12d/0x140 [ 1151.939129] __x64_sys_mount+0xbe/0x150 [ 1151.943098] do_syscall_64+0x1b9/0x820 [ 1151.946988] ? finish_task_switch+0x1d3/0x870 [ 1151.951474] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1151.956407] ? syscall_return_slowpath+0x31d/0x5e0 [ 1151.961326] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1151.966333] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1151.971346] ? perf_trace_sys_enter+0xb10/0xb10 [ 1151.976022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1151.980870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1151.986061] RIP: 0033:0x455e29 [ 1151.989233] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1152.008502] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1152.016213] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 04:22:11 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xf5ffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d0000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:12 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1152.023477] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1152.030790] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1152.038050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1152.045308] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000014 [ 1152.052578] 9pnet: Couldn't grow tag array [ 1152.062222] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000380200", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1152.109938] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1152.110696] 9pnet: Insufficient options for proto=fd [ 1152.140628] 9pnet: Insufficient options for proto=fd [ 1152.201821] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:12 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0xc020660b, &(0x7f0000000080)) 04:22:12 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfwno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:12 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:12 executing program 2 (fault-call:3 fault-nth:21): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:12 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000000000000000000000000000000000000000500", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1152.421458] FAULT_INJECTION: forcing a failure. [ 1152.421458] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.426082] 9pnet: Insufficient options for proto=fd [ 1152.432861] CPU: 0 PID: 32758 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1152.446310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.454506] 9pnet: Insufficient options for proto=fd [ 1152.455694] Call Trace: [ 1152.455720] dump_stack+0x1c9/0x2b4 [ 1152.455740] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1152.455765] ? __kernel_text_address+0xd/0x40 [ 1152.464005] 9pnet: Insufficient options for proto=fd [ 1152.467058] ? unwind_get_return_address+0x61/0xa0 [ 1152.467080] should_fail.cold.4+0xa/0x11 [ 1152.467098] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1152.467111] ? perf_trace_lock+0xde/0x920 [ 1152.467129] ? zap_class+0x740/0x740 [ 1152.503866] ? kasan_kmalloc+0xc4/0xe0 [ 1152.507780] ? p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 1152.513174] ? p9_client_rpc+0x1bd/0x1400 [ 1152.517348] ? p9_client_create+0xd09/0x16c9 [ 1152.521754] ? v9fs_mount+0x7c/0x900 [ 1152.525461] ? legacy_get_tree+0x118/0x440 [ 1152.529693] ? vfs_get_tree+0x1cb/0x5c0 [ 1152.533661] ? do_mount+0x6c1/0x1fb0 [ 1152.537360] ? ksys_mount+0x12d/0x140 [ 1152.541156] ? __x64_sys_mount+0xbe/0x150 [ 1152.545293] ? do_syscall_64+0x1b9/0x820 [ 1152.549348] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1152.554703] ? kasan_check_read+0x11/0x20 [ 1152.558838] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1152.563249] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1152.567836] ? kasan_check_write+0x14/0x20 [ 1152.572077] ? check_same_owner+0x340/0x340 [ 1152.576405] ? p9_client_prepare_req.part.9+0x707/0xcd0 [ 1152.581793] ? rcu_note_context_switch+0x730/0x730 [ 1152.586721] ? kasan_unpoison_shadow+0x35/0x50 [ 1152.591294] __should_failslab+0x124/0x180 [ 1152.595523] should_failslab+0x9/0x14 [ 1152.599406] kmem_cache_alloc_trace+0x2cb/0x780 [ 1152.604073] ? kasan_check_write+0x14/0x20 [ 1152.608301] ? do_raw_spin_lock+0xc1/0x200 [ 1152.612534] p9_client_prepare_req.part.9+0x82a/0xcd0 [ 1152.617736] ? p9_free_req.isra.8+0x140/0x140 [ 1152.622233] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.627787] ? sock_poll+0x274/0x4b0 [ 1152.631499] ? kernel_sendpage_locked+0x120/0x120 [ 1152.636339] ? p9_conn_create+0x730/0x730 [ 1152.640498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.646058] p9_client_rpc+0x1bd/0x1400 [ 1152.650042] ? p9_fd_poll+0x1e0/0x2b0 [ 1152.653851] ? p9_conn_create+0x55b/0x730 [ 1152.658011] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1152.663394] ? ksys_dup3+0x690/0x690 [ 1152.667112] ? check_same_owner+0x340/0x340 [ 1152.671438] ? p9_fd_poll+0x2b0/0x2b0 [ 1152.675235] ? kasan_kmalloc+0xc4/0xe0 [ 1152.679123] ? kasan_unpoison_shadow+0x35/0x50 [ 1152.683719] ? p9_fd_show_options+0x1c0/0x1c0 [ 1152.688205] ? __raw_spin_lock_init+0x2d/0x100 [ 1152.692783] p9_client_create+0xd09/0x16c9 [ 1152.697016] ? p9_client_read+0xc60/0xc60 [ 1152.701165] ? lock_acquire+0x1e4/0x540 [ 1152.705134] ? fs_reclaim_acquire+0x20/0x20 [ 1152.709472] ? lock_release+0xa30/0xa30 [ 1152.713460] ? __lockdep_init_map+0x105/0x590 [ 1152.717953] ? kasan_check_write+0x14/0x20 [ 1152.722175] ? __init_rwsem+0x1cc/0x2a0 [ 1152.726145] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1152.731167] ? __kmalloc_track_caller+0x311/0x760 [ 1152.736007] ? save_stack+0xa9/0xd0 [ 1152.739649] ? save_stack+0x43/0xd0 [ 1152.743263] ? kasan_kmalloc+0xc4/0xe0 [ 1152.747139] ? kmem_cache_alloc_trace+0x152/0x780 [ 1152.751980] ? memcpy+0x45/0x50 [ 1152.755258] v9fs_session_init+0x21a/0x1a80 [ 1152.759568] ? rcu_note_context_switch+0x730/0x730 [ 1152.764499] ? do_mount+0x69e/0x1fb0 [ 1152.768243] ? lock_acquire+0x1e4/0x540 [ 1152.772226] ? v9fs_show_options+0x7e0/0x7e0 [ 1152.776638] ? lock_release+0xa30/0xa30 [ 1152.780626] ? check_same_owner+0x340/0x340 [ 1152.784947] ? kasan_unpoison_shadow+0x35/0x50 [ 1152.789525] ? kasan_kmalloc+0xc4/0xe0 [ 1152.793408] ? kmem_cache_alloc_trace+0x318/0x780 [ 1152.798243] ? kasan_unpoison_shadow+0x35/0x50 [ 1152.802824] ? kasan_kmalloc+0xc4/0xe0 [ 1152.806729] v9fs_mount+0x7c/0x900 [ 1152.810285] ? v9fs_drop_inode+0x150/0x150 [ 1152.814510] legacy_get_tree+0x118/0x440 [ 1152.818561] vfs_get_tree+0x1cb/0x5c0 [ 1152.822361] do_mount+0x6c1/0x1fb0 [ 1152.825898] ? check_same_owner+0x340/0x340 [ 1152.830210] ? copy_mount_string+0x40/0x40 [ 1152.834435] ? retint_kernel+0x10/0x10 [ 1152.838326] ? copy_mount_options+0x213/0x380 [ 1152.842825] ? write_comp_data+0x22/0x70 [ 1152.846893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1152.852419] ? copy_mount_options+0x285/0x380 [ 1152.856903] ksys_mount+0x12d/0x140 [ 1152.860527] __x64_sys_mount+0xbe/0x150 [ 1152.864496] do_syscall_64+0x1b9/0x820 [ 1152.868369] ? finish_task_switch+0x1d3/0x870 [ 1152.872851] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1152.877773] ? syscall_return_slowpath+0x31d/0x5e0 [ 1152.882697] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1152.887713] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1152.892765] ? perf_trace_sys_enter+0xb10/0xb10 [ 1152.897425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1152.902287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1152.907481] RIP: 0033:0x455e29 [ 1152.910662] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1152.929869] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1152.937597] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1152.944861] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1152.952130] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1152.959397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1152.966668] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000015 04:22:13 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:13 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfTno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1152.974006] 9pnet: Couldn't grow tag array 04:22:13 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x5520020000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:13 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:13 executing program 2 (fault-call:3 fault-nth:22): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1153.007602] 9pnet: Insufficient options for proto=fd [ 1153.023247] 9pnet: Insufficient options for proto=fd [ 1153.044511] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd01}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1153.083427] 9pnet: Insufficient options for proto=fd [ 1153.103899] FAULT_INJECTION: forcing a failure. [ 1153.103899] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.115288] CPU: 0 PID: 323 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1153.123527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.132892] Call Trace: [ 1153.135583] dump_stack+0x1c9/0x2b4 [ 1153.139245] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1153.144475] ? kernel_text_address+0x79/0xf0 [ 1153.148926] should_fail.cold.4+0xa/0x11 [ 1153.153017] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1153.158146] ? save_stack+0xa9/0xd0 [ 1153.161791] ? save_stack+0x43/0xd0 [ 1153.165436] ? kmem_cache_alloc_trace+0x152/0x780 [ 1153.170298] ? p9_client_prepare_req.part.9+0x82a/0xcd0 [ 1153.175672] ? p9_client_rpc+0x1bd/0x1400 [ 1153.179819] ? p9_client_create+0xd09/0x16c9 [ 1153.184227] ? v9fs_session_init+0x21a/0x1a80 [ 1153.188739] ? v9fs_mount+0x7c/0x900 [ 1153.192462] ? legacy_get_tree+0x118/0x440 [ 1153.196688] ? vfs_get_tree+0x1cb/0x5c0 [ 1153.200654] ? do_mount+0x6c1/0x1fb0 [ 1153.204352] ? ksys_mount+0x12d/0x140 [ 1153.208139] ? __x64_sys_mount+0xbe/0x150 [ 1153.212273] ? do_syscall_64+0x1b9/0x820 [ 1153.216319] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1153.221691] ? kasan_check_read+0x11/0x20 [ 1153.226100] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1153.230491] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1153.235061] ? kasan_check_write+0x14/0x20 [ 1153.239301] ? do_raw_spin_lock+0xc1/0x200 [ 1153.243525] ? check_same_owner+0x340/0x340 [ 1153.247835] ? rcu_note_context_switch+0x730/0x730 [ 1153.252751] __should_failslab+0x124/0x180 [ 1153.256976] should_failslab+0x9/0x14 [ 1153.260764] __kmalloc+0x2c8/0x760 [ 1153.264288] ? __init_waitqueue_head+0x9e/0x150 [ 1153.268942] ? init_wait_entry+0x1c0/0x1c0 [ 1153.273166] ? p9_fcall_alloc+0x1e/0x90 [ 1153.277124] ? do_raw_spin_lock+0xc1/0x200 [ 1153.281347] p9_fcall_alloc+0x1e/0x90 [ 1153.285138] p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 1153.290318] ? p9_free_req.isra.8+0x140/0x140 [ 1153.294803] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.300337] ? sock_poll+0x274/0x4b0 [ 1153.304051] ? kernel_sendpage_locked+0x120/0x120 [ 1153.308882] ? p9_conn_create+0x730/0x730 [ 1153.313019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.318544] p9_client_rpc+0x1bd/0x1400 [ 1153.322505] ? p9_fd_poll+0x1e0/0x2b0 [ 1153.326290] ? p9_conn_create+0x55b/0x730 [ 1153.330423] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1153.335776] ? ksys_dup3+0x690/0x690 [ 1153.339661] ? check_same_owner+0x340/0x340 [ 1153.343980] ? p9_fd_poll+0x2b0/0x2b0 [ 1153.347771] ? kasan_kmalloc+0xc4/0xe0 [ 1153.351650] ? kasan_unpoison_shadow+0x35/0x50 [ 1153.357045] ? p9_fd_show_options+0x1c0/0x1c0 [ 1153.361527] ? __raw_spin_lock_init+0x2d/0x100 [ 1153.366098] p9_client_create+0xd09/0x16c9 [ 1153.370322] ? p9_client_read+0xc60/0xc60 [ 1153.374457] ? lock_acquire+0x1e4/0x540 [ 1153.378429] ? fs_reclaim_acquire+0x20/0x20 [ 1153.382736] ? lock_release+0xa30/0xa30 [ 1153.386695] ? __lockdep_init_map+0x105/0x590 [ 1153.391177] ? kasan_check_write+0x14/0x20 [ 1153.395394] ? __init_rwsem+0x1cc/0x2a0 [ 1153.399350] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1153.404361] ? __kmalloc_track_caller+0x311/0x760 [ 1153.409191] ? save_stack+0xa9/0xd0 [ 1153.412802] ? save_stack+0x43/0xd0 [ 1153.416412] ? kasan_kmalloc+0xc4/0xe0 [ 1153.420282] ? kmem_cache_alloc_trace+0x152/0x780 [ 1153.425109] ? memcpy+0x45/0x50 [ 1153.428376] v9fs_session_init+0x21a/0x1a80 [ 1153.432684] ? rcu_note_context_switch+0x730/0x730 [ 1153.437595] ? do_mount+0x69e/0x1fb0 [ 1153.441298] ? lock_acquire+0x1e4/0x540 [ 1153.445261] ? v9fs_show_options+0x7e0/0x7e0 [ 1153.449655] ? lock_release+0xa30/0xa30 [ 1153.453620] ? check_same_owner+0x340/0x340 [ 1153.457925] ? lock_downgrade+0x8f0/0x8f0 [ 1153.462058] ? kasan_unpoison_shadow+0x35/0x50 [ 1153.466626] ? kasan_kmalloc+0xc4/0xe0 [ 1153.470499] ? kmem_cache_alloc_trace+0x318/0x780 [ 1153.475328] ? kasan_unpoison_shadow+0x35/0x50 [ 1153.479892] ? kasan_kmalloc+0xc4/0xe0 [ 1153.483776] v9fs_mount+0x7c/0x900 [ 1153.487303] ? v9fs_drop_inode+0x150/0x150 [ 1153.491525] legacy_get_tree+0x118/0x440 [ 1153.495577] vfs_get_tree+0x1cb/0x5c0 [ 1153.499365] do_mount+0x6c1/0x1fb0 [ 1153.502890] ? check_same_owner+0x340/0x340 [ 1153.507198] ? lock_release+0xa30/0xa30 [ 1153.511156] ? copy_mount_string+0x40/0x40 [ 1153.515395] ? kasan_kmalloc+0xc4/0xe0 [ 1153.519269] ? kmem_cache_alloc_trace+0x318/0x780 [ 1153.524100] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1153.529633] ? _copy_from_user+0xdf/0x150 [ 1153.533769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1153.539292] ? copy_mount_options+0x285/0x380 [ 1153.543776] ksys_mount+0x12d/0x140 [ 1153.547390] __x64_sys_mount+0xbe/0x150 [ 1153.551352] do_syscall_64+0x1b9/0x820 [ 1153.555226] ? finish_task_switch+0x1d3/0x870 [ 1153.559714] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1153.564629] ? syscall_return_slowpath+0x31d/0x5e0 [ 1153.569546] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1153.574546] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1153.579546] ? perf_trace_sys_enter+0xb10/0xb10 [ 1153.584198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1153.589031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1153.594219] RIP: 0033:0x455e29 [ 1153.597391] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1153.616585] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1153.624279] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1153.631544] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1153.638796] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1153.646051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 04:22:13 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfgno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:13 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2400000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1153.653303] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000016 [ 1153.692822] 9pnet: Insufficient options for proto=fd [ 1153.698458] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1153.699808] 9pnet: Couldn't grow tag array [ 1153.715664] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:13 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000080)) 04:22:13 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:13 executing program 2 (fault-call:3 fault-nth:23): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:13 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x20000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:13 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfkno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:13 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1153.898672] 9pnet: Insufficient options for proto=fd [ 1153.910496] FAULT_INJECTION: forcing a failure. [ 1153.910496] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.921734] CPU: 1 PID: 359 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1153.929969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.939324] Call Trace: [ 1153.941906] dump_stack+0x1c9/0x2b4 [ 1153.945520] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1153.950696] ? lock_acquire+0x1e4/0x540 [ 1153.954655] ? is_bpf_text_address+0xae/0x170 [ 1153.959141] should_fail.cold.4+0xa/0x11 [ 1153.963198] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1153.968288] ? lock_acquire+0x1e4/0x540 [ 1153.972247] ? is_bpf_text_address+0xae/0x170 [ 1153.976731] ? lock_downgrade+0x8f0/0x8f0 [ 1153.980864] ? lock_acquire+0x1e4/0x540 [ 1153.984822] ? add_wait_queue+0x1b9/0x2b0 [ 1153.988954] ? lock_downgrade+0x8f0/0x8f0 [ 1153.993091] ? kasan_check_read+0x11/0x20 [ 1153.997227] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1154.001621] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1154.006188] ? kasan_check_write+0x14/0x20 [ 1154.010410] ? trace_hardirqs_on+0xd/0x10 [ 1154.014543] ? lock_acquire+0x1e4/0x540 [ 1154.018504] ? p9_client_prepare_req.part.9+0x534/0xcd0 [ 1154.023876] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1154.028622] __should_failslab+0x124/0x180 [ 1154.032848] should_failslab+0x9/0x14 [ 1154.036819] kmem_cache_alloc_trace+0x4b/0x780 [ 1154.041394] ? kasan_check_write+0x14/0x20 [ 1154.045612] ? do_raw_spin_lock+0xc1/0x200 [ 1154.049835] p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 1154.055016] ? p9_free_req.isra.8+0x140/0x140 [ 1154.059499] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1154.065024] ? sock_poll+0x274/0x4b0 [ 1154.068724] ? kernel_sendpage_locked+0x120/0x120 [ 1154.073566] ? p9_conn_create+0x730/0x730 [ 1154.077707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1154.083231] p9_client_rpc+0x1bd/0x1400 [ 1154.087188] ? p9_fd_poll+0x1e0/0x2b0 [ 1154.090974] ? p9_conn_create+0x55b/0x730 [ 1154.095113] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1154.100464] ? ksys_dup3+0x690/0x690 [ 1154.104164] ? check_same_owner+0x340/0x340 [ 1154.108484] ? p9_fd_poll+0x2b0/0x2b0 [ 1154.112272] ? kasan_kmalloc+0xc4/0xe0 [ 1154.116146] ? kasan_unpoison_shadow+0x35/0x50 [ 1154.120718] ? p9_fd_show_options+0x1c0/0x1c0 [ 1154.125205] ? __raw_spin_lock_init+0x2d/0x100 [ 1154.129772] p9_client_create+0xd09/0x16c9 [ 1154.133994] ? p9_client_read+0xc60/0xc60 [ 1154.138130] ? kasan_check_read+0x11/0x20 [ 1154.142266] ? lock_acquire+0x1e4/0x540 [ 1154.146224] ? fs_reclaim_acquire+0x20/0x20 [ 1154.150532] ? lock_release+0xa30/0xa30 [ 1154.154491] ? __lockdep_init_map+0x105/0x590 [ 1154.158974] ? kasan_check_write+0x14/0x20 [ 1154.163196] ? __init_rwsem+0x1cc/0x2a0 [ 1154.167155] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1154.172158] ? __kmalloc_track_caller+0x311/0x760 [ 1154.176983] ? save_stack+0xa9/0xd0 [ 1154.180595] ? save_stack+0x43/0xd0 [ 1154.184205] ? kasan_kmalloc+0xc4/0xe0 [ 1154.188079] ? kmem_cache_alloc_trace+0x152/0x780 [ 1154.192928] ? memcpy+0x45/0x50 [ 1154.196198] v9fs_session_init+0x21a/0x1a80 [ 1154.200502] ? rcu_note_context_switch+0x730/0x730 [ 1154.205418] ? do_mount+0x69e/0x1fb0 [ 1154.209128] ? lock_acquire+0x1e4/0x540 [ 1154.213119] ? v9fs_show_options+0x7e0/0x7e0 [ 1154.217529] ? lock_release+0xa30/0xa30 [ 1154.221499] ? check_same_owner+0x340/0x340 [ 1154.225809] ? kasan_unpoison_shadow+0x35/0x50 [ 1154.230375] ? kasan_kmalloc+0xc4/0xe0 [ 1154.234248] ? kmem_cache_alloc_trace+0x318/0x780 [ 1154.239101] v9fs_mount+0x7c/0x900 [ 1154.242644] ? v9fs_drop_inode+0x150/0x150 [ 1154.246863] legacy_get_tree+0x118/0x440 [ 1154.250914] vfs_get_tree+0x1cb/0x5c0 [ 1154.254704] do_mount+0x6c1/0x1fb0 [ 1154.258230] ? kasan_check_write+0x14/0x20 [ 1154.262450] ? copy_mount_string+0x40/0x40 [ 1154.266682] ? kasan_kmalloc+0xc4/0xe0 [ 1154.270557] ? kmem_cache_alloc_trace+0x318/0x780 [ 1154.275385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1154.280910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1154.286440] ? copy_mount_options+0x285/0x380 [ 1154.290920] ksys_mount+0x12d/0x140 [ 1154.294544] __x64_sys_mount+0xbe/0x150 [ 1154.298515] do_syscall_64+0x1b9/0x820 [ 1154.302384] ? finish_task_switch+0x1d3/0x870 [ 1154.306864] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1154.311778] ? syscall_return_slowpath+0x31d/0x5e0 [ 1154.316691] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1154.321693] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1154.326694] ? perf_trace_sys_enter+0xb10/0xb10 [ 1154.331347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1154.336175] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1154.341345] RIP: 0033:0x455e29 [ 1154.344512] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1154.363678] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1154.371379] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1154.378631] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1154.385883] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1154.393133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1154.400395] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000017 [ 1154.407912] 9pnet: Couldn't grow tag array [ 1154.426695] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:14 executing program 2 (fault-call:3 fault-nth:24): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:14 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x970, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1154.447338] 9pnet: Insufficient options for proto=fd [ 1154.454947] 9pnet: Insufficient options for proto=fd 04:22:14 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xe087ffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:14 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rflno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1154.529249] FAULT_INJECTION: forcing a failure. [ 1154.529249] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1154.541104] CPU: 0 PID: 378 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1154.549342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.558707] Call Trace: [ 1154.561308] dump_stack+0x1c9/0x2b4 [ 1154.564948] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1154.570134] ? perf_trace_lock+0xde/0x920 [ 1154.574294] should_fail.cold.4+0xa/0x11 [ 1154.578350] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1154.583445] ? is_bpf_text_address+0xae/0x170 [ 1154.587928] ? lock_downgrade+0x8f0/0x8f0 [ 1154.592074] ? lock_release+0xa30/0xa30 [ 1154.596040] ? kasan_check_read+0x11/0x20 [ 1154.600190] ? rcu_is_watching+0x8c/0x150 [ 1154.604341] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1154.609002] ? is_bpf_text_address+0xd7/0x170 [ 1154.613488] ? kernel_text_address+0x79/0xf0 [ 1154.617882] ? __kernel_text_address+0xd/0x40 [ 1154.622378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1154.627902] ? should_fail+0x246/0xd86 [ 1154.631958] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1154.637053] __alloc_pages_nodemask+0x36e/0xdb0 [ 1154.641716] ? save_stack+0xa9/0xd0 [ 1154.645336] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1154.650354] ? p9_client_create+0xd09/0x16c9 [ 1154.654750] ? v9fs_mount+0x7c/0x900 [ 1154.658447] ? legacy_get_tree+0x118/0x440 [ 1154.662668] ? vfs_get_tree+0x1cb/0x5c0 [ 1154.666629] ? do_mount+0x6c1/0x1fb0 [ 1154.670328] ? ksys_mount+0x12d/0x140 [ 1154.674115] ? __x64_sys_mount+0xbe/0x150 [ 1154.678253] ? do_syscall_64+0x1b9/0x820 [ 1154.682307] ? lock_acquire+0x1e4/0x540 [ 1154.686270] ? cache_grow_end.part.37+0x95/0x170 [ 1154.691015] ? lock_downgrade+0x8f0/0x8f0 [ 1154.695167] ? check_same_owner+0x340/0x340 [ 1154.699478] cache_grow_begin+0x91/0x710 [ 1154.703529] __kmalloc+0x688/0x760 [ 1154.707060] ? __init_waitqueue_head+0x9e/0x150 [ 1154.711717] ? init_wait_entry+0x1c0/0x1c0 [ 1154.715940] ? p9_fcall_alloc+0x1e/0x90 [ 1154.719900] p9_fcall_alloc+0x1e/0x90 [ 1154.723690] p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 1154.728872] ? p9_free_req.isra.8+0x140/0x140 [ 1154.733353] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1154.738877] ? sock_poll+0x274/0x4b0 [ 1154.742580] ? kernel_sendpage_locked+0x120/0x120 [ 1154.747406] ? p9_conn_create+0x730/0x730 [ 1154.751544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1154.757070] p9_client_rpc+0x1bd/0x1400 [ 1154.761036] ? p9_fd_poll+0x1e0/0x2b0 [ 1154.764834] ? p9_conn_create+0x55b/0x730 [ 1154.768968] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1154.774326] ? ksys_dup3+0x690/0x690 [ 1154.778029] ? check_same_owner+0x340/0x340 [ 1154.782338] ? p9_fd_poll+0x2b0/0x2b0 [ 1154.786128] ? kasan_kmalloc+0xc4/0xe0 [ 1154.790004] ? kasan_unpoison_shadow+0x35/0x50 [ 1154.794581] ? p9_fd_show_options+0x1c0/0x1c0 [ 1154.799062] ? __raw_spin_lock_init+0x2d/0x100 [ 1154.803634] p9_client_create+0xd09/0x16c9 [ 1154.807859] ? p9_client_read+0xc60/0xc60 [ 1154.812010] ? lock_acquire+0x1e4/0x540 [ 1154.815972] ? fs_reclaim_acquire+0x20/0x20 [ 1154.820279] ? lock_release+0xa30/0xa30 [ 1154.824239] ? __lockdep_init_map+0x105/0x590 [ 1154.828984] ? kasan_check_write+0x14/0x20 [ 1154.833200] ? __init_rwsem+0x1cc/0x2a0 [ 1154.837157] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1154.842161] ? __kmalloc_track_caller+0x311/0x760 [ 1154.846997] ? save_stack+0xa9/0xd0 [ 1154.850612] ? save_stack+0x43/0xd0 [ 1154.854222] ? kasan_kmalloc+0xc4/0xe0 [ 1154.858096] ? kmem_cache_alloc_trace+0x152/0x780 [ 1154.862923] ? memcpy+0x45/0x50 [ 1154.866191] v9fs_session_init+0x21a/0x1a80 [ 1154.870611] ? rcu_note_context_switch+0x730/0x730 [ 1154.875534] ? do_mount+0x69e/0x1fb0 [ 1154.879249] ? lock_acquire+0x1e4/0x540 [ 1154.883212] ? v9fs_show_options+0x7e0/0x7e0 [ 1154.887619] ? lock_release+0xa30/0xa30 [ 1154.891584] ? check_same_owner+0x340/0x340 [ 1154.895897] ? lock_downgrade+0x8f0/0x8f0 [ 1154.900055] ? kasan_unpoison_shadow+0x35/0x50 [ 1154.904635] ? kasan_kmalloc+0xc4/0xe0 [ 1154.908510] ? kmem_cache_alloc_trace+0x318/0x780 [ 1154.913345] ? kasan_unpoison_shadow+0x35/0x50 [ 1154.917912] ? kasan_kmalloc+0xc4/0xe0 [ 1154.921788] v9fs_mount+0x7c/0x900 [ 1154.925319] ? v9fs_drop_inode+0x150/0x150 [ 1154.929544] legacy_get_tree+0x118/0x440 [ 1154.933599] vfs_get_tree+0x1cb/0x5c0 [ 1154.937385] do_mount+0x6c1/0x1fb0 [ 1154.940911] ? check_same_owner+0x340/0x340 [ 1154.945218] ? lock_release+0xa30/0xa30 [ 1154.949182] ? copy_mount_string+0x40/0x40 [ 1154.953412] ? kasan_kmalloc+0xc4/0xe0 [ 1154.957299] ? kmem_cache_alloc_trace+0x318/0x780 [ 1154.962129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1154.967655] ? _copy_from_user+0xdf/0x150 [ 1154.971794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1154.977316] ? copy_mount_options+0x285/0x380 [ 1154.981797] ksys_mount+0x12d/0x140 [ 1154.985411] __x64_sys_mount+0xbe/0x150 [ 1154.989370] do_syscall_64+0x1b9/0x820 [ 1154.993252] ? finish_task_switch+0x1d3/0x870 [ 1154.997734] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1155.002663] ? syscall_return_slowpath+0x31d/0x5e0 [ 1155.007580] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1155.012600] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1155.017612] ? perf_trace_sys_enter+0xb10/0xb10 [ 1155.022281] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1155.027113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1155.032286] RIP: 0033:0x455e29 [ 1155.035455] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1155.054666] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.062370] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1155.069635] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 04:22:14 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1155.076889] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1155.084321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1155.091589] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000018 [ 1155.105538] 9pnet: Insufficient options for proto=fd [ 1155.121714] 9pnet: Insufficient options for proto=fd 04:22:15 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2204a, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:15 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfDno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1155.127719] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1155.140731] 9pnet: Insufficient options for proto=fd [ 1155.243916] 9pnet: Insufficient options for proto=fd [ 1155.271523] 9pnet: Insufficient options for proto=fd 04:22:15 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000080)) 04:22:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:15 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfa3b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:15 executing program 2 (fault-call:3 fault-nth:25): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:15 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:15 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x22052, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:15 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:15 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfcno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1155.448854] FAULT_INJECTION: forcing a failure. [ 1155.448854] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.460160] CPU: 1 PID: 430 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1155.467093] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1155.468384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.468390] Call Trace: [ 1155.468415] dump_stack+0x1c9/0x2b4 [ 1155.468431] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1155.468452] ? __kernel_text_address+0xd/0x40 [ 1155.505225] ? unwind_get_return_address+0x61/0xa0 [ 1155.510145] should_fail.cold.4+0xa/0x11 [ 1155.514195] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1155.519292] ? save_stack+0xa9/0xd0 [ 1155.522903] ? save_stack+0x43/0xd0 [ 1155.526600] ? kasan_kmalloc+0xc4/0xe0 [ 1155.530483] ? kmem_cache_alloc_trace+0x152/0x780 [ 1155.535312] ? p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 1155.540927] ? p9_client_rpc+0x1bd/0x1400 [ 1155.545062] ? p9_client_create+0xd09/0x16c9 [ 1155.549459] ? v9fs_mount+0x7c/0x900 [ 1155.553159] ? legacy_get_tree+0x118/0x440 [ 1155.557380] ? vfs_get_tree+0x1cb/0x5c0 [ 1155.561340] ? do_mount+0x6c1/0x1fb0 [ 1155.565040] ? ksys_mount+0x12d/0x140 [ 1155.568823] ? __x64_sys_mount+0xbe/0x150 [ 1155.572957] ? do_syscall_64+0x1b9/0x820 [ 1155.577004] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1155.582358] ? lock_acquire+0x1e4/0x540 [ 1155.586315] ? cache_grow_end.part.37+0x95/0x170 [ 1155.591065] ? lock_downgrade+0x8f0/0x8f0 [ 1155.595200] ? kasan_check_read+0x11/0x20 [ 1155.599330] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1155.603722] ? check_same_owner+0x340/0x340 [ 1155.608028] ? p9_client_prepare_req.part.9+0x707/0xcd0 [ 1155.613381] ? rcu_note_context_switch+0x730/0x730 [ 1155.618294] ? kasan_unpoison_shadow+0x35/0x50 [ 1155.622874] __should_failslab+0x124/0x180 [ 1155.627108] should_failslab+0x9/0x14 [ 1155.630904] kmem_cache_alloc_trace+0x2cb/0x780 [ 1155.635564] p9_client_prepare_req.part.9+0x82a/0xcd0 [ 1155.640740] ? p9_free_req.isra.8+0x140/0x140 [ 1155.645219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1155.650738] ? sock_poll+0x274/0x4b0 [ 1155.654435] ? kernel_sendpage_locked+0x120/0x120 [ 1155.659261] ? p9_conn_create+0x730/0x730 [ 1155.663400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1155.668925] p9_client_rpc+0x1bd/0x1400 [ 1155.672889] ? p9_fd_poll+0x1e0/0x2b0 [ 1155.676675] ? p9_conn_create+0x55b/0x730 [ 1155.680821] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1155.686181] ? ksys_dup3+0x690/0x690 [ 1155.689893] ? check_same_owner+0x340/0x340 [ 1155.694200] ? p9_fd_poll+0x2b0/0x2b0 [ 1155.697990] ? kasan_kmalloc+0xc4/0xe0 [ 1155.701869] ? kasan_unpoison_shadow+0x35/0x50 [ 1155.706440] ? p9_fd_show_options+0x1c0/0x1c0 [ 1155.710924] ? __raw_spin_lock_init+0x2d/0x100 [ 1155.715499] p9_client_create+0xd09/0x16c9 [ 1155.719721] ? p9_client_read+0xc60/0xc60 [ 1155.723855] ? kasan_check_read+0x11/0x20 [ 1155.727995] ? lock_acquire+0x1e4/0x540 [ 1155.731960] ? fs_reclaim_acquire+0x20/0x20 [ 1155.736276] ? lock_release+0xa30/0xa30 [ 1155.740325] ? __lockdep_init_map+0x105/0x590 [ 1155.744813] ? kasan_check_write+0x14/0x20 [ 1155.749036] ? __init_rwsem+0x1cc/0x2a0 [ 1155.752998] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1155.758008] ? __kmalloc_track_caller+0x311/0x760 [ 1155.762839] ? save_stack+0xa9/0xd0 [ 1155.766454] ? save_stack+0x43/0xd0 [ 1155.770067] ? kasan_kmalloc+0xc4/0xe0 [ 1155.773941] ? kmem_cache_alloc_trace+0x152/0x780 [ 1155.778770] ? memcpy+0x45/0x50 [ 1155.782039] v9fs_session_init+0x21a/0x1a80 [ 1155.786347] ? rcu_note_context_switch+0x730/0x730 [ 1155.791280] ? do_mount+0x69e/0x1fb0 [ 1155.794985] ? lock_acquire+0x1e4/0x540 [ 1155.798951] ? v9fs_show_options+0x7e0/0x7e0 [ 1155.803349] ? lock_release+0xa30/0xa30 [ 1155.807310] ? check_same_owner+0x340/0x340 [ 1155.811622] ? kasan_unpoison_shadow+0x35/0x50 [ 1155.816195] ? kasan_kmalloc+0xc4/0xe0 [ 1155.820074] ? kmem_cache_alloc_trace+0x318/0x780 [ 1155.824911] ? kasan_unpoison_shadow+0x35/0x50 [ 1155.829490] ? kasan_kmalloc+0xc4/0xe0 [ 1155.833368] v9fs_mount+0x7c/0x900 [ 1155.836909] ? v9fs_drop_inode+0x150/0x150 [ 1155.841138] legacy_get_tree+0x118/0x440 [ 1155.845360] vfs_get_tree+0x1cb/0x5c0 [ 1155.849160] do_mount+0x6c1/0x1fb0 [ 1155.852688] ? kasan_check_write+0x14/0x20 [ 1155.856922] ? copy_mount_string+0x40/0x40 [ 1155.861144] ? kasan_kmalloc+0xc4/0xe0 [ 1155.865022] ? kmem_cache_alloc_trace+0x318/0x780 [ 1155.869863] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1155.875399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1155.880940] ? copy_mount_options+0x285/0x380 [ 1155.885421] ksys_mount+0x12d/0x140 [ 1155.889039] __x64_sys_mount+0xbe/0x150 [ 1155.893004] do_syscall_64+0x1b9/0x820 [ 1155.896884] ? finish_task_switch+0x1d3/0x870 [ 1155.901370] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1155.906287] ? syscall_return_slowpath+0x31d/0x5e0 [ 1155.911212] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1155.916220] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1155.921221] ? perf_trace_sys_enter+0xb10/0xb10 [ 1155.925874] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1155.930706] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1155.935880] RIP: 0033:0x455e29 [ 1155.939050] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1155.958214] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1155.965910] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1155.973165] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1155.980430] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1155.987682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 04:22:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:16 executing program 2 (fault-call:3 fault-nth:26): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:16 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfSno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:16 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x97ffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:16 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1155.994935] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000019 [ 1156.002279] 9pnet: Couldn't grow tag array [ 1156.009553] 9pnet: Insufficient options for proto=fd [ 1156.022500] 9pnet: Insufficient options for proto=fd [ 1156.025724] 9pnet: Insufficient options for proto=fd 04:22:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1156.121943] 9pnet: Insufficient options for proto=fd [ 1156.124444] 9pnet: Insufficient options for proto=fd [ 1156.141085] FAULT_INJECTION: forcing a failure. [ 1156.141085] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1156.152931] CPU: 0 PID: 451 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1156.161170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.170521] Call Trace: [ 1156.173104] dump_stack+0x1c9/0x2b4 [ 1156.176724] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1156.181907] ? perf_trace_lock+0xde/0x920 [ 1156.186062] should_fail.cold.4+0xa/0x11 [ 1156.190127] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1156.195228] ? is_bpf_text_address+0xae/0x170 [ 1156.199716] ? lock_downgrade+0x8f0/0x8f0 [ 1156.203852] ? lock_release+0xa30/0xa30 [ 1156.207814] ? kasan_check_read+0x11/0x20 [ 1156.211949] ? rcu_is_watching+0x8c/0x150 [ 1156.216096] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1156.220761] ? is_bpf_text_address+0xd7/0x170 [ 1156.225256] ? kernel_text_address+0x79/0xf0 [ 1156.229655] ? __kernel_text_address+0xd/0x40 [ 1156.234140] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1156.239665] ? should_fail+0x246/0xd86 [ 1156.243539] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1156.248640] __alloc_pages_nodemask+0x36e/0xdb0 [ 1156.253313] ? save_stack+0xa9/0xd0 [ 1156.256933] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1156.261948] ? p9_client_create+0xd09/0x16c9 [ 1156.266344] ? v9fs_mount+0x7c/0x900 [ 1156.270043] ? legacy_get_tree+0x118/0x440 [ 1156.274266] ? vfs_get_tree+0x1cb/0x5c0 [ 1156.278228] ? do_mount+0x6c1/0x1fb0 [ 1156.281929] ? ksys_mount+0x12d/0x140 [ 1156.285714] ? __x64_sys_mount+0xbe/0x150 [ 1156.289851] ? do_syscall_64+0x1b9/0x820 [ 1156.293908] ? lock_acquire+0x1e4/0x540 [ 1156.297875] ? cache_grow_end.part.37+0x95/0x170 [ 1156.302624] ? lock_downgrade+0x8f0/0x8f0 [ 1156.306765] ? check_same_owner+0x340/0x340 [ 1156.311084] cache_grow_begin+0x91/0x710 [ 1156.315148] __kmalloc+0x688/0x760 [ 1156.318677] ? __init_waitqueue_head+0x9e/0x150 [ 1156.323334] ? init_wait_entry+0x1c0/0x1c0 [ 1156.327555] ? p9_fcall_alloc+0x1e/0x90 [ 1156.331517] p9_fcall_alloc+0x1e/0x90 [ 1156.335306] p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 1156.340486] ? p9_free_req.isra.8+0x140/0x140 [ 1156.344985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1156.350512] ? sock_poll+0x274/0x4b0 [ 1156.354213] ? kernel_sendpage_locked+0x120/0x120 [ 1156.359043] ? p9_conn_create+0x730/0x730 [ 1156.363180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1156.368705] p9_client_rpc+0x1bd/0x1400 [ 1156.372662] ? p9_fd_poll+0x1e0/0x2b0 [ 1156.376450] ? p9_conn_create+0x55b/0x730 [ 1156.380585] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1156.385950] ? ksys_dup3+0x690/0x690 [ 1156.389651] ? check_same_owner+0x340/0x340 [ 1156.393957] ? p9_fd_poll+0x2b0/0x2b0 [ 1156.397746] ? kasan_kmalloc+0xc4/0xe0 [ 1156.401625] ? kasan_unpoison_shadow+0x35/0x50 [ 1156.406202] ? p9_fd_show_options+0x1c0/0x1c0 [ 1156.410682] ? __raw_spin_lock_init+0x2d/0x100 [ 1156.415253] p9_client_create+0xd09/0x16c9 [ 1156.419478] ? p9_client_read+0xc60/0xc60 [ 1156.423615] ? lock_acquire+0x1e4/0x540 [ 1156.427576] ? fs_reclaim_acquire+0x20/0x20 [ 1156.431887] ? lock_release+0xa30/0xa30 [ 1156.435864] ? __lockdep_init_map+0x105/0x590 [ 1156.440361] ? kasan_check_write+0x14/0x20 [ 1156.444581] ? __init_rwsem+0x1cc/0x2a0 [ 1156.448561] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1156.453565] ? __kmalloc_track_caller+0x311/0x760 [ 1156.458394] ? save_stack+0xa9/0xd0 [ 1156.462006] ? save_stack+0x43/0xd0 [ 1156.465625] ? kasan_kmalloc+0xc4/0xe0 [ 1156.469499] ? kmem_cache_alloc_trace+0x152/0x780 [ 1156.474328] ? memcpy+0x45/0x50 [ 1156.477603] v9fs_session_init+0x21a/0x1a80 [ 1156.481916] ? rcu_note_context_switch+0x730/0x730 [ 1156.486834] ? do_mount+0x69e/0x1fb0 [ 1156.490542] ? lock_acquire+0x1e4/0x540 [ 1156.494505] ? v9fs_show_options+0x7e0/0x7e0 [ 1156.498900] ? lock_release+0xa30/0xa30 [ 1156.502876] ? check_same_owner+0x340/0x340 [ 1156.507204] ? kasan_unpoison_shadow+0x35/0x50 [ 1156.511775] ? kasan_kmalloc+0xc4/0xe0 [ 1156.515660] ? kmem_cache_alloc_trace+0x318/0x780 [ 1156.520499] ? kasan_unpoison_shadow+0x35/0x50 [ 1156.525081] ? kasan_kmalloc+0xc4/0xe0 [ 1156.528971] v9fs_mount+0x7c/0x900 [ 1156.532500] ? v9fs_drop_inode+0x150/0x150 [ 1156.536738] legacy_get_tree+0x118/0x440 [ 1156.540786] vfs_get_tree+0x1cb/0x5c0 [ 1156.544580] do_mount+0x6c1/0x1fb0 [ 1156.548107] ? kasan_check_read+0x11/0x20 [ 1156.552255] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1156.556651] ? copy_mount_string+0x40/0x40 [ 1156.560870] ? retint_kernel+0x10/0x10 [ 1156.564750] ? copy_mount_options+0x1a1/0x380 [ 1156.569234] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1156.574065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1156.579593] ? copy_mount_options+0x285/0x380 [ 1156.584093] ksys_mount+0x12d/0x140 [ 1156.587719] __x64_sys_mount+0xbe/0x150 [ 1156.591682] do_syscall_64+0x1b9/0x820 [ 1156.595555] ? finish_task_switch+0x1d3/0x870 [ 1156.600052] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1156.605145] ? syscall_return_slowpath+0x31d/0x5e0 [ 1156.610072] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1156.615081] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1156.620110] ? perf_trace_sys_enter+0xb10/0xb10 [ 1156.624776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1156.629624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1156.634808] RIP: 0033:0x455e29 [ 1156.637984] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1156.657189] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1156.664884] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1156.672137] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1156.679398] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1156.686674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 1156.693946] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000001a [ 1156.705091] xt_check_match: 1 callbacks suppressed [ 1156.705112] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:16 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1156.715626] 9pnet: Insufficient options for proto=fd 04:22:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000feffff07", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1156.824414] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:16 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x40049409, &(0x7f0000000080)) 04:22:16 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x200000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:16 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfpno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:16 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:16 executing program 2 (fault-call:3 fault-nth:27): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1156.953974] 9pnet: Insufficient options for proto=fd [ 1156.964520] 9pnet: Insufficient options for proto=fd [ 1156.965842] FAULT_INJECTION: forcing a failure. [ 1156.965842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1156.978509] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1156.981464] CPU: 1 PID: 487 Comm: syz-executor2 Not tainted 4.18.0-rc3-next-20180706+ #1 04:22:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1156.981473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.981478] Call Trace: [ 1156.981502] dump_stack+0x1c9/0x2b4 [ 1156.981519] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1156.981542] ? perf_trace_lock+0xde/0x920 [ 1156.995051] 9pnet: Insufficient options for proto=fd [ 1157.001399] should_fail.cold.4+0xa/0x11 [ 1157.001418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1157.001434] ? is_bpf_text_address+0xae/0x170 [ 1157.001449] ? lock_downgrade+0x8f0/0x8f0 [ 1157.001471] ? lock_release+0xa30/0xa30 04:22:17 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x500, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1157.053311] ? kasan_check_read+0x11/0x20 [ 1157.057473] ? rcu_is_watching+0x8c/0x150 [ 1157.061640] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1157.066344] ? is_bpf_text_address+0xd7/0x170 [ 1157.067707] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1157.070930] ? kernel_text_address+0x79/0xf0 [ 1157.070944] ? __kernel_text_address+0xd/0x40 [ 1157.070961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1157.070975] ? should_fail+0x246/0xd86 [ 1157.070989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1157.071010] __alloc_pages_nodemask+0x36e/0xdb0 [ 1157.110680] ? save_stack+0xa9/0xd0 [ 1157.114310] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1157.119327] ? p9_client_create+0xd09/0x16c9 [ 1157.123738] ? v9fs_mount+0x7c/0x900 [ 1157.127460] ? legacy_get_tree+0x118/0x440 [ 1157.131710] ? vfs_get_tree+0x1cb/0x5c0 [ 1157.135672] ? do_mount+0x6c1/0x1fb0 [ 1157.139373] ? ksys_mount+0x12d/0x140 [ 1157.143164] ? __x64_sys_mount+0xbe/0x150 [ 1157.147314] ? do_syscall_64+0x1b9/0x820 [ 1157.151372] ? lock_acquire+0x1e4/0x540 [ 1157.155337] ? cache_grow_end.part.37+0x95/0x170 [ 1157.160084] ? lock_downgrade+0x8f0/0x8f0 [ 1157.164222] ? check_same_owner+0x340/0x340 [ 1157.168533] cache_grow_begin+0x91/0x710 [ 1157.172589] __kmalloc+0x688/0x760 [ 1157.176118] ? __init_waitqueue_head+0x9e/0x150 [ 1157.180796] ? init_wait_entry+0x1c0/0x1c0 [ 1157.185023] ? p9_fcall_alloc+0x1e/0x90 [ 1157.190128] p9_fcall_alloc+0x1e/0x90 [ 1157.193920] p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 1157.199116] ? p9_free_req.isra.8+0x140/0x140 [ 1157.203612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1157.209574] ? sock_poll+0x274/0x4b0 [ 1157.213281] ? kernel_sendpage_locked+0x120/0x120 [ 1157.218123] ? p9_conn_create+0x730/0x730 [ 1157.222257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1157.227808] p9_client_rpc+0x1bd/0x1400 [ 1157.231776] ? p9_fd_poll+0x1e0/0x2b0 [ 1157.235565] ? p9_conn_create+0x55b/0x730 [ 1157.239702] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1157.245071] ? ksys_dup3+0x690/0x690 [ 1157.248783] ? check_same_owner+0x340/0x340 [ 1157.253099] ? p9_fd_poll+0x2b0/0x2b0 [ 1157.256902] ? kasan_kmalloc+0xc4/0xe0 [ 1157.260789] ? kasan_unpoison_shadow+0x35/0x50 [ 1157.265363] ? p9_fd_show_options+0x1c0/0x1c0 [ 1157.269850] ? __raw_spin_lock_init+0x2d/0x100 [ 1157.274437] p9_client_create+0xd09/0x16c9 [ 1157.279102] ? p9_client_read+0xc60/0xc60 [ 1157.283243] ? lock_acquire+0x1e4/0x540 [ 1157.287209] ? fs_reclaim_acquire+0x20/0x20 [ 1157.291521] ? lock_release+0xa30/0xa30 [ 1157.295501] ? __lockdep_init_map+0x105/0x590 [ 1157.299991] ? kasan_check_write+0x14/0x20 [ 1157.304214] ? __init_rwsem+0x1cc/0x2a0 [ 1157.308187] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1157.313199] ? __kmalloc_track_caller+0x311/0x760 [ 1157.318036] ? save_stack+0xa9/0xd0 [ 1157.321655] ? save_stack+0x43/0xd0 [ 1157.325269] ? kasan_kmalloc+0xc4/0xe0 [ 1157.329153] ? kmem_cache_alloc_trace+0x152/0x780 [ 1157.333999] ? memcpy+0x45/0x50 [ 1157.337277] v9fs_session_init+0x21a/0x1a80 [ 1157.341594] ? rcu_note_context_switch+0x730/0x730 [ 1157.346512] ? do_mount+0x69e/0x1fb0 [ 1157.350230] ? lock_acquire+0x1e4/0x540 [ 1157.354197] ? v9fs_show_options+0x7e0/0x7e0 [ 1157.358613] ? lock_release+0xa30/0xa30 [ 1157.362579] ? check_same_owner+0x340/0x340 [ 1157.366890] ? kasan_unpoison_shadow+0x35/0x50 [ 1157.371461] ? kasan_kmalloc+0xc4/0xe0 [ 1157.375348] ? kmem_cache_alloc_trace+0x318/0x780 [ 1157.380185] ? kasan_unpoison_shadow+0x35/0x50 [ 1157.384774] ? kasan_kmalloc+0xc4/0xe0 [ 1157.388660] v9fs_mount+0x7c/0x900 [ 1157.392198] ? v9fs_drop_inode+0x150/0x150 [ 1157.396436] legacy_get_tree+0x118/0x440 [ 1157.400508] vfs_get_tree+0x1cb/0x5c0 [ 1157.404306] do_mount+0x6c1/0x1fb0 [ 1157.407873] ? kasan_check_write+0x14/0x20 [ 1157.412103] ? copy_mount_string+0x40/0x40 [ 1157.416336] ? kasan_kmalloc+0xc4/0xe0 [ 1157.420240] ? kmem_cache_alloc_trace+0x318/0x780 [ 1157.425085] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1157.430618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1157.436153] ? copy_mount_options+0x285/0x380 [ 1157.440645] ksys_mount+0x12d/0x140 [ 1157.444262] __x64_sys_mount+0xbe/0x150 [ 1157.448228] do_syscall_64+0x1b9/0x820 [ 1157.452113] ? finish_task_switch+0x1d3/0x870 [ 1157.456601] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1157.461542] ? syscall_return_slowpath+0x31d/0x5e0 [ 1157.466479] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1157.471487] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1157.476499] ? perf_trace_sys_enter+0xb10/0xb10 [ 1157.481165] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.486008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1157.491194] RIP: 0033:0x455e29 [ 1157.494373] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1157.513617] RSP: 002b:00007f3db53cdc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1157.521329] RAX: ffffffffffffffda RBX: 00007f3db53ce6d4 RCX: 0000000000455e29 [ 1157.528588] RDX: 0000000020000900 RSI: 0000000020000100 RDI: 0000000000000000 [ 1157.535858] RBP: 000000000072bea0 R08: 0000000020000840 R09: 0000000000000000 [ 1157.543124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 04:22:17 executing program 2 (fault-call:3 fault-nth:28): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:17 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x50200200, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:17 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfxno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1157.550387] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000001b [ 1157.570786] 9pnet: Insufficient options for proto=fd [ 1157.585883] 9pnet: Insufficient options for proto=fd 04:22:17 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x600, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:17 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1157.655838] 9pnet: Insufficient options for proto=fd 04:22:17 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000040}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1157.684790] 9pnet: Insufficient options for proto=fd [ 1157.691713] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1157.711322] 9pnet: Insufficient options for proto=fd 04:22:18 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000080)) 04:22:18 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x51200200, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:18 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfQno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:18 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x40000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:18 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:18 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1158.594807] 9pnet: Insufficient options for proto=fd [ 1158.603967] 9pnet: Insufficient options for proto=fd [ 1158.625462] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:18 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x7009, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:18 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x300, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1158.640435] 9pnet: Insufficient options for proto=fd 04:22:18 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfVno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000002", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:18 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:18 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:18 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x500000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1158.770543] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1158.771074] 9pnet: Insufficient options for proto=fd [ 1158.782587] 9pnet: Insufficient options for proto=fd [ 1158.823868] 9pnet: Insufficient options for proto=fd [ 1159.388824] 9pnet: Insufficient options for proto=fd 04:22:19 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5451, &(0x7f0000000080)) 04:22:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:19 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x10, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:19 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:19 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfsno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:19 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x3f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:19 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xff00000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:19 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:19 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1159.639672] 9pnet: Insufficient options for proto=fd [ 1159.643786] 9pnet: Insufficient options for proto=fd [ 1159.663199] 9pnet: Insufficient options for proto=fd 04:22:19 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2204e, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:19 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfAno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1159.683113] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:19 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xff00000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:19 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfffffffd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:19 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1159.783665] 9pnet: Insufficient options for proto=fd 04:22:19 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x22051, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1159.813130] 9pnet: Insufficient options for proto=fd [ 1159.847612] 9pnet: Insufficient options for proto=fd [ 1159.873115] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1160.419698] 9pnet: Insufficient options for proto=fd 04:22:20 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x541f, &(0x7f0000000080)) 04:22:20 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:20 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfRno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:20 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x70090000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:20 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x22056, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:20 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:20 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x9000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:20 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x600000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:20 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1160.657925] 9pnet: Insufficient options for proto=fd [ 1160.666530] 9pnet: Insufficient options for proto=fd [ 1160.677712] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1160.697724] 9pnet: Insufficient options for proto=fd 04:22:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:20 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfXno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:20 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x40000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:20 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x700000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1160.824778] 9pnet: Insufficient options for proto=fd [ 1160.839964] 9pnet: Insufficient options for proto=fd [ 1160.874105] 9pnet: Insufficient options for proto=fd [ 1161.491669] 9pnet: Insufficient options for proto=fd 04:22:21 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5452, &(0x7f0000000080)) 04:22:21 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x2000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:21 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rf%no', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:21 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'/rans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000004", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:21 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:21 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 04:22:21 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xff00, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1161.691391] 9pnet: Insufficient options for proto=fd [ 1161.707882] xt_check_match: 3 callbacks suppressed [ 1161.707904] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1161.730492] 9pnet: Insufficient options for proto=fd 04:22:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:21 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1161.737896] 9pnet: Insufficient options for proto=fd [ 1161.745281] 9pnet_virtio: no channels available for device (null) 04:22:21 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfbno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:21 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tr/ns=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:21 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:21 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xedc0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1161.803924] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1161.852653] 9pnet: Insufficient options for proto=fd 04:22:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000023800", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1161.878620] 9pnet: Insufficient options for proto=fd [ 1161.890394] 9pnet_virtio: no channels available for device (null) [ 1161.902715] 9pnet: Insufficient options for proto=fd [ 1161.927422] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1162.506632] 9pnet: Insufficient options for proto=fd 04:22:22 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0xc0045877, &(0x7f0000000080)) 04:22:22 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranc=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:22 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfino', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:22 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:22 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff3b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:22 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 04:22:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:22 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x9, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:22 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000000000000000000000000000000000000000200", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1162.732515] 9pnet: Insufficient options for proto=fd [ 1162.750915] 9pnet: Insufficient options for proto=fd [ 1162.754014] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1162.758842] 9pnet_virtio: no channels available for device (null) [ 1162.776766] 9pnet: Insufficient options for proto=fd 04:22:22 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf4ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:22 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfono', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:22 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranX=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:22 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:22 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1162.856780] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1162.896452] 9pnet: Insufficient options for proto=fd 04:22:22 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1162.906802] 9pnet: Insufficient options for proto=fd [ 1162.920951] 9pnet_virtio: no channels available for device (null) [ 1162.925802] 9pnet: Insufficient options for proto=fd [ 1163.547408] 9pnet: Insufficient options for proto=fd 04:22:23 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5441, &(0x7f0000000080)) 04:22:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000007fffffe", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:23 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rf\ano', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:23 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:23 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranu=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:23 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:23 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c}) 04:22:23 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1163.755715] 9pnet: Insufficient options for proto=fd [ 1163.762130] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1163.778990] 9pnet_virtio: no channels available for device (null) [ 1163.784797] 9pnet: Insufficient options for proto=fd [ 1163.786593] 9pnet: Insufficient options for proto=fd 04:22:23 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran+=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:23 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfuno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:23 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bf9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:23 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:23 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranb=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1163.885178] 9pnet_virtio: no channels available for device (null) [ 1163.906894] 9pnet: Insufficient options for proto=fd [ 1163.913358] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1163.929163] 9pnet: Insufficient options for proto=fd [ 1163.954547] 9pnet: Insufficient options for proto=fd [ 1163.990256] 9pnet_virtio: no channels available for device (null) [ 1164.575959] 9pnet: Insufficient options for proto=fd 04:22:24 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5450, &(0x7f0000000080)) 04:22:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000000000000000000000000000000000000000400", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:24 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x20000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:24 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfIno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:24 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:24 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranT=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:24 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000060}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:24 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1164.780435] 9pnet: Insufficient options for proto=fd [ 1164.791986] 9pnet_virtio: no channels available for device (null) [ 1164.792178] 9pnet: Insufficient options for proto=fd [ 1164.809826] 9pnet: Insufficient options for proto=fd [ 1164.815191] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:24 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:24 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:24 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x25, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:24 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranA=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1164.855765] 9pnet_virtio: no channels available for device (null) [ 1164.902948] 9pnet: Insufficient options for proto=fd [ 1164.926768] 9pnet: Insufficient options for proto=fd 04:22:25 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfc3b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1164.948793] 9pnet: Insufficient options for proto=fd [ 1164.958872] 9pnet_virtio: no channels available for device (null) [ 1164.958978] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1165.015952] 9pnet_virtio: no channels available for device (null) [ 1165.035895] 9pnet: Insufficient options for proto=fd [ 1165.067472] 9pnet: Insufficient options for proto=fd 04:22:25 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000080)) 04:22:25 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2d, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:25 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x1000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d}, 0x2c}, {@access_user='access=user', 0x2c}, {@aname={'aname', 0x3d, 'em0wlan0'}, 0x2c}, {@afid={'afid', 0x3d, 0x10001}, 0x2c}, {@mmap='mmap', 0x2c}, {@fscache='fscache', 0x2c}, {@debug={'debug', 0x3d, 0xff}, 0x2c}, {@cachetag={'cachetag', 0x3d, 'wfdno'}, 0x2c}, {@cache_none='cache=none', 0x2c}, {@aname={'aname', 0x3d, '9p\x00'}, 0x2c}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranI=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:25 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x3c0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:25 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran*=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x900, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1165.794248] 9pnet_virtio: no channels available for device (null) [ 1165.806510] 9pnet: Insufficient options for proto=fd [ 1165.813530] 9pnet: Insufficient options for proto=fd [ 1165.820125] 9pnet: Insufficient options for proto=fd [ 1165.831271] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:25 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'ufdno', 0x3d, r1}, 0x2c}) 04:22:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:26 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:26 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'gfdno', 0x3d, r1}, 0x2c}) [ 1165.925728] 9pnet: Insufficient options for proto=fd [ 1165.938475] 9pnet_virtio: no channels available for device (null) [ 1165.947490] 9pnet: Insufficient options for proto=fd [ 1165.961557] 9pnet: Insufficient options for proto=fd [ 1166.061415] 9pnet: Insufficient options for proto=fd 04:22:26 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000080)) 04:22:26 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran0=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:26 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bfd, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:26 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:26 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:26 executing program 4 (fault-call:3 fault-nth:0): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:26 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Ifdno', 0x3d, r1}, 0x2c}) [ 1166.827461] 9pnet: Insufficient options for proto=fd [ 1166.839935] 9pnet: Insufficient options for proto=fd [ 1166.840328] 9pnet_virtio: no channels available for device (null) [ 1166.856062] FAULT_INJECTION: forcing a failure. [ 1166.856062] name failslab, interval 1, probability 0, space 0, times 0 [ 1166.867371] CPU: 1 PID: 1098 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1166.875690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1166.885032] Call Trace: [ 1166.887656] dump_stack+0x1c9/0x2b4 [ 1166.891279] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1166.896471] ? perf_trace_lock+0xde/0x920 [ 1166.900607] should_fail.cold.4+0xa/0x11 [ 1166.904662] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1166.909762] ? __f_unlock_pos+0x19/0x20 [ 1166.913724] ? lock_downgrade+0x8f0/0x8f0 [ 1166.917871] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1166.923397] ? proc_fail_nth_write+0x9e/0x210 [ 1166.927878] ? kasan_check_read+0x11/0x20 [ 1166.932022] ? lock_acquire+0x1e4/0x540 [ 1166.935983] ? fs_reclaim_acquire+0x20/0x20 [ 1166.940290] ? lock_downgrade+0x8f0/0x8f0 [ 1166.944437] ? check_same_owner+0x340/0x340 [ 1166.948750] ? fsnotify_first_mark+0x350/0x350 [ 1166.953318] ? rcu_note_context_switch+0x730/0x730 [ 1166.958229] ? fsnotify+0x14e0/0x14e0 [ 1166.962022] __should_failslab+0x124/0x180 [ 1166.966246] should_failslab+0x9/0x14 [ 1166.970040] __kmalloc_track_caller+0x2c4/0x760 [ 1166.974701] ? strncpy_from_user+0x510/0x510 [ 1166.979111] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1166.985115] ? strndup_user+0x77/0xd0 [ 1166.988903] memdup_user+0x2c/0xa0 [ 1166.992432] strndup_user+0x77/0xd0 [ 1166.996052] ksys_mount+0x3c/0x140 [ 1166.999581] __x64_sys_mount+0xbe/0x150 [ 1167.003550] do_syscall_64+0x1b9/0x820 [ 1167.007425] ? finish_task_switch+0x1d3/0x870 [ 1167.011909] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1167.016830] ? syscall_return_slowpath+0x31d/0x5e0 [ 1167.021752] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1167.026927] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1167.031928] ? perf_trace_sys_enter+0xb10/0xb10 [ 1167.036583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1167.041428] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.046602] RIP: 0033:0x455e29 [ 1167.049770] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1167.069058] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 04:22:27 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1167.076752] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1167.084012] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1167.091453] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1167.098706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1167.105974] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000000 04:22:27 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'sfdno', 0x3d, r1}, 0x2c}) [ 1167.130480] xt_check_match: 1 callbacks suppressed [ 1167.130503] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1167.136778] 9pnet: Insufficient options for proto=fd 04:22:27 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x3000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:27 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff0}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:27 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x8000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:27 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranx=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1167.228175] 9pnet: Insufficient options for proto=fd [ 1167.247161] 9pnet_virtio: no channels available for device (null) 04:22:27 executing program 4 (fault-call:3 fault-nth:1): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1167.268943] 9pnet: Insufficient options for proto=fd [ 1167.298807] 9pnet_virtio: no channels available for device (null) [ 1167.316810] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1167.350868] FAULT_INJECTION: forcing a failure. [ 1167.350868] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.362188] CPU: 1 PID: 1132 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1167.370509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.379861] Call Trace: [ 1167.382442] dump_stack+0x1c9/0x2b4 [ 1167.386066] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1167.391244] ? __kernel_text_address+0xd/0x40 [ 1167.395736] ? perf_trace_lock+0xde/0x920 [ 1167.399888] should_fail.cold.4+0xa/0x11 [ 1167.403944] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1167.409034] ? zap_class+0x740/0x740 [ 1167.412742] ? save_stack+0xa9/0xd0 [ 1167.416357] ? kasan_kmalloc+0xc4/0xe0 [ 1167.420231] ? __kmalloc_track_caller+0x14a/0x760 [ 1167.425062] ? memdup_user+0x2c/0xa0 [ 1167.428762] ? strndup_user+0x77/0xd0 [ 1167.432547] ? ksys_mount+0x3c/0x140 [ 1167.436244] ? __x64_sys_mount+0xbe/0x150 [ 1167.440394] ? do_syscall_64+0x1b9/0x820 [ 1167.444448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1167.449973] ? proc_fail_nth_write+0x9e/0x210 [ 1167.454475] ? kasan_check_read+0x11/0x20 [ 1167.458614] ? lock_acquire+0x1e4/0x540 [ 1167.462582] ? fs_reclaim_acquire+0x20/0x20 [ 1167.466901] ? lock_downgrade+0x8f0/0x8f0 [ 1167.471039] ? check_same_owner+0x340/0x340 [ 1167.475347] ? lock_release+0xa30/0xa30 [ 1167.479311] ? check_same_owner+0x340/0x340 [ 1167.483796] ? rcu_note_context_switch+0x730/0x730 [ 1167.488888] ? __check_object_size+0x9d/0x5f2 [ 1167.493747] __should_failslab+0x124/0x180 [ 1167.497984] should_failslab+0x9/0x14 [ 1167.502308] kmem_cache_alloc_trace+0x2cb/0x780 [ 1167.506991] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1167.512522] ? _copy_from_user+0xdf/0x150 [ 1167.516676] copy_mount_options+0x5f/0x380 [ 1167.520908] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1167.526445] ksys_mount+0xd0/0x140 [ 1167.529975] __x64_sys_mount+0xbe/0x150 [ 1167.533942] do_syscall_64+0x1b9/0x820 [ 1167.537815] ? finish_task_switch+0x1d3/0x870 [ 1167.542299] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1167.547240] ? syscall_return_slowpath+0x31d/0x5e0 [ 1167.552176] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1167.557197] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1167.562204] ? perf_trace_sys_enter+0xb10/0xb10 [ 1167.566876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1167.571715] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1167.576905] RIP: 0033:0x455e29 [ 1167.580080] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1167.599283] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1167.606977] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1167.614232] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1167.621488] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1167.628754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1167.636019] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000001 [ 1167.645330] 9pnet: Insufficient options for proto=fd 04:22:27 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000080)) 04:22:27 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Sfdno', 0x3d, r1}, 0x2c}) 04:22:27 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x2000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:27 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trang=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000200", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:27 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:27 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff3b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:27 executing program 4 (fault-call:3 fault-nth:2): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1167.881801] 9pnet: Insufficient options for proto=fd [ 1167.888347] 9pnet_virtio: no channels available for device (null) [ 1167.891765] FAULT_INJECTION: forcing a failure. [ 1167.891765] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.895680] 9pnet: Insufficient options for proto=fd [ 1167.905904] CPU: 1 PID: 1164 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1167.905914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1167.905920] Call Trace: 04:22:27 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1167.905943] dump_stack+0x1c9/0x2b4 [ 1167.905964] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1167.920501] 9pnet: Insufficient options for proto=fd [ 1167.928980] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1167.928998] ? perf_trace_lock+0xde/0x920 [ 1167.929019] should_fail.cold.4+0xa/0x11 [ 1167.929035] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1167.929056] ? lock_release+0xa30/0xa30 [ 1167.967775] ? kasan_check_read+0x11/0x20 [ 1167.971915] ? rcu_is_watching+0x8c/0x150 [ 1167.976052] ? is_bpf_text_address+0xd7/0x170 [ 1167.980536] ? kernel_text_address+0x79/0xf0 [ 1167.984935] ? lock_acquire+0x1e4/0x540 [ 1167.988896] ? fs_reclaim_acquire+0x20/0x20 [ 1167.993204] ? lock_downgrade+0x8f0/0x8f0 [ 1167.997338] ? check_same_owner+0x340/0x340 [ 1168.001647] ? save_stack+0xa9/0xd0 [ 1168.005262] ? rcu_note_context_switch+0x730/0x730 [ 1168.010192] ? kmem_cache_alloc_trace+0x152/0x780 [ 1168.015032] ? copy_mount_options+0x5f/0x380 [ 1168.019430] __should_failslab+0x124/0x180 [ 1168.023662] should_failslab+0x9/0x14 [ 1168.027447] kmem_cache_alloc+0x2af/0x760 [ 1168.031584] getname_flags+0xd0/0x5a0 [ 1168.035371] user_path_at_empty+0x2d/0x50 [ 1168.039505] do_mount+0x180/0x1fb0 [ 1168.043032] ? check_same_owner+0x340/0x340 [ 1168.047340] ? lock_release+0xa30/0xa30 [ 1168.051308] ? check_same_owner+0x340/0x340 [ 1168.055617] ? copy_mount_string+0x40/0x40 [ 1168.059840] ? kasan_kmalloc+0xc4/0xe0 [ 1168.063714] ? kmem_cache_alloc_trace+0x318/0x780 [ 1168.068543] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1168.074064] ? _copy_from_user+0xdf/0x150 [ 1168.078199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1168.083730] ? copy_mount_options+0x285/0x380 [ 1168.088226] ksys_mount+0x12d/0x140 [ 1168.091838] __x64_sys_mount+0xbe/0x150 [ 1168.095799] do_syscall_64+0x1b9/0x820 [ 1168.099672] ? finish_task_switch+0x1d3/0x870 [ 1168.104154] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1168.109080] ? syscall_return_slowpath+0x31d/0x5e0 [ 1168.113997] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1168.119002] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1168.124142] ? perf_trace_sys_enter+0xb10/0xb10 [ 1168.128814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1168.133658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.138837] RIP: 0033:0x455e29 [ 1168.142007] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1168.161220] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.169003] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1168.176358] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1168.183617] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1168.190871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1168.198128] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000002 04:22:28 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Vfdno', 0x3d, r1}, 0x2c}) 04:22:28 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:28 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trand=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:28 executing program 4 (fault-call:3 fault-nth:3): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:28 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x7000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1168.251725] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1168.320771] FAULT_INJECTION: forcing a failure. [ 1168.320771] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.331654] 9pnet: Insufficient options for proto=fd [ 1168.332088] CPU: 0 PID: 1181 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1168.345524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.348579] 9pnet: Insufficient options for proto=fd [ 1168.354890] Call Trace: [ 1168.354921] dump_stack+0x1c9/0x2b4 [ 1168.354945] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1168.354968] ? perf_trace_lock+0x49d/0x920 [ 1168.375693] should_fail.cold.4+0xa/0x11 [ 1168.379788] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1168.381244] 9pnet_virtio: no channels available for device (null) [ 1168.384920] ? kasan_check_read+0x11/0x20 [ 1168.384944] ? rcu_is_watching+0x8c/0x150 [ 1168.399462] ? is_bpf_text_address+0xd7/0x170 [ 1168.403980] ? kernel_text_address+0x79/0xf0 [ 1168.408429] ? lock_acquire+0x1e4/0x540 [ 1168.412422] ? fs_reclaim_acquire+0x20/0x20 [ 1168.416762] ? lock_downgrade+0x8f0/0x8f0 [ 1168.417889] 9pnet: Insufficient options for proto=fd [ 1168.420930] ? check_same_owner+0x340/0x340 [ 1168.420948] ? save_stack+0xa9/0xd0 [ 1168.420971] ? rcu_note_context_switch+0x730/0x730 [ 1168.438924] ? kmem_cache_alloc_trace+0x152/0x780 [ 1168.443787] ? copy_mount_options+0x5f/0x380 [ 1168.448223] __should_failslab+0x124/0x180 [ 1168.452478] should_failslab+0x9/0x14 [ 1168.456297] kmem_cache_alloc+0x2af/0x760 [ 1168.460475] ? lock_acquire+0x1e4/0x540 [ 1168.464473] getname_flags+0xd0/0x5a0 [ 1168.468302] user_path_at_empty+0x2d/0x50 [ 1168.472471] do_mount+0x180/0x1fb0 [ 1168.476036] ? kasan_check_write+0x14/0x20 [ 1168.480294] ? copy_mount_string+0x40/0x40 [ 1168.484548] ? kasan_kmalloc+0xc4/0xe0 [ 1168.486949] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1168.488452] ? kmem_cache_alloc_trace+0x318/0x780 [ 1168.488474] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1168.488496] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1168.516011] ? copy_mount_options+0x285/0x380 04:22:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000000000000000000000000000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:28 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1168.520536] ksys_mount+0x12d/0x140 [ 1168.524215] __x64_sys_mount+0xbe/0x150 [ 1168.528215] do_syscall_64+0x1b9/0x820 [ 1168.532127] ? finish_task_switch+0x1d3/0x870 [ 1168.536645] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1168.541599] ? syscall_return_slowpath+0x31d/0x5e0 [ 1168.546546] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1168.551579] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1168.556618] ? perf_trace_sys_enter+0xb10/0xb10 [ 1168.561306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1168.566161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1168.571366] RIP: 0033:0x455e29 [ 1168.574557] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1168.594119] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1168.601823] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1168.609094] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1168.616358] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1168.623625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1168.630890] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000003 04:22:28 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5415, &(0x7f0000000080)) 04:22:28 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:28 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Rfdno', 0x3d, r1}, 0x2c}) 04:22:28 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranl=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:28 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:28 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:28 executing program 4 (fault-call:3 fault-nth:4): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1168.892900] 9pnet: Insufficient options for proto=fd [ 1168.910064] 9pnet: Insufficient options for proto=fd [ 1168.916379] FAULT_INJECTION: forcing a failure. [ 1168.916379] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1168.916674] 9pnet_virtio: no channels available for device (null) [ 1168.928205] CPU: 1 PID: 1224 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1168.928213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1168.928217] Call Trace: [ 1168.928241] dump_stack+0x1c9/0x2b4 [ 1168.928260] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1168.928280] ? trace_hardirqs_on+0x10/0x10 [ 1168.928299] should_fail.cold.4+0xa/0x11 [ 1168.928313] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1168.928323] ? perf_trace_lock+0xde/0x920 [ 1168.928342] ? zap_class+0x740/0x740 [ 1168.985105] ? trace_hardirqs_on+0x10/0x10 [ 1168.989328] ? zap_class+0x740/0x740 [ 1168.993036] ? chown_common+0x730/0x730 [ 1168.997006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1169.002543] ? security_inode_permission+0xd2/0x100 [ 1169.007554] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1169.012561] ? perf_trace_lock+0xde/0x920 [ 1169.016700] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1169.022224] ? should_fail+0x246/0xd86 [ 1169.026099] ? zap_class+0x740/0x740 [ 1169.029799] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1169.034894] __alloc_pages_nodemask+0x36e/0xdb0 [ 1169.039549] ? kasan_check_read+0x11/0x20 [ 1169.043683] ? rcu_is_watching+0x8c/0x150 [ 1169.047816] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1169.052817] ? is_bpf_text_address+0xd7/0x170 [ 1169.057300] ? kernel_text_address+0x79/0xf0 [ 1169.061696] ? lock_acquire+0x1e4/0x540 [ 1169.065670] ? fs_reclaim_acquire+0x20/0x20 [ 1169.069980] ? lock_downgrade+0x8f0/0x8f0 [ 1169.074115] ? lock_release+0xa30/0xa30 [ 1169.078075] ? check_same_owner+0x340/0x340 [ 1169.082379] ? save_stack+0xa9/0xd0 [ 1169.086002] cache_grow_begin+0x91/0x710 [ 1169.090231] kmem_cache_alloc+0x689/0x760 [ 1169.094370] getname_flags+0xd0/0x5a0 [ 1169.098160] user_path_at_empty+0x2d/0x50 [ 1169.102295] do_mount+0x180/0x1fb0 [ 1169.105822] ? kasan_check_write+0x14/0x20 [ 1169.110046] ? copy_mount_string+0x40/0x40 [ 1169.114267] ? kasan_kmalloc+0xc4/0xe0 [ 1169.118143] ? kmem_cache_alloc_trace+0x318/0x780 [ 1169.122987] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1169.128528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1169.134061] ? copy_mount_options+0x285/0x380 [ 1169.138547] ksys_mount+0x12d/0x140 [ 1169.142164] __x64_sys_mount+0xbe/0x150 [ 1169.146140] do_syscall_64+0x1b9/0x820 [ 1169.150017] ? finish_task_switch+0x1d3/0x870 [ 1169.154501] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1169.159426] ? syscall_return_slowpath+0x31d/0x5e0 [ 1169.164344] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1169.169345] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1169.174358] ? perf_trace_sys_enter+0xb10/0xb10 [ 1169.179025] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1169.183857] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1169.190126] RIP: 0033:0x455e29 [ 1169.193300] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1169.212529] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1169.220227] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1169.227480] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1169.234740] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 04:22:29 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:29 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranq=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1169.241997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1169.249252] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000004 [ 1169.263744] 9pnet: Insufficient options for proto=fd [ 1169.263924] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:29 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf63b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000006", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:29 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Dfdno', 0x3d, r1}, 0x2c}) 04:22:29 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1169.354192] 9pnet: Insufficient options for proto=fd 04:22:29 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1169.377838] 9pnet: Insufficient options for proto=fd 04:22:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000000000000000000000000000000000000007fffffff", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1169.411263] 9pnet: Insufficient options for proto=fd [ 1169.417752] 9pnet_virtio: no channels available for device (null) [ 1169.424996] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1169.514258] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1169.542871] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:29 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x2, &(0x7f0000000080)) 04:22:29 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf93b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:29 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Qfdno', 0x3d, r1}, 0x2c}) 04:22:29 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranV=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:29 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:29 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:29 executing program 4 (fault-call:3 fault-nth:5): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1169.937413] 9pnet_virtio: no channels available for device (null) [ 1169.941750] 9pnet: Insufficient options for proto=fd [ 1169.947453] 9pnet: Insufficient options for proto=fd [ 1169.956653] FAULT_INJECTION: forcing a failure. [ 1169.956653] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.967954] CPU: 1 PID: 1302 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1169.976271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1169.985638] Call Trace: [ 1169.988224] dump_stack+0x1c9/0x2b4 [ 1169.991840] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1169.997020] ? putname+0xf2/0x130 [ 1170.000462] ? filename_lookup+0x397/0x510 [ 1170.004687] ? perf_trace_lock+0xde/0x920 [ 1170.008827] should_fail.cold.4+0xa/0x11 [ 1170.012879] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1170.017990] ? kasan_check_write+0x14/0x20 [ 1170.022214] ? do_raw_spin_lock+0xc1/0x200 [ 1170.026437] ? zap_class+0x740/0x740 [ 1170.030142] ? debug_check_no_obj_freed+0x30b/0x595 [ 1170.035158] ? path_lookupat.isra.45+0x27d/0xbf0 [ 1170.039903] ? trace_hardirqs_off+0xd/0x10 [ 1170.044126] ? quarantine_put+0x10d/0x1b0 [ 1170.048262] ? lock_acquire+0x1e4/0x540 [ 1170.052225] ? fs_reclaim_acquire+0x20/0x20 [ 1170.056533] ? lock_downgrade+0x8f0/0x8f0 [ 1170.060683] ? check_same_owner+0x340/0x340 [ 1170.064993] ? lock_downgrade+0x8f0/0x8f0 [ 1170.069129] ? rcu_note_context_switch+0x730/0x730 [ 1170.074047] __should_failslab+0x124/0x180 [ 1170.078281] should_failslab+0x9/0x14 [ 1170.082069] kmem_cache_alloc_trace+0x2cb/0x780 [ 1170.086738] ? kasan_check_write+0x14/0x20 [ 1170.090980] ? do_raw_read_unlock+0x3f/0x60 [ 1170.095293] vfs_new_fs_context+0x5a/0x700 [ 1170.099519] do_mount+0x5cf/0x1fb0 [ 1170.103048] ? kasan_check_write+0x14/0x20 [ 1170.107270] ? copy_mount_string+0x40/0x40 [ 1170.111509] ? kasan_kmalloc+0xc4/0xe0 [ 1170.115398] ? kmem_cache_alloc_trace+0x318/0x780 [ 1170.120236] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1170.125766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.131291] ? copy_mount_options+0x285/0x380 [ 1170.135812] ksys_mount+0x12d/0x140 [ 1170.139448] __x64_sys_mount+0xbe/0x150 [ 1170.143415] do_syscall_64+0x1b9/0x820 [ 1170.147287] ? finish_task_switch+0x1d3/0x870 [ 1170.151768] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1170.156683] ? syscall_return_slowpath+0x31d/0x5e0 [ 1170.161601] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1170.166620] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1170.171624] ? perf_trace_sys_enter+0xb10/0xb10 [ 1170.176278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1170.181112] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.186286] RIP: 0033:0x455e29 [ 1170.189456] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1170.208747] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1170.216443] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1170.223708] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1170.230969] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 04:22:30 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0xff000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1170.238222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1170.245475] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000005 [ 1170.267114] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:30 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Tfdno', 0x3d, r1}, 0x2c}) [ 1170.284195] 9pnet: Insufficient options for proto=fd 04:22:30 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran%=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:30 executing program 4 (fault-call:3 fault-nth:6): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:30 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x10000000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:30 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x10, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1170.385231] 9pnet_virtio: no channels available for device (null) [ 1170.397221] 9pnet: Insufficient options for proto=fd [ 1170.404978] FAULT_INJECTION: forcing a failure. [ 1170.404978] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1170.412831] 9pnet: Insufficient options for proto=fd [ 1170.417264] CPU: 0 PID: 1322 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 04:22:30 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'dfdno', 0x3d, r1}, 0x2c}) [ 1170.430644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.432405] 9pnet: Insufficient options for proto=fd [ 1170.440016] Call Trace: [ 1170.440043] dump_stack+0x1c9/0x2b4 [ 1170.440069] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1170.440105] should_fail.cold.4+0xa/0x11 [ 1170.460671] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1170.465809] ? kasan_check_read+0x11/0x20 [ 1170.469978] ? rcu_is_watching+0x8c/0x150 [ 1170.474151] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1170.478845] ? is_bpf_text_address+0xd7/0x170 [ 1170.483366] ? kernel_text_address+0x79/0xf0 [ 1170.487800] ? __kernel_text_address+0xd/0x40 [ 1170.492324] ? lock_acquire+0x1e4/0x540 [ 1170.496320] ? fs_reclaim_acquire+0x20/0x20 [ 1170.500690] ? lock_downgrade+0x8f0/0x8f0 [ 1170.505213] ? check_same_owner+0x340/0x340 [ 1170.509551] ? save_stack+0x43/0xd0 [ 1170.513199] ? rcu_note_context_switch+0x730/0x730 [ 1170.518146] ? do_mount+0x69e/0x1fb0 [ 1170.521897] __alloc_pages_nodemask+0x36e/0xdb0 [ 1170.524765] 9pnet: Insufficient options for proto=fd [ 1170.526577] ? trace_hardirqs_off+0xd/0x10 [ 1170.526603] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1170.526624] ? lock_acquire+0x1e4/0x540 [ 1170.526639] ? fs_reclaim_acquire+0x20/0x20 [ 1170.526659] ? lock_downgrade+0x8f0/0x8f0 [ 1170.553443] ? lock_release+0xa30/0xa30 [ 1170.557446] ? debug_mutex_init+0x2d/0x60 [ 1170.561622] ? kasan_unpoison_shadow+0x35/0x50 [ 1170.566224] ? kasan_kmalloc+0xc4/0xe0 [ 1170.570135] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1170.575683] alloc_pages_current+0x10c/0x210 [ 1170.580279] get_zeroed_page+0x14/0x50 [ 1170.584177] legacy_validate+0x111/0x210 [ 1170.588249] ? kmemdup+0x44/0x50 [ 1170.590654] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1170.591627] ? legacy_get_tree+0x440/0x440 [ 1170.591646] vfs_get_tree+0x144/0x5c0 [ 1170.591667] do_mount+0x6c1/0x1fb0 [ 1170.614852] ? check_same_owner+0x340/0x340 [ 1170.619224] ? lock_release+0xa30/0xa30 [ 1170.623221] ? copy_mount_string+0x40/0x40 [ 1170.627470] ? kasan_kmalloc+0xc4/0xe0 [ 1170.631378] ? kmem_cache_alloc_trace+0x318/0x780 [ 1170.636246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1170.641827] ? _copy_from_user+0xdf/0x150 [ 1170.646028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1170.651574] ? copy_mount_options+0x285/0x380 [ 1170.656080] ksys_mount+0x12d/0x140 [ 1170.659709] __x64_sys_mount+0xbe/0x150 [ 1170.663677] do_syscall_64+0x1b9/0x820 [ 1170.667554] ? finish_task_switch+0x1d3/0x870 [ 1170.672065] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1170.676985] ? syscall_return_slowpath+0x31d/0x5e0 [ 1170.681914] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1170.686934] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1170.691961] ? perf_trace_sys_enter+0xb10/0xb10 [ 1170.696644] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1170.701495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1170.706673] RIP: 0033:0x455e29 [ 1170.709850] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1170.729365] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1170.737068] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1170.744328] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1170.751599] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1170.758886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1170.766148] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000006 04:22:30 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x540b, &(0x7f0000000080)) 04:22:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:30 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:30 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x900, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:30 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Afdno', 0x3d, r1}, 0x2c}) 04:22:30 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran.=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:30 executing program 4 (fault-call:3 fault-nth:7): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1170.941927] 9pnet: Insufficient options for proto=fd [ 1170.953377] 9pnet: Insufficient options for proto=fd [ 1170.959132] 9pnet_virtio: no channels available for device (null) [ 1170.969008] FAULT_INJECTION: forcing a failure. [ 1170.969008] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1170.980838] CPU: 1 PID: 1364 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1170.989144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1170.998484] Call Trace: [ 1171.001065] dump_stack+0x1c9/0x2b4 [ 1171.004766] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1171.009948] should_fail.cold.4+0xa/0x11 [ 1171.014008] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1171.019166] ? is_bpf_text_address+0xae/0x170 [ 1171.023651] ? lock_downgrade+0x8f0/0x8f0 [ 1171.027788] ? trace_hardirqs_on+0x10/0x10 [ 1171.032026] ? kasan_check_read+0x11/0x20 [ 1171.036173] ? rcu_is_watching+0x8c/0x150 [ 1171.040308] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1171.044969] ? is_bpf_text_address+0xd7/0x170 [ 1171.049449] ? perf_trace_lock+0xde/0x920 [ 1171.053584] ? __kernel_text_address+0xd/0x40 [ 1171.058069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.063592] ? should_fail+0x246/0xd86 [ 1171.067467] ? zap_class+0x740/0x740 [ 1171.071170] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1171.076261] __alloc_pages_nodemask+0x36e/0xdb0 [ 1171.080915] ? save_stack+0xa9/0xd0 [ 1171.084544] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1171.089548] ? ksys_mount+0x12d/0x140 [ 1171.093334] ? do_syscall_64+0x1b9/0x820 [ 1171.097384] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.102736] ? trace_hardirqs_off+0xd/0x10 [ 1171.106969] ? lock_acquire+0x1e4/0x540 [ 1171.110931] ? fs_reclaim_acquire+0x20/0x20 [ 1171.115238] ? lock_downgrade+0x8f0/0x8f0 [ 1171.119373] ? lock_release+0xa30/0xa30 [ 1171.123337] ? check_same_owner+0x340/0x340 [ 1171.127649] cache_grow_begin+0x91/0x710 [ 1171.131702] __kmalloc_track_caller+0x684/0x760 [ 1171.136361] ? legacy_parse_monolithic+0xc1/0x1d0 [ 1171.141451] kmemdup+0x24/0x50 [ 1171.144647] legacy_parse_monolithic+0xc1/0x1d0 [ 1171.149308] ? legacy_validate+0x210/0x210 [ 1171.153535] do_mount+0x69e/0x1fb0 [ 1171.157061] ? kasan_check_write+0x14/0x20 [ 1171.161293] ? copy_mount_string+0x40/0x40 [ 1171.165529] ? kasan_kmalloc+0xc4/0xe0 [ 1171.169407] ? kmem_cache_alloc_trace+0x318/0x780 [ 1171.174245] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1171.179781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1171.185308] ? copy_mount_options+0x285/0x380 [ 1171.190758] ksys_mount+0x12d/0x140 [ 1171.194378] __x64_sys_mount+0xbe/0x150 [ 1171.198339] do_syscall_64+0x1b9/0x820 [ 1171.202211] ? syscall_slow_exit_work+0x500/0x500 [ 1171.207043] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1171.211960] ? syscall_return_slowpath+0x31d/0x5e0 [ 1171.216878] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1171.221885] ? perf_trace_sys_enter+0xb10/0xb10 [ 1171.226544] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1171.231380] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1171.236575] RIP: 0033:0x455e29 [ 1171.239759] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1171.258968] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1171.266664] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1171.273919] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1171.281179] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 04:22:31 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="3970ff", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000003", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1171.288431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1171.295696] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000007 [ 1171.311506] 9pnet: Insufficient options for proto=fd 04:22:31 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trano=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:31 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffff97, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:31 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'qfdno', 0x3d, r1}, 0x2c}) 04:22:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:31 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:31 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1171.419976] 9pnet: Insufficient options for proto=fd [ 1171.435175] 9pnet_virtio: no channels available for device (null) [ 1171.442694] 9pnet: Insufficient options for proto=fd [ 1171.457286] 9pnet: Insufficient options for proto=fd 04:22:32 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x541d, &(0x7f0000000080)) 04:22:32 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran/=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:32 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'bfdno', 0x3d, r1}, 0x2c}) 04:22:32 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bfc, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:32 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:32 executing program 4 (fault-call:3 fault-nth:8): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1172.333189] 9pnet: Insufficient options for proto=fd [ 1172.349670] 9pnet_virtio: no channels available for device (null) [ 1172.357551] FAULT_INJECTION: forcing a failure. [ 1172.357551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1172.369464] CPU: 1 PID: 1426 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1172.377807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.387153] Call Trace: [ 1172.389759] dump_stack+0x1c9/0x2b4 [ 1172.393377] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1172.398558] ? perf_trace_lock+0xde/0x920 [ 1172.402698] ? lock_acquire+0x1e4/0x540 [ 1172.406667] should_fail.cold.4+0xa/0x11 [ 1172.410736] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1172.415832] ? kasan_check_read+0x11/0x20 [ 1172.419988] ? rcu_is_watching+0x8c/0x150 [ 1172.424151] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1172.428830] ? is_bpf_text_address+0xd7/0x170 [ 1172.433321] ? kernel_text_address+0x79/0xf0 [ 1172.437721] ? __kernel_text_address+0xd/0x40 [ 1172.442310] ? lock_acquire+0x1e4/0x540 [ 1172.446284] ? fs_reclaim_acquire+0x20/0x20 [ 1172.450601] ? lock_downgrade+0x8f0/0x8f0 [ 1172.454754] ? check_same_owner+0x340/0x340 [ 1172.459071] ? save_stack+0x43/0xd0 [ 1172.462690] ? rcu_note_context_switch+0x730/0x730 [ 1172.467612] ? do_mount+0x69e/0x1fb0 [ 1172.471328] __alloc_pages_nodemask+0x36e/0xdb0 [ 1172.475995] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1172.481010] ? kasan_check_read+0x11/0x20 [ 1172.485151] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1172.489565] ? kasan_check_write+0x14/0x20 [ 1172.493796] ? do_raw_spin_lock+0xc1/0x200 [ 1172.498024] ? kasan_unpoison_shadow+0x35/0x50 [ 1172.502617] ? kasan_kmalloc+0xc4/0xe0 [ 1172.506516] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1172.512041] alloc_pages_current+0x10c/0x210 [ 1172.516440] get_zeroed_page+0x14/0x50 [ 1172.520314] legacy_validate+0x111/0x210 [ 1172.524359] ? kmemdup+0x44/0x50 [ 1172.527723] ? legacy_get_tree+0x440/0x440 [ 1172.531944] vfs_get_tree+0x144/0x5c0 [ 1172.535733] do_mount+0x6c1/0x1fb0 [ 1172.539273] ? copy_mount_string+0x40/0x40 [ 1172.543494] ? retint_kernel+0x10/0x10 [ 1172.547374] ? copy_mount_options+0x213/0x380 [ 1172.551861] ? write_comp_data+0x1b/0x70 [ 1172.555912] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1172.561453] ? copy_mount_options+0x285/0x380 [ 1172.565945] ksys_mount+0x12d/0x140 [ 1172.569561] __x64_sys_mount+0xbe/0x150 [ 1172.573526] do_syscall_64+0x1b9/0x820 [ 1172.577403] ? finish_task_switch+0x1d3/0x870 [ 1172.581897] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1172.586813] ? syscall_return_slowpath+0x31d/0x5e0 [ 1172.591733] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1172.596735] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1172.601740] ? perf_trace_sys_enter+0xb10/0xb10 [ 1172.606405] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1172.611238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1172.616410] RIP: 0033:0x455e29 [ 1172.619579] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1172.638867] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1172.646569] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1172.653835] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1172.661090] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1172.668342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1172.675604] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000008 04:22:32 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:32 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:32 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranw=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:32 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w.dno', 0x3d, r1}, 0x2c}) [ 1172.683785] xt_check_match: 3 callbacks suppressed [ 1172.688769] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1172.689444] 9pnet: Insufficient options for proto=fd [ 1172.709452] 9pnet: Insufficient options for proto=fd 04:22:32 executing program 4 (fault-call:3 fault-nth:9): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:32 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x13c020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1172.792601] 9pnet: Insufficient options for proto=fd [ 1172.823461] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1172.828579] 9pnet_virtio: no channels available for device (null) [ 1172.861950] FAULT_INJECTION: forcing a failure. [ 1172.861950] name failslab, interval 1, probability 0, space 0, times 0 04:22:32 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1172.873876] CPU: 0 PID: 1459 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1172.882211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1172.891580] Call Trace: [ 1172.894186] dump_stack+0x1c9/0x2b4 [ 1172.897820] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1172.903019] ? perf_trace_lock+0x49d/0x920 [ 1172.907263] should_fail.cold.4+0xa/0x11 [ 1172.911395] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1172.916498] ? lock_acquire+0x1e4/0x540 [ 1172.920473] ? check_same_owner+0x340/0x340 [ 1172.924794] ? save_stack+0x43/0xd0 [ 1172.928416] ? rcu_note_context_switch+0x730/0x730 [ 1172.933337] ? do_mount+0x69e/0x1fb0 [ 1172.937052] ? lock_acquire+0x1e4/0x540 [ 1172.941034] ? fs_reclaim_acquire+0x20/0x20 [ 1172.945387] ? lock_downgrade+0x8f0/0x8f0 [ 1172.949547] ? check_same_owner+0x340/0x340 [ 1172.953895] ? rcu_note_context_switch+0x730/0x730 [ 1172.958825] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1172.963245] __should_failslab+0x124/0x180 [ 1172.967488] should_failslab+0x9/0x14 [ 1172.971284] kmem_cache_alloc_trace+0x2cb/0x780 [ 1172.975951] ? kasan_unpoison_shadow+0x35/0x50 [ 1172.980540] ? kasan_kmalloc+0xc4/0xe0 [ 1172.984440] v9fs_mount+0x61/0x900 [ 1172.987981] ? v9fs_drop_inode+0x150/0x150 [ 1172.992208] legacy_get_tree+0x118/0x440 [ 1172.996271] vfs_get_tree+0x1cb/0x5c0 [ 1173.000083] do_mount+0x6c1/0x1fb0 [ 1173.003626] ? kasan_check_write+0x14/0x20 [ 1173.007860] ? copy_mount_string+0x40/0x40 [ 1173.012101] ? kasan_kmalloc+0xc4/0xe0 [ 1173.015994] ? kmem_cache_alloc_trace+0x318/0x780 [ 1173.020840] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1173.026377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.031921] ? copy_mount_options+0x285/0x380 [ 1173.036413] ksys_mount+0x12d/0x140 [ 1173.040049] __x64_sys_mount+0xbe/0x150 [ 1173.044026] do_syscall_64+0x1b9/0x820 [ 1173.047907] ? finish_task_switch+0x1d3/0x870 [ 1173.052394] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1173.057328] ? syscall_return_slowpath+0x31d/0x5e0 [ 1173.062262] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1173.067274] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1173.072286] ? perf_trace_sys_enter+0xb10/0xb10 [ 1173.076951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1173.081794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.086983] RIP: 0033:0x455e29 [ 1173.090160] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1173.109551] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1173.117271] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1173.124549] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1173.131826] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1173.139089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1173.146351] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000009 [ 1173.158762] 9pnet: Insufficient options for proto=fd [ 1173.185169] 9pnet: Insufficient options for proto=fd 04:22:33 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x540d, &(0x7f0000000080)) 04:22:33 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w/dno', 0x3d, r1}, 0x2c}) 04:22:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:33 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranR=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:33 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:33 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfb3b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:33 executing program 4 (fault-call:3 fault-nth:10): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1173.382624] 9pnet: Insufficient options for proto=fd [ 1173.390113] 9pnet: Insufficient options for proto=fd [ 1173.391992] 9pnet_virtio: no channels available for device (null) [ 1173.403594] FAULT_INJECTION: forcing a failure. [ 1173.403594] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.414913] CPU: 1 PID: 1490 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1173.418765] 9pnet: Insufficient options for proto=fd [ 1173.423230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.423237] Call Trace: [ 1173.423263] dump_stack+0x1c9/0x2b4 [ 1173.423282] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1173.423306] ? perf_trace_lock+0xde/0x920 [ 1173.453353] should_fail.cold.4+0xa/0x11 [ 1173.457415] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1173.462507] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1173.467514] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 1173.472267] ? lock_acquire+0x1e4/0x540 [ 1173.476230] ? is_bpf_text_address+0xae/0x170 [ 1173.480716] ? lock_downgrade+0x8f0/0x8f0 [ 1173.484864] ? lock_acquire+0x1e4/0x540 [ 1173.488842] ? fs_reclaim_acquire+0x20/0x20 [ 1173.493171] ? lock_downgrade+0x8f0/0x8f0 [ 1173.497319] ? check_same_owner+0x340/0x340 [ 1173.501639] ? unwind_get_return_address+0x61/0xa0 [ 1173.506584] ? rcu_note_context_switch+0x730/0x730 [ 1173.511505] __should_failslab+0x124/0x180 [ 1173.515740] should_failslab+0x9/0x14 [ 1173.519553] __kmalloc_track_caller+0x2c4/0x760 [ 1173.524216] ? save_stack+0xa9/0xd0 [ 1173.527847] ? save_stack+0x43/0xd0 [ 1173.531467] ? kasan_kmalloc+0xc4/0xe0 [ 1173.535347] ? kmem_cache_alloc_trace+0x152/0x780 [ 1173.540185] ? legacy_get_tree+0x118/0x440 [ 1173.544409] ? v9fs_session_init+0xdd/0x1a80 [ 1173.548813] kstrdup+0x39/0x70 [ 1173.551995] v9fs_session_init+0xdd/0x1a80 [ 1173.556223] ? rcu_note_context_switch+0x730/0x730 [ 1173.561143] ? do_mount+0x69e/0x1fb0 [ 1173.564850] ? lock_acquire+0x1e4/0x540 [ 1173.568823] ? fs_reclaim_acquire+0x20/0x20 [ 1173.573137] ? v9fs_show_options+0x7e0/0x7e0 [ 1173.577560] ? lock_release+0xa30/0xa30 [ 1173.581524] ? check_same_owner+0x340/0x340 [ 1173.585837] ? kasan_unpoison_shadow+0x35/0x50 [ 1173.590422] ? kasan_kmalloc+0xc4/0xe0 [ 1173.594302] ? kmem_cache_alloc_trace+0x318/0x780 [ 1173.599136] ? kasan_unpoison_shadow+0x35/0x50 [ 1173.603713] ? kasan_kmalloc+0xc4/0xe0 [ 1173.607599] v9fs_mount+0x7c/0x900 [ 1173.611132] ? v9fs_drop_inode+0x150/0x150 [ 1173.615363] legacy_get_tree+0x118/0x440 [ 1173.619415] vfs_get_tree+0x1cb/0x5c0 [ 1173.624164] do_mount+0x6c1/0x1fb0 [ 1173.627694] ? kasan_check_write+0x14/0x20 [ 1173.631921] ? copy_mount_string+0x40/0x40 [ 1173.636149] ? kasan_kmalloc+0xc4/0xe0 [ 1173.640034] ? kmem_cache_alloc_trace+0x318/0x780 [ 1173.644885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1173.650417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1173.655965] ? copy_mount_options+0x285/0x380 [ 1173.660462] ksys_mount+0x12d/0x140 [ 1173.664077] __x64_sys_mount+0xbe/0x150 [ 1173.668057] do_syscall_64+0x1b9/0x820 [ 1173.671942] ? finish_task_switch+0x1d3/0x870 [ 1173.676442] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1173.681368] ? syscall_return_slowpath+0x31d/0x5e0 [ 1173.686299] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1173.691315] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1173.696322] ? perf_trace_sys_enter+0xb10/0xb10 [ 1173.700985] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1173.705833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1173.711022] RIP: 0033:0x455e29 [ 1173.714202] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:22:33 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfRno', 0x3d, r1}, 0x2c}) [ 1173.733415] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1173.741130] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1173.748406] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1173.755676] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1173.762937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1173.770196] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000a 04:22:33 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="3970ff", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1173.779460] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:33 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bfe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:33 executing program 4 (fault-call:3 fault-nth:11): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1173.832269] 9pnet: Insufficient options for proto=fd 04:22:33 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wf\ano', 0x3d, r1}, 0x2c}) [ 1173.875881] 9pnet_virtio: no channels available for device (null) [ 1173.883715] 9pnet: Insufficient options for proto=fd [ 1173.900783] FAULT_INJECTION: forcing a failure. [ 1173.900783] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.906630] 9pnet: Insufficient options for proto=fd [ 1173.912048] CPU: 0 PID: 1518 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 04:22:33 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trani=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1173.912061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1173.912067] Call Trace: [ 1173.912091] dump_stack+0x1c9/0x2b4 [ 1173.912114] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1173.946372] should_fail.cold.4+0xa/0x11 [ 1173.950469] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1173.955640] ? perf_tp_event+0xc40/0xc40 [ 1173.959738] ? perf_tp_event+0xc40/0xc40 [ 1173.963830] ? perf_swevent_event+0x158/0x2e0 [ 1173.968375] ? perf_trace_lock+0x49d/0x920 04:22:34 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1173.972640] ? perf_trace_lock+0x49d/0x920 [ 1173.976914] ? zap_class+0x740/0x740 [ 1173.978478] 9pnet_virtio: no channels available for device (null) [ 1173.980661] ? zap_class+0x740/0x740 [ 1173.980693] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1173.980715] ? perf_tp_event+0x91b/0xc40 [ 1174.000273] __should_failslab+0x124/0x180 [ 1174.004583] should_failslab+0x9/0x14 [ 1174.008402] kmem_cache_alloc+0x47/0x760 [ 1174.012531] ? lock_acquire+0x1e4/0x540 [ 1174.016527] ? is_bpf_text_address+0xae/0x170 [ 1174.021045] ? lock_downgrade+0x8f0/0x8f0 [ 1174.023034] 9pnet: Insufficient options for proto=fd [ 1174.025226] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 1174.025249] idr_get_free+0x887/0x10d0 [ 1174.025279] ? radix_tree_iter_tag_clear+0xd0/0xd0 [ 1174.032606] 9pnet: Insufficient options for proto=fd [ 1174.036095] ? __kernel_text_address+0xd/0x40 [ 1174.036112] ? unwind_get_return_address+0x61/0xa0 [ 1174.036152] ? save_stack+0xa9/0xd0 [ 1174.041266] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1174.044978] ? save_stack+0x43/0xd0 [ 1174.044994] ? kasan_kmalloc+0xc4/0xe0 [ 1174.045009] ? kmem_cache_alloc_trace+0x152/0x780 [ 1174.045026] ? p9_idpool_create+0x42/0x120 [ 1174.045045] ? p9_client_create+0x286/0x16c9 [ 1174.095791] ? v9fs_session_init+0x21a/0x1a80 [ 1174.100325] ? v9fs_mount+0x7c/0x900 [ 1174.104044] ? legacy_get_tree+0x118/0x440 [ 1174.108279] ? do_mount+0x6c1/0x1fb0 [ 1174.111989] ? ksys_mount+0x12d/0x140 [ 1174.115786] ? __x64_sys_mount+0xbe/0x150 [ 1174.119937] ? do_syscall_64+0x1b9/0x820 [ 1174.124002] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.129360] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.134716] ? lock_downgrade+0x8f0/0x8f0 [ 1174.138876] idr_alloc_u32+0x1d4/0x3a0 [ 1174.142777] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 1174.147624] ? p9_idpool_get+0x23/0x70 [ 1174.151531] ? check_same_owner+0x340/0x340 [ 1174.155856] idr_alloc+0x111/0x1b0 [ 1174.159402] ? idr_alloc_u32+0x3a0/0x3a0 [ 1174.163466] ? do_raw_spin_lock+0xc1/0x200 [ 1174.167714] p9_idpool_get+0x3d/0x70 [ 1174.171424] p9_client_create+0x369/0x16c9 [ 1174.175668] ? vfs_get_tree+0x1cb/0x5c0 [ 1174.179632] ? do_mount+0x6c1/0x1fb0 [ 1174.183335] ? ksys_mount+0x12d/0x140 [ 1174.187142] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.192529] ? p9_client_read+0xc60/0xc60 [ 1174.196692] ? lock_acquire+0x1e4/0x540 [ 1174.200669] ? fs_reclaim_acquire+0x20/0x20 [ 1174.204989] ? lock_downgrade+0x8f0/0x8f0 [ 1174.209222] ? lock_release+0xa30/0xa30 [ 1174.213188] ? __lockdep_init_map+0x105/0x590 [ 1174.217688] ? kasan_check_write+0x14/0x20 [ 1174.221915] ? __init_rwsem+0x1cc/0x2a0 [ 1174.225901] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1174.230918] ? __kmalloc_track_caller+0x311/0x760 [ 1174.235764] ? save_stack+0xa9/0xd0 [ 1174.239386] ? save_stack+0x43/0xd0 [ 1174.243004] ? kasan_kmalloc+0xc4/0xe0 [ 1174.246904] ? kmem_cache_alloc_trace+0x152/0x780 [ 1174.251742] ? memcpy+0x45/0x50 [ 1174.255029] v9fs_session_init+0x21a/0x1a80 [ 1174.259345] ? rcu_note_context_switch+0x730/0x730 [ 1174.264272] ? do_mount+0x69e/0x1fb0 [ 1174.268165] ? lock_acquire+0x1e4/0x540 [ 1174.272137] ? v9fs_show_options+0x7e0/0x7e0 [ 1174.276550] ? lock_release+0xa30/0xa30 [ 1174.280535] ? check_same_owner+0x340/0x340 [ 1174.284853] ? lock_downgrade+0x8f0/0x8f0 [ 1174.289026] ? kasan_unpoison_shadow+0x35/0x50 [ 1174.293881] ? kasan_kmalloc+0xc4/0xe0 [ 1174.297770] ? kmem_cache_alloc_trace+0x318/0x780 [ 1174.302622] ? kasan_unpoison_shadow+0x35/0x50 [ 1174.307232] ? kasan_kmalloc+0xc4/0xe0 [ 1174.311476] v9fs_mount+0x7c/0x900 [ 1174.315023] ? v9fs_drop_inode+0x150/0x150 [ 1174.319525] legacy_get_tree+0x118/0x440 [ 1174.323589] vfs_get_tree+0x1cb/0x5c0 [ 1174.327395] do_mount+0x6c1/0x1fb0 [ 1174.330926] ? check_same_owner+0x340/0x340 [ 1174.335256] ? lock_release+0xa30/0xa30 [ 1174.339239] ? copy_mount_string+0x40/0x40 [ 1174.343481] ? kasan_kmalloc+0xc4/0xe0 [ 1174.347367] ? kmem_cache_alloc_trace+0x318/0x780 [ 1174.352229] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1174.357762] ? _copy_from_user+0xdf/0x150 [ 1174.361926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1174.367467] ? copy_mount_options+0x285/0x380 [ 1174.371962] ksys_mount+0x12d/0x140 [ 1174.375593] __x64_sys_mount+0xbe/0x150 [ 1174.379575] do_syscall_64+0x1b9/0x820 [ 1174.383454] ? finish_task_switch+0x1d3/0x870 [ 1174.387964] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1174.392897] ? syscall_return_slowpath+0x31d/0x5e0 [ 1174.397823] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1174.402835] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1174.407846] ? perf_trace_sys_enter+0xb10/0xb10 [ 1174.412517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1174.417361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1174.425336] RIP: 0033:0x455e29 [ 1174.428515] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1174.447900] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.455611] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1174.462873] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1174.470144] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1174.477406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1174.484674] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000b [ 1174.503287] 9pnet: Insufficient options for proto=fd [ 1174.527484] 9pnet: Insufficient options for proto=fd 04:22:34 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5437, &(0x7f0000000080)) 04:22:34 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran-=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:34 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:34 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x600000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:34 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfuno', 0x3d, r1}, 0x2c}) 04:22:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:34 executing program 4 (fault-call:3 fault-nth:12): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1174.827533] 9pnet: Insufficient options for proto=fd [ 1174.840413] 9pnet: Insufficient options for proto=fd [ 1174.847227] 9pnet_virtio: no channels available for device (null) [ 1174.847259] FAULT_INJECTION: forcing a failure. [ 1174.847259] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.858170] 9pnet: Insufficient options for proto=fd 04:22:34 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1174.864908] CPU: 0 PID: 1574 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1174.878438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1174.887808] Call Trace: [ 1174.890425] dump_stack+0x1c9/0x2b4 [ 1174.894082] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1174.899300] ? perf_trace_lock+0x49d/0x920 [ 1174.903567] should_fail.cold.4+0xa/0x11 [ 1174.907657] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1174.912798] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1174.917957] ? lock_acquire+0x1e4/0x540 [ 1174.921954] ? is_bpf_text_address+0xae/0x170 04:22:34 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfcno', 0x3d, r1}, 0x2c}) 04:22:34 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranp=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:34 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfd3b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1174.926509] ? lock_downgrade+0x8f0/0x8f0 [ 1174.930711] ? lock_release+0xa30/0xa30 [ 1174.934739] ? lock_acquire+0x1e4/0x540 [ 1174.938730] ? fs_reclaim_acquire+0x20/0x20 [ 1174.943099] ? lock_downgrade+0x8f0/0x8f0 [ 1174.947271] ? is_bpf_text_address+0xd7/0x170 [ 1174.951814] ? check_same_owner+0x340/0x340 [ 1174.956190] ? __kernel_text_address+0xd/0x40 [ 1174.960704] ? rcu_note_context_switch+0x730/0x730 [ 1174.965853] __should_failslab+0x124/0x180 [ 1174.970112] should_failslab+0x9/0x14 04:22:35 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\t', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1174.973934] kmem_cache_alloc_trace+0x2cb/0x780 [ 1174.978633] ? save_stack+0xa9/0xd0 [ 1174.981571] 9pnet: Insufficient options for proto=fd [ 1174.982293] p9_client_create+0x114/0x16c9 [ 1174.982313] ? vfs_get_tree+0x1cb/0x5c0 [ 1174.995748] ? do_mount+0x6c1/0x1fb0 [ 1174.999486] ? ksys_mount+0x12d/0x140 [ 1175.003299] ? do_syscall_64+0x1b9/0x820 [ 1175.007380] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1175.012816] ? p9_client_read+0xc60/0xc60 [ 1175.017001] ? lock_acquire+0x1e4/0x540 [ 1175.019356] 9pnet_virtio: no channels available for device (null) [ 1175.021022] ? fs_reclaim_acquire+0x20/0x20 [ 1175.021042] ? lock_downgrade+0x8f0/0x8f0 [ 1175.021063] ? lock_release+0xa30/0xa30 [ 1175.027577] 9pnet: Insufficient options for proto=fd [ 1175.031623] ? __lockdep_init_map+0x105/0x590 [ 1175.031645] ? lockdep_init_map+0x9/0x10 [ 1175.031669] ? kasan_check_write+0x14/0x20 [ 1175.036491] 9pnet: Insufficient options for proto=fd [ 1175.039773] ? __init_rwsem+0x1cc/0x2a0 [ 1175.039792] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1175.039815] ? __kmalloc_track_caller+0x311/0x760 04:22:35 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:35 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xe4ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:35 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfTno', 0x3d, r1}, 0x2c}) [ 1175.039835] ? save_stack+0xa9/0xd0 [ 1175.080333] ? save_stack+0x43/0xd0 [ 1175.083980] ? kasan_kmalloc+0xc4/0xe0 [ 1175.087908] ? kmem_cache_alloc_trace+0x152/0x780 [ 1175.092767] ? memcpy+0x45/0x50 [ 1175.096080] v9fs_session_init+0x21a/0x1a80 [ 1175.100429] ? rcu_note_context_switch+0x730/0x730 [ 1175.105374] ? do_mount+0x69e/0x1fb0 [ 1175.109140] ? lock_acquire+0x1e4/0x540 [ 1175.113141] ? v9fs_show_options+0x7e0/0x7e0 [ 1175.117570] ? lock_release+0xa30/0xa30 [ 1175.121561] ? check_same_owner+0x340/0x340 [ 1175.125909] ? kasan_unpoison_shadow+0x35/0x50 [ 1175.130507] ? kasan_kmalloc+0xc4/0xe0 [ 1175.130690] 9pnet: Insufficient options for proto=fd [ 1175.134411] ? kmem_cache_alloc_trace+0x318/0x780 [ 1175.134434] ? kasan_unpoison_shadow+0x35/0x50 [ 1175.148986] ? kasan_kmalloc+0xc4/0xe0 [ 1175.152909] v9fs_mount+0x7c/0x900 [ 1175.156471] ? v9fs_drop_inode+0x150/0x150 [ 1175.160739] legacy_get_tree+0x118/0x440 [ 1175.164843] vfs_get_tree+0x1cb/0x5c0 [ 1175.168685] do_mount+0x6c1/0x1fb0 [ 1175.172252] ? kasan_check_write+0x14/0x20 [ 1175.176514] ? copy_mount_string+0x40/0x40 [ 1175.179518] 9pnet: Insufficient options for proto=fd [ 1175.180770] ? kasan_kmalloc+0xc4/0xe0 [ 1175.180796] ? kmem_cache_alloc_trace+0x318/0x780 [ 1175.195565] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1175.198761] 9pnet: Insufficient options for proto=fd [ 1175.201145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1175.201162] ? copy_mount_options+0x285/0x380 [ 1175.201184] ksys_mount+0x12d/0x140 [ 1175.219928] __x64_sys_mount+0xbe/0x150 [ 1175.223930] do_syscall_64+0x1b9/0x820 [ 1175.227831] ? finish_task_switch+0x1d3/0x870 [ 1175.232355] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1175.237316] ? syscall_return_slowpath+0x31d/0x5e0 [ 1175.242270] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1175.247449] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1175.252493] ? perf_trace_sys_enter+0xb10/0xb10 [ 1175.257192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1175.259606] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1175.262065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1175.262079] RIP: 0033:0x455e29 [ 1175.262089] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1175.303300] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1175.311020] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1175.318283] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1175.325552] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1175.332826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1175.340087] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000c 04:22:35 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000080)) 04:22:35 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranQ=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:35 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="3970ff", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:35 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xa00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:35 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfkno', 0x3d, r1}, 0x2c}) 04:22:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:35 executing program 4 (fault-call:3 fault-nth:13): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:35 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1175.848866] 9pnet: Insufficient options for proto=fd [ 1175.858852] FAULT_INJECTION: forcing a failure. [ 1175.858852] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1175.869585] 9pnet: Insufficient options for proto=fd [ 1175.870686] CPU: 1 PID: 1637 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1175.870695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1175.870705] Call Trace: [ 1175.896039] dump_stack+0x1c9/0x2b4 [ 1175.899658] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1175.904840] should_fail.cold.4+0xa/0x11 [ 1175.908888] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1175.913979] ? __isolate_free_page+0x690/0x690 [ 1175.918546] ? do_raw_spin_lock+0xc1/0x200 [ 1175.922769] ? trace_hardirqs_on+0x10/0x10 [ 1175.926992] ? perf_trace_lock+0xde/0x920 [ 1175.931133] ? zap_class+0x740/0x740 [ 1175.934835] ? __isolate_free_page+0x690/0x690 [ 1175.939402] ? perf_trace_lock+0xde/0x920 [ 1175.943540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1175.949064] ? should_fail+0x246/0xd86 [ 1175.952948] ? zap_class+0x740/0x740 [ 1175.956661] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1175.961772] __alloc_pages_nodemask+0x36e/0xdb0 [ 1175.966448] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1175.971456] ? lock_acquire+0x1e4/0x540 [ 1175.975432] ? is_bpf_text_address+0xae/0x170 [ 1175.979919] ? lock_downgrade+0x8f0/0x8f0 [ 1175.984054] ? lock_release+0xa30/0xa30 [ 1175.988022] ? lock_acquire+0x1e4/0x540 [ 1175.991986] ? fs_reclaim_acquire+0x20/0x20 [ 1175.996297] ? lock_downgrade+0x8f0/0x8f0 [ 1176.000430] ? lock_release+0xa30/0xa30 [ 1176.004388] ? is_bpf_text_address+0xd7/0x170 [ 1176.008868] ? check_same_owner+0x340/0x340 [ 1176.013179] cache_grow_begin+0x91/0x710 [ 1176.017229] kmem_cache_alloc_trace+0x6a5/0x780 [ 1176.021885] ? save_stack+0xa9/0xd0 [ 1176.025502] p9_client_create+0x114/0x16c9 [ 1176.029722] ? vfs_get_tree+0x1cb/0x5c0 [ 1176.033684] ? do_mount+0x6c1/0x1fb0 [ 1176.037383] ? ksys_mount+0x12d/0x140 [ 1176.041177] ? do_syscall_64+0x1b9/0x820 [ 1176.045235] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1176.050584] ? p9_client_read+0xc60/0xc60 [ 1176.054720] ? lock_acquire+0x1e4/0x540 [ 1176.058788] ? fs_reclaim_acquire+0x20/0x20 [ 1176.063095] ? lock_downgrade+0x8f0/0x8f0 [ 1176.067235] ? lock_release+0xa30/0xa30 [ 1176.071204] ? __lockdep_init_map+0x105/0x590 [ 1176.075689] ? lockdep_init_map+0x9/0x10 [ 1176.079746] ? kasan_check_write+0x14/0x20 [ 1176.083978] ? __init_rwsem+0x1cc/0x2a0 [ 1176.087939] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1176.092951] ? __kmalloc_track_caller+0x311/0x760 [ 1176.097784] ? save_stack+0xa9/0xd0 [ 1176.101396] ? save_stack+0x43/0xd0 [ 1176.105029] ? kasan_kmalloc+0xc4/0xe0 [ 1176.108901] ? kmem_cache_alloc_trace+0x152/0x780 [ 1176.113729] ? memcpy+0x45/0x50 [ 1176.117003] v9fs_session_init+0x21a/0x1a80 [ 1176.121326] ? rcu_note_context_switch+0x730/0x730 [ 1176.126244] ? do_mount+0x69e/0x1fb0 [ 1176.129951] ? lock_acquire+0x1e4/0x540 [ 1176.133917] ? v9fs_show_options+0x7e0/0x7e0 [ 1176.138313] ? lock_release+0xa30/0xa30 [ 1176.142275] ? check_same_owner+0x340/0x340 [ 1176.146587] ? kasan_unpoison_shadow+0x35/0x50 [ 1176.151169] ? kasan_kmalloc+0xc4/0xe0 [ 1176.155046] ? kmem_cache_alloc_trace+0x318/0x780 [ 1176.159874] ? kasan_unpoison_shadow+0x35/0x50 [ 1176.164454] ? kasan_kmalloc+0xc4/0xe0 [ 1176.168337] v9fs_mount+0x7c/0x900 [ 1176.171873] ? v9fs_drop_inode+0x150/0x150 [ 1176.176093] legacy_get_tree+0x118/0x440 [ 1176.180141] vfs_get_tree+0x1cb/0x5c0 [ 1176.183938] do_mount+0x6c1/0x1fb0 [ 1176.187468] ? kasan_check_write+0x14/0x20 [ 1176.191689] ? copy_mount_string+0x40/0x40 [ 1176.195910] ? kasan_kmalloc+0xc4/0xe0 [ 1176.199787] ? kmem_cache_alloc_trace+0x318/0x780 [ 1176.204619] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1176.210145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1176.215669] ? copy_mount_options+0x285/0x380 [ 1176.220151] ksys_mount+0x12d/0x140 [ 1176.223771] __x64_sys_mount+0xbe/0x150 [ 1176.227733] do_syscall_64+0x1b9/0x820 [ 1176.231607] ? finish_task_switch+0x1d3/0x870 [ 1176.236089] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1176.241004] ? syscall_return_slowpath+0x31d/0x5e0 [ 1176.245920] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1176.250921] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1176.255922] ? perf_trace_sys_enter+0xb10/0xb10 [ 1176.260587] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1176.265419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1176.270601] RIP: 0033:0x455e29 [ 1176.273773] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1176.292968] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1176.300662] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1176.307914] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1176.315167] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1176.322506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1176.329764] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000d [ 1176.340387] 9pnet_virtio: no channels available for device (null) 04:22:36 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="39708c", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1176.341412] 9pnet: Insufficient options for proto=fd 04:22:36 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranD=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:36 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffffff87e00000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:36 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfsno', 0x3d, r1}, 0x2c}) [ 1176.375487] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1176.425827] 9pnet_virtio: no channels available for device (null) [ 1176.442786] 9pnet: Insufficient options for proto=fd [ 1176.463007] 9pnet: Insufficient options for proto=fd 04:22:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:36 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:36 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23c02, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1176.472560] 9pnet: Insufficient options for proto=fd [ 1176.508658] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1176.547609] 9pnet: Insufficient options for proto=fd [ 1176.575904] 9pnet: Insufficient options for proto=fd 04:22:36 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000080)) 04:22:36 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranS=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:36 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfAno', 0x3d, r1}, 0x2c}) 04:22:36 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:36 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:36 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:36 executing program 4 (fault-call:3 fault-nth:14): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1176.885238] 9pnet: Insufficient options for proto=fd [ 1176.893089] 9pnet: Insufficient options for proto=fd [ 1176.909932] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1176.912136] FAULT_INJECTION: forcing a failure. [ 1176.912136] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.925270] 9pnet_virtio: no channels available for device (null) [ 1176.933070] CPU: 0 PID: 1709 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1176.933086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1176.956983] Call Trace: [ 1176.959577] dump_stack+0x1c9/0x2b4 [ 1176.963237] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1176.968434] ? perf_trace_lock+0x49d/0x920 [ 1176.972668] should_fail.cold.4+0xa/0x11 [ 1176.976727] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1176.981827] ? save_stack+0xa9/0xd0 [ 1176.985457] ? save_stack+0x43/0xd0 [ 1176.989085] ? __kmalloc_track_caller+0x14a/0x760 [ 1176.993916] ? kstrdup+0x39/0x70 [ 1176.997276] ? p9_client_create+0x48f/0x16c9 [ 1177.001676] ? v9fs_session_init+0x21a/0x1a80 [ 1177.006174] ? legacy_get_tree+0x118/0x440 [ 1177.010406] ? vfs_get_tree+0x1cb/0x5c0 [ 1177.014375] ? ksys_mount+0x12d/0x140 [ 1177.018165] ? __x64_sys_mount+0xbe/0x150 [ 1177.022316] ? do_syscall_64+0x1b9/0x820 [ 1177.026369] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.033209] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1177.038747] ? node_tag_clear+0xc0/0x1c0 [ 1177.042808] ? lock_acquire+0x1e4/0x540 [ 1177.046771] ? fs_reclaim_acquire+0x20/0x20 [ 1177.051095] ? lock_downgrade+0x8f0/0x8f0 [ 1177.055242] ? check_same_owner+0x340/0x340 [ 1177.059554] ? p9_idpool_get+0x4a/0x70 [ 1177.063435] ? rcu_note_context_switch+0x730/0x730 [ 1177.068361] __should_failslab+0x124/0x180 [ 1177.072590] should_failslab+0x9/0x14 [ 1177.076380] __kmalloc+0x2c8/0x760 [ 1177.079924] ? match_wildcard+0x3c0/0x3c0 [ 1177.084058] ? match_strdup+0x5e/0xa0 [ 1177.087856] match_strdup+0x5e/0xa0 [ 1177.091481] p9_client_create+0x6c9/0x16c9 [ 1177.095735] ? p9_client_read+0xc60/0xc60 [ 1177.099884] ? lock_acquire+0x1e4/0x540 [ 1177.104114] ? fs_reclaim_acquire+0x20/0x20 [ 1177.108435] ? lock_release+0xa30/0xa30 [ 1177.112402] ? __lockdep_init_map+0x105/0x590 [ 1177.116895] ? kasan_check_write+0x14/0x20 [ 1177.121120] ? __init_rwsem+0x1cc/0x2a0 [ 1177.125092] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1177.130116] ? __kmalloc_track_caller+0x311/0x760 [ 1177.134950] ? save_stack+0xa9/0xd0 [ 1177.138567] ? save_stack+0x43/0xd0 [ 1177.142186] ? kasan_kmalloc+0xc4/0xe0 [ 1177.146065] ? kmem_cache_alloc_trace+0x152/0x780 [ 1177.150900] ? memcpy+0x45/0x50 [ 1177.154183] v9fs_session_init+0x21a/0x1a80 [ 1177.158493] ? rcu_note_context_switch+0x730/0x730 [ 1177.163415] ? do_mount+0x69e/0x1fb0 [ 1177.167128] ? lock_acquire+0x1e4/0x540 [ 1177.171096] ? v9fs_show_options+0x7e0/0x7e0 [ 1177.175605] ? lock_release+0xa30/0xa30 [ 1177.179572] ? check_same_owner+0x340/0x340 [ 1177.183889] ? lock_downgrade+0x8f0/0x8f0 [ 1177.188058] ? kasan_unpoison_shadow+0x35/0x50 [ 1177.192633] ? kasan_kmalloc+0xc4/0xe0 [ 1177.196525] ? kmem_cache_alloc_trace+0x318/0x780 [ 1177.201405] ? kasan_unpoison_shadow+0x35/0x50 [ 1177.205979] ? kasan_kmalloc+0xc4/0xe0 [ 1177.209887] v9fs_mount+0x7c/0x900 [ 1177.213426] ? v9fs_drop_inode+0x150/0x150 [ 1177.217654] legacy_get_tree+0x118/0x440 [ 1177.221712] vfs_get_tree+0x1cb/0x5c0 [ 1177.225508] do_mount+0x6c1/0x1fb0 [ 1177.229041] ? check_same_owner+0x340/0x340 [ 1177.233366] ? lock_release+0xa30/0xa30 [ 1177.237334] ? copy_mount_string+0x40/0x40 [ 1177.241562] ? kasan_kmalloc+0xc4/0xe0 [ 1177.245443] ? kmem_cache_alloc_trace+0x318/0x780 [ 1177.250280] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1177.255806] ? _copy_from_user+0xdf/0x150 [ 1177.259949] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.265479] ? copy_mount_options+0x285/0x380 [ 1177.269970] ksys_mount+0x12d/0x140 [ 1177.273593] __x64_sys_mount+0xbe/0x150 [ 1177.277588] do_syscall_64+0x1b9/0x820 [ 1177.281465] ? syscall_slow_exit_work+0x500/0x500 [ 1177.286302] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1177.291835] ? syscall_return_slowpath+0x31d/0x5e0 [ 1177.296766] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1177.301775] ? perf_trace_sys_enter+0xb10/0xb10 [ 1177.306456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1177.311308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.316487] RIP: 0033:0x455e29 04:22:37 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="397010", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1177.319663] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1177.339040] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1177.346741] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1177.354948] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1177.362210] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1177.369470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1177.376728] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000e 04:22:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000380200", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:37 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfono', 0x3d, r1}, 0x2c}) [ 1177.406373] 9pnet: Insufficient options for proto=fd 04:22:37 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran#=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:37 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:37 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:37 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="397003", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:37 executing program 4 (fault-call:3 fault-nth:15): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1177.479536] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1177.501552] 9pnet: Insufficient options for proto=fd [ 1177.515245] 9pnet_virtio: no channels available for device (null) [ 1177.543588] 9pnet: Insufficient options for proto=fd [ 1177.559524] FAULT_INJECTION: forcing a failure. [ 1177.559524] name failslab, interval 1, probability 0, space 0, times 0 [ 1177.570774] CPU: 0 PID: 1743 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1177.579109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1177.588482] Call Trace: [ 1177.591099] dump_stack+0x1c9/0x2b4 [ 1177.594794] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1177.600017] should_fail.cold.4+0xa/0x11 [ 1177.604084] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1177.609191] ? perf_tp_event+0xc40/0xc40 [ 1177.613255] ? perf_tp_event+0xc40/0xc40 [ 1177.617668] ? lock_release+0xa30/0xa30 [ 1177.621650] ? perf_trace_lock+0x49d/0x920 [ 1177.625891] ? perf_trace_lock+0x49d/0x920 [ 1177.630143] ? zap_class+0x740/0x740 [ 1177.633852] ? zap_class+0x740/0x740 [ 1177.637578] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1177.643132] ? perf_tp_event+0x91b/0xc40 [ 1177.647206] __should_failslab+0x124/0x180 [ 1177.651436] should_failslab+0x9/0x14 [ 1177.655242] kmem_cache_alloc+0x47/0x760 [ 1177.659300] ? lock_acquire+0x1e4/0x540 [ 1177.663271] ? is_bpf_text_address+0xae/0x170 [ 1177.667763] ? lock_downgrade+0x8f0/0x8f0 [ 1177.671927] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 1177.677653] idr_get_free+0x887/0x10d0 [ 1177.681554] ? radix_tree_iter_tag_clear+0xd0/0xd0 [ 1177.686491] ? __kernel_text_address+0xd/0x40 [ 1177.690985] ? unwind_get_return_address+0x61/0xa0 [ 1177.695948] ? save_stack+0xa9/0xd0 [ 1177.699586] ? save_stack+0x43/0xd0 [ 1177.703211] ? kasan_kmalloc+0xc4/0xe0 [ 1177.707099] ? kmem_cache_alloc_trace+0x152/0x780 [ 1177.711938] ? p9_idpool_create+0x42/0x120 [ 1177.716167] ? p9_client_create+0x286/0x16c9 [ 1177.720567] ? v9fs_session_init+0x21a/0x1a80 [ 1177.725051] ? v9fs_mount+0x7c/0x900 [ 1177.728754] ? legacy_get_tree+0x118/0x440 [ 1177.732985] ? do_mount+0x6c1/0x1fb0 [ 1177.736723] ? ksys_mount+0x12d/0x140 [ 1177.740526] ? __x64_sys_mount+0xbe/0x150 [ 1177.744668] ? do_syscall_64+0x1b9/0x820 [ 1177.749134] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.754598] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.760070] ? lock_downgrade+0x8f0/0x8f0 [ 1177.764226] idr_alloc_u32+0x1d4/0x3a0 [ 1177.768118] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 1177.772956] ? p9_idpool_get+0x23/0x70 [ 1177.776845] idr_alloc+0x111/0x1b0 [ 1177.780383] ? idr_alloc_u32+0x3a0/0x3a0 [ 1177.784437] ? do_raw_spin_lock+0xc1/0x200 [ 1177.788672] p9_idpool_get+0x3d/0x70 [ 1177.792383] p9_client_create+0x369/0x16c9 [ 1177.796612] ? vfs_get_tree+0x1cb/0x5c0 [ 1177.800578] ? do_mount+0x6c1/0x1fb0 [ 1177.804284] ? ksys_mount+0x12d/0x140 [ 1177.808077] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1177.813439] ? p9_client_read+0xc60/0xc60 [ 1177.817589] ? lock_acquire+0x1e4/0x540 [ 1177.821557] ? fs_reclaim_acquire+0x20/0x20 [ 1177.825875] ? lock_downgrade+0x8f0/0x8f0 [ 1177.830027] ? lock_release+0xa30/0xa30 [ 1177.834009] ? __lockdep_init_map+0x105/0x590 [ 1177.838511] ? kasan_check_write+0x14/0x20 [ 1177.842738] ? __init_rwsem+0x1cc/0x2a0 [ 1177.846706] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1177.851718] ? __kmalloc_track_caller+0x311/0x760 [ 1177.856551] ? save_stack+0xa9/0xd0 [ 1177.860182] ? save_stack+0x43/0xd0 [ 1177.863798] ? kasan_kmalloc+0xc4/0xe0 [ 1177.867694] ? kmem_cache_alloc_trace+0x152/0x780 [ 1177.872543] ? memcpy+0x45/0x50 [ 1177.875827] v9fs_session_init+0x21a/0x1a80 [ 1177.880142] ? rcu_note_context_switch+0x730/0x730 [ 1177.885073] ? do_mount+0x69e/0x1fb0 [ 1177.888809] ? lock_acquire+0x1e4/0x540 [ 1177.892782] ? v9fs_show_options+0x7e0/0x7e0 [ 1177.897189] ? lock_release+0xa30/0xa30 [ 1177.901158] ? check_same_owner+0x340/0x340 [ 1177.905482] ? kasan_unpoison_shadow+0x35/0x50 [ 1177.910072] ? kasan_kmalloc+0xc4/0xe0 [ 1177.913979] ? kmem_cache_alloc_trace+0x318/0x780 [ 1177.918831] ? kasan_unpoison_shadow+0x35/0x50 [ 1177.923422] ? kasan_kmalloc+0xc4/0xe0 [ 1177.927326] v9fs_mount+0x7c/0x900 [ 1177.930874] ? v9fs_drop_inode+0x150/0x150 [ 1177.935112] legacy_get_tree+0x118/0x440 [ 1177.939175] vfs_get_tree+0x1cb/0x5c0 [ 1177.942975] do_mount+0x6c1/0x1fb0 [ 1177.946512] ? kasan_check_write+0x14/0x20 [ 1177.950745] ? copy_mount_string+0x40/0x40 [ 1177.954976] ? kasan_kmalloc+0xc4/0xe0 [ 1177.958885] ? kmem_cache_alloc_trace+0x318/0x780 [ 1177.963726] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1177.969266] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1177.974799] ? copy_mount_options+0x285/0x380 [ 1177.979295] ksys_mount+0x12d/0x140 [ 1177.982919] __x64_sys_mount+0xbe/0x150 [ 1177.986895] do_syscall_64+0x1b9/0x820 [ 1177.990809] ? finish_task_switch+0x1d3/0x870 [ 1177.995302] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1178.000238] ? syscall_return_slowpath+0x31d/0x5e0 [ 1178.005165] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1178.010182] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1178.015197] ? perf_trace_sys_enter+0xb10/0xb10 [ 1178.019881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1178.024726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1178.029909] RIP: 0033:0x455e29 [ 1178.033090] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1178.052477] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1178.060444] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1178.067711] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1178.074985] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1178.082251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1178.089514] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000000f [ 1178.100740] 9pnet: Insufficient options for proto=fd 04:22:38 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0xc0189436, &(0x7f0000000080)) 04:22:38 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfxno', 0x3d, r1}, 0x2c}) 04:22:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000500", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:38 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans%fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:38 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x7009000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:38 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:38 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:38 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:38 executing program 4 (fault-call:3 fault-nth:16): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1178.332568] 9pnet_virtio: no channels available for device (null) [ 1178.334315] 9pnet: Insufficient options for proto=fd [ 1178.350419] 9pnet: Insufficient options for proto=fd [ 1178.366926] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:38 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfqno', 0x3d, r1}, 0x2c}) [ 1178.387403] 9pnet: Insufficient options for proto=fd 04:22:38 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=.d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:38 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000011}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1178.441823] FAULT_INJECTION: forcing a failure. [ 1178.441823] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.453173] CPU: 0 PID: 1787 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1178.461507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1178.470899] Call Trace: [ 1178.473523] dump_stack+0x1c9/0x2b4 [ 1178.477188] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1178.482405] ? perf_trace_lock+0x49d/0x920 [ 1178.485868] 9pnet: Insufficient options for proto=fd [ 1178.486664] should_fail.cold.4+0xa/0x11 [ 1178.486690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1178.486720] ? lock_acquire+0x1e4/0x540 [ 1178.503065] 9pnet: Could not find request transport: .d [ 1178.505057] ? is_bpf_text_address+0xae/0x170 [ 1178.505081] ? lock_downgrade+0x8f0/0x8f0 [ 1178.519082] ? lock_release+0xa30/0xa30 [ 1178.523074] ? kasan_check_read+0x11/0x20 [ 1178.527220] ? rcu_is_watching+0x8c/0x150 [ 1178.532155] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1178.536828] ? lock_acquire+0x1e4/0x540 [ 1178.540794] ? fs_reclaim_acquire+0x20/0x20 [ 1178.545119] ? lock_downgrade+0x8f0/0x8f0 [ 1178.549261] ? __kernel_text_address+0xd/0x40 [ 1178.553752] ? __save_stack_trace+0x8d/0xf0 [ 1178.558072] ? check_same_owner+0x340/0x340 [ 1178.562398] ? rcu_note_context_switch+0x730/0x730 [ 1178.567336] __should_failslab+0x124/0x180 [ 1178.571567] should_failslab+0x9/0x14 [ 1178.575362] __kmalloc_track_caller+0x2c4/0x760 [ 1178.580039] ? v9fs_session_init+0x21a/0x1a80 [ 1178.584793] ? v9fs_mount+0x7c/0x900 [ 1178.588496] ? legacy_get_tree+0x118/0x440 [ 1178.592720] ? vfs_get_tree+0x1cb/0x5c0 [ 1178.596681] ? do_mount+0x6c1/0x1fb0 [ 1178.600382] ? ksys_mount+0x12d/0x140 [ 1178.604184] ? __x64_sys_mount+0xbe/0x150 [ 1178.608323] ? do_syscall_64+0x1b9/0x820 [ 1178.612390] ? parse_opts+0x176/0x500 [ 1178.616187] kstrdup+0x39/0x70 [ 1178.619384] parse_opts+0x176/0x500 [ 1178.623037] ? lock_acquire+0x1e4/0x540 [ 1178.627022] ? p9_fd_poll+0x2b0/0x2b0 [ 1178.630812] ? lock_downgrade+0x8f0/0x8f0 [ 1178.634954] ? lock_release+0xa30/0xa30 [ 1178.638925] ? check_same_owner+0x340/0x340 [ 1178.643238] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1178.648350] ? kasan_unpoison_shadow+0x35/0x50 [ 1178.652927] ? kasan_kmalloc+0xc4/0xe0 [ 1178.657337] p9_fd_create+0x8b/0x3f0 [ 1178.661047] ? p9_fd_show_options+0x1c0/0x1c0 [ 1178.665541] ? __raw_spin_lock_init+0x2d/0x100 [ 1178.670118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1178.675652] p9_client_create+0x915/0x16c9 [ 1178.679886] ? p9_client_read+0xc60/0xc60 [ 1178.684044] ? lock_acquire+0x1e4/0x540 [ 1178.688018] ? fs_reclaim_acquire+0x20/0x20 [ 1178.692361] ? lock_release+0xa30/0xa30 [ 1178.696326] ? __lockdep_init_map+0x105/0x590 [ 1178.700824] ? kasan_check_write+0x14/0x20 [ 1178.705059] ? __init_rwsem+0x1cc/0x2a0 [ 1178.709036] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1178.714051] ? __kmalloc_track_caller+0x311/0x760 [ 1178.718894] ? save_stack+0xa9/0xd0 [ 1178.722602] ? save_stack+0x43/0xd0 [ 1178.726221] ? kasan_kmalloc+0xc4/0xe0 [ 1178.730108] ? kmem_cache_alloc_trace+0x152/0x780 [ 1178.734947] ? memcpy+0x45/0x50 [ 1178.738230] v9fs_session_init+0x21a/0x1a80 [ 1178.742555] ? rcu_note_context_switch+0x730/0x730 [ 1178.747474] ? do_mount+0x69e/0x1fb0 [ 1178.751192] ? lock_acquire+0x1e4/0x540 [ 1178.755172] ? v9fs_show_options+0x7e0/0x7e0 [ 1178.759578] ? lock_release+0xa30/0xa30 [ 1178.763559] ? check_same_owner+0x340/0x340 [ 1178.767872] ? lock_downgrade+0x8f0/0x8f0 [ 1178.772036] ? kasan_unpoison_shadow+0x35/0x50 [ 1178.776620] ? kasan_kmalloc+0xc4/0xe0 [ 1178.780502] ? kmem_cache_alloc_trace+0x318/0x780 [ 1178.785337] ? kasan_unpoison_shadow+0x35/0x50 [ 1178.789913] ? kasan_kmalloc+0xc4/0xe0 [ 1178.793799] v9fs_mount+0x7c/0x900 [ 1178.797334] ? v9fs_drop_inode+0x150/0x150 [ 1178.801574] legacy_get_tree+0x118/0x440 [ 1178.805634] vfs_get_tree+0x1cb/0x5c0 [ 1178.809427] do_mount+0x6c1/0x1fb0 [ 1178.812966] ? kasan_check_read+0x11/0x20 [ 1178.817122] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1178.821525] ? copy_mount_string+0x40/0x40 [ 1178.825755] ? retint_kernel+0x10/0x10 [ 1178.829641] ? copy_mount_options+0x1f0/0x380 [ 1178.834128] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1178.838964] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1178.844498] ? copy_mount_options+0x285/0x380 [ 1178.849007] ksys_mount+0x12d/0x140 [ 1178.852631] __x64_sys_mount+0xbe/0x150 [ 1178.856601] do_syscall_64+0x1b9/0x820 [ 1178.860476] ? finish_task_switch+0x1d3/0x870 [ 1178.864963] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1178.869890] ? syscall_return_slowpath+0x31d/0x5e0 [ 1178.874813] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1178.879833] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1178.884846] ? perf_trace_sys_enter+0xb10/0xb10 [ 1178.889512] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1178.894355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1178.899532] RIP: 0033:0x455e29 [ 1178.902716] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1178.922102] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1178.929813] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 04:22:39 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="3970fe", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1178.937074] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1178.944334] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1178.951591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1178.958847] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000010 [ 1178.966860] 9pnet: Insufficient options for proto=fd 04:22:39 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x400000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:39 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfSno', 0x3d, r1}, 0x2c}) [ 1179.002212] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1179.046944] 9pnet: Could not find request transport: .d [ 1179.083850] 9pnet: Insufficient options for proto=fd [ 1179.098629] 9pnet: Insufficient options for proto=fd [ 1179.114969] 9pnet: Insufficient options for proto=fd 04:22:39 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0xfdfdffff}) 04:22:39 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:39 executing program 4 (fault-call:3 fault-nth:17): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:39 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=/d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:39 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd01}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:39 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfQno', 0x3d, r1}, 0x2c}) 04:22:39 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x300, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1179.370808] 9pnet: Insufficient options for proto=fd [ 1179.379476] 9pnet: Could not find request transport: /d [ 1179.382380] FAULT_INJECTION: forcing a failure. [ 1179.382380] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.391432] 9pnet: Insufficient options for proto=fd [ 1179.396451] CPU: 0 PID: 1845 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1179.409750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:22:39 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bfa, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1179.419122] Call Trace: [ 1179.421734] dump_stack+0x1c9/0x2b4 [ 1179.425388] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1179.430707] ? perf_trace_lock+0x49d/0x920 [ 1179.434982] should_fail.cold.4+0xa/0x11 [ 1179.439078] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1179.444224] ? __save_stack_trace+0x8d/0xf0 [ 1179.448567] ? save_stack+0xa9/0xd0 [ 1179.452472] ? save_stack+0x43/0xd0 [ 1179.456100] ? __kasan_slab_free+0x11a/0x170 [ 1179.460514] ? kfree+0xd9/0x260 [ 1179.463880] ? p9_client_create+0x7f5/0x16c9 [ 1179.468303] ? v9fs_session_init+0x21a/0x1a80 [ 1179.472789] ? v9fs_mount+0x7c/0x900 [ 1179.476495] ? legacy_get_tree+0x118/0x440 [ 1179.480737] ? vfs_get_tree+0x1cb/0x5c0 [ 1179.484724] ? lock_acquire+0x1e4/0x540 [ 1179.488692] ? fs_reclaim_acquire+0x20/0x20 [ 1179.493020] ? lock_downgrade+0x8f0/0x8f0 [ 1179.497172] ? check_same_owner+0x340/0x340 [ 1179.501487] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1179.506598] ? rcu_note_context_switch+0x730/0x730 [ 1179.511530] __should_failslab+0x124/0x180 [ 1179.515794] should_failslab+0x9/0x14 [ 1179.519597] kmem_cache_alloc_trace+0x2cb/0x780 [ 1179.524273] ? __kasan_slab_free+0x131/0x170 [ 1179.528693] p9_idpool_create+0x42/0x120 [ 1179.532759] p9_client_create+0x87a/0x16c9 [ 1179.537006] ? p9_client_read+0xc60/0xc60 [ 1179.541158] ? lock_acquire+0x1e4/0x540 [ 1179.545122] ? fs_reclaim_acquire+0x20/0x20 [ 1179.549455] ? lock_release+0xa30/0xa30 [ 1179.553435] ? __lockdep_init_map+0x105/0x590 [ 1179.557936] ? kasan_check_write+0x14/0x20 [ 1179.562162] ? __init_rwsem+0x1cc/0x2a0 [ 1179.566130] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1179.571144] ? __kmalloc_track_caller+0x311/0x760 [ 1179.575980] ? save_stack+0xa9/0xd0 [ 1179.579601] ? save_stack+0x43/0xd0 [ 1179.583230] ? kasan_kmalloc+0xc4/0xe0 [ 1179.587109] ? kmem_cache_alloc_trace+0x152/0x780 [ 1179.591954] ? memcpy+0x45/0x50 [ 1179.595234] v9fs_session_init+0x21a/0x1a80 [ 1179.599549] ? rcu_note_context_switch+0x730/0x730 [ 1179.604473] ? do_mount+0x69e/0x1fb0 [ 1179.608197] ? lock_acquire+0x1e4/0x540 [ 1179.612341] ? v9fs_show_options+0x7e0/0x7e0 [ 1179.616747] ? lock_release+0xa30/0xa30 [ 1179.620715] ? check_same_owner+0x340/0x340 [ 1179.625046] ? kasan_unpoison_shadow+0x35/0x50 [ 1179.629634] ? kasan_kmalloc+0xc4/0xe0 [ 1179.633538] ? kmem_cache_alloc_trace+0x318/0x780 [ 1179.638373] ? kasan_unpoison_shadow+0x35/0x50 [ 1179.642949] ? kasan_kmalloc+0xc4/0xe0 [ 1179.646832] v9fs_mount+0x7c/0x900 [ 1179.650373] ? v9fs_drop_inode+0x150/0x150 [ 1179.654603] legacy_get_tree+0x118/0x440 [ 1179.658662] vfs_get_tree+0x1cb/0x5c0 [ 1179.662459] do_mount+0x6c1/0x1fb0 [ 1179.665989] ? kasan_check_read+0x11/0x20 [ 1179.670130] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1179.674536] ? copy_mount_string+0x40/0x40 [ 1179.678766] ? kasan_kmalloc+0xc4/0xe0 [ 1179.682662] ? kmem_cache_alloc_trace+0x318/0x780 [ 1179.687529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1179.693492] ? copy_mount_options+0x285/0x380 [ 1179.697986] ksys_mount+0x12d/0x140 [ 1179.701624] __x64_sys_mount+0xbe/0x150 [ 1179.705595] do_syscall_64+0x1b9/0x820 [ 1179.709474] ? finish_task_switch+0x1d3/0x870 [ 1179.713964] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1179.718887] ? syscall_return_slowpath+0x31d/0x5e0 [ 1179.723817] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1179.728824] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1179.733842] ? perf_trace_sys_enter+0xb10/0xb10 [ 1179.738517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1179.743360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1179.748539] RIP: 0033:0x455e29 [ 1179.751722] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:22:39 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fQ,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1179.771557] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1179.779260] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1179.786526] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1179.793785] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1179.801051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1179.808307] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000011 [ 1179.820347] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1179.826519] 9pnet: Insufficient options for proto=fd 04:22:39 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="3970c0", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:39 executing program 4 (fault-call:3 fault-nth:18): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1179.867117] 9pnet: Insufficient options for proto=fd [ 1179.881215] 9pnet: Could not find request transport: fQ 04:22:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:39 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wflno', 0x3d, r1}, 0x2c}) [ 1179.913150] 9pnet: Insufficient options for proto=fd [ 1179.932204] FAULT_INJECTION: forcing a failure. [ 1179.932204] name failslab, interval 1, probability 0, space 0, times 0 [ 1179.943746] CPU: 0 PID: 1868 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1179.952249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1179.961596] Call Trace: [ 1179.964183] dump_stack+0x1c9/0x2b4 [ 1179.967807] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1179.973004] ? perf_trace_lock+0x49d/0x920 [ 1179.977255] should_fail.cold.4+0xa/0x11 [ 1179.981313] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1179.986424] ? __save_stack_trace+0x8d/0xf0 [ 1179.990750] ? save_stack+0xa9/0xd0 [ 1179.994382] ? save_stack+0x43/0xd0 [ 1179.998000] ? __kasan_slab_free+0x11a/0x170 [ 1180.002406] ? kfree+0xd9/0x260 [ 1180.005679] ? p9_client_create+0x7f5/0x16c9 [ 1180.010080] ? v9fs_session_init+0x21a/0x1a80 [ 1180.014564] ? v9fs_mount+0x7c/0x900 [ 1180.018268] ? legacy_get_tree+0x118/0x440 [ 1180.022493] ? vfs_get_tree+0x1cb/0x5c0 [ 1180.026470] ? lock_acquire+0x1e4/0x540 [ 1180.030438] ? fs_reclaim_acquire+0x20/0x20 [ 1180.034751] ? lock_downgrade+0x8f0/0x8f0 [ 1180.038909] ? check_same_owner+0x340/0x340 [ 1180.043224] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1180.048322] ? rcu_note_context_switch+0x730/0x730 [ 1180.053257] __should_failslab+0x124/0x180 [ 1180.057489] should_failslab+0x9/0x14 [ 1180.061285] kmem_cache_alloc_trace+0x2cb/0x780 [ 1180.066038] ? __kasan_slab_free+0x131/0x170 [ 1180.070445] p9_idpool_create+0x42/0x120 [ 1180.074500] p9_client_create+0x87a/0x16c9 [ 1180.078738] ? p9_client_read+0xc60/0xc60 [ 1180.082897] ? lock_acquire+0x1e4/0x540 [ 1180.086866] ? fs_reclaim_acquire+0x20/0x20 [ 1180.091184] ? lock_release+0xa30/0xa30 [ 1180.095166] ? __lockdep_init_map+0x105/0x590 [ 1180.099659] ? kasan_check_write+0x14/0x20 [ 1180.103882] ? __init_rwsem+0x1cc/0x2a0 [ 1180.107846] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1180.112866] ? __kmalloc_track_caller+0x311/0x760 [ 1180.117699] ? save_stack+0xa9/0xd0 [ 1180.121316] ? save_stack+0x43/0xd0 [ 1180.124932] ? kasan_kmalloc+0xc4/0xe0 [ 1180.128808] ? kmem_cache_alloc_trace+0x152/0x780 [ 1180.133642] ? memcpy+0x45/0x50 [ 1180.136918] v9fs_session_init+0x21a/0x1a80 [ 1180.141239] ? rcu_note_context_switch+0x730/0x730 [ 1180.146157] ? do_mount+0x69e/0x1fb0 [ 1180.149885] ? lock_acquire+0x1e4/0x540 [ 1180.153871] ? v9fs_show_options+0x7e0/0x7e0 [ 1180.158283] ? lock_release+0xa30/0xa30 [ 1180.162261] ? check_same_owner+0x340/0x340 [ 1180.166580] ? kasan_unpoison_shadow+0x35/0x50 [ 1180.171155] ? kasan_kmalloc+0xc4/0xe0 [ 1180.175039] ? kmem_cache_alloc_trace+0x318/0x780 [ 1180.179876] ? kasan_unpoison_shadow+0x35/0x50 [ 1180.184452] ? kasan_kmalloc+0xc4/0xe0 [ 1180.188344] v9fs_mount+0x7c/0x900 [ 1180.191885] ? v9fs_drop_inode+0x150/0x150 [ 1180.196113] legacy_get_tree+0x118/0x440 [ 1180.200173] vfs_get_tree+0x1cb/0x5c0 [ 1180.203968] do_mount+0x6c1/0x1fb0 [ 1180.207517] ? kasan_check_write+0x14/0x20 [ 1180.211748] ? copy_mount_string+0x40/0x40 [ 1180.215985] ? kasan_kmalloc+0xc4/0xe0 [ 1180.219877] ? kmem_cache_alloc_trace+0x318/0x780 [ 1180.224712] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1180.230253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1180.235869] ? copy_mount_options+0x285/0x380 [ 1180.240360] ksys_mount+0x12d/0x140 [ 1180.243993] __x64_sys_mount+0xbe/0x150 [ 1180.247967] do_syscall_64+0x1b9/0x820 [ 1180.251849] ? syscall_slow_exit_work+0x500/0x500 [ 1180.256682] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1180.261614] ? syscall_return_slowpath+0x31d/0x5e0 [ 1180.266549] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1180.271559] ? perf_trace_sys_enter+0xb10/0xb10 [ 1180.276220] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1180.281059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1180.286237] RIP: 0033:0x455e29 [ 1180.289410] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:22:40 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23c020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1180.308793] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1180.316504] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1180.323762] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1180.331023] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1180.338283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1180.345553] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000012 04:22:40 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fk,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1180.398535] 9pnet: Insufficient options for proto=fd [ 1180.403948] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1180.421098] 9pnet: Insufficient options for proto=fd [ 1180.440367] 9pnet: Insufficient options for proto=fd [ 1180.462437] 9pnet: Could not find request transport: fk [ 1180.501532] 9pnet: Could not find request transport: fk 04:22:40 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:40 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:40 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x1000000}) 04:22:40 executing program 4 (fault-call:3 fault-nth:19): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:40 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfVno', 0x3d, r1}, 0x2c}) 04:22:40 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf83b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:40 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fI,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1180.843196] 9pnet: Insufficient options for proto=fd [ 1180.855796] 9pnet: Insufficient options for proto=fd [ 1180.856945] 9pnet: Insufficient options for proto=fd [ 1180.862330] FAULT_INJECTION: forcing a failure. [ 1180.862330] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.877657] CPU: 0 PID: 1908 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1180.885992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1180.895356] Call Trace: [ 1180.897949] dump_stack+0x1c9/0x2b4 [ 1180.901721] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1180.906911] ? perf_trace_lock+0x49d/0x920 [ 1180.911148] should_fail.cold.4+0xa/0x11 [ 1180.915220] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1180.920317] ? lock_acquire+0x1e4/0x540 [ 1180.924283] ? is_bpf_text_address+0xae/0x170 [ 1180.928774] ? lock_downgrade+0x8f0/0x8f0 [ 1180.932916] ? lock_release+0xa30/0xa30 [ 1180.936901] ? kasan_check_read+0x11/0x20 [ 1180.941044] ? rcu_is_watching+0x8c/0x150 [ 1180.945190] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1180.949861] ? lock_acquire+0x1e4/0x540 [ 1180.953831] ? fs_reclaim_acquire+0x20/0x20 [ 1180.958163] ? lock_downgrade+0x8f0/0x8f0 [ 1180.962310] ? __kernel_text_address+0xd/0x40 [ 1180.966813] ? __save_stack_trace+0x8d/0xf0 [ 1180.971127] ? check_same_owner+0x340/0x340 [ 1180.975442] ? rcu_note_context_switch+0x730/0x730 [ 1180.980370] __should_failslab+0x124/0x180 [ 1180.984603] should_failslab+0x9/0x14 [ 1180.988404] __kmalloc_track_caller+0x2c4/0x760 [ 1180.993068] ? v9fs_session_init+0x21a/0x1a80 [ 1180.997549] ? v9fs_mount+0x7c/0x900 [ 1181.001265] ? legacy_get_tree+0x118/0x440 [ 1181.005497] ? vfs_get_tree+0x1cb/0x5c0 [ 1181.009469] ? do_mount+0x6c1/0x1fb0 [ 1181.013174] ? ksys_mount+0x12d/0x140 [ 1181.016974] ? __x64_sys_mount+0xbe/0x150 [ 1181.021114] ? do_syscall_64+0x1b9/0x820 [ 1181.025165] ? parse_opts+0x176/0x500 [ 1181.028959] kstrdup+0x39/0x70 [ 1181.032143] parse_opts+0x176/0x500 [ 1181.035770] ? lock_acquire+0x1e4/0x540 [ 1181.039758] ? p9_fd_poll+0x2b0/0x2b0 [ 1181.043546] ? lock_downgrade+0x8f0/0x8f0 [ 1181.047687] ? lock_release+0xa30/0xa30 [ 1181.051653] ? check_same_owner+0x340/0x340 [ 1181.055965] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1181.061067] ? kasan_unpoison_shadow+0x35/0x50 [ 1181.065641] ? kasan_kmalloc+0xc4/0xe0 [ 1181.069536] p9_fd_create+0x8b/0x3f0 [ 1181.073241] ? p9_fd_show_options+0x1c0/0x1c0 [ 1181.077732] ? __raw_spin_lock_init+0x2d/0x100 [ 1181.082318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.087863] p9_client_create+0x915/0x16c9 [ 1181.092099] ? p9_client_read+0xc60/0xc60 [ 1181.096261] ? lock_acquire+0x1e4/0x540 [ 1181.100235] ? fs_reclaim_acquire+0x20/0x20 [ 1181.104552] ? lock_release+0xa30/0xa30 [ 1181.108519] ? __lockdep_init_map+0x105/0x590 [ 1181.113032] ? kasan_check_write+0x14/0x20 [ 1181.117259] ? __init_rwsem+0x1cc/0x2a0 [ 1181.121233] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1181.126260] ? __kmalloc_track_caller+0x311/0x760 [ 1181.131110] ? save_stack+0xa9/0xd0 [ 1181.134729] ? save_stack+0x43/0xd0 [ 1181.138353] ? kasan_kmalloc+0xc4/0xe0 [ 1181.142231] ? kmem_cache_alloc_trace+0x152/0x780 [ 1181.147068] ? memcpy+0x45/0x50 [ 1181.150346] v9fs_session_init+0x21a/0x1a80 [ 1181.154660] ? rcu_note_context_switch+0x730/0x730 [ 1181.159581] ? do_mount+0x69e/0x1fb0 [ 1181.163292] ? lock_acquire+0x1e4/0x540 [ 1181.167264] ? v9fs_show_options+0x7e0/0x7e0 [ 1181.171677] ? lock_release+0xa30/0xa30 [ 1181.175657] ? check_same_owner+0x340/0x340 [ 1181.179992] ? kasan_unpoison_shadow+0x35/0x50 [ 1181.184568] ? kasan_kmalloc+0xc4/0xe0 [ 1181.188484] ? kmem_cache_alloc_trace+0x318/0x780 [ 1181.193325] ? kasan_unpoison_shadow+0x35/0x50 [ 1181.197908] ? kasan_kmalloc+0xc4/0xe0 [ 1181.201795] v9fs_mount+0x7c/0x900 [ 1181.205333] ? v9fs_drop_inode+0x150/0x150 [ 1181.209559] legacy_get_tree+0x118/0x440 [ 1181.213617] vfs_get_tree+0x1cb/0x5c0 [ 1181.217411] do_mount+0x6c1/0x1fb0 [ 1181.220952] ? kasan_check_write+0x14/0x20 [ 1181.225270] ? copy_mount_string+0x40/0x40 [ 1181.229500] ? retint_kernel+0x10/0x10 [ 1181.233385] ? copy_mount_options+0x1a1/0x380 [ 1181.237870] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 1181.242718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.248254] ? copy_mount_options+0x285/0x380 [ 1181.252750] ksys_mount+0x12d/0x140 [ 1181.256371] __x64_sys_mount+0xbe/0x150 [ 1181.260341] do_syscall_64+0x1b9/0x820 [ 1181.264482] ? finish_task_switch+0x1d3/0x870 [ 1181.268971] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1181.273896] ? syscall_return_slowpath+0x31d/0x5e0 [ 1181.278817] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1181.283827] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1181.288839] ? perf_trace_sys_enter+0xb10/0xb10 [ 1181.293502] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1181.298342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.303522] RIP: 0033:0x455e29 [ 1181.306697] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1181.326080] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1181.333784] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 04:22:41 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1181.341044] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1181.348302] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1181.356633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1181.363894] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000013 [ 1181.371283] 9pnet: Insufficient options for proto=fd [ 1181.383630] 9pnet: Could not find request transport: fI 04:22:41 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x4000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:41 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfwno', 0x3d, r1}, 0x2c}) 04:22:41 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1181.392506] 9pnet: Insufficient options for proto=fd [ 1181.399461] 9pnet: Insufficient options for proto=fd [ 1181.415432] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1181.436261] 9pnet: Could not find request transport: fI 04:22:41 executing program 4 (fault-call:3 fault-nth:20): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000200", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:41 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fS,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1181.493268] 9pnet: Insufficient options for proto=fd [ 1181.499220] 9pnet: Insufficient options for proto=fd [ 1181.526713] 9pnet: Insufficient options for proto=fd [ 1181.543112] FAULT_INJECTION: forcing a failure. [ 1181.543112] name failslab, interval 1, probability 0, space 0, times 0 [ 1181.554493] CPU: 0 PID: 1940 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1181.563202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1181.572572] Call Trace: [ 1181.575183] dump_stack+0x1c9/0x2b4 [ 1181.578839] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1181.584054] ? perf_trace_lock+0x49d/0x920 [ 1181.588309] should_fail.cold.4+0xa/0x11 [ 1181.592369] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1181.597465] ? __kernel_text_address+0xd/0x40 [ 1181.601950] ? unwind_get_return_address+0x61/0xa0 [ 1181.606872] ? __save_stack_trace+0x8d/0xf0 [ 1181.611203] ? save_stack+0xa9/0xd0 [ 1181.614825] ? save_stack+0x43/0xd0 [ 1181.618439] ? kasan_kmalloc+0xc4/0xe0 [ 1181.622316] ? __kmalloc_track_caller+0x14a/0x760 [ 1181.627151] ? kstrdup+0x39/0x70 [ 1181.630517] ? lock_acquire+0x1e4/0x540 [ 1181.634480] ? fs_reclaim_acquire+0x20/0x20 [ 1181.638795] ? lock_downgrade+0x8f0/0x8f0 [ 1181.642947] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1181.647616] ? check_same_owner+0x340/0x340 [ 1181.651936] ? rcu_note_context_switch+0x730/0x730 [ 1181.656876] __should_failslab+0x124/0x180 [ 1181.661107] should_failslab+0x9/0x14 [ 1181.664898] __kmalloc+0x2c8/0x760 [ 1181.668448] ? match_number.isra.0+0xbf/0x280 [ 1181.672938] match_number.isra.0+0xbf/0x280 [ 1181.677252] ? match_strdup+0xa0/0xa0 [ 1181.681048] ? match_wildcard+0x3c0/0x3c0 [ 1181.685189] ? do_syscall_64+0x1b9/0x820 [ 1181.689246] match_int+0x23/0x30 [ 1181.692604] parse_opts+0x32c/0x500 [ 1181.696228] ? p9_fd_poll+0x2b0/0x2b0 [ 1181.700022] ? lock_downgrade+0x8f0/0x8f0 [ 1181.704177] ? lock_release+0xa30/0xa30 [ 1181.708149] ? check_same_owner+0x340/0x340 [ 1181.712476] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1181.717582] ? kasan_unpoison_shadow+0x35/0x50 [ 1181.722159] ? kasan_kmalloc+0xc4/0xe0 [ 1181.726041] p9_fd_create+0x8b/0x3f0 [ 1181.729749] ? p9_fd_show_options+0x1c0/0x1c0 [ 1181.734238] ? __raw_spin_lock_init+0x2d/0x100 [ 1181.738814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.744350] p9_client_create+0x915/0x16c9 [ 1181.748600] ? p9_client_read+0xc60/0xc60 [ 1181.752748] ? lock_acquire+0x1e4/0x540 [ 1181.756721] ? fs_reclaim_acquire+0x20/0x20 [ 1181.761124] ? lock_release+0xa30/0xa30 [ 1181.765090] ? __lockdep_init_map+0x105/0x590 [ 1181.769595] ? kasan_check_write+0x14/0x20 [ 1181.773820] ? __init_rwsem+0x1cc/0x2a0 [ 1181.777787] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1181.782808] ? __kmalloc_track_caller+0x311/0x760 [ 1181.787649] ? save_stack+0xa9/0xd0 [ 1181.791270] ? save_stack+0x43/0xd0 [ 1181.794886] ? kasan_kmalloc+0xc4/0xe0 [ 1181.798764] ? kmem_cache_alloc_trace+0x152/0x780 [ 1181.803612] ? memcpy+0x45/0x50 [ 1181.806901] v9fs_session_init+0x21a/0x1a80 [ 1181.811222] ? rcu_note_context_switch+0x730/0x730 [ 1181.816153] ? do_mount+0x69e/0x1fb0 [ 1181.820052] ? lock_acquire+0x1e4/0x540 [ 1181.824037] ? v9fs_show_options+0x7e0/0x7e0 [ 1181.828453] ? lock_release+0xa30/0xa30 [ 1181.832422] ? check_same_owner+0x340/0x340 [ 1181.836761] ? kasan_unpoison_shadow+0x35/0x50 [ 1181.841337] ? kasan_kmalloc+0xc4/0xe0 [ 1181.845223] ? kmem_cache_alloc_trace+0x318/0x780 [ 1181.850055] ? kasan_unpoison_shadow+0x35/0x50 [ 1181.854628] ? kasan_kmalloc+0xc4/0xe0 [ 1181.858523] v9fs_mount+0x7c/0x900 [ 1181.862059] ? v9fs_drop_inode+0x150/0x150 [ 1181.866300] legacy_get_tree+0x118/0x440 [ 1181.870358] vfs_get_tree+0x1cb/0x5c0 [ 1181.874167] do_mount+0x6c1/0x1fb0 [ 1181.877712] ? kasan_check_write+0x14/0x20 [ 1181.881951] ? copy_mount_string+0x40/0x40 [ 1181.886192] ? retint_kernel+0x10/0x10 [ 1181.890087] ? copy_mount_options+0x1f0/0x380 [ 1181.894573] ? copy_mount_options+0x202/0x380 [ 1181.899063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1181.904591] ? copy_mount_options+0x285/0x380 [ 1181.909084] ksys_mount+0x12d/0x140 [ 1181.912717] __x64_sys_mount+0xbe/0x150 [ 1181.916695] do_syscall_64+0x1b9/0x820 [ 1181.920572] ? finish_task_switch+0x1d3/0x870 [ 1181.925069] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1181.930003] ? syscall_return_slowpath+0x31d/0x5e0 [ 1181.934931] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1181.939939] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1181.944956] ? perf_trace_sys_enter+0xb10/0xb10 [ 1181.949618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1181.954458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1181.959636] RIP: 0033:0x455e29 [ 1181.962816] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1181.982194] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 04:22:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:42 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1181.990070] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1181.997369] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1182.004629] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1182.011895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1182.019157] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000014 [ 1182.027683] 9pnet: Insufficient options for proto=fd [ 1182.033570] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:42 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x4000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1182.036311] 9pnet: Could not find request transport: fS [ 1182.046324] 9pnet: Insufficient options for proto=fd [ 1182.118450] 9pnet: Insufficient options for proto=fd [ 1182.151561] 9pnet: Insufficient options for proto=fd 04:22:42 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x40000000}) 04:22:42 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=f%,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:42 executing program 4 (fault-call:3 fault-nth:21): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:42 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfIno', 0x3d, r1}, 0x2c}) 04:22:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000040}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:42 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfffffff4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:42 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1182.270122] 9pnet: Could not find request transport: f% [ 1182.270162] 9pnet: Insufficient options for proto=fd [ 1182.284686] FAULT_INJECTION: forcing a failure. [ 1182.284686] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.296020] CPU: 0 PID: 1981 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1182.296604] 9pnet: Insufficient options for proto=fd [ 1182.304367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1182.304375] Call Trace: [ 1182.304401] dump_stack+0x1c9/0x2b4 [ 1182.304428] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1182.314437] 9pnet: Insufficient options for proto=fd [ 1182.318892] ? perf_trace_lock+0x49d/0x920 [ 1182.318924] should_fail.cold.4+0xa/0x11 [ 1182.318947] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1182.348905] ? __save_stack_trace+0x8d/0xf0 [ 1182.353247] ? save_stack+0x43/0xd0 [ 1182.356868] ? __kasan_slab_free+0x11a/0x170 [ 1182.361264] ? kasan_slab_free+0xe/0x10 [ 1182.365227] ? kfree+0xd9/0x260 [ 1182.368499] ? match_int+0x23/0x30 [ 1182.372034] ? parse_opts+0x32c/0x500 [ 1182.375836] ? p9_fd_create+0x8b/0x3f0 [ 1182.379713] ? p9_client_create+0x915/0x16c9 [ 1182.384112] ? v9fs_session_init+0x21a/0x1a80 [ 1182.388596] ? v9fs_mount+0x7c/0x900 [ 1182.392315] ? lock_acquire+0x1e4/0x540 [ 1182.396279] ? fs_reclaim_acquire+0x20/0x20 [ 1182.400591] ? lock_downgrade+0x8f0/0x8f0 [ 1182.404744] ? check_same_owner+0x340/0x340 [ 1182.409061] ? rcu_note_context_switch+0x730/0x730 [ 1182.413985] __should_failslab+0x124/0x180 [ 1182.418215] should_failslab+0x9/0x14 [ 1182.422007] __kmalloc+0x2c8/0x760 [ 1182.425547] ? match_number.isra.0+0xbf/0x280 [ 1182.430037] match_number.isra.0+0xbf/0x280 [ 1182.434351] ? match_strdup+0xa0/0xa0 [ 1182.438143] ? match_wildcard+0x3c0/0x3c0 [ 1182.442290] ? do_syscall_64+0x1b9/0x820 [ 1182.446346] match_int+0x23/0x30 [ 1182.449704] parse_opts+0x32c/0x500 [ 1182.453340] ? p9_fd_poll+0x2b0/0x2b0 [ 1182.457149] ? lock_downgrade+0x8f0/0x8f0 [ 1182.461306] ? lock_release+0xa30/0xa30 [ 1182.465271] ? check_same_owner+0x340/0x340 [ 1182.469583] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1182.474695] ? kasan_unpoison_shadow+0x35/0x50 [ 1182.479281] ? kasan_kmalloc+0xc4/0xe0 [ 1182.483166] p9_fd_create+0x8b/0x3f0 [ 1182.486883] ? p9_fd_show_options+0x1c0/0x1c0 [ 1182.491382] ? __raw_spin_lock_init+0x2d/0x100 [ 1182.495956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1182.501503] p9_client_create+0x915/0x16c9 [ 1182.505751] ? p9_client_read+0xc60/0xc60 [ 1182.509984] ? lock_acquire+0x1e4/0x540 [ 1182.513947] ? fs_reclaim_acquire+0x20/0x20 [ 1182.518264] ? lock_release+0xa30/0xa30 [ 1182.522226] ? __lockdep_init_map+0x105/0x590 [ 1182.526720] ? kasan_check_write+0x14/0x20 [ 1182.530943] ? __init_rwsem+0x1cc/0x2a0 [ 1182.534908] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1182.539919] ? __kmalloc_track_caller+0x311/0x760 [ 1182.544755] ? save_stack+0xa9/0xd0 [ 1182.548373] ? save_stack+0x43/0xd0 [ 1182.551989] ? kasan_kmalloc+0xc4/0xe0 [ 1182.555868] ? kmem_cache_alloc_trace+0x152/0x780 [ 1182.560719] ? memcpy+0x45/0x50 [ 1182.564001] v9fs_session_init+0x21a/0x1a80 [ 1182.568340] ? rcu_note_context_switch+0x730/0x730 [ 1182.573259] ? do_mount+0x69e/0x1fb0 [ 1182.576973] ? lock_acquire+0x1e4/0x540 [ 1182.580939] ? v9fs_show_options+0x7e0/0x7e0 [ 1182.585343] ? lock_release+0xa30/0xa30 [ 1182.589313] ? check_same_owner+0x340/0x340 [ 1182.593646] ? kasan_unpoison_shadow+0x35/0x50 [ 1182.598220] ? kasan_kmalloc+0xc4/0xe0 [ 1182.602103] ? kmem_cache_alloc_trace+0x318/0x780 [ 1182.606947] ? kasan_unpoison_shadow+0x35/0x50 [ 1182.611531] ? kasan_kmalloc+0xc4/0xe0 [ 1182.615416] v9fs_mount+0x7c/0x900 [ 1182.618948] ? v9fs_drop_inode+0x150/0x150 [ 1182.623183] legacy_get_tree+0x118/0x440 [ 1182.627250] vfs_get_tree+0x1cb/0x5c0 [ 1182.631047] do_mount+0x6c1/0x1fb0 [ 1182.634579] ? kasan_check_write+0x14/0x20 [ 1182.638813] ? copy_mount_string+0x40/0x40 [ 1182.643040] ? kasan_kmalloc+0xc4/0xe0 [ 1182.647104] ? kmem_cache_alloc_trace+0x318/0x780 [ 1182.651940] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1182.657488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1182.663020] ? copy_mount_options+0x285/0x380 [ 1182.667870] ksys_mount+0x12d/0x140 [ 1182.671492] __x64_sys_mount+0xbe/0x150 [ 1182.675460] do_syscall_64+0x1b9/0x820 [ 1182.679339] ? finish_task_switch+0x1d3/0x870 [ 1182.683840] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1182.688763] ? syscall_return_slowpath+0x31d/0x5e0 [ 1182.693692] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1182.698710] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1182.703716] ? perf_trace_sys_enter+0xb10/0xb10 [ 1182.708377] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1182.713219] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1182.718408] RIP: 0033:0x455e29 [ 1182.721588] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1182.740959] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1182.748661] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1182.755918] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1182.763178] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1182.770697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1182.777953] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000015 [ 1182.785434] 9pnet: Insufficient options for proto=fd 04:22:42 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:42 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfgno', 0x3d, r1}, 0x2c}) [ 1182.816006] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:42 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xa000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:42 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fX,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1182.856351] 9pnet: Insufficient options for proto=fd 04:22:42 executing program 4 (fault-call:3 fault-nth:22): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:42 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff0000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1182.915906] 9pnet: Insufficient options for proto=fd [ 1182.931338] 9pnet: Insufficient options for proto=fd [ 1182.961131] 9pnet: Could not find request transport: fX [ 1182.981771] 9pnet: Insufficient options for proto=fd [ 1183.022531] FAULT_INJECTION: forcing a failure. [ 1183.022531] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.033782] CPU: 1 PID: 2026 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1183.042105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.051483] Call Trace: [ 1183.054066] dump_stack+0x1c9/0x2b4 [ 1183.057688] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1183.063128] ? check_same_owner+0x340/0x340 [ 1183.067439] ? perf_trace_lock+0xde/0x920 [ 1183.071593] should_fail.cold.4+0xa/0x11 [ 1183.075647] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1183.080738] ? kasan_check_write+0x14/0x20 [ 1183.084957] ? __mutex_lock+0x6c4/0x1680 [ 1183.089020] ? lock_acquire+0x1e4/0x540 [ 1183.092985] ? perf_poll+0x15b/0x310 [ 1183.096687] ? zap_class+0x740/0x740 [ 1183.100400] ? perf_poll+0x1b6/0x310 [ 1183.104100] ? lock_downgrade+0x8f0/0x8f0 [ 1183.108234] ? lock_acquire+0x1e4/0x540 [ 1183.112196] ? lock_acquire+0x1e4/0x540 [ 1183.116158] ? p9_client_prepare_req.part.9+0x534/0xcd0 [ 1183.121514] __should_failslab+0x124/0x180 [ 1183.125752] should_failslab+0x9/0x14 [ 1183.129557] kmem_cache_alloc_trace+0x4b/0x780 [ 1183.134124] ? kasan_check_write+0x14/0x20 [ 1183.138343] ? do_raw_spin_lock+0xc1/0x200 [ 1183.142565] p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 1183.147763] ? p9_free_req.isra.8+0x140/0x140 [ 1183.152259] ? mutex_unlock+0xd/0x10 [ 1183.155972] ? perf_poll+0x1bb/0x310 [ 1183.159674] ? p9_conn_create+0x730/0x730 [ 1183.163808] ? atomic_fetch_add_unless+0x2c0/0x2c0 [ 1183.168724] ? p9_conn_create+0x730/0x730 [ 1183.172859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1183.178383] p9_client_rpc+0x1bd/0x1400 [ 1183.182344] ? p9_fd_poll+0x1e0/0x2b0 [ 1183.186995] ? p9_conn_create+0x55b/0x730 [ 1183.191149] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1183.196502] ? ksys_dup3+0x690/0x690 [ 1183.200200] ? check_same_owner+0x340/0x340 [ 1183.204505] ? p9_fd_poll+0x2b0/0x2b0 [ 1183.208297] ? kasan_kmalloc+0xc4/0xe0 [ 1183.212172] ? kasan_unpoison_shadow+0x35/0x50 [ 1183.216762] ? p9_fd_show_options+0x1c0/0x1c0 [ 1183.221243] ? __raw_spin_lock_init+0x2d/0x100 [ 1183.225814] p9_client_create+0xd09/0x16c9 [ 1183.230043] ? p9_client_read+0xc60/0xc60 [ 1183.234178] ? lock_acquire+0x1e4/0x540 [ 1183.238147] ? fs_reclaim_acquire+0x20/0x20 [ 1183.242457] ? lock_release+0xa30/0xa30 [ 1183.246415] ? __lockdep_init_map+0x105/0x590 [ 1183.250899] ? kasan_check_write+0x14/0x20 [ 1183.255119] ? __init_rwsem+0x1cc/0x2a0 [ 1183.259442] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1183.264444] ? __kmalloc_track_caller+0x311/0x760 [ 1183.269271] ? save_stack+0xa9/0xd0 [ 1183.272893] ? save_stack+0x43/0xd0 [ 1183.276505] ? kasan_kmalloc+0xc4/0xe0 [ 1183.280375] ? kmem_cache_alloc_trace+0x152/0x780 [ 1183.285206] ? memcpy+0x45/0x50 [ 1183.288472] v9fs_session_init+0x21a/0x1a80 [ 1183.292788] ? rcu_note_context_switch+0x730/0x730 [ 1183.297712] ? do_mount+0x69e/0x1fb0 [ 1183.301417] ? lock_acquire+0x1e4/0x540 [ 1183.305386] ? v9fs_show_options+0x7e0/0x7e0 [ 1183.309784] ? lock_release+0xa30/0xa30 [ 1183.313759] ? check_same_owner+0x340/0x340 [ 1183.318071] ? kasan_unpoison_shadow+0x35/0x50 [ 1183.322638] ? kasan_kmalloc+0xc4/0xe0 [ 1183.326525] ? kmem_cache_alloc_trace+0x318/0x780 [ 1183.331354] ? kasan_unpoison_shadow+0x35/0x50 [ 1183.335923] ? kasan_kmalloc+0xc4/0xe0 [ 1183.339796] v9fs_mount+0x7c/0x900 [ 1183.343323] ? v9fs_drop_inode+0x150/0x150 [ 1183.347543] legacy_get_tree+0x118/0x440 [ 1183.351592] vfs_get_tree+0x1cb/0x5c0 [ 1183.355394] do_mount+0x6c1/0x1fb0 [ 1183.358924] ? check_same_owner+0x340/0x340 [ 1183.363251] ? copy_mount_string+0x40/0x40 [ 1183.367491] ? retint_kernel+0x10/0x10 [ 1183.371369] ? copy_mount_options+0x1e3/0x380 [ 1183.375851] ? write_comp_data+0x70/0x70 [ 1183.379900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1183.385421] ? copy_mount_options+0x285/0x380 [ 1183.389990] ksys_mount+0x12d/0x140 [ 1183.393618] __x64_sys_mount+0xbe/0x150 [ 1183.397595] do_syscall_64+0x1b9/0x820 [ 1183.401472] ? finish_task_switch+0x1d3/0x870 [ 1183.405969] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1183.410884] ? syscall_return_slowpath+0x31d/0x5e0 [ 1183.415814] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1183.420816] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1183.425818] ? perf_trace_sys_enter+0xb10/0xb10 [ 1183.430472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1183.435306] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1183.440480] RIP: 0033:0x455e29 [ 1183.443648] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1183.462845] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1183.470541] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1183.477803] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1183.485077] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1183.492331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1183.499592] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000016 [ 1183.507040] 9pnet: Couldn't grow tag array [ 1183.530188] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1183.584941] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:43 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x4000}) 04:22:43 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfino', 0x3d, r1}, 0x2c}) 04:22:43 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:43 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:43 executing program 4 (fault-call:3 fault-nth:23): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:43 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fp,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:43 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf83b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1183.741554] 9pnet: Insufficient options for proto=fd [ 1183.760206] 9pnet: Could not find request transport: fp [ 1183.773518] FAULT_INJECTION: forcing a failure. [ 1183.773518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1183.785365] CPU: 0 PID: 2059 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1183.793685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1183.803037] Call Trace: [ 1183.805627] dump_stack+0x1c9/0x2b4 [ 1183.809260] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1183.814446] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1183.819983] should_fail.cold.4+0xa/0x11 [ 1183.824059] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1183.829161] ? is_bpf_text_address+0xae/0x170 [ 1183.833648] ? lock_downgrade+0x8f0/0x8f0 [ 1183.837810] ? lock_release+0xa30/0xa30 [ 1183.841782] ? kasan_check_read+0x11/0x20 [ 1183.845928] ? rcu_is_watching+0x8c/0x150 [ 1183.850075] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1183.854744] ? is_bpf_text_address+0xd7/0x170 [ 1183.859234] ? kernel_text_address+0x79/0xf0 [ 1183.863640] ? __kernel_text_address+0xd/0x40 [ 1183.868237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1183.873787] ? should_fail+0x246/0xd86 [ 1183.877679] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1183.882787] __alloc_pages_nodemask+0x36e/0xdb0 [ 1183.887471] ? save_stack+0xa9/0xd0 [ 1183.891096] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1183.896105] ? p9_client_create+0xd09/0x16c9 [ 1183.900511] ? v9fs_mount+0x7c/0x900 [ 1183.904233] ? legacy_get_tree+0x118/0x440 [ 1183.908465] ? vfs_get_tree+0x1cb/0x5c0 [ 1183.912432] ? do_mount+0x6c1/0x1fb0 [ 1183.916170] ? ksys_mount+0x12d/0x140 [ 1183.919965] ? __x64_sys_mount+0xbe/0x150 [ 1183.924113] ? do_syscall_64+0x1b9/0x820 [ 1183.928196] ? lock_acquire+0x1e4/0x540 [ 1183.932164] ? cache_grow_end.part.37+0x95/0x170 [ 1183.936913] ? lock_downgrade+0x8f0/0x8f0 [ 1183.941093] ? check_same_owner+0x340/0x340 [ 1183.945413] cache_grow_begin+0x91/0x710 [ 1183.949564] __kmalloc+0x688/0x760 [ 1183.953093] ? __init_waitqueue_head+0x9e/0x150 [ 1183.957753] ? init_wait_entry+0x1c0/0x1c0 [ 1183.961979] ? p9_fcall_alloc+0x1e/0x90 [ 1183.965966] p9_fcall_alloc+0x1e/0x90 [ 1183.969762] p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 1183.974954] ? p9_free_req.isra.8+0x140/0x140 [ 1183.979445] ? mutex_unlock+0xd/0x10 [ 1183.983157] ? perf_poll+0x1bb/0x310 [ 1183.986861] ? p9_conn_create+0x730/0x730 [ 1183.990998] ? atomic_fetch_add_unless+0x2c0/0x2c0 [ 1183.995929] ? p9_conn_create+0x730/0x730 [ 1184.000071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.005606] p9_client_rpc+0x1bd/0x1400 [ 1184.009830] ? p9_fd_poll+0x1e0/0x2b0 [ 1184.013624] ? p9_conn_create+0x55b/0x730 [ 1184.017763] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1184.023133] ? ksys_dup3+0x690/0x690 [ 1184.026839] ? check_same_owner+0x340/0x340 [ 1184.031152] ? p9_fd_poll+0x2b0/0x2b0 [ 1184.034951] ? kasan_kmalloc+0xc4/0xe0 [ 1184.038837] ? kasan_unpoison_shadow+0x35/0x50 [ 1184.043421] ? p9_fd_show_options+0x1c0/0x1c0 [ 1184.047910] ? __raw_spin_lock_init+0x2d/0x100 [ 1184.052500] p9_client_create+0xd09/0x16c9 [ 1184.056735] ? p9_client_read+0xc60/0xc60 [ 1184.060881] ? lock_acquire+0x1e4/0x540 [ 1184.064846] ? fs_reclaim_acquire+0x20/0x20 [ 1184.069162] ? lock_release+0xa30/0xa30 [ 1184.073127] ? __lockdep_init_map+0x105/0x590 [ 1184.077633] ? kasan_check_write+0x14/0x20 [ 1184.081857] ? __init_rwsem+0x1cc/0x2a0 [ 1184.085830] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1184.090842] ? __kmalloc_track_caller+0x311/0x760 [ 1184.095675] ? save_stack+0xa9/0xd0 [ 1184.099291] ? save_stack+0x43/0xd0 [ 1184.102917] ? kasan_kmalloc+0xc4/0xe0 [ 1184.106797] ? kmem_cache_alloc_trace+0x152/0x780 [ 1184.111630] ? memcpy+0x45/0x50 [ 1184.114906] v9fs_session_init+0x21a/0x1a80 [ 1184.119215] ? rcu_note_context_switch+0x730/0x730 [ 1184.124140] ? do_mount+0x69e/0x1fb0 [ 1184.127852] ? lock_acquire+0x1e4/0x540 [ 1184.131821] ? v9fs_show_options+0x7e0/0x7e0 [ 1184.136233] ? lock_release+0xa30/0xa30 [ 1184.140208] ? check_same_owner+0x340/0x340 [ 1184.144534] ? lock_downgrade+0x8f0/0x8f0 [ 1184.148712] ? kasan_unpoison_shadow+0x35/0x50 [ 1184.153297] ? kasan_kmalloc+0xc4/0xe0 [ 1184.157192] ? kmem_cache_alloc_trace+0x318/0x780 [ 1184.162029] ? kasan_unpoison_shadow+0x35/0x50 [ 1184.166619] ? kasan_kmalloc+0xc4/0xe0 [ 1184.170516] v9fs_mount+0x7c/0x900 [ 1184.174053] ? v9fs_drop_inode+0x150/0x150 [ 1184.178288] legacy_get_tree+0x118/0x440 [ 1184.182346] vfs_get_tree+0x1cb/0x5c0 [ 1184.186141] do_mount+0x6c1/0x1fb0 [ 1184.189670] ? check_same_owner+0x340/0x340 [ 1184.193978] ? lock_release+0xa30/0xa30 [ 1184.197950] ? copy_mount_string+0x40/0x40 [ 1184.202176] ? kasan_kmalloc+0xc4/0xe0 [ 1184.206061] ? kmem_cache_alloc_trace+0x318/0x780 [ 1184.210902] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1184.216433] ? _copy_from_user+0xdf/0x150 [ 1184.220574] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.226115] ? copy_mount_options+0x285/0x380 [ 1184.230605] ksys_mount+0x12d/0x140 [ 1184.234333] __x64_sys_mount+0xbe/0x150 [ 1184.238300] do_syscall_64+0x1b9/0x820 [ 1184.242188] ? finish_task_switch+0x1d3/0x870 [ 1184.246675] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1184.251594] ? syscall_return_slowpath+0x31d/0x5e0 [ 1184.256515] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1184.261535] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1184.266544] ? perf_trace_sys_enter+0xb10/0xb10 [ 1184.271216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1184.276065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1184.281244] RIP: 0033:0x455e29 [ 1184.284443] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1184.303829] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1184.311537] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1184.318794] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1184.326053] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1184.333309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 04:22:44 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1184.340565] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000017 [ 1184.355926] 9pnet: Insufficient options for proto=fd [ 1184.363452] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1184.381859] 9pnet: Insufficient options for proto=fd 04:22:44 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:44 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfpno', 0x3d, r1}, 0x2c}) 04:22:44 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fs,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:44 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1184.455879] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1184.481215] 9pnet: Insufficient options for proto=fd [ 1184.498782] 9pnet: Insufficient options for proto=fd [ 1184.575680] 9pnet: Insufficient options for proto=fd [ 1184.621874] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1184.625310] 9pnet: Could not find request transport: fs 04:22:44 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0xfffffdfd}) 04:22:44 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x700, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:44 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:44 executing program 4 (fault-call:3 fault-nth:24): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:44 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wf%no', 0x3d, r1}, 0x2c}) 04:22:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100006000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:44 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fb,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1184.680560] 9pnet: Could not find request transport: fs [ 1184.764530] 9pnet: Insufficient options for proto=fd [ 1184.773940] FAULT_INJECTION: forcing a failure. [ 1184.773940] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1184.783180] 9pnet: Insufficient options for proto=fd [ 1184.785809] CPU: 1 PID: 2128 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1184.785820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1184.785825] Call Trace: [ 1184.785846] dump_stack+0x1c9/0x2b4 [ 1184.785889] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1184.819980] should_fail.cold.4+0xa/0x11 [ 1184.824044] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1184.829138] ? trace_hardirqs_on+0x10/0x10 [ 1184.833407] ? zap_class+0x740/0x740 [ 1184.837113] ? trace_hardirqs_on+0x10/0x10 [ 1184.841338] ? trace_hardirqs_on+0x10/0x10 [ 1184.845602] ? perf_trace_lock+0xde/0x920 [ 1184.849737] ? lock_release+0xa30/0xa30 [ 1184.853718] ? check_same_owner+0x340/0x340 [ 1184.858030] ? zap_class+0x740/0x740 [ 1184.861734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.867258] ? should_fail+0x246/0xd86 [ 1184.871134] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1184.876222] ? kasan_check_write+0x14/0x20 [ 1184.880447] ? __mutex_lock+0x6c4/0x1680 [ 1184.884508] __alloc_pages_nodemask+0x36e/0xdb0 [ 1184.889164] ? zap_class+0x740/0x740 [ 1184.892868] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1184.897881] ? lock_acquire+0x1e4/0x540 [ 1184.901848] ? lock_acquire+0x1e4/0x540 [ 1184.905809] ? p9_client_prepare_req.part.9+0x534/0xcd0 [ 1184.911159] cache_grow_begin+0x91/0x710 [ 1184.915212] kmem_cache_alloc_trace+0x6a5/0x780 [ 1184.919874] p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 1184.925055] ? p9_free_req.isra.8+0x140/0x140 [ 1184.929554] ? mutex_unlock+0xd/0x10 [ 1184.933253] ? perf_poll+0x1bb/0x310 [ 1184.936954] ? p9_conn_create+0x730/0x730 [ 1184.941089] ? atomic_fetch_add_unless+0x2c0/0x2c0 [ 1184.946009] ? p9_conn_create+0x730/0x730 [ 1184.950147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1184.955703] p9_client_rpc+0x1bd/0x1400 [ 1184.959663] ? p9_fd_poll+0x1e0/0x2b0 [ 1184.963458] ? p9_conn_create+0x55b/0x730 [ 1184.967604] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1184.972969] ? ksys_dup3+0x690/0x690 [ 1184.976681] ? check_same_owner+0x340/0x340 [ 1184.981011] ? p9_fd_poll+0x2b0/0x2b0 [ 1184.984804] ? kasan_kmalloc+0xc4/0xe0 [ 1184.988681] ? kasan_unpoison_shadow+0x35/0x50 [ 1184.993253] ? p9_fd_show_options+0x1c0/0x1c0 [ 1184.997739] ? __raw_spin_lock_init+0x2d/0x100 [ 1185.002315] p9_client_create+0xd09/0x16c9 [ 1185.006545] ? p9_client_read+0xc60/0xc60 [ 1185.010685] ? lock_acquire+0x1e4/0x540 [ 1185.014656] ? fs_reclaim_acquire+0x20/0x20 [ 1185.018966] ? lock_release+0xa30/0xa30 [ 1185.022925] ? __lockdep_init_map+0x105/0x590 [ 1185.027414] ? kasan_check_write+0x14/0x20 [ 1185.031635] ? __init_rwsem+0x1cc/0x2a0 [ 1185.035594] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1185.040600] ? __kmalloc_track_caller+0x311/0x760 [ 1185.045429] ? save_stack+0xa9/0xd0 [ 1185.049043] ? save_stack+0x43/0xd0 [ 1185.052654] ? kasan_kmalloc+0xc4/0xe0 [ 1185.056537] ? kmem_cache_alloc_trace+0x152/0x780 [ 1185.061382] ? memcpy+0x45/0x50 [ 1185.064655] v9fs_session_init+0x21a/0x1a80 [ 1185.068961] ? rcu_note_context_switch+0x730/0x730 [ 1185.073877] ? do_mount+0x69e/0x1fb0 [ 1185.077582] ? lock_acquire+0x1e4/0x540 [ 1185.081561] ? v9fs_show_options+0x7e0/0x7e0 [ 1185.085957] ? lock_release+0xa30/0xa30 [ 1185.089929] ? check_same_owner+0x340/0x340 [ 1185.094257] ? kasan_unpoison_shadow+0x35/0x50 [ 1185.098841] ? kasan_kmalloc+0xc4/0xe0 [ 1185.102720] ? kmem_cache_alloc_trace+0x318/0x780 [ 1185.107568] ? kasan_unpoison_shadow+0x35/0x50 [ 1185.112137] ? kasan_kmalloc+0xc4/0xe0 [ 1185.116014] v9fs_mount+0x7c/0x900 [ 1185.119544] ? v9fs_drop_inode+0x150/0x150 [ 1185.123776] legacy_get_tree+0x118/0x440 [ 1185.127845] vfs_get_tree+0x1cb/0x5c0 [ 1185.131630] do_mount+0x6c1/0x1fb0 [ 1185.135156] ? kasan_check_write+0x14/0x20 [ 1185.139377] ? copy_mount_string+0x40/0x40 [ 1185.143599] ? kasan_kmalloc+0xc4/0xe0 [ 1185.147489] ? kmem_cache_alloc_trace+0x318/0x780 [ 1185.152335] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1185.157863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1185.163387] ? copy_mount_options+0x285/0x380 [ 1185.167871] ksys_mount+0x12d/0x140 [ 1185.171483] __x64_sys_mount+0xbe/0x150 [ 1185.175467] do_syscall_64+0x1b9/0x820 [ 1185.179339] ? finish_task_switch+0x1d3/0x870 [ 1185.183836] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1185.189935] ? syscall_return_slowpath+0x31d/0x5e0 [ 1185.194875] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1185.199890] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1185.204893] ? perf_trace_sys_enter+0xb10/0xb10 [ 1185.209549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1185.214384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.220003] RIP: 0033:0x455e29 [ 1185.223188] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1185.242406] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1185.250099] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1185.257362] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 04:22:45 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="397002", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:45 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf73b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1185.264641] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1185.271896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1185.279152] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000018 [ 1185.288936] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1185.289039] 9pnet: Insufficient options for proto=fd [ 1185.303656] 9pnet: Could not find request transport: fb 04:22:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1185.351461] 9pnet: Insufficient options for proto=fd 04:22:45 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fg,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:45 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfDno', 0x3d, r1}, 0x2c}) 04:22:45 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1185.383401] 9pnet: Insufficient options for proto=fd 04:22:45 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="3970f6", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:45 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x97ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1185.434521] 9pnet: Could not find request transport: fg [ 1185.450495] 9pnet: Insufficient options for proto=fd [ 1185.456147] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1185.522767] 9pnet: Insufficient options for proto=fd [ 1185.540878] 9pnet: Insufficient options for proto=fd 04:22:45 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0xfdfdffff00000000}) 04:22:45 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)="39707f", 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:45 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fw,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:45 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfbno', 0x3d, r1}, 0x2c}) 04:22:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:45 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:45 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffffe4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:45 executing program 4 (fault-call:3 fault-nth:25): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1185.809150] 9pnet: Insufficient options for proto=fd [ 1185.810250] 9pnet: Could not find request transport: fw [ 1185.815762] FAULT_INJECTION: forcing a failure. [ 1185.815762] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.831196] CPU: 0 PID: 2198 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1185.839519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1185.848873] Call Trace: [ 1185.851508] dump_stack+0x1c9/0x2b4 [ 1185.855177] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1185.860364] ? __kernel_text_address+0xd/0x40 [ 1185.864852] ? unwind_get_return_address+0x61/0xa0 [ 1185.869783] should_fail.cold.4+0xa/0x11 [ 1185.873841] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1185.878943] ? zap_class+0x740/0x740 [ 1185.882665] ? kasan_kmalloc+0xc4/0xe0 [ 1185.886550] ? p9_client_prepare_req.part.9+0x5f2/0xcd0 [ 1185.891913] ? p9_client_rpc+0x1bd/0x1400 [ 1185.896054] ? p9_client_create+0xd09/0x16c9 [ 1185.900459] ? v9fs_mount+0x7c/0x900 [ 1185.904169] ? legacy_get_tree+0x118/0x440 [ 1185.908409] ? vfs_get_tree+0x1cb/0x5c0 [ 1185.912639] ? ksys_mount+0x12d/0x140 [ 1185.916431] ? __x64_sys_mount+0xbe/0x150 [ 1185.920573] ? do_syscall_64+0x1b9/0x820 [ 1185.924630] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1185.930007] ? lock_acquire+0x1e4/0x540 [ 1185.933991] ? cache_grow_end.part.37+0x95/0x170 [ 1185.938761] ? lock_downgrade+0x8f0/0x8f0 [ 1185.942927] ? check_same_owner+0x340/0x340 [ 1185.947282] ? p9_client_prepare_req.part.9+0x707/0xcd0 [ 1185.952651] ? rcu_note_context_switch+0x730/0x730 [ 1185.957594] ? kasan_unpoison_shadow+0x35/0x50 [ 1185.962186] __should_failslab+0x124/0x180 [ 1185.966416] should_failslab+0x9/0x14 [ 1185.970210] kmem_cache_alloc_trace+0x2cb/0x780 [ 1185.974895] p9_client_prepare_req.part.9+0x82a/0xcd0 [ 1185.980092] ? p9_free_req.isra.8+0x140/0x140 [ 1185.984582] ? mutex_unlock+0xd/0x10 [ 1185.988286] ? perf_poll+0x1bb/0x310 [ 1185.992021] ? p9_conn_create+0x730/0x730 [ 1185.996168] ? atomic_fetch_add_unless+0x2c0/0x2c0 [ 1186.001103] ? p9_conn_create+0x730/0x730 [ 1186.005253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.010791] p9_client_rpc+0x1bd/0x1400 [ 1186.014767] ? p9_fd_poll+0x1e0/0x2b0 [ 1186.018574] ? p9_conn_create+0x55b/0x730 [ 1186.022718] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1186.028083] ? ksys_dup3+0x690/0x690 [ 1186.031788] ? check_same_owner+0x340/0x340 [ 1186.036123] ? p9_fd_poll+0x2b0/0x2b0 [ 1186.039933] ? kasan_kmalloc+0xc4/0xe0 [ 1186.043821] ? kasan_unpoison_shadow+0x35/0x50 [ 1186.048416] ? p9_fd_show_options+0x1c0/0x1c0 [ 1186.052949] ? __raw_spin_lock_init+0x2d/0x100 [ 1186.057549] p9_client_create+0xd09/0x16c9 [ 1186.061790] ? p9_client_read+0xc60/0xc60 [ 1186.066296] ? lock_acquire+0x1e4/0x540 [ 1186.070264] ? fs_reclaim_acquire+0x20/0x20 [ 1186.074582] ? lock_release+0xa30/0xa30 [ 1186.078565] ? __lockdep_init_map+0x105/0x590 [ 1186.083063] ? kasan_check_write+0x14/0x20 [ 1186.087288] ? __init_rwsem+0x1cc/0x2a0 [ 1186.091255] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1186.096268] ? __kmalloc_track_caller+0x311/0x760 [ 1186.101101] ? save_stack+0xa9/0xd0 [ 1186.104721] ? save_stack+0x43/0xd0 [ 1186.108340] ? kasan_kmalloc+0xc4/0xe0 [ 1186.112228] ? kmem_cache_alloc_trace+0x152/0x780 [ 1186.117067] ? memcpy+0x45/0x50 [ 1186.120347] v9fs_session_init+0x21a/0x1a80 [ 1186.124659] ? rcu_note_context_switch+0x730/0x730 [ 1186.129579] ? do_mount+0x69e/0x1fb0 [ 1186.133304] ? lock_acquire+0x1e4/0x540 [ 1186.137272] ? v9fs_show_options+0x7e0/0x7e0 [ 1186.141685] ? lock_release+0xa30/0xa30 [ 1186.145654] ? check_same_owner+0x340/0x340 [ 1186.149973] ? kasan_unpoison_shadow+0x35/0x50 [ 1186.154549] ? kasan_kmalloc+0xc4/0xe0 [ 1186.158434] ? kmem_cache_alloc_trace+0x318/0x780 [ 1186.163268] ? kasan_unpoison_shadow+0x35/0x50 [ 1186.167841] ? kasan_kmalloc+0xc4/0xe0 [ 1186.171725] v9fs_mount+0x7c/0x900 [ 1186.175261] ? v9fs_drop_inode+0x150/0x150 [ 1186.179500] legacy_get_tree+0x118/0x440 [ 1186.183557] vfs_get_tree+0x1cb/0x5c0 [ 1186.187355] do_mount+0x6c1/0x1fb0 [ 1186.190898] ? kasan_check_write+0x14/0x20 [ 1186.195127] ? copy_mount_string+0x40/0x40 [ 1186.199355] ? kasan_kmalloc+0xc4/0xe0 [ 1186.203248] ? kmem_cache_alloc_trace+0x318/0x780 [ 1186.208090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1186.213623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.219153] ? copy_mount_options+0x285/0x380 [ 1186.223641] ksys_mount+0x12d/0x140 [ 1186.227260] __x64_sys_mount+0xbe/0x150 [ 1186.231233] do_syscall_64+0x1b9/0x820 [ 1186.235109] ? finish_task_switch+0x1d3/0x870 [ 1186.239606] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1186.244530] ? syscall_return_slowpath+0x31d/0x5e0 [ 1186.249460] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1186.254478] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1186.259487] ? perf_trace_sys_enter+0xb10/0xb10 [ 1186.264160] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1186.269016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.274199] RIP: 0033:0x455e29 [ 1186.277374] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1186.296750] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1186.304466] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1186.311727] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1186.318987] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1186.326258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1186.333516] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000019 [ 1186.340930] 9pnet: Couldn't grow tag array [ 1186.342995] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:46 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fA,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:46 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfXno', 0x3d, r1}, 0x2c}) 04:22:46 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1186.357330] 9pnet: Insufficient options for proto=fd [ 1186.368504] 9pnet: Insufficient options for proto=fd 04:22:46 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x970, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:46 executing program 4 (fault-call:3 fault-nth:26): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1186.449842] 9pnet: Could not find request transport: fA [ 1186.475686] 9pnet: Insufficient options for proto=fd [ 1186.482545] 9pnet: Could not find request transport: fA 04:22:46 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d0000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:46 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1186.496693] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1186.510512] 9pnet: Insufficient options for proto=fd [ 1186.516173] 9pnet: Insufficient options for proto=fd [ 1186.572480] FAULT_INJECTION: forcing a failure. [ 1186.572480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1186.584344] CPU: 0 PID: 2241 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1186.592674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.602042] Call Trace: [ 1186.604653] dump_stack+0x1c9/0x2b4 [ 1186.608312] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1186.613542] should_fail.cold.4+0xa/0x11 [ 1186.617629] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1186.622781] ? lock_acquire+0x1e4/0x540 [ 1186.626775] ? is_bpf_text_address+0xae/0x170 [ 1186.631300] ? lock_release+0xa30/0xa30 [ 1186.635302] ? kasan_check_read+0x11/0x20 [ 1186.639460] ? rcu_is_watching+0x8c/0x150 [ 1186.643609] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 1186.648283] ? is_bpf_text_address+0xd7/0x170 [ 1186.652779] ? kernel_text_address+0x79/0xf0 [ 1186.657193] ? unwind_get_return_address+0x61/0xa0 [ 1186.662118] ? __save_stack_trace+0x8d/0xf0 [ 1186.666435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.671965] ? should_fail+0x246/0xd86 [ 1186.675853] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1186.680955] __alloc_pages_nodemask+0x36e/0xdb0 [ 1186.685615] ? save_stack+0x43/0xd0 [ 1186.689248] ? kasan_kmalloc+0xc4/0xe0 [ 1186.693124] ? __kmalloc+0x14e/0x760 [ 1186.696848] ? p9_fcall_alloc+0x1e/0x90 [ 1186.700817] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1186.705838] ? vfs_get_tree+0x1cb/0x5c0 [ 1186.709813] ? ksys_mount+0x12d/0x140 [ 1186.713604] ? __x64_sys_mount+0xbe/0x150 [ 1186.717749] ? do_syscall_64+0x1b9/0x820 [ 1186.721801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1186.727185] ? lock_downgrade+0x8f0/0x8f0 [ 1186.731334] ? kasan_check_read+0x11/0x20 [ 1186.735475] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1186.739876] ? check_same_owner+0x340/0x340 [ 1186.744209] cache_grow_begin+0x91/0x710 [ 1186.748282] __kmalloc+0x688/0x760 [ 1186.751819] ? __init_waitqueue_head+0x9e/0x150 [ 1186.756488] ? init_wait_entry+0x1c0/0x1c0 [ 1186.760717] ? p9_fcall_alloc+0x1e/0x90 [ 1186.764687] p9_fcall_alloc+0x1e/0x90 [ 1186.768481] p9_client_prepare_req.part.9+0x754/0xcd0 [ 1186.773687] ? p9_free_req.isra.8+0x140/0x140 [ 1186.778175] ? mutex_unlock+0xd/0x10 [ 1186.781882] ? perf_poll+0x1bb/0x310 [ 1186.785587] ? p9_conn_create+0x730/0x730 [ 1186.789723] ? atomic_fetch_add_unless+0x2c0/0x2c0 [ 1186.794646] ? p9_conn_create+0x730/0x730 [ 1186.798785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1186.804329] p9_client_rpc+0x1bd/0x1400 [ 1186.808294] ? p9_fd_poll+0x1e0/0x2b0 [ 1186.812090] ? p9_conn_create+0x55b/0x730 [ 1186.816325] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1186.821690] ? ksys_dup3+0x690/0x690 [ 1186.825397] ? check_same_owner+0x340/0x340 [ 1186.829721] ? p9_fd_poll+0x2b0/0x2b0 [ 1186.833697] ? kasan_kmalloc+0xc4/0xe0 [ 1186.837584] ? kasan_unpoison_shadow+0x35/0x50 [ 1186.842201] ? p9_fd_show_options+0x1c0/0x1c0 [ 1186.846695] ? __raw_spin_lock_init+0x2d/0x100 [ 1186.851539] p9_client_create+0xd09/0x16c9 [ 1186.855779] ? p9_client_read+0xc60/0xc60 [ 1186.859934] ? lock_acquire+0x1e4/0x540 [ 1186.863900] ? fs_reclaim_acquire+0x20/0x20 [ 1186.868231] ? lock_release+0xa30/0xa30 [ 1186.872199] ? __lockdep_init_map+0x105/0x590 [ 1186.876694] ? kasan_check_write+0x14/0x20 [ 1186.880916] ? __init_rwsem+0x1cc/0x2a0 [ 1186.884880] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1186.889893] ? __kmalloc_track_caller+0x311/0x760 [ 1186.894725] ? save_stack+0xa9/0xd0 [ 1186.898342] ? save_stack+0x43/0xd0 [ 1186.901970] ? kasan_kmalloc+0xc4/0xe0 [ 1186.905847] ? kmem_cache_alloc_trace+0x152/0x780 [ 1186.910682] ? memcpy+0x45/0x50 [ 1186.913960] v9fs_session_init+0x21a/0x1a80 [ 1186.918274] ? rcu_note_context_switch+0x730/0x730 [ 1186.923199] ? do_mount+0x69e/0x1fb0 [ 1186.926925] ? lock_acquire+0x1e4/0x540 [ 1186.930895] ? v9fs_show_options+0x7e0/0x7e0 [ 1186.935314] ? lock_release+0xa30/0xa30 [ 1186.939296] ? check_same_owner+0x340/0x340 [ 1186.943611] ? lock_downgrade+0x8f0/0x8f0 [ 1186.947771] ? kasan_unpoison_shadow+0x35/0x50 [ 1186.952346] ? kasan_kmalloc+0xc4/0xe0 [ 1186.956240] ? kmem_cache_alloc_trace+0x318/0x780 [ 1186.961094] ? kasan_unpoison_shadow+0x35/0x50 [ 1186.965681] ? kasan_kmalloc+0xc4/0xe0 [ 1186.969569] v9fs_mount+0x7c/0x900 [ 1186.973104] ? v9fs_drop_inode+0x150/0x150 [ 1186.977341] legacy_get_tree+0x118/0x440 [ 1186.981406] vfs_get_tree+0x1cb/0x5c0 [ 1186.985206] do_mount+0x6c1/0x1fb0 [ 1186.988750] ? kasan_check_read+0x11/0x20 [ 1186.992902] ? copy_mount_string+0x40/0x40 [ 1186.997161] ? retint_kernel+0x10/0x10 [ 1187.001056] ? copy_mount_options+0x213/0x380 [ 1187.005547] ? write_comp_data+0x1b/0x70 [ 1187.009617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.015156] ? copy_mount_options+0x285/0x380 [ 1187.019650] ksys_mount+0x12d/0x140 [ 1187.023273] __x64_sys_mount+0xbe/0x150 [ 1187.027243] do_syscall_64+0x1b9/0x820 [ 1187.031126] ? finish_task_switch+0x1d3/0x870 [ 1187.035614] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1187.040539] ? syscall_return_slowpath+0x31d/0x5e0 [ 1187.045462] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1187.050472] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1187.055494] ? perf_trace_sys_enter+0xb10/0xb10 [ 1187.060156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1187.065010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.070191] RIP: 0033:0x455e29 [ 1187.073366] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1187.092742] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1187.100455] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1187.107722] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1187.114983] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1187.122247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1187.129511] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000001a 04:22:47 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x100000000000000}) 04:22:47 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fD,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:47 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:47 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:47 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:47 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x25, r1}, 0x2c}) 04:22:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000002", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:47 executing program 4 (fault-call:3 fault-nth:27): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1187.367365] 9pnet: Insufficient options for proto=fd [ 1187.385850] 9pnet: Could not find request transport: fD [ 1187.399272] 9pnet: Insufficient options for proto=fd [ 1187.405163] 9pnet: Insufficient options for proto=fd [ 1187.416184] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1187.429566] FAULT_INJECTION: forcing a failure. [ 1187.429566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1187.441473] CPU: 1 PID: 2279 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1187.449811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1187.459163] Call Trace: [ 1187.461747] dump_stack+0x1c9/0x2b4 [ 1187.465367] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1187.470639] should_fail.cold.4+0xa/0x11 [ 1187.474690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1187.479780] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 1187.484192] ? finish_task_switch+0x1d3/0x870 [ 1187.488851] ? lock_downgrade+0x8f0/0x8f0 [ 1187.492990] ? finish_task_switch+0x18a/0x870 [ 1187.497482] ? kasan_check_read+0x11/0x20 [ 1187.501629] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1187.506026] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 1187.510597] ? compat_start_thread+0x80/0x80 [ 1187.514995] ? trace_hardirqs_on+0xd/0x10 [ 1187.519132] ? _raw_spin_unlock_irq+0x27/0x70 [ 1187.523618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.529162] ? should_fail+0x246/0xd86 [ 1187.533043] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1187.538143] __alloc_pages_nodemask+0x36e/0xdb0 [ 1187.542905] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 1187.547914] ? p9_client_create+0xd09/0x16c9 [ 1187.552315] ? __sched_text_start+0x8/0x8 [ 1187.556476] ? lock_acquire+0x1e4/0x540 [ 1187.560460] ? cache_grow_end.part.37+0x95/0x170 [ 1187.565204] ? lock_downgrade+0x8f0/0x8f0 [ 1187.569346] ? check_same_owner+0x340/0x340 [ 1187.573662] cache_grow_begin+0x91/0x710 [ 1187.577723] __kmalloc+0x688/0x760 [ 1187.581263] ? __init_waitqueue_head+0x9e/0x150 [ 1187.585918] ? init_wait_entry+0x1c0/0x1c0 [ 1187.590151] ? p9_fcall_alloc+0x1e/0x90 [ 1187.594215] p9_fcall_alloc+0x1e/0x90 [ 1187.598010] p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 1187.603195] ? p9_free_req.isra.8+0x140/0x140 [ 1187.607678] ? mutex_unlock+0xd/0x10 [ 1187.611377] ? perf_poll+0x1bb/0x310 [ 1187.615091] ? p9_conn_create+0x730/0x730 [ 1187.619238] ? atomic_fetch_add_unless+0x2c0/0x2c0 [ 1187.624170] ? p9_conn_create+0x730/0x730 [ 1187.628304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.633831] p9_client_rpc+0x1bd/0x1400 [ 1187.637791] ? p9_fd_poll+0x1e0/0x2b0 [ 1187.641583] ? p9_conn_create+0x55b/0x730 [ 1187.645718] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1187.651070] ? ksys_dup3+0x690/0x690 [ 1187.654769] ? check_same_owner+0x340/0x340 [ 1187.659081] ? p9_fd_poll+0x2b0/0x2b0 [ 1187.662883] ? kasan_kmalloc+0xc4/0xe0 [ 1187.666761] ? kasan_unpoison_shadow+0x35/0x50 [ 1187.671353] ? p9_fd_show_options+0x1c0/0x1c0 [ 1187.675839] ? __raw_spin_lock_init+0x2d/0x100 [ 1187.680419] p9_client_create+0xd09/0x16c9 [ 1187.684649] ? p9_client_read+0xc60/0xc60 [ 1187.688826] ? lock_acquire+0x1e4/0x540 [ 1187.692798] ? fs_reclaim_acquire+0x20/0x20 [ 1187.697211] ? lock_release+0xa30/0xa30 [ 1187.701174] ? __lockdep_init_map+0x105/0x590 [ 1187.705745] ? kasan_check_write+0x14/0x20 [ 1187.709963] ? __init_rwsem+0x1cc/0x2a0 [ 1187.713926] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1187.718947] ? __kmalloc_track_caller+0x311/0x760 [ 1187.723778] ? save_stack+0xa9/0xd0 [ 1187.727402] ? save_stack+0x43/0xd0 [ 1187.731021] ? kasan_kmalloc+0xc4/0xe0 [ 1187.734904] ? kmem_cache_alloc_trace+0x152/0x780 [ 1187.739735] ? memcpy+0x45/0x50 [ 1187.743008] v9fs_session_init+0x21a/0x1a80 [ 1187.747483] ? rcu_note_context_switch+0x730/0x730 [ 1187.752589] ? do_mount+0x69e/0x1fb0 [ 1187.756432] ? lock_acquire+0x1e4/0x540 [ 1187.760396] ? v9fs_show_options+0x7e0/0x7e0 [ 1187.764795] ? lock_release+0xa30/0xa30 [ 1187.768773] ? check_same_owner+0x340/0x340 [ 1187.773194] ? kasan_unpoison_shadow+0x35/0x50 [ 1187.777766] ? kasan_kmalloc+0xc4/0xe0 [ 1187.781646] ? kmem_cache_alloc_trace+0x318/0x780 [ 1187.786479] ? kasan_unpoison_shadow+0x35/0x50 [ 1187.791050] ? kasan_kmalloc+0xc4/0xe0 [ 1187.794928] v9fs_mount+0x7c/0x900 [ 1187.798466] ? v9fs_drop_inode+0x150/0x150 [ 1187.802691] legacy_get_tree+0x118/0x440 [ 1187.806741] vfs_get_tree+0x1cb/0x5c0 [ 1187.810537] do_mount+0x6c1/0x1fb0 [ 1187.814064] ? kasan_check_write+0x14/0x20 [ 1187.818286] ? copy_mount_string+0x40/0x40 [ 1187.822510] ? retint_kernel+0x10/0x10 [ 1187.826390] ? copy_mount_options+0x1f0/0x380 [ 1187.830873] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 1187.835713] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1187.841239] ? copy_mount_options+0x285/0x380 [ 1187.845723] ksys_mount+0x12d/0x140 [ 1187.849336] __x64_sys_mount+0xbe/0x150 [ 1187.853297] do_syscall_64+0x1b9/0x820 [ 1187.857171] ? finish_task_switch+0x1d3/0x870 [ 1187.861655] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1187.866572] ? syscall_return_slowpath+0x31d/0x5e0 [ 1187.871490] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1187.876503] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1187.881538] ? perf_trace_sys_enter+0xb10/0xb10 [ 1187.886200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1187.891038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1187.896214] RIP: 0033:0x455e29 [ 1187.899386] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:22:47 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x1000000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1187.918592] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1187.926288] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1187.933547] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1187.941336] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1187.948603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1187.955859] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000001b 04:22:48 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bf6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:48 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2d}) 04:22:48 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fo,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1188.051659] 9pnet: Insufficient options for proto=fd 04:22:48 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x20000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:48 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdf1e0200}}) [ 1188.074953] 9pnet: Insufficient options for proto=fd [ 1188.084588] 9pnet: Could not find request transport: fo [ 1188.096175] 9pnet: Insufficient options for proto=fd 04:22:48 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x4000000000000000}) 04:22:48 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fl,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:48 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:48 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:48 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xedc0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:48 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:48 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1f000000}}) 04:22:48 executing program 4 (fault-call:3 fault-nth:28): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1188.418672] 9pnet: Insufficient options for proto=fd [ 1188.427446] 9pnet: Could not find request transport: fl [ 1188.430106] FAULT_INJECTION: forcing a failure. [ 1188.430106] name failslab, interval 1, probability 0, space 0, times 0 [ 1188.444098] 9pnet: Insufficient options for proto=fd [ 1188.449367] CPU: 1 PID: 2347 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1188.457694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1188.467055] Call Trace: [ 1188.469664] dump_stack+0x1c9/0x2b4 [ 1188.473312] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1188.478524] ? __kernel_text_address+0xd/0x40 [ 1188.483063] ? unwind_get_return_address+0x61/0xa0 [ 1188.488020] should_fail.cold.4+0xa/0x11 [ 1188.492101] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1188.497224] ? save_stack+0xa9/0xd0 [ 1188.500864] ? save_stack+0x43/0xd0 [ 1188.504511] ? kasan_kmalloc+0xc4/0xe0 [ 1188.508411] ? __kmalloc+0x14e/0x760 [ 1188.512138] ? p9_fcall_alloc+0x1e/0x90 [ 1188.516128] ? p9_client_prepare_req.part.9+0x7c9/0xcd0 [ 1188.521572] ? p9_client_rpc+0x1bd/0x1400 [ 1188.525739] ? v9fs_session_init+0x21a/0x1a80 [ 1188.530249] ? v9fs_mount+0x7c/0x900 [ 1188.533977] ? legacy_get_tree+0x118/0x440 [ 1188.538226] ? vfs_get_tree+0x1cb/0x5c0 [ 1188.541439] 9pnet: Could not find request transport: fx [ 1188.542208] ? do_mount+0x6c1/0x1fb0 [ 1188.542223] ? ksys_mount+0x12d/0x140 [ 1188.542239] ? __x64_sys_mount+0xbe/0x150 [ 1188.542255] ? do_syscall_64+0x1b9/0x820 [ 1188.542277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.568691] ? lock_acquire+0x1e4/0x540 [ 1188.572681] ? cache_grow_end.part.37+0x95/0x170 [ 1188.577459] ? lock_downgrade+0x8f0/0x8f0 [ 1188.581630] ? kasan_check_read+0x11/0x20 [ 1188.585790] ? do_raw_spin_unlock+0xa7/0x2f0 [ 1188.590214] ? check_same_owner+0x340/0x340 [ 1188.594541] ? kasan_check_write+0x14/0x20 [ 1188.598768] ? rcu_note_context_switch+0x730/0x730 [ 1188.603688] __should_failslab+0x124/0x180 [ 1188.607911] should_failslab+0x9/0x14 [ 1188.611698] __kmalloc+0x2c8/0x760 [ 1188.616097] ? __init_waitqueue_head+0x9e/0x150 [ 1188.620755] ? init_wait_entry+0x1c0/0x1c0 [ 1188.624982] ? p9_fcall_alloc+0x1e/0x90 [ 1188.628947] p9_fcall_alloc+0x1e/0x90 [ 1188.632738] p9_client_prepare_req.part.9+0x754/0xcd0 [ 1188.637920] ? p9_free_req.isra.8+0x140/0x140 [ 1188.642407] ? mutex_unlock+0xd/0x10 [ 1188.646111] ? perf_poll+0x1bb/0x310 [ 1188.649812] ? p9_conn_create+0x730/0x730 [ 1188.653944] ? atomic_fetch_add_unless+0x2c0/0x2c0 [ 1188.658860] ? p9_conn_create+0x730/0x730 [ 1188.662998] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.668528] p9_client_rpc+0x1bd/0x1400 [ 1188.672492] ? p9_fd_poll+0x1e0/0x2b0 [ 1188.676286] ? p9_conn_create+0x55b/0x730 [ 1188.680438] ? p9_client_prepare_req.part.9+0xcd0/0xcd0 [ 1188.685807] ? ksys_dup3+0x690/0x690 [ 1188.689509] ? check_same_owner+0x340/0x340 [ 1188.693817] ? p9_fd_poll+0x2b0/0x2b0 [ 1188.697613] ? kasan_kmalloc+0xc4/0xe0 [ 1188.701501] ? kasan_unpoison_shadow+0x35/0x50 [ 1188.706089] ? p9_fd_show_options+0x1c0/0x1c0 [ 1188.710588] ? __raw_spin_lock_init+0x2d/0x100 [ 1188.715161] p9_client_create+0xd09/0x16c9 [ 1188.719402] ? p9_client_read+0xc60/0xc60 [ 1188.723542] ? lock_acquire+0x1e4/0x540 [ 1188.727506] ? fs_reclaim_acquire+0x20/0x20 [ 1188.731817] ? lock_release+0xa30/0xa30 [ 1188.735777] ? __lockdep_init_map+0x105/0x590 [ 1188.740267] ? kasan_check_write+0x14/0x20 [ 1188.744494] ? __init_rwsem+0x1cc/0x2a0 [ 1188.748464] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1188.753477] ? __kmalloc_track_caller+0x311/0x760 [ 1188.758311] ? save_stack+0xa9/0xd0 [ 1188.761930] ? save_stack+0x43/0xd0 [ 1188.765548] ? kasan_kmalloc+0xc4/0xe0 [ 1188.769420] ? kmem_cache_alloc_trace+0x152/0x780 [ 1188.774250] ? memcpy+0x45/0x50 [ 1188.777522] v9fs_session_init+0x21a/0x1a80 [ 1188.781831] ? rcu_note_context_switch+0x730/0x730 [ 1188.786751] ? do_mount+0x69e/0x1fb0 [ 1188.790460] ? lock_acquire+0x1e4/0x540 [ 1188.794425] ? v9fs_show_options+0x7e0/0x7e0 [ 1188.798836] ? lock_release+0xa30/0xa30 [ 1188.802798] ? check_same_owner+0x340/0x340 [ 1188.807112] ? kasan_unpoison_shadow+0x35/0x50 [ 1188.811680] ? kasan_kmalloc+0xc4/0xe0 [ 1188.815573] ? kmem_cache_alloc_trace+0x318/0x780 [ 1188.820404] ? kasan_unpoison_shadow+0x35/0x50 [ 1188.824978] ? kasan_kmalloc+0xc4/0xe0 [ 1188.828856] v9fs_mount+0x7c/0x900 [ 1188.832391] ? v9fs_drop_inode+0x150/0x150 [ 1188.836614] legacy_get_tree+0x118/0x440 [ 1188.840664] vfs_get_tree+0x1cb/0x5c0 [ 1188.844455] do_mount+0x6c1/0x1fb0 [ 1188.847986] ? kasan_check_write+0x14/0x20 [ 1188.852239] ? copy_mount_string+0x40/0x40 [ 1188.856461] ? kasan_kmalloc+0xc4/0xe0 [ 1188.860348] ? kmem_cache_alloc_trace+0x318/0x780 [ 1188.865180] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1188.870794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1188.876325] ? copy_mount_options+0x285/0x380 [ 1188.880806] ksys_mount+0x12d/0x140 [ 1188.884418] __x64_sys_mount+0xbe/0x150 [ 1188.888383] do_syscall_64+0x1b9/0x820 [ 1188.892262] ? finish_task_switch+0x1d3/0x870 [ 1188.896756] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1188.901672] ? syscall_return_slowpath+0x31d/0x5e0 [ 1188.906588] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1188.911593] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1188.916599] ? perf_trace_sys_enter+0xb10/0xb10 [ 1188.921254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1188.926086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1188.931274] RIP: 0033:0x455e29 [ 1188.934444] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1188.953636] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1188.961427] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 04:22:48 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x3000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:48 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fx,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:48 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:48 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x9000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:49 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x500}}) 04:22:49 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=f\a,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1188.968680] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1188.975935] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1188.983188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 1188.990443] R13: 00000000004c05ca R14: 00000000004d0070 R15: 000000000000001c [ 1188.997863] 9pnet: Couldn't grow tag array [ 1189.003930] xt_check_match: 2 callbacks suppressed [ 1189.003968] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:49 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x8cffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1189.056569] 9pnet: Insufficient options for proto=fd 04:22:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1189.086312] 9pnet: Could not find request transport: f [ 1189.092232] 9pnet: Insufficient options for proto=fd [ 1189.137721] 9pnet: Could not find request transport: f 04:22:49 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x4000}) 04:22:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:49 executing program 4 (fault-call:3 fault-nth:29): pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:49 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21edd}}) 04:22:49 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xedc000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:49 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf5ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:49 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fT,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:49 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x1000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1189.450838] 9pnet: Insufficient options for proto=fd [ 1189.467756] 9pnet: Could not find request transport: fT [ 1189.472934] 9pnet: Insufficient options for proto=fd [ 1189.485036] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:49 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fi,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:49 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x87e00000}}) 04:22:49 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x33c020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:49 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000400", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1189.578814] 9pnet: Insufficient options for proto=fd [ 1189.590476] 9pnet: Could not find request transport: fi 04:22:49 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xffffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:49 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1189.627995] 9pnet: Insufficient options for proto=fd [ 1189.672288] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:50 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0xfffffdfd}) 04:22:50 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x22000000}}) 04:22:50 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fV,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:50 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfc3b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:50 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xfeffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:50 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:50 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1190.482579] 9pnet: Insufficient options for proto=fd 04:22:50 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xffffff7f, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:50 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x8000000}}) [ 1190.508302] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1190.520417] 9pnet: Insufficient options for proto=fd [ 1190.526448] 9pnet: Could not find request transport: fV 04:22:50 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fc,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:50 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x800000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:50 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:50 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xffffff8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:50 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe41e0200}}) [ 1190.659187] 9pnet: Insufficient options for proto=fd [ 1190.669364] 9pnet: Could not find request transport: fc [ 1190.675814] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1190.697111] 9pnet: Insufficient options for proto=fd 04:22:51 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0xfdfdffff00000000}) 04:22:51 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xffffff7f00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000002", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:51 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fq,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:51 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000080}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:51 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7}}) 04:22:51 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x9, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:51 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x300, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1191.562049] 9pnet: Insufficient options for proto=fd [ 1191.569677] 9pnet: Could not find request transport: fq [ 1191.584000] 9pnet: Insufficient options for proto=fd [ 1191.589646] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:51 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3f00000000000000}}) 04:22:51 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2000000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:51 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fu,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:51 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf63b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1191.629391] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:51 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x900, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1191.732501] 9pnet: Could not find request transport: fu [ 1191.738894] 9pnet: Insufficient options for proto=fd [ 1191.776067] 9pnet: Could not find request transport: fu [ 1191.798222] 9pnet: Insufficient options for proto=fd [ 1191.828464] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:52 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x100000000000000}) 04:22:52 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:52 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x70090000}}) 04:22:52 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fR,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:52 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x10, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:52 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1192.595516] 9pnet: Insufficient options for proto=fd 04:22:52 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x300000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1192.616797] 9pnet: Could not find request transport: fR [ 1192.632818] 9pnet: Insufficient options for proto=fd 04:22:52 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:52 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe00}}) 04:22:52 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1192.657571] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:52 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd-', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:52 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bfb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:52 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:52 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2000000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1192.770976] 9pnet: Could not find request transport: fd-rfdno=0x0000000000000013 [ 1192.794332] 9pnet: Insufficient options for proto=fd [ 1192.809583] 9pnet: Insufficient options for proto=fd [ 1192.840584] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:53 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x4000000000000000}) 04:22:53 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4000}}) 04:22:53 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:53 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x900000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:53 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'r.dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:53 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23c03, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000001}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:53 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:53 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'r/dno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1193.613960] 9pnet: Insufficient options for proto=fd [ 1193.626945] 9pnet: Insufficient options for proto=fd [ 1193.644958] 9pnet: Insufficient options for proto=fd 04:22:53 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21ee5}}) 04:22:53 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x7ffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:53 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000011}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:53 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x200000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000000000000000000000000000000000000000007ffff", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1193.747893] 9pnet: Insufficient options for proto=fd [ 1193.767829] 9pnet: Insufficient options for proto=fd [ 1193.817707] 9pnet: Insufficient options for proto=fd 04:22:54 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0xfdfdffff}) 04:22:54 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xf6ffffff, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:54 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfono', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:54 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x500000000000000}}) 04:22:54 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x87e00000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:54 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xedc000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1194.630421] 9pnet: Insufficient options for proto=fd [ 1194.636204] 9pnet: Insufficient options for proto=fd [ 1194.651235] FS-Cache: Duplicate cookie detected [ 1194.656166] FS-Cache: O-cookie c=0000000009d2e420 [p=00000000044b2c18 fl=222 nc=0 na=1] [ 1194.664357] FS-Cache: O-cookie d=00000000c93efa1d n=00000000e203f0b6 [ 1194.670894] FS-Cache: O-key=[10] '34323935383631393438' 04:22:54 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x8cffffff, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:54 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1194.676377] FS-Cache: N-cookie c=00000000e50f9693 [p=00000000044b2c18 fl=2 nc=0 na=1] [ 1194.684394] FS-Cache: N-cookie d=00000000c93efa1d n=0000000001f324e3 [ 1194.690921] FS-Cache: N-key=[10] '34323935383631393438' [ 1194.696501] xt_check_match: 4 callbacks suppressed [ 1194.696520] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1194.721785] 9pnet: Insufficient options for proto=fd 04:22:54 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rflno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:54 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:54 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bf7, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:54 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x600000000000000}}) 04:22:54 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xc0ed0000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000060}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1194.825472] 9pnet: Insufficient options for proto=fd [ 1194.861492] 9pnet: Insufficient options for proto=fd [ 1194.868107] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1194.900718] 9pnet: Insufficient options for proto=fd 04:22:55 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x1000000}) 04:22:55 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfsno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:55 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfeffffff}}) 04:22:55 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x3, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000023800", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:55 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfb3b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:55 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfeffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:55 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x9000000}}) 04:22:55 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x200000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1195.759105] 9pnet: Insufficient options for proto=fd [ 1195.767879] 9pnet: Insufficient options for proto=fd [ 1195.782438] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1195.792629] 9pnet: Insufficient options for proto=fd 04:22:55 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:55 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23c0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:55 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfqno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:55 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1195.912862] 9pnet: Insufficient options for proto=fd 04:22:55 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3000000}}) [ 1195.933027] 9pnet: Insufficient options for proto=fd [ 1195.939408] 9pnet: Insufficient options for proto=fd [ 1195.964482] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1195.984209] 9pnet: Insufficient options for proto=fd 04:22:56 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xff00000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:56 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfffffff6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:56 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x40000000}) 04:22:56 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x6000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:56 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2}}) 04:22:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:56 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfino', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:56 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x100000000000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1196.764888] 9pnet: Insufficient options for proto=fd [ 1196.780648] 9pnet: Insufficient options for proto=fd [ 1196.797212] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1196.809408] 9pnet: Insufficient options for proto=fd 04:22:56 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfgno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:56 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21ee3}}) 04:22:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:56 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x3, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:56 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xe087, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:56 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xfffffff6, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1196.915866] 9pnet: Insufficient options for proto=fd [ 1196.932451] 9pnet: Insufficient options for proto=fd 04:22:57 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rf%no', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:57 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x400000000000000}}) [ 1196.965320] 9pnet: Insufficient options for proto=fd [ 1196.970804] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1197.047804] 9pnet: Insufficient options for proto=fd [ 1197.072817] 9pnet: Insufficient options for proto=fd 04:22:57 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) 04:22:57 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:57 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x9, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:57 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x9, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:57 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfSno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:57 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdd1e0200}}) 04:22:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000040}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1197.824469] 9pnet: Insufficient options for proto=fd [ 1197.835008] 9pnet: Insufficient options for proto=fd [ 1197.854244] 9pnet: Insufficient options for proto=fd 04:22:57 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe91e0200}}) 04:22:57 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1197.865434] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:57 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfQno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:57 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:57 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1197.954701] 9pnet: Insufficient options for proto=fd [ 1197.987376] 9pnet: Insufficient options for proto=fd 04:22:58 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xfeffffff, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1198.018387] 9pnet: Insufficient options for proto=fd [ 1198.051162] 9pnet: Insufficient options for proto=fd [ 1198.069373] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:58 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x1000000}) 04:22:58 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:58 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff00000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:58 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffff7f}}) 04:22:58 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xff000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:58 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfAno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000feffff", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1198.836213] 9pnet: Insufficient options for proto=fd [ 1198.846618] 9pnet: Insufficient options for proto=fd [ 1198.868460] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:22:58 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffff7f00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:58 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x1000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:58 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1198.882842] 9pnet: Insufficient options for proto=fd 04:22:58 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfIno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:58 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe31e0200}}) 04:22:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:59 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x5000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:59 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x10000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1199.030793] 9pnet: Insufficient options for proto=fd [ 1199.033544] 9pnet: Insufficient options for proto=fd [ 1199.063132] 9pnet: Insufficient options for proto=fd [ 1199.068415] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1199.087443] 9pnet: Insufficient options for proto=fd 04:22:59 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x40000000}) 04:22:59 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfeffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:59 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3}}) 04:22:59 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff00000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:22:59 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfVno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:22:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:22:59 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:22:59 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xff00, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1199.897446] 9pnet: Insufficient options for proto=fd [ 1199.904817] 9pnet: Insufficient options for proto=fd [ 1199.917281] 9pnet: Insufficient options for proto=fd 04:22:59 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xa00000000000000}}) 04:22:59 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xfffffffe, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:00 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bf8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1199.940431] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:00 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfbno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:00 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1200.012161] 9pnet: Insufficient options for proto=fd 04:23:00 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0xf6ffffff00000000, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1200.070369] 9pnet: Insufficient options for proto=fd [ 1200.109245] 9pnet: Insufficient options for proto=fd [ 1200.119165] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1200.165319] 9pnet: Insufficient options for proto=fd 04:23:00 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x4000}) 04:23:00 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1000000000000000}}) 04:23:00 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:00 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranQ=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:00 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xc0ed0000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100004000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000007fffff", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:00 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfpno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1200.927270] 9pnet: Insufficient options for proto=fd [ 1200.934725] 9pnet_virtio: no channels available for device (null) [ 1200.935368] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1200.942038] 9pnet: Insufficient options for proto=fd 04:23:01 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3f000000}}) 04:23:01 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranq=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000500", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:01 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfffffe00, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:01 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfkno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1200.977737] 9pnet: Insufficient options for proto=fd 04:23:01 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:01 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1201.022363] 9pnet_virtio: no channels available for device (null) [ 1201.057513] 9pnet: Insufficient options for proto=fd 04:23:01 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x9}}) [ 1201.065672] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1201.096596] 9pnet: Insufficient options for proto=fd [ 1201.111571] 9pnet: Insufficient options for proto=fd 04:23:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:02 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0xfffffdfd}) 04:23:02 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x300, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:02 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trand=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000008}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:02 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfDno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:02 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:02 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xffffff97}}) 04:23:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:02 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe61e020000000000}}) 04:23:02 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:02 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfxno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1201.991629] 9pnet: Insufficient options for proto=fd [ 1201.992877] 9pnet: Insufficient options for proto=fd [ 1201.997784] 9pnet_virtio: no channels available for device (null) [ 1202.017979] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1202.035608] 9pnet: Insufficient options for proto=fd 04:23:02 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1f00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:02 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranx=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:02 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1202.101210] 9pnet: Insufficient options for proto=fd [ 1202.120124] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:02 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf0ffffff00000000}}) 04:23:02 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xedc0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1202.146607] 9pnet: Insufficient options for proto=fd [ 1202.153651] 9pnet_virtio: no channels available for device (null) [ 1202.172668] 9pnet: Insufficient options for proto=fd [ 1202.201807] 9pnet: Insufficient options for proto=fd 04:23:03 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff00000000}) 04:23:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e617400000000000000000000000000000000000000000000000000000007ff", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:03 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xf0ffffff}}) 04:23:03 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rf\ano', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:03 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranI=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:03 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfffffff5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:03 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x100000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:03 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfuno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1203.054440] 9pnet: Insufficient options for proto=fd [ 1203.071635] 9pnet: Insufficient options for proto=fd [ 1203.081536] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1203.095642] 9pnet_virtio: no channels available for device (null) 04:23:03 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:03 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xedc0}}) 04:23:03 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranS=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1203.119879] 9pnet: Insufficient options for proto=fd [ 1203.127643] 9pnet: Insufficient options for proto=fd 04:23:03 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:03 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfTno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:03 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1203.200272] 9pnet_virtio: no channels available for device (null) [ 1203.234401] 9pnet: Insufficient options for proto=fd [ 1203.269274] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:04 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000}) 04:23:04 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfa3b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:04 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x600}}) 04:23:04 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranT=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:04 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfXno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:04 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf6ffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000005", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:04 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21ee7}}) [ 1204.096718] 9pnet: Insufficient options for proto=fd [ 1204.103584] 9pnet_virtio: no channels available for device (null) [ 1204.111177] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1204.124836] 9pnet: Insufficient options for proto=fd [ 1204.131270] 9pnet: Insufficient options for proto=fd 04:23:04 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffff7f, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:04 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff00000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000200", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1204.153884] 9pnet: Insufficient options for proto=fd 04:23:04 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranb=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:04 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfRno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:04 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xedc000000000}}) 04:23:04 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d0000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1204.229981] 9pnet: Insufficient options for proto=fd [ 1204.234416] 9pnet_virtio: no channels available for device (null) [ 1204.248094] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1204.259927] 9pnet: Insufficient options for proto=fd [ 1204.264733] 9pnet: Insufficient options for proto=fd 04:23:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x4000000000000000}) 04:23:05 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xff00, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:05 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfcno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:05 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranR=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:05 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf53b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:05 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x7000000}}) [ 1205.139036] 9pnet: Insufficient options for proto=fd [ 1205.148842] 9pnet_virtio: no channels available for device (null) [ 1205.149802] 9pnet: Insufficient options for proto=fd [ 1205.168228] 9pnet: Insufficient options for proto=fd 04:23:05 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x8cffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:05 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xdb1e020000000000}}) 04:23:05 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trano=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:05 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffff8c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1205.179144] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:05 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfwno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1205.240743] 9pnet_virtio: no channels available for device (null) [ 1205.263341] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:05 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranw=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1205.290569] 9pnet: Insufficient options for proto=fd [ 1205.298362] 9pnet: Insufficient options for proto=fd [ 1205.330692] 9pnet: Insufficient options for proto=fd [ 1205.353789] 9pnet: Insufficient options for proto=fd [ 1205.359391] 9pnet_virtio: no channels available for device (null) 04:23:06 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdfdffff00000000}) 04:23:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:06 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe91e020000000000}}) 04:23:06 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x900000000000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:06 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x25, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:06 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranu=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:06 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1f00, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1206.184588] 9pnet: Insufficient options for proto=fd [ 1206.193214] 9pnet: Insufficient options for proto=fd [ 1206.197774] 9pnet_virtio: no channels available for device (null) [ 1206.211123] 9pnet: Insufficient options for proto=fd 04:23:06 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2d, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:06 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tranV=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:06 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:06 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe71e020000000000}}) 04:23:06 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x900, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1206.235505] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:06 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100006000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1206.286557] 9pnet: Insufficient options for proto=fd [ 1206.301313] 9pnet_virtio: no channels available for device (null) [ 1206.321368] 9pnet: Insufficient options for proto=fd 04:23:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:06 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Ifdno', 0x3d, r1}, 0x2c}) [ 1206.344374] 9pnet: Insufficient options for proto=fd [ 1206.358138] 9pnet_virtio: no channels available for device (null) [ 1206.400114] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1206.418093] 9pnet: Insufficient options for proto=fd [ 1206.438940] 9pnet: Insufficient options for proto=fd 04:23:07 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000000000000}) 04:23:07 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x6}}) 04:23:07 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfeffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:07 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfeffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:07 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'tran%=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:07 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'qfdno', 0x3d, r1}, 0x2c}) 04:23:07 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21ee6}}) [ 1207.233090] 9pnet: Insufficient options for proto=fd [ 1207.240723] 9pnet_virtio: no channels available for device (null) [ 1207.251263] 9pnet: Insufficient options for proto=fd [ 1207.259421] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:07 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trang=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:07 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Rfdno', 0x3d, r1}, 0x2c}) 04:23:07 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xffffffff00000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1207.293531] 9pnet: Insufficient options for proto=fd [ 1207.340396] 9pnet: Insufficient options for proto=fd 04:23:07 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x300000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd01}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:07 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21ee0}}) [ 1207.361101] 9pnet_virtio: no channels available for device (null) [ 1207.377262] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1207.395420] 9pnet: Insufficient options for proto=fd [ 1207.438895] 9pnet: Insufficient options for proto=fd 04:23:08 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4000000000000000}) 04:23:08 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Sfdno', 0x3d, r1}, 0x2c}) 04:23:08 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x10000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:08 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=/d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000003", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:08 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff0}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:08 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xa00}}) 04:23:08 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xe4ffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1208.259380] 9pnet: Insufficient options for proto=fd 04:23:08 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21ee2}}) 04:23:08 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1208.280064] 9pnet: Could not find request transport: /d [ 1208.288962] 9pnet: Insufficient options for proto=fd [ 1208.300682] 9pnet: Insufficient options for proto=fd [ 1208.305974] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1208.325413] 9pnet: Insufficient options for proto=fd 04:23:08 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'bfdno', 0x3d, r1}, 0x2c}) 04:23:08 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=.d,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:08 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x1f000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:08 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21ede}}) 04:23:08 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1208.385583] 9pnet: Could not find request transport: .d [ 1208.389613] 9pnet: Insufficient options for proto=fd [ 1208.414043] 9pnet: Insufficient options for proto=fd [ 1208.428619] 9pnet: Insufficient options for proto=fd [ 1208.436963] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1208.457000] 9pnet: Insufficient options for proto=fd 04:23:09 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdfdffff}) 04:23:09 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:09 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'ufdno', 0x3d, r1}, 0x2c}) 04:23:09 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fV,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:09 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xff00}}) 04:23:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000000600", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:09 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10d000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1209.323516] 9pnet: Insufficient options for proto=fd [ 1209.330424] 9pnet: Insufficient options for proto=fd [ 1209.334351] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1209.336711] 9pnet: Could not find request transport: fV 04:23:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e61740000000000000000000000000000000000000000000000000000003802", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:09 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21edc}}) 04:23:09 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x10, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:09 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Qfdno', 0x3d, r1}, 0x2c}) 04:23:09 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fS,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:09 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ff0000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) [ 1209.370268] 9pnet: Insufficient options for proto=fd 04:23:09 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfdffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1209.440765] 9pnet: Insufficient options for proto=fd [ 1209.453739] 9pnet: Could not find request transport: fS [ 1209.461927] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:09 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe087ffffffff}}) [ 1209.491564] 9pnet: Insufficient options for proto=fd [ 1209.531876] 9pnet: Insufficient options for proto=fd 04:23:10 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}) 04:23:10 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fu,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:10 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Tfdno', 0x3d, r1}, 0x2c}) 04:23:10 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfffffffe, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:10 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfd3b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:10 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xe21e0200}}) [ 1210.368906] 9pnet: Insufficient options for proto=fd [ 1210.370256] 9pnet: Could not find request transport: fu [ 1210.388555] 9pnet: Insufficient options for proto=fd [ 1210.402504] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:10 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Vfdno', 0x3d, r1}, 0x2c}) 04:23:10 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x700}}) 04:23:10 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x3000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:10 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fw,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1210.415890] 9pnet: Insufficient options for proto=fd [ 1210.453761] 9pnet: Insufficient options for proto=fd 04:23:10 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x7009, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:10 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:10 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x3f00}}) [ 1210.480393] 9pnet: Could not find request transport: fw [ 1210.494747] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1210.507593] 9pnet: Could not find request transport: fw [ 1210.532428] 9pnet: Insufficient options for proto=fd [ 1210.565181] 9pnet: Insufficient options for proto=fd 04:23:11 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40000000}) 04:23:11 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'sfdno', 0x3d, r1}, 0x2c}) 04:23:11 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:11 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fT,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000080}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:11 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x10}}) 04:23:11 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bf5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:11 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x21edb}}) 04:23:11 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fI,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:11 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Dfdno', 0x3d, r1}, 0x2c}) 04:23:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) [ 1211.384101] 9pnet: Could not find request transport: fT [ 1211.390861] 9pnet: Insufficient options for proto=fd [ 1211.398969] 9pnet: Insufficient options for proto=fd [ 1211.407902] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1211.422934] 9pnet: Insufficient options for proto=fd 04:23:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:11 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf5ffffff00000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:11 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4}}) 04:23:11 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'dfdno', 0x3d, r1}, 0x2c}) [ 1211.460812] 9pnet: Could not find request transport: fI [ 1211.471514] 9pnet: Insufficient options for proto=fd [ 1211.489604] 9pnet: Could not find request transport: fI [ 1211.498439] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1211.536337] 9pnet: Insufficient options for proto=fd [ 1211.547630] 9pnet: Insufficient options for proto=fd [ 1211.554996] 9pnet: Insufficient options for proto=fd 04:23:12 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4000}) 04:23:12 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fQ,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:12 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'gfdno', 0x3d, r1}, 0x2c}) 04:23:12 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xfe3b020000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:12 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x2000000}}) 04:23:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:12 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:12 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'Afdno', 0x3d, r1}, 0x2c}) 04:23:12 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x300}}) 04:23:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:12 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fR,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:12 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0xf73b0200, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1212.420593] 9pnet: Insufficient options for proto=fd [ 1212.426426] 9pnet: Insufficient options for proto=fd [ 1212.434604] 9pnet: Could not find request transport: fQ [ 1212.441236] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1212.454847] 9pnet: Insufficient options for proto=fd [ 1212.505403] 9pnet: Insufficient options for proto=fd [ 1212.514467] 9pnet: Insufficient options for proto=fd [ 1212.518553] 9pnet: Insufficient options for proto=fd [ 1212.541183] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:12 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x9000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:12 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w.dno', 0x3d, r1}, 0x2c}) [ 1212.546673] 9pnet: Could not find request transport: fR [ 1212.599479] 9pnet: Insufficient options for proto=fd [ 1212.608035] 9pnet: Could not find request transport: fR [ 1212.612248] 9pnet: Insufficient options for proto=fd [ 1212.636127] 9pnet: Insufficient options for proto=fd 04:23:13 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffdfd}) 04:23:13 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x4000000000000}}) 04:23:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:13 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fb,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:13 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'w/dno', 0x3d, r1}, 0x2c}) 04:23:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 04:23:13 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x6, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) 04:23:13 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="397003", 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback=0x7f000001, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x84, 0x20}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}]}]}, 0x2b0) 04:23:13 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fg,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1213.449584] 9pnet: Could not find request transport: fb [ 1213.457211] 9pnet: Insufficient options for proto=fd [ 1213.464403] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING [ 1213.491444] 9pnet: Insufficient options for proto=fd 04:23:13 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0x1000000000}}) 04:23:13 executing program 5: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) madvise(&(0x7f0000908000/0x4000)=nil, 0x4000, 0x0) read(0xffffffffffffffff, &(0x7f000060df9c)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfXno', 0x3d, r1}, 0x2c}) 04:23:13 executing program 6: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u', 0x2c}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) read(r2, &(0x7f000060df9c)=""/100, 0x64) write$P9_RSTATu(r1, &(0x7f0000001a40)={0x79, 0x7d, 0x1, {{0x0, 0x58, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10, 'version=9p2000.u', 0xd, 'wlan1vboxnet0', 0x3, '9p\x00', 0x5, 'rfdno'}, 0xc, 'vboxnet1(}%$'}}, 0x79) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], 0xfdffffff}}) 04:23:13 executing program 3: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x23bff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@aname={'aname', 0x3d, 'wfdno'}, 0x2c}]}}) [ 1213.497962] 9pnet: Insufficient options for proto=fd [ 1213.514912] 9pnet: Could not find request transport: fg [ 1213.517777] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 04:23:13 executing program 4: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) 04:23:13 executing program 2: pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fs,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) [ 1213.613999] 9pnet: Insufficient options for proto=fd [ 1213.623764] 9pnet: Insufficient options for proto=fd [ 1213.635636] 9pnet: Could not find request transport: fs [ 1213.641411] 9pnet: Insufficient options for proto=fd [ 1214.426071] ------------[ cut here ]------------ [ 1214.430899] ODEBUG: free active (active state 0) object type: work_struct hint: p9_read_work+0x0/0x1060 [ 1214.440632] WARNING: CPU: 0 PID: 3966 at lib/debugobjects.c:329 debug_print_object+0x16a/0x210 [ 1214.449393] Kernel panic - not syncing: panic_on_warn set ... [ 1214.449393] [ 1214.456748] CPU: 0 PID: 3966 Comm: syz-executor4 Not tainted 4.18.0-rc3-next-20180706+ #1 [ 1214.465062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1214.474398] Call Trace: [ 1214.476992] dump_stack+0x1c9/0x2b4 [ 1214.480631] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1214.486173] panic+0x238/0x4e7 [ 1214.489356] ? add_taint.cold.5+0x16/0x16 [ 1214.493495] ? __warn.cold.8+0x148/0x1ba [ 1214.497548] ? debug_print_object+0x16a/0x210 [ 1214.502038] __warn.cold.8+0x163/0x1ba [ 1214.505923] ? debug_print_object+0x16a/0x210 [ 1214.510413] report_bug+0x252/0x2d0 [ 1214.514033] do_error_trap+0x1fc/0x4d0 [ 1214.517924] ? math_error+0x3e0/0x3e0 [ 1214.521722] ? fork_usermode_blob+0x1b0/0x1b0 [ 1214.526221] ? vprintk_default+0x28/0x30 [ 1214.530281] ? vprintk_func+0x81/0xe7 [ 1214.534513] ? printk+0xa7/0xcf [ 1214.537784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1214.542616] do_invalid_op+0x1b/0x20 [ 1214.546322] invalid_op+0x14/0x20 [ 1214.549766] RIP: 0010:debug_print_object+0x16a/0x210 [ 1214.554848] Code: 1a 88 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 92 00 00 00 48 8b 14 dd e0 8d 1a 88 4c 89 f6 48 c7 c7 80 83 1a 88 e8 76 c9 e3 fd <0f> 0b 83 05 f9 e9 3b 06 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f [ 1214.575536] RSP: 0018:ffff88015efe7388 EFLAGS: 00010082 [ 1214.580897] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc9001268b000 [ 1214.588153] RDX: 0000000000008c92 RSI: ffffffff81634381 RDI: 0000000000000001 [ 1214.595410] RBP: ffff88015efe73c8 R08: ffff88019d28e740 R09: ffffed003b5c3ec2 [ 1214.602844] R10: ffffed003b5c3ec2 R11: ffff8801dae1f617 R12: 0000000000000001 [ 1214.610101] R13: ffffffff88f63c00 R14: ffffffff881a8820 R15: ffffffff814ec5a0 [ 1214.617379] ? fork_usermode_blob+0x1b0/0x1b0 [ 1214.621886] ? vprintk_func+0x81/0xe7 [ 1214.625677] ? debug_print_object+0x16a/0x210 [ 1214.630162] debug_check_no_obj_freed+0x3b2/0x595 [ 1214.635004] ? lock_downgrade+0x8f0/0x8f0 [ 1214.639158] ? free_obj_work+0xbb0/0xbb0 [ 1214.643226] ? kasan_check_write+0x14/0x20 [ 1214.647467] kfree+0xc7/0x260 [ 1214.650566] p9_fd_close+0x416/0x5b0 [ 1214.654278] ? p9_poll_workfn+0x6d0/0x6d0 [ 1214.658414] ? p9_fd_show_options+0x1c0/0x1c0 [ 1214.662908] ? __raw_spin_lock_init+0x2d/0x100 [ 1214.667478] p9_client_create+0xac2/0x16c9 [ 1214.671713] ? p9_client_read+0xc60/0xc60 [ 1214.675858] ? lock_acquire+0x1e4/0x540 [ 1214.679817] ? fs_reclaim_acquire+0x20/0x20 [ 1214.684140] ? lock_release+0xa30/0xa30 [ 1214.688109] ? __lockdep_init_map+0x105/0x590 [ 1214.692596] ? kasan_check_write+0x14/0x20 [ 1214.696827] ? __init_rwsem+0x1cc/0x2a0 [ 1214.700785] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 1214.705788] ? __kmalloc_track_caller+0x311/0x760 [ 1214.710638] ? save_stack+0xa9/0xd0 [ 1214.714254] ? save_stack+0x43/0xd0 [ 1214.717861] ? kasan_kmalloc+0xc4/0xe0 [ 1214.721728] ? kmem_cache_alloc_trace+0x152/0x780 [ 1214.726556] ? memcpy+0x45/0x50 [ 1214.729827] v9fs_session_init+0x21a/0x1a80 [ 1214.734133] ? rcu_note_context_switch+0x730/0x730 [ 1214.739059] ? do_mount+0x69e/0x1fb0 [ 1214.742765] ? lock_acquire+0x1e4/0x540 [ 1214.746726] ? v9fs_show_options+0x7e0/0x7e0 [ 1214.751118] ? lock_release+0xa30/0xa30 [ 1214.755078] ? check_same_owner+0x340/0x340 [ 1214.759391] ? kasan_unpoison_shadow+0x35/0x50 [ 1214.763968] ? kasan_kmalloc+0xc4/0xe0 [ 1214.767843] ? kmem_cache_alloc_trace+0x318/0x780 [ 1214.772669] ? kasan_unpoison_shadow+0x35/0x50 [ 1214.777307] ? kasan_kmalloc+0xc4/0xe0 [ 1214.781185] v9fs_mount+0x7c/0x900 [ 1214.784713] ? v9fs_drop_inode+0x150/0x150 [ 1214.788943] legacy_get_tree+0x118/0x440 [ 1214.792992] vfs_get_tree+0x1cb/0x5c0 [ 1214.796782] do_mount+0x6c1/0x1fb0 [ 1214.801437] ? check_same_owner+0x340/0x340 [ 1214.805751] ? lock_release+0xa30/0xa30 [ 1214.809712] ? copy_mount_string+0x40/0x40 [ 1214.813938] ? kasan_kmalloc+0xc4/0xe0 [ 1214.818349] ? kmem_cache_alloc_trace+0x318/0x780 [ 1214.823193] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1214.828727] ? _copy_from_user+0xdf/0x150 [ 1214.832865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1214.838404] ? copy_mount_options+0x285/0x380 [ 1214.842888] ksys_mount+0x12d/0x140 [ 1214.846686] __x64_sys_mount+0xbe/0x150 [ 1214.850650] do_syscall_64+0x1b9/0x820 [ 1214.854524] ? finish_task_switch+0x1d3/0x870 [ 1214.859002] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1214.863929] ? syscall_return_slowpath+0x31d/0x5e0 [ 1214.868842] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1214.874202] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1214.879204] ? perf_trace_sys_enter+0xb10/0xb10 [ 1214.883859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1214.888693] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1214.893876] RIP: 0033:0x455e29 [ 1214.897046] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1214.916628] RSP: 002b:00007f7fba067c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1214.924337] RAX: ffffffffffffffda RBX: 00007f7fba0686d4 RCX: 0000000000455e29 [ 1214.931597] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000000000000 [ 1214.938865] RBP: 000000000072bea0 R08: 0000000020000400 R09: 0000000000000000 [ 1214.946119] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1214.953377] R13: 00000000004c05ca R14: 00000000004d0070 R15: 0000000000000000 [ 1216.037868] Shutting down cpus with NMI [ 1216.042298] Dumping ftrace buffer: [ 1216.045822] (ftrace buffer empty) [ 1216.049516] Kernel Offset: disabled [ 1216.053137] Rebooting in 86400 seconds..