107) preadv(r1, &(0x7f00000017c0), 0x199, 0xf0ff7f) 23:10:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fdatasync(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000600)="5500000018007f5300fe01b2403b7bbb0a60000000a84302910000003900040035000c00020000000d000500000000000000c78b800823090000009d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x55}], 0x1}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, &(0x7f0000000480)=""/136, 0x88}, 0xbf}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)=""/225, 0xe1}, {&(0x7f00000007c0)=""/4, 0x4}, {&(0x7f0000000800)}], 0x4, &(0x7f00000008c0)=""/91, 0x5b}, 0x3}], 0x2, 0x0, 0x0) r6 = accept4(r3, 0x0, &(0x7f0000000100), 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000800), 0x0) r7 = fcntl$getown(r3, 0x9) sched_rr_get_interval(r7, &(0x7f0000000300)) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) setxattr$trusted_overlay_redirect(&(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000440)='\x00', 0x1, 0x3) r8 = dup2(r3, r5) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000000c0)={0x9, 0x3, 0x2, @empty, 'hsr0\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000680)={{0x2, 0x0, 0x0, 0x3, 0x7}, 0x3, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0x10000, 0x3, 0x55, 0x8}) ioctl$SIOCRSGCAUSE(r8, 0x89e0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, 0x0) [ 213.122198] ? __alloc_pages_slowpath+0x2930/0x2930 [ 213.127237] cache_grow_begin+0x80/0x410 [ 213.131322] __kmalloc+0x6c2/0x7a0 [ 213.134878] ? __lockdep_init_map+0x10c/0x570 [ 213.139387] ? p9_fcall_alloc+0x1d/0x90 [ 213.143379] p9_fcall_alloc+0x1d/0x90 [ 213.147288] p9_client_prepare_req.part.0+0x7b5/0xa90 [ 213.152503] p9_client_rpc+0x170/0x1190 [ 213.156498] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 213.162488] ? sock_poll+0x1c0/0x220 [ 213.166222] ? p9_conn_create+0x3c0/0x4c0 [ 213.170394] ? p9_fd_create+0x245/0x340 [ 213.174393] ? parse_opts.part.0+0x2e0/0x2e0 [ 213.178824] p9_client_create+0x9a3/0x1130 [ 213.183069] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 213.188866] ? __kmalloc_track_caller+0x375/0x790 [ 213.193957] ? __lockdep_init_map+0x10c/0x570 [ 213.198460] ? lockdep_init_map+0x9/0x10 [ 213.202649] ? __raw_spin_lock_init+0x2d/0x100 [ 213.207412] v9fs_session_init+0x1dc/0x1590 [ 213.211891] ? check_preemption_disabled+0x3c/0x250 [ 213.216936] ? v9fs_show_options+0x730/0x730 [ 213.221351] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 213.227468] ? v9fs_mount+0x5e/0x870 [ 213.231204] ? rcu_read_lock_sched_held+0x110/0x130 [ 213.236520] ? kmem_cache_alloc_trace+0x626/0x790 [ 213.241378] ? free_pages+0x46/0x50 [ 213.245200] v9fs_mount+0x7d/0x870 [ 213.248748] mount_fs+0x9d/0x2a7 [ 213.252165] vfs_kern_mount.part.0+0x5e/0x3d0 [ 213.256744] do_mount+0x417/0x27d0 [ 213.260386] ? copy_mount_options+0x5c/0x2f0 [ 213.264791] ? rcu_read_lock_sched_held+0x110/0x130 [ 213.269978] ? copy_mount_string+0x40/0x40 [ 213.274228] ? copy_mount_options+0x1fe/0x2f0 [ 213.279082] SyS_mount+0xab/0x120 [ 213.282540] ? copy_mnt_ns+0x8c0/0x8c0 [ 213.286446] do_syscall_64+0x1eb/0x630 [ 213.290336] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 213.295189] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 213.300370] RIP: 0033:0x458c29 [ 213.303590] RSP: 002b:00007f96a4698c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 213.311295] RAX: ffffffffffffffda RBX: 00007f96a4698c90 RCX: 0000000000458c29 [ 213.318587] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 213.325865] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 213.333235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96a46996d4 [ 213.340509] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000005 23:10:41 executing program 0 (fault-call:3 fault-nth:26): r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:41 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x3, 0x2) accept4$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000000c0)={@remote, @loopback, r2}, 0xc) setsockopt$inet_int(r1, 0xffffffff00000000, 0xc8, &(0x7f0000000000), 0x4) close(r1) 23:10:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) listen(r0, 0x9) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xda19}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={r2, 0x9d, "275345552ed378f939bfc445b4d51bed74a3374ec990db98b3f32ab9785d6e0c40d9ebff5629777712c2d813e6701f81e72d1f3661bcafc0b056d468c21353b25900e57bc6dc97ae2eb20d04dd3a55f9be9bf7ad985798598f919f3b25244813e3a2c5fb437e4eb4d28db63ec9a4ef73ab739d70df288fa22aa394e6901c708f271321209c1022dc5b8f6a82a4f7e77d06261e89cf4a745c2b5f1a9763"}, &(0x7f0000000240)=0xa5) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) listen(r0, 0x0) 23:10:41 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x3ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000010000000000000002000000040000000"], 0x123, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2e) creat(&(0x7f0000000680)='./file0\x00', 0x0) 23:10:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000000)='./file0\x00', 0x1420, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x1, [@remote]}, 0x14) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',w&dno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:10:41 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x2) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x1) recvmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x2e3, 0x0, 0x2b7}, 0x1f) 23:10:41 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x121980, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000300)={0x8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$P9_RRENAME(r0, &(0x7f0000000340)={0x7, 0x15, 0x2}, 0x7) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000240)={0x9, {0x9, 0x8, 0x3, 0xe5, 0x4, 0x1f}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r3, 0x302, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x84, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x20}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x34}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000380)=0x7, 0x8) [ 213.597671] 9pnet: Insufficient options for proto=fd [ 213.637385] 9pnet: Insufficient options for proto=fd 23:10:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') ioctl$TIOCNOTTY(r1, 0x5422) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000240)={0x102, 0x100000, 0x0, 0x0, 0x400000}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r1, 0x0, 0x4, &(0x7f00000000c0)='$-[\x00', 0xffffffffffffffff}, 0x30) 23:10:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x810, 0x0) 23:10:41 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:src_t:s0', 0x20, 'system_u:object_r:crack_exec_t:s0', 0x20, 0x9, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x70) syz_open_pts(r0, 0x82000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r1}}, 0xc) pread64(r0, &(0x7f0000000180)=""/16, 0x10, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x25, "1e4acbc5a1ad534406d81a73d0054b08e70155f96234ebf6d2d3f72fc4854a2c669189ae71"}, &(0x7f0000000200)=0x2d) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x3}, 0x8) accept$inet(r0, 0x0, &(0x7f0000000280)) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f00000002c0)=0x6) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000300)=0x100000000) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000380)=0xf000) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000000400)={r3, r4+30000000}) syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x3f, 0x400) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000480)) write$FUSE_POLL(r0, &(0x7f00000004c0)={0x18, 0x0, 0x5, {0x80}}, 0x18) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000500)=0x9) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ubi_ctrl\x00', 0x20000, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r6, 0x104, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f00000006c0)={0xf, @pix_mp={0x3, 0x3, 0x0, 0x3, 0x9, [{0x20, 0xfffffffffffffffe}, {0x3, 0x6}, {0x4}, {0x7}, {0x73c, 0x1ff}, {0x3, 0xfffffffffffffffc}, {0xe2, 0xb2}, {0x7f, 0x80}], 0x2, 0x98, 0x6, 0x3, 0x3}}) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f00000007c0)={0x1, 0x100000001, 0x0, 0x10001}, 0x10) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffd000/0x2000)=nil) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000840)={0x5, &(0x7f0000000800)=[{0x3, 0x2, 0x1, 0xe4a}, {0xff0, 0x81, 0x9, 0x6}, {0x8000, 0x9, 0x95, 0xe53}, {0x8000, 0x5, 0x3, 0x72d3}, {0x5, 0xffffffffffffbed6, 0x1, 0x5}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xcc, 0x200, {"3810d22c59b0dd361a57367abbecfb8dd953f7c336576ca3e9ac065cdbb64ab3956d399b310f823990194ffc21e68612c1c01067b8120fe79434dd98479d95bb7270acdb88cc1b83400b73b7358332c70368ded189377753d3a64f7c69323b5dfb8e636dda7960d9325ecdb7632d5769eaf9b3b5d0b4c3e04e9ccb1c2b16ded9b93fbd2ca6a46e42d52fb1ce126e1d7d9bca876fa89fcb2b03e8bd1174db9224a30caf8b3dbeed1121266654fd61374d8a082c35"}}, {0x0, "a1fef6b1ee38a57f4757694421c2575aa3b2ac7fcce6b36cc8d68532489b45e32b60b8a49a479a6512f61a1ff63da9a224311439f7fc4f2fd546679f73df06a8195356125decf5327892f4a70241ce41bc0142aace8e2e89cfe2cfb27ccd01af739a6679d61a837dc736098e09aaf4bced6482cfb1046d1397d92275d732403db88f164f3642a1bfaa4382cad476c6c631860ff6e6a9ab23bb32bd997f54d2bd91795685dc69e0f06556fa41540ad79b9776e85090e015c386bcb7bbd4f07efe2bb37380c2d6ffc27cf5377f"}}, &(0x7f0000000a40)=""/162, 0x19a, 0xa2}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000b40)) 23:10:41 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind(r0, &(0x7f0000000200)=@in={0x1d, 0x0, @loopback}, 0x80) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x410000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001500)='/dev/audio\x00', 0x40000, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001540)='/dev/vga_arbiter\x00', 0x40, 0x0) pipe(&(0x7f0000001580)={0xffffffffffffffff}) r6 = fcntl$dupfd(r0, 0x406, r0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/full\x00', 0x10000, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000007200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r9 = openat$vfio(0xffffffffffffff9c, &(0x7f0000007240)='/dev/vfio/vfio\x00', 0x200, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000007280)='./file0\x00', 0x0, 0x2) r11 = syz_open_dev$vbi(&(0x7f00000072c0)='/dev/vbi#\x00', 0x2, 0x2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000007400)={&(0x7f0000000040), 0xc, &(0x7f00000073c0)={&(0x7f0000007300)={0x88, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffb}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r11}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000) 23:10:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mkdir(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000240)={'system_u:object_r:hald_keymap_exec_t:s0', 0x20, 'system_u:object_r:hald_dccm_exec_t:s0', 0x20, 0x1f, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x81) 23:10:42 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x804e20, @multicast2}, 0x8) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r2, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) dup2(r0, r2) shutdown(r2, 0x1) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x14050000000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000005000300c500ce46b0ab2c3b00004bd802d4f3178011f6371990bd86"], &(0x7f0000000080)=0xa) 23:10:42 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x306, 0x4, 0x97fd, 0xa7, 0x7}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x1, 0x30}, 0xc) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffffffffffffffb, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0xfffa) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 23:10:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2272, 0x716000) 23:10:42 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="66643dff3e685c266ca3f31a3077abf6cd6bf2858acc9f30031782539f25cfd4a87e32613ecf0a3e67fd2a6314b481bdaef5836f9733d7dfeaa782481cc20004c3e281c6b6db9a7da8c488f22f092d07886458f08ba07aedb97ffa9d8f372950a932b2d8514b7e8ad8883e82727a6b80caa95c2b93415d1f3dd3e690dba280e872782090e7b8f84f85e973bbc0a119119c2d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) stat(&(0x7f0000000640)='./file0/file0\x00', &(0x7f0000000700)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = syz_open_dev$adsp(&(0x7f0000000680)='/dev/adsp#\x00', 0x200, 0x8000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000780)={0x0, {{0xa, 0x4e20, 0x81, @mcast1, 0xaab9}}, {{0xa, 0x4e20, 0x100000001, @ipv4={[], [], @multicast2}, 0x6}}}, 0x108) r2 = semget$private(0x0, 0x0, 0x200) semtimedop(r2, &(0x7f00000003c0)=[{0x0, 0x6, 0x1800}, {0x0, 0x2, 0x1000}, {0x3, 0xfff, 0x1000}, {0x3, 0x8}, {0x1, 0x8, 0x800}, {0x3, 0x273, 0x1000}], 0x6, &(0x7f0000000400)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000540)=""/193) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x5}}, 0x90) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x2800, 0x0) getsockname$ax25(r3, &(0x7f0000000480)={{0x3, @default}, [@null, @remote, @bcast, @null, @rose, @remote, @bcast, @rose]}, &(0x7f0000000500)=0x48) read$FUSE(r0, &(0x7f0000001000), 0x1000) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x3) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x400, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20100) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:42 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) write$binfmt_aout(r1, &(0x7f0000002ec0)={{0x1cf, 0x8, 0x2, 0x3d1, 0x344, 0x6, 0x21, 0x100000001}, "530f6651fca5b98a4cb4968020fd3aab651c0ca7523666fc6801787d5bafeeec772e89abd507f1f1d6998ea59df573edf9bebff12f289d751b69bf148c10c17b13a593464476698aa7683994f570985db0c3", [[]]}, 0x172) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000640)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50dd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000500)=""/123, 0x7b}], 0x9, &(0x7f0000001680)=""/34, 0x22}, 0x3}, {{&(0x7f00000016c0)=@nl, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)=""/52, 0x34}], 0x1, &(0x7f00000017c0)=""/40, 0x28}, 0x4}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001800)=""/214, 0xd6}, {&(0x7f0000001900)=""/59, 0x3b}, {&(0x7f0000001940)=""/86, 0x56}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/70, 0x46}, {&(0x7f0000001b00)=""/202, 0xca}], 0x6, &(0x7f0000001c80)=""/158, 0x9e}, 0x8001}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001d40)=""/49, 0x31}], 0x1, &(0x7f0000001dc0)=""/4096, 0x1000}, 0xffffffff}], 0x4, 0x40, 0x0) 23:10:42 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x80004, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap='nodevmap'}], [{@subj_role={'subj_role', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@dont_appraise='dont_appraise'}]}}) fstat(r0, &(0x7f0000000180)) open_by_handle_at(r0, &(0x7f0000000200)={0x21, 0xfffffffffffffffc, "04fc50010729b3413748ad795b5102ed1fbd865c8c24992bd0"}, 0x40) r1 = accept$unix(r0, 0x0, &(0x7f0000000240)) ioctl$RTC_UIE_OFF(r0, 0x7004) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xcb, "170c342ddd4143250698aa95d74d1f173ea15273f4cd8ada134132dcc4d71ffaeaab465eab3dbd35649def6f7ce1ebf7525db61d1b49e1dabbba262cb2ddca478cd1c07022fa51b1435293e12e0e66dc6578103fda3677db0749a53df49e737f2fb45db3749ddbe0d7601d98f2e9e3abab831e27ec4c19c34ef65025b6da460daaf45318962966ae503bfee40485cca6c547389cd040f8ec72550d0f677120524dc9e7adee199b08db440f40c6b8e5b5dda1ae73cfb56d99cf96f3c640cdd6f29e6cb73ed8e8ddd48b4b29"}, &(0x7f0000000380)=0xd3) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={r2, 0x1, 0x1, [0x6]}, 0xa) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000400)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000440)={'\x00', {0x2, 0x4e21, @loopback}}) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000480)={0x18, 0x0, {0x4, @random="e09749ad994a", 'vcan0\x00'}}) r4 = shmget(0x1, 0x2000, 0x140, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f00000004c0)=""/4096) write$P9_RLCREATE(r0, &(0x7f00000014c0)={0x18, 0xf, 0x2, {{0x0, 0x1, 0x3}, 0x10000}}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001500)=0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001540)={r2, @in6={{0xa, 0x4e20, 0x6a, @mcast1, 0x5}}, 0xfffffffffffffff7, 0x7f}, &(0x7f0000001600)=0x90) sendmsg(r0, &(0x7f0000002d80)={&(0x7f0000001640)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @local}, 0x1, 0x1, 0x0, 0x2}}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000016c0)="c03a34c2e36bab1639f761b14191c9530081d86a9e279a602440e47e67b61955880517f3a369b8e45afbad24502e862bb5fce960e19fda64d6f8b13e7aa2a375572673dad3a8f7342fd48689ab", 0x4d}, {&(0x7f0000001740)="50d64c8b56fe424127d9fbe9f7830efb8957be365d94a8fad69f5788ddd822d9d6ae5cd5b51cb2a3584edd0678c2a5262f219fa459ce96b69874367fab725f01f8a8807a1174696010b3f88d3113aede58793307ceb165edba6737af20e62f5e94d63ad067188ecac2d26bbb0fe5fec743a5efd74347b6fe7c95cc8d89389cf9ab32cb82e4f261004c2f1de41aa7d035d53a737cca4188c54d", 0x99}, {&(0x7f0000001800)="b83c93c78408421dccb5047e82456657e3032b821ce65539c48af126c116438c72a68ef9039b81416cd8bfc4ad625d10017c8fad57864e7e30e66036306438d1f1bcc328bcf92669406c5065d27497b6ff953dc6f16de19f3d834e4d348b654b0d10966ab624fc6578405f350d18b15a14f7ac606cda31dca34c5c64afe5dbe0b8c34e5e90ecf9516eeb7cff2e3f5917019d05334790", 0x96}, {&(0x7f00000018c0)="f43cc5ad7e32c67231", 0x9}, {&(0x7f0000001900)="f28701f1e6051cbc081bbc5f42bc0d9b42c8360fd941f1590c8abf15d010e103640708a25cbfc41eb4d7d51fddd16d11b560a263cc09c1955aa30473b354ec65a67ad583112c43a724745a8ac74c77985a2c33b81825d3b6b45a98e76328fc4a", 0x60}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="2271228b28933a", 0x7}], 0x7, &(0x7f0000001a80)=[{0x1010, 0x10f, 0x100000000, "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"}, {0x40, 0x117, 0x1, "1e8625b9a42b1e78ec60eb064b1db91c0891e8d4f09e1917e29d3ccab3615e780fca6108fec66b61d2e311"}, {0xa0, 0x104, 0x0, "1030eafd6e0d7184bf91e5df2e265ada972bd395f719976ac4076faf4da3304436aae624a66e8d47b81b83fb8ad2c5d0fded6f41f52225338565ec1f435a0f72996914309cc954fb52ed25fcf4bde32e1cf18357468377ce4bc5464b8b3c6db3b312899d661cabb3b4759a8f602ea5ca9c23d134c84b3a29573e574921f643e8968bcd6570cb5af5d4d870821e7bdc4f"}, {0xf8, 0x10b, 0x243c, "844b9b9ec242c6732d5cea84cde41f6c0f24f686b6f1e1aa145632294766643890347093487c909c4512be746ee601c1dcdd3860632a9212139b8950af8f12663916b085aa42b266221a871c2b42a97eeea17193e6355a0b191a65b345e8f81c70661dbbc92845629ece4aaa544a62306ecb9fbe1029a4a1ccd5aa393bc0cff324eca6f9463ac913dead7d77f7c7a879c177b996826780473a46bdf215ef65d7750ac68ce49d69d05830715244599ce00c252ad34f5bdf16fea69d1b664b63b222e7ef0783c86c6dc3bf40432cb1e7acd166c2fd119a51177be07c6e10422d5bab"}, {0xf0, 0x117, 0x3f, "f75c2dd850ed2575a6f7a9e9fd917a0c35c2a21d2915e3820e1c6e562f3533d2a582f94cf4af9a0658e00279411b3d202d6804ef633eec201f2afc25e5312bb127c5f5177cdfbdeb62cd1af78177784ff123d35e051d1a99cc692d15d0ff236b0cdd4a844a48d131bfd140989343b156e43dfe64706527af114aa1ae929957da2cca469faf299a66941e30a5262a5743bc48ab7c8d2cc3fd421d3af8f4315ef564fb129dd907e44c85e6cdfbb60f5fcbb84792d85957d34c1be2a5b25687541eed2b42d7dda99d0d3172b9d9542a16d56acdcb09933844d41a71fcded5c375"}], 0x12d8}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000002dc0)) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000002e00)=0x9) ioctl$VT_WAITACTIVE(r0, 0x5607) fcntl$notify(r1, 0x402, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000002e40)={0x1, 'k'}, 0x2) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000002ec0)={'nat\x00', 0x0, 0x0, 0x0, [], 0x7, &(0x7f0000002e80)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) bind$bt_sco(r0, &(0x7f0000002fc0)={0x1f, {0x7, 0x0, 0x20, 0xae, 0x101, 0x50ff}}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000003000)={r2, 0x32, "f7a62b02da31ee1a941058059826e4dcf156561056b8c349a4c0715c9e12c222834997b3a8015417e2510949a7e8036b408d"}, &(0x7f0000003040)=0x3a) [ 214.269401] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 23:10:42 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4c000, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000000)={0x4000000000035}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000600)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x10) write$uinput_user_dev(r2, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_execute_func(&(0x7f0000000040)="430fe160f7418157a6bb0dfffffd2e66420f3a218ce21c7781cb00660f1b08660f5b5ee1c4c17d6f997770a76a8fa97883e60f18990100000042ddbece570000") ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000500)={0x2, 0x3, 'client0\x00', 0x6, "961f5df5c09bfa29", "80c09c4ac41acebb68a579885915372f3930580f42328f8efb3f32f1c9e79531", 0x7ed00000000, 0x100000000}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000005c0)={@remote, 0x4a, r1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in=@rand_addr=0x1, @in=@rand_addr=0x304, 0x4e21, 0xfffffffffffffffd, 0x4e23, 0x0, 0x7722c75770db8b5b, 0x20, 0x80, 0xde, r4, r5}, {0xa5, 0x1, 0x9, 0x2, 0xfffffffffffeffff, 0x4, 0x8, 0x12cf}, {0x3ff, 0x6, 0x3f}, 0x0, 0x6e6bb0, 0x2, 0x1, 0x3}, {{@in=@rand_addr=0x6, 0x4d6, 0x2b}, 0x2, @in=@empty, 0x3503, 0x5, 0x3, 0x0, 0xe2, 0x4, 0x3}}, 0xe8) 23:10:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/xfrm_stat\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x4) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) ioctl$RTC_UIE_OFF(r0, 0x7004) 23:10:42 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) setrlimit(0x100000000007, &(0x7f0000046ff0)) memfd_create(&(0x7f0000000000)=')md5sum\x00', 0x0) 23:10:43 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r3 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 23:10:43 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x1) tkill(r0, 0x16) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0xf5}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 23:10:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000000840)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000280)) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 23:10:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f00000000c0)='./file0\x00', r3, r4, 0x1000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="66b86c000f00d826263ef30f129cb7392e0000643e36f30f2011f3f3650f01b8366215d3b8b94b0daf0f23d80f21f835c00000a00f23f866ba200066b86e0066efc4c1f9d64e0426640f88918c86540f7991ed99000066baf80cb855befa86ef66bafc0cb004ee", 0x67}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) r7 = getgid() ioctl$TUNSETGROUP(r6, 0x400454ce, r7) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x314a1c29b735c7cc}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)}], 0x1) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:10:43 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x4, {0x7, 0x1d, 0xffffffff, 0x80000, 0x9, 0xf5e, 0x8, 0x2}}, 0x50) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f109bc070") r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r4 = dup2(r3, r2) write$UHID_CREATE2(r4, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r3}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) 23:10:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x80000000, 0x7, &(0x7f00000006c0)=[{&(0x7f00000000c0)="3068ba8a9a457075d9d32250889dbf34d41dd32c1c9989cd32c1d981f6439d8d3f35be6cdaaa28", 0x27}, {&(0x7f0000000240)="cdb3cf7b98015c59bb853638b6e9c81fadb7648ab490c3810be8fabff39b3d784a0e7bb045fa4c31c99c64ac90b2f9c4e724cd9a270457ef880f99a5fc71b37e247eaf1952d24892205049f90e340f16dd8f41f17696cf254f36266451b65ab56cbc7b45a11f64e1f23849b9b8dff2ec4244a4e864ac85d4b9e72cf03570ded06d83d05be217b7a68088bf8ea65027af4d81fb1da0a2a0c44ab1e8cd358444a65ef7386a291bbb89c9e51df74d208370f6f698e0641087a26d1bf23fe921e677092a8104b7aa39ab34468c823c9df172a0bd632206a6b547723055eae493a21c3531c68aad6e4158582d59aca1509cc38b44f80c", 0xf4, 0xfff}, {&(0x7f0000000340)="22dc29da7b10704fea8f498410e029f283263f8ea2eebbc55d89fe418c164cbfb45dc364545969456d111ee882a2fac83626fd15dd69b30aac86f78c1da4d9c4d310596cb78e80d389687eb6f2a8a3d5eff38037415ad292475606660c668866bb021611bcd7bcf67fe2500cac50fec7c77502d046f6f5b98205a280cd618fc3fb9830a8202a7b2cdddb93cbba3d8b7e0e47b94a87dcc00dac5790ae27b48e14fb552c2330fe9ae3f9c2de2b05d8b2fdb718428db438ef1e0c368f8d49a0cc5368", 0xc1, 0xffffffffffff6b3c}, {&(0x7f0000000100)="6876b86a65ff2e4bde9c28db7fc03f7bef2072f1b29af7b96e62cbdc673e10d8c02eb1d45fb9a279a600c40cd8ca2542dd6860da5b85109a0e07bf3226a24b653ca294bf5686258f48ca964a43664d527c0c3b5e6ea5f4f4b99bca11fa8661271c00ce6d6285f4cc0ee4038bdd87f7bba5f38266f55ad233b195d0a336", 0x7d, 0x2}, {&(0x7f00000001c0)="709e98a176fa5a", 0x7}, {&(0x7f0000000440)="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", 0xfb, 0x20}, {&(0x7f0000000640)="19a912c5e5e9c63733a8a9ef7f14a5726323c381505dece29fa3e904d1d0f23f0427df8cf95ed8e870db01347abf02569d7aff01e876fd3fede3bd3ec552162b37e4f68ddce90283574b", 0x4a, 0x1}], 0x2000000, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bind$x25(r1, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) 23:10:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="f9"], 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x100) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) 23:10:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x3c, 0x25, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, 0x33e0}]}, 0x3c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 23:10:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "048a61443f8022efad6b975f761b29f1"}, 0x11, 0x1) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x19) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x50040, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)) 23:10:43 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x5, 0x0) connect(r0, &(0x7f0000000100)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffe29) sendmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002b40)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x2, 0x0) [ 215.312896] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=12a91970) 23:10:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101001, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYPTR64, @ANYRESHEX=r2, @ANYRES16, @ANYRESHEX=r0, @ANYRESOCT=r0]) 23:10:43 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0xd1fc3257) 23:10:46 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x50, 0xf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x600, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x8}}, 0x47, 0x7fffffff, 0x9, 0x64, 0x20}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x210, 0x4}, &(0x7f0000000300)=0x8) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = getpgrp(0x0) ptrace$getsig(0x4202, r4, 0x4, &(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 23:10:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:46 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:46 executing program 3: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x3, 0x8000) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000340)={0x8, 0x1, r1, 0x0, r2, 0x0, 0x3423, 0x2}) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x8040) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000140)={0x7, 0xfffffffffffffff7, @value=0x8}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x20, &(0x7f0000000400)=ANY=[@ANYBLOB='d\t=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',defcontext=unconfined_u,\x00']) 23:10:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c00000001b000109000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0xc0}}, 0x0) 23:10:46 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x2001, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_ENTRY(r1, 0x0, 0x1a) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0xa4a10c895fbce21e, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f00000000c0)={0x1, @remote}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000240)={0x0, @data}) 23:10:46 executing program 4: r0 = memfd_create(&(0x7f0000000180)='eth0\'cgroup#vboxnet0system\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write(r0, &(0x7f00000000c0)="6963e64243ea486d0100008000000000b965", 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x402, 0x1000011, r0, 0x0) sigaltstack(&(0x7f0000000000/0x1000)=nil, 0x0) sigaltstack(&(0x7f0000000000/0x3000)=nil, &(0x7f0000000000)) 23:10:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000200)=""/108) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x330, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{0x0}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0) 23:10:46 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) getgroups(0x5, &(0x7f0000000100)=[0xee01, 0x0, 0x0, 0xee01, 0xee00]) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)={0xc0, 0x0, 0x7, [{{0x0, 0x2, 0x6, 0x1, 0x100000001, 0xffffffffffffffe1, {0x3, 0x80000000, 0x100000000, 0x6, 0x4, 0x8, 0x8, 0x6, 0x401, 0x4, 0x3, r1, r2, 0x8, 0x6}}, {0x0, 0x1d, 0x11, 0x7fff, 'md5sum^,[bdeveth0'}}]}, 0xc0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='o=\x00'/15, @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 23:10:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x8000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0015bba81394000000000000001ac014a3726b0106e55eda66be5716b03429eabf0198373e4d844a57a4d669c2367697f0e7308a1637984d1704b3d539d836b2947f3431fce4cf68b624e25f8517fb2fa5c0496d4f7b5b023e38f0c2000acce8e17686ad5754769e7519e7e69071d7b370b47a316ef684fef5fb15cf6ed86ac4bd73eb74994354b4671c"]) read$FUSE(r0, &(0x7f0000000480), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x1, {0x7, 0x8, 0x0, 0x40000000000007f}}, 0x50) 23:10:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) ppoll(&(0x7f00000000c0)=[{r2, 0x8004}, {r0, 0x510}, {r0, 0x32}], 0x3, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={0x3ff}, 0x8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) ppoll(&(0x7f0000000040)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 23:10:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x4000000001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VT_ACTIVATE(r0, 0x8925, 0x0) 23:10:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x181000, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766645f6f3d874a1f3899897f07000000ac82512847c15041a2f982285290bf6e", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:10:46 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) ioctl$int_in(r0, 0x80000000005016, 0x0) [ 218.491967] 9pnet: Insufficient options for proto=fd 23:10:46 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:46 executing program 5: clone(0x3102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe2(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000001940)=0x5, 0x4) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2002, 0x1) syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x5, &(0x7f0000001500)=[{&(0x7f0000000280)="cecd991f117ed1f5b10139eb5b29af4ac2dd2965746e4c18bb2016c7596efa106fd656abefa25a8746646b15ca120363343c03a3b5add81fe5d882d3a415fae27a8f0cb68f7d0266f1c02bf6fea5d5025bfa5a3eba1cdfd04a8ad3d915edaff0139f4355d16bb814f349589fd06512b374f5f922ee2faf58d7fcedeaabb07a3f5fc7c091b954a5db8c3688f8a579b619e84cf0a1ca81c7c7b551c506ebd78f91a60e3527045dac5d50646114cb6e59c13bab0ba62df8393bbe1c15e9af64ca8e9d191b97e4ea6586842108816610abd1f283f5378987dadd9fade6faead5d9f047d71b64cf0b3a38b760f6195de5", 0xee, 0x100}, {&(0x7f0000000380)="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", 0x1000, 0x1}, {&(0x7f0000001380)="c50fb546d2ce7849a71bf429553d546062f0a4057b724d09688a61e3579123eff3f3808aca7db44876255dcc86140f5303bc1d7eab916b8485918cabbd81ad8719b594d6a3d583f29650e814788240f9bfb868cfa456fa240d8b65c93a07118d71bea32ebd790a6f61aed26efa3ef33e7728d95f91fc3cb39ef30685a384817e82db1431c2a30a35d45b2b755bc94f3dae829c93f4fc01b2253e98c86b93a237279a9678d6326ae68596d4a8c7addb830a946b90028b1de60863b7b1deabed266596dc03acfdb1b31a056c351fe2eb9b498f1c5060e38cf3d8cceb373978680a9eafcd0a1bcde8bd09d7", 0xea, 0xffff}, {&(0x7f0000001480)="9baf678f1c5316da3316ea72f5ca991eb8db36eac2b541bb0529", 0x1a, 0x8}, {&(0x7f00000014c0)="059d92f771be40c2ec96417dd164197f5115d6b6b8658a1601909dfb92", 0x1d, 0xed5d}], 0xc000, &(0x7f0000001580)={[{@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@dots='dots'}], [{@obj_role={'obj_role', 0x3d, 'vboxnet1cpusetmd5sum'}}]}) listen(r2, 0x1ff) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xa7}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={[], 0xaf4, 0xe09, 0x3, 0x5, 0x64cd34ae, r4}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000040)) 23:10:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x4000000000000007, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x1, 0x1, 0x2}}, 0x14) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x7}]}}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x8000) 23:10:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) r1 = dup(r0) write$capi20_data(0xffffffffffffffff, &(0x7f0000000140)={{0x10, 0xe143, 0x8b, 0x82, 0x286, 0x40}, 0xe3, "ee1b40a00c26ab1ede9420fd89e19bdda4483890b7d315a4c6b82d7959960e4db2dd8b089d17f4c80fd525327ff7471c8b71130b6010ba7aa9bba8c755247d8890a23d681e2e47c4cd370155727a8be40e3cecdb53db0ade18beeac5223368fabc46812fa22a85db697a1911aee4028787dbc3823cc0c65d68d96d02600039e4be24c4e8f2a37fba2e637fc9cd14b73d7b2c2db6c90bb0316190fad3212c66fbff0e07e3212865dddb52d797f1b06606486eb5bd245f357a071970184e372726f2df4102f1219cae7e528fdf76c77863e159a88fefda0983a89f9dddee6223365a100d"}, 0xf5) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0xfffffffffffffffd}) 23:10:46 executing program 2: socket(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x9) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x123) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r2) r3 = accept4(r0, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000040)=0x2b6, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 23:10:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x11}, 0x45c) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000000)) 23:10:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x200000000802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) write$binfmt_elf64(r0, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x9, 0x7de, 0x4, 0x1f, 0x0, 0x0, 0x5749, 0x1e5, 0x40, 0x28c, 0x7, 0x6, 0x38, 0x1, 0xffffffff, 0x101, 0x6}, [{0x3, 0x2, 0x7, 0x4, 0x100000001, 0x2, 0x5, 0x2}, {0x5, 0x100, 0x6, 0x8, 0x6, 0x3, 0xffffffffffffff49, 0x4}], "1b509dc1f923d3a2d69cf6dc175ad53b1db7f00ef1a9f577ed0398c2d03abce1aeb025068a9933d3b31e7c81a2cf9cc5307a1d2b8f7e12810fcd75e5da69f020cb71da7a675ebd9cf52e18154cfb35639e5bb3765b0b8a364d4995d97c7a91f61c2d827f75c0931c636f4b608dce232a510d3199bf68f2cebdcd5817b1a0797e522b7054ec6f961bd7a15dea0a1f53b4dbd9e99bae8c9c8432214b9da44cdc11508786954c44abe65ef8cd9ae355", [[], [], []]}, 0x45e) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x980915, 0x2711}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 23:10:47 executing program 4: keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='new default user:syz 40000000000000004096'], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) [ 219.079338] input: syz0 as /devices/virtual/input/input15 [ 219.090789] encrypted_key: insufficient parameters specified [ 219.111645] input: syz1 as /devices/virtual/input/input16 23:10:47 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x10) sendto$unix(r0, &(0x7f0000000100)="cade5cdc411b0dcfa4350416de52af3d70c686c477c4d2f81664e34380bfbfdc00cdb495194f6b81772c00e0bec61555deb3a321c5130432b2f0fd1c9aae5ff0fd703192037243fd5d4a5fc280c15e17f9", 0x51, 0xb636d73b9595c8af, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4c000) 23:10:47 executing program 4: semop(0x0, &(0x7f0000000080)=[{0x0, 0x80}, {}], 0x2) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$KDSKBLED(r0, 0x4b65, 0x4fa9) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}], 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000002c0)="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") ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8001}) keyctl$set_reqkey_keyring(0xe, 0x7) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x419a30b72fadfdc, &(0x7f0000ffd000/0x3000)=nil) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000100)={0x800100b, 0xfffffffffffffff7, 0x1}) [ 219.180356] input: failed to attach handler leds to device input16, error: -6 [ 219.195157] input: syz0 as /devices/virtual/input/input17 23:10:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="a1459b5df3da35fe326be04a5ce3bda0e0bf4d3d5aae61ec6d97ba50b2db07f52dd69c5f"]) 23:10:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="4497a0cce6bda2081bfba7f8c571178bbbd33b63bdf7c1f1def7fc66e40387cae9bf74338a37b874c6080e80aaddc8f33af1b394caaa0a2e3f62ecbc81a20f48a3b0c769239a77634bea3b66e5d4a8eda7133ca13e7fcd0bb6e207e37926869eceb6b3751862354a8263283416db4f225859a6bffe250fc0693a5674b9c8bc8f611533fffe77cc17d52162562e8f85c5bcedc0a9af706295c89f5c61f7729b723463f99aa87b10d4f912188a6bb061be20cc348bb8afaf53a3c6f3803412f2270ba5fe25b41e"], &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}], 0x1, 0xf00) [ 219.333309] 9pnet: Insufficient options for proto=fd 23:10:47 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:47 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x4, 0x309602) ioctl$TIOCGPTPEER(r0, 0x5441, 0x556722b9) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) sendto$unix(r1, &(0x7f0000000280)="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", 0x1000, 0x41d893279a751dfc, &(0x7f0000001280)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000001c0)) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="cefaad1bb83c000000dc", 0xa}], 0x0, 0x0) 23:10:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d6cf120e49621ea46756ddd2e6e6c58a9af00e1fc6d61e97907a1fdee5f67", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:10:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0x9, 0x5, 0x9, 0x10000}, 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x200086c0, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1, &(0x7f00000000c0)="0adc1f123c123f319bd070cdf535ac1dc57316baaf3a900bedbc5722730a4b739b3f4843ec72c3fba335289cea807f6048bbc679927d72ae1ca26f0b40d93f6994679b581dc1d15f34c1730b29478dc4ba50285a50bd724bacb73a11c6f0e2a5feee70b32faf2f7cded791dca70f3003d279d02e2eb6d4c85b47073666e1482a297ec132db97f34a5cb866568740c4a88f6eb207961e2c2fc59b297ef7fd516eebbd30ccea8ef378df922d96e654c01d16345c15ea3dd0b3dd3a3ce48f4240569d700bf53b6d6d927b8c564083eaf6fd1260656061f9065f3ea4faab2e0fc2") setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @local}, &(0x7f00000001c0)=0x8) 23:10:47 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="133070a07ce04f1d8c7610a28cc6e6afb140a780353ebe8ecf187812719065358f52c031be202eb6282ef3e606c1be6630c4f159d601b2c1b09c213d824141c88dbade30f29af53f6c037910b7001cc65fec3fa84442c01e947e3852cf727a1228dcb49088750e6ea72e98012cfa1fc667e825f18a360e6977e7a861b44eeef6ce91a2b4345f57b0941642381c22f6e28551ab9648da83321048629ca81138e6f5f1959f7e4cac44") 23:10:47 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x1) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="16496a84d2715396c46f51e5f354571b2c102120eeab3973015eb4fb0049e700c3fd6d1dc41055d8cd7c6d6ecb4750575f2408bf010b8d19d8c21cc332a60e8dfe4b5be987970a11770d901a63f35825c5d2f80a29ac83b80e593f50bc9d5b4cf0850eb9ddb6e07f03e3cdfc822414ac743f293cdd0b3d9599e9a711bbd8e9c6efad5f7aa9cc55fe14e9df922c5428dd6a5c7f988c3805852bdbd27eb048010d6771ca5d9b6d384c1cac5515f16ecd5b6bcc8884ed8ae551ee299091b3c5dbe831c91d7e20e25c045630e53f6a1791a58c3b5cdbf0b27b8087e6b7f795c40b148af65868392ededdb5", 0xe9, 0x0) keyctl$set_timeout(0xf, r2, 0x100) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000140)={r1}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000280)={0x5cb8, 0x300000000}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="1bbc3829fbcb0ca263cf6028fc2c00"]) getsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:10:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r1, 0x0, 0x363, 0x20000000, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000140)={0xa8, 0x0, 0x7, [{0x2, 0x4, 0x12, 0x6, 'cpusetwlan1&cgroup'}, {0x5, 0x200, 0x8, 0x9, 'ppp0eth0'}, {0x3, 0x3, 0x10, 0xfffffffffffffc00, 'louser]\xf2@selinux'}, {0x2, 0x3f, 0x5, 0x5da8, 'eth0('}]}, 0xa8) [ 219.887260] 9pnet: Insufficient options for proto=fd 23:10:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x450000, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000000080)) fcntl$lock(r2, 0x6, &(0x7f0000000040)) [ 219.976989] 9pnet: Insufficient options for proto=fd [ 220.003392] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 220.044725] 9pnet: Insufficient options for proto=fd 23:10:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x54, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000700)={{0x9, 0x4, 0x1000, 0xffff, 'syz1\x00', 0xd873}, 0x0, [0x7f, 0x4, 0x6, 0x7fa, 0xda2, 0x1, 0x3, 0x0, 0x0, 0x5, 0x7fff, 0x5, 0x3, 0x0, 0x1, 0x240000000000000, 0xffffffffffffff7f, 0x7fffffff, 0x1f, 0xf21, 0x63f1, 0xd5, 0x2, 0x6, 0x2e, 0xfffffffffffffff8, 0x22f, 0x20, 0x6, 0x4000000000000000, 0x40, 0x1, 0x5, 0x8, 0x9, 0x800, 0xeb0e, 0x4, 0x0, 0x3, 0x77, 0xff, 0x5, 0x8, 0x9, 0x99, 0x2, 0x400, 0xfffffffffffffffc, 0xa0, 0xfffffffffffffffb, 0x6369, 0x73c5a82, 0x3, 0x5, 0x51d3, 0x4, 0x4, 0x8, 0x1, 0x5, 0x4, 0x3, 0xfffffffffffffffc, 0x74d6000000000, 0x5, 0x5, 0x3d6, 0x4, 0x4, 0x7fff, 0x0, 0x4, 0x3f, 0x8, 0x3, 0x6, 0x1f, 0x81, 0x9749, 0x3a54, 0x200, 0x30, 0x4, 0xece, 0xfffffffffffffff8, 0x1ff, 0x5, 0xdca, 0x7, 0x829, 0x4, 0x0, 0xffffffffffffffe0, 0x0, 0x3, 0x1000, 0xa0c7, 0x8, 0x100000000, 0x3b1821f00, 0x8, 0x4, 0x800000000000, 0x7, 0x0, 0xffffffff, 0x7, 0x8001, 0x7fffffff, 0x9, 0x1, 0x22a0, 0x80, 0x54, 0x7fffffff, 0xffffffff, 0x1fe0000000, 0x5, 0x5, 0x235e, 0x8, 0x800, 0x10000, 0x80000001, 0xba1, 0x9, 0x1], {0x0, 0x989680}}) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)) fstat(r2, &(0x7f00000004c0)) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000540)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000001c0)=0xe8) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000280)=0x3f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', r3}) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000580)={0x1, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="03630840b7ed4ba424fe50b6a5cd54b47ddbe7173d2e5f931afef4589909f6567be4799d721e2ae1adf6885d359372ca3d8f3060e8699da2669adb549e087c68337e37690d7eefde1290496902c6eca6692aa615959b4b16356c246cada97d13d074f546a9e4fe2efb3baa8519657a30c8e677a8f78695f0cfe0426949bc79e7f28791878ce4924b8c5b450b9b02b353aa354735738415784f8f9a131e96", @ANYRES64=r4], 0xba, 0x0, &(0x7f00000003c0)="98834f15e08cce587ab4aa9b290e1986db5ab2145b2169a59208968e19a03f038a6d344b0b17d6839d078538d027eabe35b08f872e6aa6bbf2c2b9f443c315f3c47b9ce48e3b04f503cba35cc87a1206aa7639db1b46ee596bb24139c7b2894e4a88858723d99ec709f20a930dc92421bd5867437a9a77d27ac58a73f8c0d7934affa5956464138e8f88f328bddc8278795e61a8a3be94e51ca8a45513ea0820a35a6894483af35e6d74a240825d53680d2566c4f99c292f8f75"}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000dc0)='9p\x00', 0x0, &(0x7f0000000d40)=ANY=[]) 23:10:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x5, 0x40002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000280)={0x5, 0x8001, 0x9}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x4, 0xffffffffffffffe1, 0x67d0}, 0x8) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xb87, 0x1) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000100)) 23:10:48 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)={0x2, 0x4, 0x2, 0x400, 0x2, [{0x8, 0x0, 0x6376}, {0x80000000, 0x9, 0x9d15, 0x0, 0x0, 0x1201}]}) sendmmsg(r0, &(0x7f0000005b40), 0x106, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "123403d722ae06a3e530a4e2f63ca565"}, 0x11, 0xd92565707d0ae7ba) 23:10:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r1, 0x0, 0x10001) sendmmsg(r3, &(0x7f0000000080)=[{{&(0x7f0000001440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x27b, &(0x7f0000000500)=[{&(0x7f00000000c0)="c181b819dc8c5d34265548737563cea3019e3166d7a3751e7869f260ee6b7f49a3172e9de126a38504ab786a749a1eac19", 0x31}], 0x1}}], 0x1, 0x0) 23:10:48 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4808800}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002dbd7000fd9ca1040900005dae00000002410000976d001000137564703a7309003200000000"], 0x2c}}, 0x1) 23:10:48 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, r2, 0x3}, 0xc) recvmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{0xffffffffffffffff}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000100)=""/27, 0x1b}], 0x4}, 0x40002102) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="18618d06eab2e7bda9539bd404000000000000002be2970d0000000088358e155f0c61053e8c5d92178710850ff7d3644af91f061a57a44f4b9370751c2b88574e49725cb88f6a1be168db"]) 23:10:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000d09fe9)='smaps\x00') mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r0, 0x0, 0x0, 0x8100003) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, r1, 0xa2a, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xaf3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdaca}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62a2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x24004815}, 0x48011) 23:10:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000380)={0x7, @raw_data="e50d27c694c343e3f7929dbe44d0a3fdd49c4f61f3e623e264bf45c176641cc86b6af860149f8b7137a0cb046196ce42a12983bf87ca40051e7dbc743d53dc3db20c737297773c0ab21dd9ac25a1e977302fc126e15784c052938af353970efa8987b3d5439769a9f84487edd5cabb9ce81ff211c4381c22d444a2ef6f74520ba9caa0820bc2906a573b6b2b5f3bc05e0929487eb3e9e33524a307c8eb03e8bba8c755130dfd12686318fdce95a6544159d60f1e0b3c37660148fe357567f6b15c62e7822181f8fe"}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r3, 0x28, "d2921ceb274aa008ed2df809be01e68d93d96cb84839baa7b3164ddc1d695d3d548eb20133135494"}, &(0x7f0000000140)=0x30) 23:10:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x8001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @rand_addr=0x2d}}, 0x7f, 0x100000001}, 0x90) 23:10:48 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/112) r1 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0xff}, 0x0, @in6=@local, 0x0, 0x4, 0x0, 0x94ad51f}}, 0xe8) syz_emit_ethernet(0x1d6, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:10:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x900, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x1}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={r2, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0xffffffffffffff01}}, [0x0, 0x28a58f71, 0x2, 0xffffffff, 0x9, 0x3, 0x800, 0x5, 0x3, 0x7fff, 0xff, 0x5, 0x3731, 0x80000000, 0x1]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x7}, 0x8) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x8001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @rand_addr=0x2d}}, 0x7f, 0x100000001}, 0x90) 23:10:48 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000000c0)) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="cd390b081bf2ffffffff86dd6002290f00303aff00000000000000000000000000000000ff0200000000000000000000000000018600907800000000609433df0000000000000000000000000000000000000001fe800000000000000b000000000000000000733d"], 0x0) 23:10:48 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x44, 0x6c, &(0x7f0000000240)="79d80b919d30749a77556354e692dd20be2bc7c4ef399cd05371b334f866bb98983fa4b7d416141ccda47b628df15d31a059e5d395c0a01f4dde298bbe310e44b53ce254", &(0x7f00000002c0)=""/108}, 0x28) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000000)='./file0/file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '\'bdev%'}}]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0x6d, 0xfffffffffffffffb, &(0x7f0000000040)="e4e5be72eefc8e888f12583faaf77da5969690a7b78329e9fac34c0f35def820c5e80fccafafbac010610859dfde3988a69e83c2563fc86edab04c6c778703566943a4ce8a22692da921390e5ed348249622eed0535663e27514d24017f3c07c29010eac3059d0d10fc5ba71ed", &(0x7f00000000c0)=""/21, 0x5}, 0x28) 23:10:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) ioctl$SIOCRSACCEPT(r3, 0x89e3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x50, 0x0, &(0x7f0000000280)=[@dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 23:10:48 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0xa2, 0x0}, 0xc100) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x1) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000100)=@rc={0x1f, {0x10000, 0x1f, 0x3, 0x9, 0x20, 0x10001}, 0x8}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="232806321d87ffa4c0af29c0225d0e1c8860c599d0efc84302a3c3967c146918359923bed09b390ad6029f411e0a0d20ab933e4fb3ffd034f9f4b7a57eddf34e0a98a24ff82315f960abb518a612a6a399f6593e5884a5cc598ca35b39ffad93baf92c5b907c087061fb4d34501abc5f41bd7cc298e7e8354bb94f49f9f4afd21fcc030a7d0af2367bfedbcaaf9ad62e1b46d84b2425d9702d1f213a79c3fa8a96701683aeeb2309335b8c1a006acbed31820230336cec412466a733b519206fb88c2e0d1c4894eefe234ad5be3670e1422d413aa52ed32cd5527b", 0xdb}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x378}, 0x20040080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', r0}, 0x10) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000fc0)="3a9a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb08ad0491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ee091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db2d6e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d9f44f059a5dd10c0971608f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca116f8f11416e5c1bd5499636ddae25fc49709f0309cf5c0bf8e432160c258d14223b3b0d009b09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243f33e7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff72b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6817b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0efa4d9d3c42e1ba282847d476cef0228b6a1422aba08e5f3c1cd279bb20dcf3e90f80a4a8ac093de9f0d9c11a540aff2de27437787bbed317439cafb71e7f92b7e02cbadb076f04ba2cb8c96aeef53c74d9036c922b1b24a79228e833abc661b5630caa45389341cb8ddf277fd916141023fb53c0d155faf6fdfb593e22db25c4f8afdcd90d437672ebe975f4a5f445bbdd845505fcfea702a42d821d3dc11720de0009e83161e5a089d09184346606e126842de54e85e20aa5bac874367a8690d09d6ee61278bd424eabe824ff22693b0cece9e4d935f28bb7efd85afb1642a363d583eb01f48f25784f80002b163bd3da724b0391dac7c23f76b5c5c6319f7aab18a486d5607f68ce2f83d2a6a8a13f8ecdb845b8af96230f063019ff113698c720403bbf6202b2d50800000000000000d538fc1fa57518769bd3bfc11e743b4e56b01f17483a152abcca0bd84a1011bd703a494150176d17322cf10307d259999622b76ac6a86407c9ed281ae29b9b569b382d3f39fe4d07706c96c41a565437d9edb1cb532d900efe54f518044bba5fa5791c1797c569a3d6c21342d92f4b104a3d957cf85e617c46ac97b6785a455ce7765eb80a02de4dffde0207061e1afb61e777379b202707f0f49edcf21a186eae3371280d89aabb3bd53408b4cb2a8e42f9f4d0bc11d766eb51940f5e92559b91954649f2786fb6683e19ca5f609c40e327876f5515aeefce0f390d3fd557aabcb091b04131f3edc1ed80a2d5a812786530a302ab54f7e1f3a6bca852722d1af85ceab2e6565733b31f76d795b1a603a780564b181ebadb0028c03d0c2c2831ce3a83369bf4ec61f802633e719040dac86c9c26e01bdad82b", 0x4da}], 0x1}, 0x0) [ 221.075704] binder: 9940:9946 ioctl 89e3 0 returned -22 [ 221.091826] binder: 9940:9946 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 221.107321] binder: 9940:9946 transaction failed 29189/-22, size 0-0 line 2802 23:10:49 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x9, 0x8001}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e23, @rand_addr=0x2d}}, 0x7f, 0x100000001}, 0x90) 23:10:49 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x800002, 0x0, 0x40, 0x740001, 0xffffffff7ff0bdbc}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000000c0)={0x9, 0x8, 0x4, 'queue0\x00', 0x9}) 23:10:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x7) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) r2 = gettid() setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e61853167377400000080ffffffff0000000000e4dbb77487deff0000009e002c8000000000000000000000000000021803f2aafc240000ae0100000000000410db0559d9e83804c1e090e1fe916dd282e0f3e52a"], 0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x102, 0x0) wait4(r2, 0x0, 0x4100000a, 0x0) tkill(r2, 0x3c) getpgid(r2) [ 221.746958] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 221.747259] Unknown ioctl 4724 [ 221.764919] vhci_hcd: invalid port number 255 [ 221.785469] vhci_hcd: default hub control req: ffff vffff i00ff l255 23:10:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x100000001, {{0xa, 0x4e23, 0xff, @empty, 0x3ff}}, {{0xa, 0x4e21, 0x3ff, @empty, 0xd1b0}}}, 0x108) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffa, 0x100) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(0xffffffffffffffff, &(0x7f0000005fc0), 0x800000000000059, 0x0) 23:10:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000040)='./file0\x00', 0xe001, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:49 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c1261319bd070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xff63, 0x0, 0x0, 0xfffffffffffffe93) [ 221.796524] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.805976] Unknown ioctl 4724 23:10:49 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000300)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, 0x76}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000100)=""/189) sendmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f0000000080)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000800)="1a", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 23:10:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x4800, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3d19edba4c050228", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:10:49 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x1, 0x80000000, 0x8, 0x2}, {0x5, 0x0, 0x401, 0x6}, {0x4, 0x9, 0x7a, 0x10000}, {0x5, 0x2, 0x401, 0xdb}, {0x0, 0xffffffffffffff00, 0x3365}, {0x7, 0x9, 0x6, 0x100}, {0x4, 0xfffffffffffffffe, 0x9, 0x80000000}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0xfe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000240)=""/4096) r1 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='bdev)user:GPL\x92\x00', r1) 23:10:49 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)) r0 = socket(0x40000000001e, 0x5, 0x0) setsockopt(r0, 0x10f, 0x8000000000000081, &(0x7f0000000000), 0xfc) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 222.034428] 9pnet: Insufficient options for proto=fd [ 222.039641] audit: type=1326 audit(1555715449.992:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9995 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0 23:10:50 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="24000000560007031dfffd946f610500070000001f000002fe000000421ba3a20400ff7e280000001100ffff2b16a0aa1c0900000000000e000000eff25d8238e78a27b3524cbf5400f3f3b1", 0x4c}], 0x1}, 0x0) r2 = inotify_init1(0x80800) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000100)) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f00000000c0)={0x1}) ioctl$void(r2, 0xc0045878) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) 23:10:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 23:10:50 executing program 4: r0 = shmget(0x1, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x101000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000100)={r2, 0x21}) [ 222.635840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.647284] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 23:10:52 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0xf006, 0x1, 0x0, 0x6000], 0x8001, 0x28, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4000000020000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf4010000}, 0x1600}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 23:10:52 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 23:10:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x79, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfff, 0x20000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f00000001c0)=[{{0x0, 0x2710}, 0x0, 0x5fe, 0x3}, {{r2, r3/1000+30000}, 0x11, 0x0, 0x400}, {{r4, r5/1000+30000}, 0x17, 0x80000001, 0xcee2}], 0x48) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x802, 0x0) 23:10:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:52 executing program 2: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) write(r0, 0x0, 0x0) stat(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) mount$9p_unix(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x40, &(0x7f00000019c0)=ANY=[@ANYBLOB='trans=unix,version=9p2000.L,access=any,afid=0x0000000000000004,cache=loose,cache=mmap,cache=mmap,pcr=00000000000000000019,fowner>', @ANYRESDEC=r1, @ANYBLOB="2c6673636f6e7465787463cb185574656d3c752c73756e7578ff2b66756e633d4d4f44554c455f434845434b2c736d61636b66736465663d7379a2be7374656d707070302c646fed90b51cc7c5cf056ff9de78d139988c8ddad98483289e283a6e745f6d9f78a977d35cb017b1f8aa424a8dfe0d075f59e3ede2bdc139ef8816aa6d9f63c4d79a960627076373ba9511d60cacdeaaf5d6be52190955793c77e7a861f7aaab4457265c9c002ad136b866dbffffc84ef64db9c4ede00edc01bc421bac6c93bbb3", @ANYRESDEC=r2, @ANYBLOB="0800000000000000ffffff00"]) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r5, 0x48201) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000005f00)={'filter\x00', 0x4}, 0x68) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0xbfe00) write$smack_current(r5, &(0x7f0000000080)='selinux\x00', 0x8) write$UHID_INPUT(r4, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) truncate(&(0x7f0000000500)='./bus\x00', 0x200) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000480)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f00000000c0), 0x808100000000) 23:10:52 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x402, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000200)=@get={0x1, &(0x7f00000001c0)=""/36, 0x9}) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x10000, 0x0) 23:10:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x40001420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d6010d07ca3a7fe21e866642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB='\awbdno}', @ANYRESHEX=r0, @ANYBLOB=',\x00']) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x2}, 0x10) 23:10:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40c80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f00001f6000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x5c831, 0xffffffffffffffff, 0x0) [ 224.849788] device nr0 entered promiscuous mode 23:10:52 executing program 4: timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000044000)=0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000000480)=[{&(0x7f0000000140)="9316d0265a72d761d28f27f38b24ba11a55cca88cb9eb8fe1359db4ebe2cb682ddc9e248dd55c1d39a538d16e34e91fc8ff59d37d1b69ac17d5b0912e107144974b192dc124fb86be1968ebe84a1a36567aa93efd1a14e5b614a37a14425b9d6e5bff94d61f97d26c919f950301436d09d8e33019c2f2cdb04843d1d7ab2e36a85d33626148023aaa97efb0bd221224ffa53cd863cbe069b6fca815c93e84e14db25fde8b0e5f422", 0xa8, 0x1}, {&(0x7f0000000200)="db93520f7b3c8b79961b4a051fe642662ca01e17f4e0aa9e7aa83eb610c6bbd9757b566721281866deb50b6b589d96de952c88eb1ad24f87a2c09990e77065aacc0e86288ecec8a3bbe4e375c23b93ae8e8c9a000cd39f9fbd56ca93b88a1f7ff149e69b2cd5a4b8792b3155b7afcfee8468792ea228c01b70b2170cda17a02b2605eb1f880b9ab8279b316f9c3ea80ef17405c5a399ea", 0x97}, {&(0x7f00000002c0)="3add1d5c4216d34ee15449eba832d6a474cd97b374d796bdd0c9f34c1b98", 0x1e, 0x9}, {&(0x7f0000000300)="297f1b664420d87d90c18386ca2ff4a91f51cd7267891a70ba8a0c02b7ee59a5dfe6ce8064db8f52fd96d925f422ceb686197dfaf9c1a29f299e87c208ec8eb4ed60ead86ad09ca7acb25f56bfb781a430f5a811364aa7670048e122af0b33f99a5300a23c3990d04d3093d5325a8b0ddf32f6a385a98120bb510e6ab70436f82286", 0x82, 0x7f}, {&(0x7f00000003c0)="f46582c733f2db37b68d3a389ac49afcadfcdc9dc17ca4033d96e2751a1cdfb048373da63b8f594687545f7f32b61f612d7bf30b78699366353d38d8417cd75774ab8bdbf29ca1c3cee42e0e8ac9cb962da3004b27e77af65c4b6f56c38f2d48f7e270332c697145264226d8129bbefb5f8672f37efca23576cedc4c", 0x7c, 0x800}, {&(0x7f0000000440)="cb06d4dd39de736693730f14835a2492e1f0086834e4e4", 0x17, 0xa4}], 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000), 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x0, [], [{0x6, 0x6, 0x3, 0x80, 0x8, 0x1000}, {0x80000000, 0x100000000, 0x8, 0x0, 0x7, 0x9}], [[]]}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x88002, 0x0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000d43000)) [ 224.894476] 9pnet: Could not find request transport: `Ð|£§þ!èfd [ 224.980436] 9pnet: Could not find request transport: `Ð|£§þ!èfd 23:10:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x400000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap='mmap'}, {@version_L='version=9p2000.L'}, {@uname={'uname', 0x3d, '9p\x00'}}, {@version_u='version=9p2000.u'}, {@afid={'afid', 0x3d, 0x3}}, {@uname={'uname', 0x3d, 'wfdno'}}, {@cache_none='cache=none'}, {@debug={'debug', 0x3d, 0x3f}}, {@privport='privport'}, {@access_client='access=client'}]}}) 23:10:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000000958000003079142e00"/24], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000340)=""/207}, 0x48) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xc8d, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x9c4}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e21, 0x101, @empty, 0x9}}}, &(0x7f0000000280)=0x84) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000140)=0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="24f9e9a6bae9516cc92c4a17c9a9", 0x0, 0x3f00}, 0x28) [ 225.181806] device nr0 entered promiscuous mode 23:10:53 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0xf006, 0x1, 0x0, 0x6000], 0x8001, 0x28, 0x6}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x4000000020000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf4010000}, 0x1600}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 23:10:53 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x88, 0x1, 0x0, &(0x7f00000001c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x46040, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x4, [0x800, 0x4, 0x7, 0x2ea]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001240)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f00000000c0)=0x1008) 23:10:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfff, &(0x7f00000001c0)="0adc1f123c123f319bd0702dca4b8ee9e4efec2121256350e681f4590280f710abcf5cf69fd7a18d04d510e202d21c1d06f85fe9367bdb25a6c62ce7d0a2d66e3da86eb7bfd0d38ad0d7eea5f5b5f605143ed0a3f9642984bfa275a4920eb5584dcd70d4071db49e88d7b17a567a6391c51c066606733e8c5e07ab896f927db2b3e6dabf51ef2f38fedc39b522b54546d7f4e434731115e9bde1959da1041242480d461693cbabd7b5ad77b7fd94400dcc519d05cc56409dfaf51085869ccd8d6d0e969507b6ff8bdb480f6f5dbeb8cde349c17340525bf856e72a263c98be6c43f9a09d7d832a0a74767ce3aea5e1a38409") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x1, @dev, 'vcan0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 23:10:53 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x40) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 23:10:53 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000001) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7, 0x13, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0xfffffffffffffffd, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) mremap(&(0x7f00009b3000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000d3e000/0x4000)=nil) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) rmdir(&(0x7f0000000000)='./bus\x00') fallocate(r0, 0x3, 0x276, 0xb) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x77230763) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000240)) r2 = socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x0) setsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000840), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000001c0)=0x4, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003, 0x0, 0x5}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f00000004c0)={0x5, 0x0, 0x6, 0x80000000, 0x1}) prctl$PR_MCE_KILL_GET(0x22) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x8, 0x7fffffff, 0x98f, 0x6}) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x4, @mcast2, 0x7ff}, 0xfffffffffffffe2f) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000440)=0xffffffffffffffde) fgetxattr(r0, &(0x7f0000000240)=@known='system.posix_acl_default\x00', &(0x7f0000000540)=""/175, 0xaf) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@ipv4={[], [], @remote}, 0x7f1, 0x0, 0x0, 0x8, 0x1, 0x3f}, 0x20) sendfile(r3, r3, &(0x7f00000000c0)=0x202, 0xdd) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000140), 0x4) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e24, 0x3, @mcast1, 0x3}, 0x1c) 23:10:53 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:53 executing program 4: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000001c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) kcmp(r0, r0, 0x3, r1, r1) tkill(r0, 0x33) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc754c0293f82ddfa11423dc9ec5adab688962a5a99985ef877a9113857bbf0a8e74ccbded500"/53], 0x39) capget(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000180)={0x2, 0x400, 0x5, 0x3, 0x10001, 0x8}) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:10:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x1, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) unshare(0x40000000) 23:10:53 executing program 2: clone(0x800080, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x4c0, 0x9, 0x400, 0x2, 0x7f}, 0x14) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x10000b, 0x20000000, 0xaf}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0xfff, 0x4, 0x1, 0x100000001, 0x0, r0}) 23:10:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x1000002d3, &(0x7f0000000180)={&(0x7f0000000200)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2=0xff010000, @in6=@local}, {}, {}, 0x0, 0x8}}}, 0xfffffffffffffe41}, 0x8}, 0x4008800) 23:10:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = signalfd4(r0, &(0x7f0000000040)={0x3}, 0x8, 0x80000) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000240)={r2, r1, 0xde4b}) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0='bpq0\x00', 0x3, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000000)=""/60) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "48ebef08be9968c3176ad3af47cdfbe46ab9fdea58fe8b2010ce6a81db3f7b560d57e54c05db"}, 0x36) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0), 0x4) 23:10:53 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='? '], 0x2) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8, 0x2) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x3, 0x6, 0x2, 0xffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000001c0)={@remote, r1}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000200), &(0x7f0000000240)=0x4) 23:10:53 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x4, 0x1, {0x3, 0x1, 0x1, 0x3, 0xfffffffffffffff9}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) sendmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 225.645390] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 23:10:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00ns=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3d83950e87d0820102e6be315130a1fdd1532119c7476a07d418851d0da3642b25eed8ea3d4e221a696069", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:10:53 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open(&(0x7f0000000540)='./file0\x00', 0x80, 0x4) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000a40)='/cgroup^#)\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000001d80)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003440)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003480)={{{@in6=@dev, @in=@initdev}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000003580)=0xe8) getpgid(0x0) getresuid(0x0, &(0x7f0000003640), &(0x7f0000003680)) stat(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)) gettid() fstat(r1, &(0x7f0000003780)) getpgid(0x0) getuid() getgid() getpgid(0xffffffffffffffff) geteuid() getresuid(0x0, &(0x7f00000039c0), &(0x7f0000003a00)) getresgid(&(0x7f0000003a40), &(0x7f0000003a80), 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003f80)) lstat(&(0x7f0000003fc0)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000040) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, &(0x7f0000000780)}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000042c0)=ANY=[@ANYBLOB="00022bbd7000fedbdf253e4bb61228000200040004000800020001000000080001000300000008000100c581000008000200ffffffff6800010008000300000000004400040020e400000a0067240000000f01bc0700003000020000000000000000aa0200000010000100750040000000000000000000000000000000090000000000000000000000000000000040d881a079c944f34225565000d29b31abc9e9a684"], 0x1}}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a2ed3d09631040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) 23:10:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001640)={{{@in=@initdev, @in=@remote}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) epoll_create1(0x80000) getgid() sendmmsg$unix(r1, &(0x7f0000001740)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000340)="bdad8775ae69e5285cb238ad2cbbfab583971993b833133e55d59b03b24b85e94a4a041c42f661d5eccb1f4eb9a4ba70a176360fcab1092144e3297646034f012606de574481a380c4087631c417651199a7fa0cfa19deaa0dbc792c30cb2f2a72f37f32cceeed12b8baab6f34fe9c270e8a77cfc3b2fcc8d12609994a7ff6cabf2e31fb2e9c0705ed982d9aea33c5b0a2f22bfab2806c5fe1ba0f3ac8f47b5596889b942590f5de6826ee02abd6dfb122c517fecbe9fba6d6b52e6556d0bf17b53b8ca3914b029286fbf1c08670", 0xce}, {&(0x7f0000000240)="68eeed50041dc7a8f8e03b04d3c1693e1b7691ada1b50a6f913b283da1eaa23dddb77b8559d6202cd619c757bde7078714402185c07378ebf106558bc8377205e2c95dc36c3ab2c4fb6562fad0f5774bfce0", 0x52}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f00000002c0)="c19fd090736931d1f1bc09720221c061da2c168cb350c0373b43a18dd90b9fc9e3088fcf58c436b8e9580da7eed9d78021152cfe67b1c31f938d93993f7adc510a199c03", 0x44}], 0x4, &(0x7f0000000480), 0x0, 0x4}], 0x1, 0x40010) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x1) kexec_load(0x3, 0x0, &(0x7f0000001640), 0x320000) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="7072616e733d66642c7266536e6f3b998a4232ad9d6844a069730fb1d1be3d32239585a250301be7053bfb5f7e4eac31fcec8d1f9f4d27500d0e54ea86cb4790240eea7977e056079c705059bc2c9686cc4205413d9be8987634e3b75275bf0e7f50ed2094508036c522085eb9a11fb72f684f8627cd57b7a953e5f7d384b5f006f8f3f1519c10f640ac0fc6b3815c7d5c1461d69f4f2ca3462eaa48b7823e9dff43916a4d5a268a51fc5c30af52c795b4fa5931e7dbb8635418fa25d99005a744bc24f58054b8aeb257ee2ca63a1932", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c001ac8c9181134d4825cdd149da41e5e36c87069edb06ed523f6ae74a8542a5a5d78c3ff9463d1dbc9d2d3f8134b2b76cc12872c00592f3db92cf2a75ed1c30811e0ffb1a268562573e1a48418d72cb869f150cdf25dc7ba362b017711454a988b14a552"]) [ 225.804277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 225.849866] binder: 10151:10164 transaction failed 29189/-22, size 24-8 line 2802 [ 225.867961] binder: 10151:10164 BC_INCREFS_DONE u0000000000000000 no match [ 225.876464] binder: 10151:10164 unknown command 155053474 [ 225.883456] binder: 10151:10164 ioctl c0306201 200003c0 returned -22 [ 226.370675] IPVS: ftp: loaded support on port[0] = 21 23:10:54 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:54 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x9, 0x8, [], &(0x7f0000000080)}) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, 0x0) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r1, r1}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 23:10:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 226.588199] binder: 10151:10181 transaction failed 29189/-22, size 24-8 line 2802 [ 226.597337] binder: 10151:10155 BC_INCREFS_DONE u0000000000000000 no match [ 226.620826] audit: type=1804 audit(1555715454.582:60): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir393063939/syzkaller.Ux5i6J/128/file0" dev="sda1" ino=16925 res=1 [ 226.660370] binder: 10151:10187 unknown command 155053474 [ 226.666169] binder: 10151:10187 ioctl c0306201 200003c0 returned -22 23:10:54 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x20, 0x22ca0bc, 0x100000000, 0x80}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x0, 0x8000, 0x8000, 0x1, 0xffffffff, 0x7, 0x61eed71e, 0x3, r2}, 0x20) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56b6c5820fae9d6dcd3292ea54c7beef0af516f590c2ad33b168364b095f51e22ddfbf51b7c2e0cd49045639c78a442d7d95d15ede14caf3e6bab28363e85f2e84b5a6019c53ad", 0x48) recvmsg$kcm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/143, 0x8f}], 0x1, 0x0, 0xfed2}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'bridge_slave_0\x00', 0x5}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r2, 0x1b, "17e0ad71c285104a9a729888b31e1e87f6e333b53f393070731127"}, &(0x7f0000000340)=0x23) 23:10:54 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFCONF(0xffffffffffffff9c, 0x8912, &(0x7f0000000540)=@req={0x28, &(0x7f0000000500)={'bond_slave_0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x1}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0xfff9) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x80001, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000240)=""/82) sendto$isdn(r3, &(0x7f0000000080)={0x1, 0x8001, "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"}, 0x102, 0x40, &(0x7f00000001c0)={0x22, 0x6, 0xc90e, 0x0, 0x4}, 0x6) sendto(r3, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000040)=0xba) 23:10:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x3c, r1, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x3c}}, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x400000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/33) 23:10:54 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30}, 0x30) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) 23:10:54 executing program 4: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000780)='./file0\x00', 0x0) mount(&(0x7f00000004c0)=ANY=[], &(0x7f0000000640)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) clone(0x900, 0x0, 0xfffffffffffffffe, &(0x7f0000000c40), 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r0, 0xd, &(0x7f0000000040)={0x2, 0x8}, &(0x7f00000000c0)) 23:10:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000100)={0x1, 0x0, 0x1, 0x0, {0x3, 0x6, 0x7f, 0xffffffff}}) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x8040001, 0xfff) ioctl$CAPI_INSTALLED(r1, 0x80024322) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@rose={'rose', 0x0}, 0x10) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000200)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x6, 0x0, 0xdc}) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 226.768428] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 0, id = 0 23:10:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000d26000)="2fec7a08921def086a449fc32cda3d", 0xf, 0x0, 0x0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x43, &(0x7f0000000040)=""/30, &(0x7f0000d1c000)=0x1e) 23:10:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() socket$netlink(0x10, 0x3, 0xf) ptrace$setopts(0x4206, r2, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 23:10:54 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x10270) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in, 0x0, 0x7, 0x0, "e6b68c861975c7a61118a7bee192e6e8b7c82052664b7b43e08f60ada7f21b10d52c59185bea93367629af0961e083cb1dead8efb30aa8569a33e88a06e9748a5dfa38757a2d0e11b7eafa492ef7ca4d"}, 0xd8) socket$inet_smc(0x2b, 0x1, 0x0) [ 226.825847] overlayfs: filesystem on './file0' not supported as upperdir 23:10:55 executing program 4: socket$nl_route(0x10, 0x3, 0x0) 23:10:55 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30}, 0x30) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) 23:10:55 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000080)=0x400000000001, 0x9) connect$inet6(r0, &(0x7f0000000040), 0x1c) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000003280)={'mangle\x00'}, &(0x7f0000000380)=0x54) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:10:55 executing program 5: lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) setresgid(0x0, 0xee00, r1) r3 = getegid() mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x20000, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@posixacl='posixacl'}, {@version_u='version=9p2000.u'}, {@cachetag={'cachetag'}}, {@access_any='access=any'}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@version_u='version=9p2000.u'}], [{@seclabel='seclabel'}, {@obj_user={'obj_user', 0x3d, '/selinux/avc/hash_stats\x00'}}, {@uid_lt={'uid<', r0}}, {@permit_directio='permit_directio'}]}}) setresgid(r3, r3, 0x0) setregid(r3, r3) 23:10:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101000, 0x0) 23:10:55 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) clone(0x1000002102801ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) lchown(&(0x7f0000000180)='./file0\x00', r0, r1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x121000, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='ip6_vti0\x00', 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000000, 0x0, 0x40000}, r3, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 23:10:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)=ANY=[@ANYBLOB="1400000015000103e73d44000000000000000000"], 0x14}}, 0x0) 23:10:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0xa) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f00000001c0)) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) 23:10:55 executing program 5: userfaultfd(0x0) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, r2, 0x408, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000440)=0x1) accept4$ax25(r1, &(0x7f0000000040)={{}, [@rose, @netrom, @bcast, @default, @remote, @remote, @bcast, @netrom]}, &(0x7f00000000c0)=0x48, 0x800) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendfile(r0, r1, 0x0, 0x7ffff000) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r2, 0x30b, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x13e2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000280)=0xfa1, &(0x7f00000002c0)=0x4) 23:10:55 executing program 4: r0 = socket(0x400000000000010, 0x802, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) write(r0, &(0x7f0000000000)="24000000210099f0003bf90000ed190e020008160000000100ba0080080002007fbcfe6f", 0x196) 23:10:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 227.514949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=10264 comm=syz-executor.5 [ 227.589428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=10264 comm=syz-executor.5 23:10:55 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101000, 0x0) 23:10:55 executing program 5: capset(&(0x7f00000fc000)={0x819980330}, &(0x7f000047efe8)) r0 = socket$netlink(0x10, 0x3, 0xffffffffffffffea) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) modify_ldt$read(0x0, &(0x7f0000000040)=""/4096, 0x1000) 23:10:56 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:56 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x7f, 0x2000) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000600)=0x80010001) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000580)) r2 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000380)=0xfffffffffffffdaa) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8002, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x100000000100) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000400)='trusted.overlay.origin\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x1) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000002c0)) r5 = dup(r4) ioctl$FICLONE(r0, 0x40049409, r5) readlinkat(r3, &(0x7f0000000000)='./file1\x00', &(0x7f0000000640)=""/116, 0x385) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) dup(0xffffffffffffffff) pread64(r3, &(0x7f0000000300)=""/14, 0xe, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r5) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000500)={0x0, 0x1, 0x400}) getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f00000001c0)=""/141, &(0x7f0000000280)=0x8d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r5, r6, 0x0, 0x8000fffffffe) connect$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x3, @loopback}}, 0x1e) 23:10:56 executing program 0: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000100)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='@procmd5sum-}vmnet0\x00') mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766646e6f3ddf89c3ce94bfab180c676c631efba5d226678d98f8da25344aefa2ca48e46e56ff170d2a7b6fceb7ea762eddc459cee24817c84dbaa547f0c5bf5fe01d035300689e7b61f1622e7a320d202c74d4fa8698113cfda4b391fa0283b2dd6c0e6b46992f881ed8", @ANYRESHEX=r1, @ANYBLOB=',\x00']) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) chown(&(0x7f0000000140)='./file0\x00', r3, r4) fanotify_mark(r2, 0x4, 0x1000, r2, &(0x7f00000003c0)='./file0\x00') 23:10:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101000, 0x0) 23:10:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000002c0)="ab10061705ffae2ee2490b3722a7d206a4270c200803e174c474b09ee6229e7c2adc1b637bb413c5b985d9d87cfa58fdd270f327c0a5933f968a46b74b85c30f75a858126ee85b2f7411df847b2a4bcea902b6166a5a36e85e8f77630e659a9b5d1e863ec5ddd6d8e7965c7c65127482809dbc546d0425ff91b14c38798da35f6ce3af546427a6f30fa33bc8541f8f9e9c8ecab7bb2a9c902e82f9", 0x9b, 0xfffffffffffffffd) keyctl$assume_authority(0x10, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x4, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x2}, 0x20) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) fcntl$setstatus(r2, 0x4, 0x42804) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 23:10:56 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000080)='ramfs\x00\x9b\"WaH\x96R\xefry\xd3\xe4I\xf0\x03\xc2\xb84\"&\xe82\xce\xf6\xfd\xd4\xdb\x8f\xf1\x91\x82\x80\xa8\x97\x1d\xdeo\x04c\x1e\xc9\xc3{k\xd4\xbd\xb7pAC\x98\xf3\xa11(\xe0[\xe3\xff?\xa8', 0x50, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0xee, 0x200, "7076af001c2f6e98a5e4c2c6663e87c8902384a268b563316f169bc269bde17be45c3e2f9720d9721b347bc11864ac540602543e386a82c09fd27ef0306c6564e5733edc58188da38a6e68827a4748c538563b675e30dc899e30ae758c36c00e075478c7dd993461ba4fc5c86da01b7466c550a4e4ee341151bd541d81c9f8769e852ab11460a13838f996b8cd26815715fa4cb927ffa6ecd5ddfff9cdedafba88a0b34877f64e01390705eca93515d0358473eff4f2f1c1906a7ca5d0f4c6deccd62527d8d4e5580994e8a4e244a0c22460972c246ceb8f064d51cf9956564dbfa709ad35ba"}, &(0x7f0000000240), 0x400) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 228.243523] 9pnet: Insufficient options for proto=fd 23:10:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x4, 0x6}, 0x8) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "a04a972c08c097b89e9f9098287ad68604a1e6d6"}, 0x15, 0x3) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x400000, 0x0) 23:10:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="74720100733d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) 23:10:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101000, 0x0) [ 228.390109] protocol 88fb is buggy, dev hsr_slave_0 [ 228.395378] protocol 88fb is buggy, dev hsr_slave_1 23:10:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) 23:10:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xffffffffffffe736, 0x40) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000340)={0x8, 0x1, 0x48e, 0x924, 0x800, 0x4, 0x7fffffff, 0x9, 0xffff, 0xfffffffffffffff9, 0x1, 0x6, 0x3, 0x100000000, &(0x7f0000000240)=""/228, 0x9, 0x10001}) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="25962c6f3d988c87edc57c4bd404c49ebf3f760a355b7109bb5a31cbab7a1896d1dedaab55f4b2215acda3fc97ba2295572ed3dd8eea00f659d73fe4d155bc6eefe01f6ac4a556f15913bf21f48d5f1c2dfd41f63c5c49d9032c48f317fa61835a3517b50fccd16f0314ff36e3512b4f58d46dcf6aae1bdecc4d260d51a5fd5a1f0a93bd6cd0f6abb535f57110e376d8a7d36753163dfa406e6cfcd5c1", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0x707769b0584ce0cf) [ 228.627663] 9pnet: Insufficient options for proto=fd 23:10:56 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) [ 228.670541] 9pnet: Insufficient options for proto=fd 23:10:57 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 23:10:57 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x2c, @loopback, 0x4e21, 0x0, 'sh\x00', 0x4, 0xffffffff, 0x57}, {@multicast1, 0x4e22, 0x2000, 0x5, 0x7185, 0x7}}, 0x44) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xb5, &(0x7f0000b4b000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000019004100000000000000000002200000ff00000000000000080001007f000001c15ed3a856d379417db8f6a3399a90167edf1afdae"], 0x1}}, 0x0) 23:10:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:57 executing program 3: r0 = socket(0x8000000000000010, 0x1, 0x0) write(r0, &(0x7f0000000080)="3e0000004e001f00ff03f4f9002304000a04f51108000100050000020800769e11579131f4941fd4130902800000000000000008df7f00a362969c8f849c", 0xc0) 23:10:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) 23:10:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200000, &(0x7f0000000240)={'trans=unix,', {[{@version_L='version=9p2000.L'}], [{@obj_user={'obj_user', 0x3d, 'wfdno'}}]}}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r2 = getuid() mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r2}}, {@noextend='noextend'}]}}) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') write$nbd(r1, &(0x7f0000000300)={0x67446698, 0x1, 0x4, 0x3, 0x1, "18eb45426caf75213df1e1e2ef489549cba5f7f99f0d0eb5d07f0d404adcfe6a3be6364d3133586157e40a2f9287e18cbf03708e6ac81fed73df9a655ed052bc508a1140b2ebcdbf1845df285f8c6405729f9f2d19cfc6513aec8781c99f08b6991efdc55c17a7021537aba7c877f89feed64d6a51a8de41f0e79405397229f6300d3652ab14f179c5c1c6f7e70652e3f2152ea9e61bb91057e73a8eef7e71dfb6e6b6d37d02014474a46e44d5c34a8d3498459e83da63749c520332e941175105fd3cacd89f9b6c042ea0415e2c906fedda40cb1fcb083de79e"}, 0xea) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) 23:10:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0x0) tkill(r2, 0x8001004000000016) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000)) [ 229.163130] 9pnet: p9_fd_create_unix (10359): problem connecting socket: ./file0: -111 23:10:57 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 229.218182] 9pnet: p9_fd_create_unix (10367): problem connecting socket: ./file0: -111 23:10:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0xaaaaaaaaaaaabd6, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400808}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r3, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8, 0x200000) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x6) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:10:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000000)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472615d733d66642972666409639421c02add1b15001fad6f3d", @ANYRESHEX=r1, @ANYBLOB="2cfe9df3b6b63873957766066e6f3d78beb01420c578f9180a2d61242d4c51099989bf0459698be659ecacaa67dc9514455dac67de905ec6186ad67af6ab8029a8d4cf470cffddd9826fe49d8a3a358e1f441b2b50fb0657976bae44842124a4da7e80", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r2 = fcntl$getown(r1, 0x9) getpriority(0x3, r2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0xffffffffffff325c, 0x14, [0x0, 0x4a15, 0x9, 0x8000000000000000, 0x8d7b]}) 23:10:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) [ 229.313806] 9pnet: Insufficient options for proto=fd 23:10:57 executing program 2: socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffff79, &(0x7f0000000140)=0x8000009) perf_event_open(&(0x7f00000004c0)={0x2, 0xffffffffffffff33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x3) geteuid() pipe2(0x0, 0x84800) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./fike0'], 0xa) close(r0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) lremovexattr(&(0x7f00000000c0)='\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00') clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x800, 0x5}) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) execveat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000200)='com.apple.FinderInfo\x00', &(0x7f0000000240)='com.apple.FinderInfo\x00', &(0x7f0000000280)='\x00', &(0x7f0000000300)='com.apple.FinderInfo\x00', &(0x7f0000000340)='com.apple.FinderInfo\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)=')\x00', &(0x7f0000000400)='\xecvboxnet1mime_typeppp1@vmnet1*%em0user\x00'], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) 23:10:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x1) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x6c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f00000000c0), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x9, 0x8, 0x88f7, 'syzkaller1\x00', 'bcsf0\x00', 'caif0\x00', 'ip6erspan0\x00', @dev={[], 0x1a}, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0xff], 0xb0, 0x110, 0x148, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x1, 0x6}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}}, {{{0xf, 0x0, 0x0, 'ip_vti0\x00', 'ip6tnl0\x00', 'hwsim0\x00', 'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8, {{0x4, 0x6, 0x6fb, 0x1, 0x4}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{{{0x9, 0x9, 0x88f5, 'ip6erspan0\x00', '\x00', 'nlmon0\x00', 'veth1_to_bridge\x00', @dev={[], 0xa}, [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff, 0xff], 0x140, 0x140, 0x178, [@realm={'realm\x00', 0x10, {{0x8, 0x7fff}}}, @physdev={'physdev\x00', 0x70, {{'team0\x00', {0xff}, 'bcsf0\x00', {0xff}, 0x1, 0x1}}}]}}, @common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xffffffffffffffff}}}}, {{{0x1f, 0x8, 0x6002, 'netdevsim0\x00', 'rose0\x00', 'eql\x00', 'vcan0\x00', @dev={[], 0x2a}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff], 0x158, 0x218, 0x248, [@physdev={'physdev\x00', 0x70, {{'veth1\x00', {0xff}, '\x00', {0xff}, 0x4}}}, @helper={'helper\x00', 0x28, {{0x0, 'RAS\x00'}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x5, 0x1ff}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x4c23, 0xfff, 0x0, 0x0, "95311654c48b34945f3223881235eae2efcfa85e1768e70b0acb8136a4063d90424438ac13425b459ba7fb726a75f721ccef20a91232e4a3fe115e1e420d6b11"}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xfffffffffffff000}}}}]}]}, 0x740) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:10:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) 23:10:57 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:10:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x2, "6883a546c8300b7d"}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x4, 0x4) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="52b15af5add381ccb37cd80248a096514906db3c6b6b7c0afa5ac1615afeac6ddcbddf60c542dd7153caa4387c230c6d6d61aa901e14166bbb748aa7b0f9025921"]) 23:10:57 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 23:10:57 executing program 2: r0 = fanotify_init(0x0, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000080)={0xfffffffffffffe5c}, 0x2d9) [ 230.092835] 9pnet: Insufficient options for proto=fd [ 230.146280] 9pnet: Insufficient options for proto=fd [ 230.400891] IPVS: ftp: loaded support on port[0] = 21 23:11:00 executing program 3: perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:11:00 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 23:11:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR, @ANYRESDEC], 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) gettid() r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) epoll_create(0x0) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xb8, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000013c0)={0x0, 0x80000, r3}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) recvfrom$inet(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x2002, &(0x7f00000012c0)={0x2, 0x4e22, @remote}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x20e, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000}, r4}}, 0x38) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000040)) unshare(0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000080)=""/62) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000001300)) 23:11:00 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 23:11:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5729f47a38f5d307692923f1f2a04868", 0x10) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:00 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:00 executing program 2: 23:11:00 executing program 0: r0 = memfd_create(&(0x7f0000000000)='em1vmnet1-\x00', 0x5) fchdir(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 23:11:00 executing program 3: 23:11:00 executing program 2: socket$inet_sctp(0x2, 0x0, 0x84) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) truncate(&(0x7f0000000080)='./bus\x00', 0x200) unlink(&(0x7f00000002c0)='./bus\x00') sendfile(r1, r1, &(0x7f0000000240), 0x808100000000) [ 232.475074] 9pnet: Insufficient options for proto=fd [ 232.489464] 9pnet: Insufficient options for proto=fd 23:11:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0) 23:11:00 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000200)) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x21, 0x101000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x22000, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fuse\x00', 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/loop-control\x00', 0x4e720caec9354d45, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001700)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$cec(&(0x7f0000001980)='/dev/cec#\x00', 0x0, 0x2) r1 = dup(r0) accept$unix(r1, 0x0, &(0x7f0000000000)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x400000400000000) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="094130d86c2782e148cef18fccc5b1629d356020521e3d32ca593fa81fc5e72c50b9472b1902000000000000006f7c855b97b6ae269d72eb"]) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0x200000, &(0x7f00000002c0)=ANY=[]) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) 23:11:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="697524dbd929e7438c18e423709c", 0x0, 0xb22}, 0x28) [ 232.636936] 9pnet: Insufficient options for proto=fd [ 232.659944] overlayfs: missing 'lowerdir' [ 232.684536] 9pnet: Insufficient options for proto=fd [ 232.697090] overlayfs: missing 'lowerdir' 23:11:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="697524dbd929e7438c18e423709c", 0x0, 0xb22}, 0x28) 23:11:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa88000000000086dd60b4090000032f000600000005000000000000000300000000000000000000000000000000000001830090780000040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0) 23:11:01 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:01 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 23:11:01 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 23:11:01 executing program 2: 23:11:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) exit(0x6) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000100)={0x2, 0x4000007, 0xd3, 0x0, 0xfffffffffffffffc}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7702006e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x8) 23:11:01 executing program 2: 23:11:01 executing program 3: [ 233.321455] 9pnet: Insufficient options for proto=fd [ 233.334076] 9pnet: Insufficient options for proto=fd 23:11:01 executing program 3: [ 233.424136] 9pnet: Insufficient options for proto=fd 23:11:01 executing program 2: 23:11:01 executing program 3: 23:11:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8005, &(0x7f0000000b40)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x502, 0x4) sendmmsg(r0, &(0x7f000000acc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000002980)="36962449972f71ba20814a027fd1f292d8c185442ad6b9f79125561eca8dbcdd0981a4f2c15c274b7ec575a57112f633dd47e577d0df5833031415330afe6ee50958ddf6f7ae76d56f3fafd017c147226bf5388cb5bc015cc62913cf68653b5e852eb78b50ba1b98557d060100a9394751d8d095c524802fc60a761e0467b2d7e3ea8329f652183ead8ab95974993fc0e725adf214a97d451f6402ab11b7ee4acad85dca7533e4334a18732293304f5823c3edf9e20c71e7f8157598e54c857dd91c1f9c369ca8e6dd94fa597b1b24670930463cb1a812a078475a04943cc1b6d7fd2daecd87dc458c94438894fa6d81494624c1c559b35d7fc2c68307b6bf1c2546b1d7e044000a9e0aa4a212735fb6d6740b873d051de8a2ba94623e26fa2fa81b0c8f8b5e1f0bcf65ba24809abfbc554e0ab222bfdd317249f79b4a09e7df1d3264f7fe8ee5347dfedbc56438c155dc86731310df8fe17b544381c888a8bb90c540f0456cd23cbadf03404caf7484755b639fc1a4fde05b3e957065c847c885a046ab6ec148e08a00e275e2a6e078d326f201e315d19f24864f49f1098786a4da11c61d2a2b60b105af850fd9025b648ab72bb762ddec58f279212d9aa277bd063c9d6e816fb2979d8bb2a65ce8853001880b365616391a24149d66f07b5df23776b43194d8dc04ebd93a18fb6513dbf62e0efde7aa566dcb2efaf359d2efaa1ee8092f0bdd786b7bf9722ce08883e55f38ff5af3ff9c8c28210fe753151f78d99e7a71e65cccd2b2725b4d9d19ed4fde710b01aee135da47c8607dfe31f230dba50debafed54ec747eab1c01d31e75427cfb276f4805b6c8005b9657cb991661cb9de9cad62007d2730e0e8465b23c34b7024c6db7510230b3755342e352cb5ad3337f1ad800f571719f6fd4ad512162973d5ae497b81f39d0fa3629c84c6e0bb2a8bde47197c83855b8ae2d680cb45b65618138c380ddb7825a2f48215333351f7c503892a4f7cf117d88e0728661412f32f087bf1d3d50f6ff4ce61cd0aaddf39cb5b39c369e1cd02654543b45364f01ebe816c823f5780d6c6a685488d6c8f0101b6ecea36be363144678d7ac0bc9bb184f9f4f965920d117f3d54eac3237dc6e9c02d9dc3186829c2b0cbb1e50be1550228486f6142db707980f54f1eb7d8d3f93def36dc91ed05d5aea807b39549c6b679e0d6d16b2f88662dc1ef864271a5d3f2779e6105b6a12cef60da20e21e808a307b379db9b34b13508b40ecd49c443606b7987b6bd54050f13fe38a0d50df5f35d4b4b4aec0dbca957b3ca83855a96cb3f1915b6faff3533f87ea4d3e11fc3874dc6edec0cb91e2b57e8f9d1f54cabce54757d5fe1f8ce09a4cd96af96d4e1214d18eee28d3f7745cfa9f727a8ed9df439674a1e1fc6d8a62c5ef0f69cdfd5b28653c1bced65c130dbdbdf1f47161f1613767928a5fd1c466cc3b8128df4a773f95b2795e50491afe9ef95b24767299abf51e733e4d37773dc5b7eadba4213c5b33bf4014624e88da66aae56c67347e4fa608bbfed67d002fd222fe7198b8b263d346139f818c3b62dd92a99215ecc77451778e910242466ea5f04589d2774503ec3050f316b5166e315857bac9b5aee00d3862b4df6824f4ef604ed3f55c6f141a053cf7f1dd20341052e1345e3f8a5e1b137bfc89829bd7d75290d008181051445cfddb756958cff9295069e7f098e5e6ecdbf5f1ac8a3a509252e89f7981886a578ade4564b10edf698f182ca53fbf94e0d5f542dae4bf220ca59bfe548828bf18784ef1afc026f79ccfba9459cb92b1d1bf912a614ef98e8903b85a99858d9935431abff2d6568c0f7ee320a44df059d52f6a7638d71216f51d6e27a57b05adc8e3729e31f5e8fac055ca057f7c762e9da11d16c783dc8eba0fd58b25b5dac1e5503cd5ad2385686f9f7d829a7f9f5e1a0449c0c5e3c8ed9e4f3553aad6bc7db7099ba2717fab496913b340cc3762a1bf58c91ce965e2202664491fcbdde75d4e7b3e2558f9100"/1453, 0x5ad}], 0x1}}], 0x1, 0x0) 23:11:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x4000000000003, 0x80000000c) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 233.550487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.621184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 23:11:02 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:02 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8005, &(0x7f0000000b40)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x502, 0x4) sendmmsg(r0, &(0x7f000000acc0)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000002980)="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"/1453, 0x5ad}], 0x1}}], 0x1, 0x0) 23:11:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000380)={0x1, 0x1}) 23:11:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) creat(&(0x7f0000000000)='./file0\x00', 0x10) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 234.149614] 9pnet: Insufficient options for proto=fd 23:11:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1002, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="38a8b96c023af2b620191aee39aac74dfcabcf2542fc9ceae49acff22d80673a553b30e9ed08086a11641b2ec844607779e89c5202886489c39d7ac0b670fe0a7d8a98865e57e2e7262b376ffd17a761698a6b8954cef013d28f9d28f2a3bc1dc4561d35553726590517892b6c", @ANYRESHEX=r0, @ANYBLOB="2c002bf61589ae664271fb3c00c2d4a1858ebef90b76fd954feab1e5b9a0"]) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r1}}, 0x18) 23:11:02 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 23:11:02 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000200)="2400000021002551075c0165ff0ffc020200000300100f0007e1000c0800100000000000", 0x24) 23:11:02 executing program 3: 23:11:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:02 executing program 3: 23:11:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr}}) 23:11:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) [ 234.270729] 9pnet: Insufficient options for proto=fd [ 234.286010] 9pnet: Insufficient options for proto=fd 23:11:02 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) bind$isdn(r1, &(0x7f0000000240)={0x22, 0x70, 0x80, 0xc22, 0xffff}, 0x6) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000300)={0x0, 0x1}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="2cfe07646e6f3d204cf19f02ed55eabf", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000280)=""/102) 23:11:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000002c0)='threaded\x00', 0xfffffd95) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fff}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.u\xe0per\x00', 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 23:11:02 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'syzkaller1\x00', 0x400}) [ 234.976812] 9pnet: Insufficient options for proto=fd 23:11:02 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) creat(&(0x7f0000000000)='./file0\x00', 0x10) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:02 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 235.055404] 9pnet: Insufficient options for proto=fd 23:11:03 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:03 executing program 3: perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x858, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='cpuset\'*$#\x00', r0) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) signalfd4(r1, &(0x7f0000000140)={0x6}, 0x8, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x8, 0x0, 0x2}, 0x5}}, 0x18) r4 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RWALK(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="710000006f01000800a6000000000800008000000000210100000002000000000000805509000000070000000000000010030000000600000000000000cf00000000060000000000000050040000000100000000000000450200000000000000000088a8ff6fc68789b3dbdc0dd5809a661c2c54faaacb43568e0000000084b0675cdc854c4cfecb8fd9bdf235653627c43b7db7557822131d225c8ee22aa6c3df65a3024561cfb1a22a47c3a6269c0765e2ee12ee3792b49a5283c8059cfc9239bb1c18e3e26c4cbfee4c"], 0xcb) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r4, r6, 0x0, 0x8000fffffffe) write$eventfd(r2, &(0x7f0000000080), 0xfffffe5e) getdents(r5, &(0x7f00000003c0)=""/16, 0x10) flistxattr(r6, &(0x7f0000000480)=""/194, 0xc2) perf_event_open(&(0x7f0000000100)={0x2, 0xfffffffffffffeeb, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:11:03 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x2, 0x6, [0x5, 0x6, 0x2, 0x7fffffff, 0xffff, 0x1000]}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x100000000, 0x20, 0x8004, 0x7, 0xcb, 0x2, 0xffffffff80000000, 0x8000, r1}, 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000240)={0x7fff}) ioctl$KDMKTONE(r3, 0x4b30, 0xcb) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x1a) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000dc840a0375447aa9000000", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=0x0) r6 = gettid() ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x6) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f00000001c0)='/selinux/policy\x00', 0x10) kcmp(r5, r6, 0x0, r3, r3) 23:11:03 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x6, 0x731103) mknod(&(0x7f00000001c0)='./file0\x00', 0x10, 0x0) r1 = getpid() fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x2, r1}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_uid={'access', 0x3d, r3}}, {@cachetag={'cachetag'}}, {@cachetag={'cachetag', 0x3d, '&ppp1!\\security'}}], [{@obj_user={'obj_user', 0x3d, 'wfdno'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '(]*{vboxnet1%:'}}, {@uid_gt={'uid>', r3}}]}}) 23:11:03 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:03 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, 0x0, 0x0) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:03 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c8e3f319bd070") prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 23:11:03 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0xff) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="ce0166606e0c71", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x50022204}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0xe02, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000081) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x902, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 23:11:03 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$evdev(r0, &(0x7f0000000140)=[{{0x0, 0x2710}}], 0x10) [ 235.984675] 9pnet: Insufficient options for proto=fd [ 236.025658] 9pnet: Insufficient options for proto=fd 23:11:04 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @random="029cce98941b", [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff89, 0x0, 0x0, 0x0, [0x14, 0x0, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3201]}}}}}}}}, 0x0) 23:11:04 executing program 4: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:04 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000001c0)=@md0='/dev/md0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='msdos\x00LE\x9d\xc1HXh\x9bM\xe4\xc2\xa6z\x87\xde\x06\r\xe64U\x1a+l\xacu)f\xa7\xe5MIC&_\xa9\xdd\xe0\x1f\xdah\xc6\xa3\t\'\x85\xc9\xd2sb\x9d!\xa8\xf3\xc1\xd4\b\xf3\xf8\a\x18(D\x14:\xfa+\x92\\l,dF\xf7\xea\x9a:\x0eU\xc3\xc9#]~!e/\xefK\xd3M @\xd3\\\xf8\x15\x86n\x93=\x87\'h\x11\xc7Yc\x1f\xc8\x15\"\xe4h\xde\x9fjN6\x95\x9a', 0x0, 0x0) 23:11:04 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000000)={0x7, 0x7}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 236.192939] FAT-fs (md0): unable to read boot sector [ 236.218541] FAT-fs (md0): unable to read boot sector 23:11:04 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, 0x0, 0x0) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:04 executing program 4: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) 23:11:04 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_SET_STATUS64(r0, 0x1277, &(0x7f0000000240)={0x600, 0x60000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8bb4291ade0fc622c040876c73485e270dd3f0a272263403bbf2df484fc6faf83b64abddef9fbe0be77cc3b4212cfda58e473f00220c4e55b1cf29a2aa00", "142b8c1dcfe65a8b2b506f2850c942327ff07f5ecf3aea3b1604693302fed4d519dd76f08e7fccde99938b05d5d1ed72d86f7a38bf3841fbc12eab7cbbefaf34", "be836e8118b12822a39ce6fce8a8b3b53772ed662e7e0ff9d7b5b5a703b823eb"}) 23:11:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1423, 0x3) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000100)={0x0, {0x136, 0x8001}}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x9, 0x8, 0x0, 0xffffffffffffff9c}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) fcntl$getown(r2, 0x9) write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0x0, 0x7}, 0x10) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0x17ed579e3f86284c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='tr!ns=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) write$selinux_access(r2, &(0x7f0000000240)={'system_u:object_r:logrotate_var_lib_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x6}, 0x6c) 23:11:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000001240)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 23:11:04 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth1_to_team\x00', 0x40d}) dup3(r1, r0, 0x0) 23:11:04 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:04 executing program 4: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) write$tun(r1, &(0x7f00000001c0)={@val={0xffffff94}, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}, @gre}}, 0x66) 23:11:04 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:05 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, 0x0, 0x0) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:05 executing program 5: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) 23:11:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:11:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:05 executing program 5: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:05 executing program 5: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x4000000000000) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB='<\x00']) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r2}) [ 237.786709] 9pnet: Insufficient options for proto=fd 23:11:05 executing program 3: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000000)="8da4363ac0ed0060000000000000004d010001c4000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a0000010000000000ffffffffffffffff5f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 23:11:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x121002) write(r0, &(0x7f0000000240)='Q', 0x1) 23:11:05 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 237.928605] 9pnet: Insufficient options for proto=fd [ 237.959550] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop3 23:11:06 executing program 2: perf_event_open(&(0x7f0000000180)={0x200000002, 0x70, 0x329, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:11:06 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:06 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$nbd(r1, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x1, 0x3, "d7f62f7a69c3dfb3cf912b7966af6b5b5889997d0e8fcc31129c26b795366e4ece43391b9fcf89aea28299583516a54c5aff9d0b97eb0d31698de0830896cbe3d46703ecedf2e9a79e1d72844b8dd8591381f4e61127a1e5aa7c3906a3e0"}, 0x6e) 23:11:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10800, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x8, 0x287}, 0x20}, 0x10) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x0, @empty, 0x4e24, 0x4, 'lblcr\x00', 0x11, 0x5, 0x14}, {@remote, 0x0, 0x3, 0xffffffff, 0x5, 0x20}}, 0x44) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000002c0)='./bus\x00') sendfile(r3, r3, &(0x7f0000000240), 0x808100000000) 23:11:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x1, r1}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 238.605097] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 23:11:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/117, 0x75, 0x0) 23:11:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000001c0)=0xc) write$cgroup_subtree(r1, &(0x7f0000000340)={[{0x2d, 'io'}, {0x2d, 'pids'}]}, 0xa) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/13, 0xd}], 0x1) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77ff646e6f3d", @ANYRESHEX=r0, @ANYRES32=r2, @ANYRESHEX=r3, @ANYBLOB=',msize=0x0000000000000101,access=any,uname=wlan0vboxnet1,fscache,noextend,cache=loose,\x00']) 23:11:06 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000280)=""/11, 0x9) r3 = dup2(r2, r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x129f0817) syz_execute_func(&(0x7f0000000380)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110c442019dcc36450faefd") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000240)={@rand_addr="999ca17e720269107432474fb6711634"}, 0x14) ioctl$TCSETSF(r3, 0x5404, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 23:11:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x7fffd, 0x800000000008b) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 238.752861] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 23:11:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10800, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x8, 0x287}, 0x20}, 0x10) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000400)={{0x0, @empty, 0x4e24, 0x4, 'lblcr\x00', 0x11, 0x5, 0x14}, {@remote, 0x0, 0x3, 0xffffffff, 0x5, 0x20}}, 0x44) r2 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000002c0)='./bus\x00') sendfile(r3, r3, &(0x7f0000000240), 0x808100000000) 23:11:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) fanotify_mark(r1, 0x4, 0x1, r1, &(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="a00000cc37ae8f5107e3bce1ebff4327fe501a02c785dfdde6c6ceac071c3d38c427d46bf305b494ccaeaad79ff46759332481630900c16d9088dc1c08fdf522b0c1fe0b15e2d72539f7cc12295ad60bfef431b5d193c162e9cd8be9667ff73b781885b0cbde6c22be462b1f166d8373ab50e0950b7b6b031b24e388561ff88e2309000000"]) [ 238.832552] 9pnet: Insufficient options for proto=fd [ 238.843744] 9pnet: Insufficient options for proto=fd [ 238.873497] 9pnet: Insufficient options for proto=fd [ 238.882849] 9pnet: Insufficient options for proto=fd [ 238.920493] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 23:11:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/../file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:07 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr}}) 23:11:07 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000180)={0x1, 0x3, 0xffffffffffffffff}) 23:11:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x202, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:07 executing program 3: futex(&(0x7f0000000200), 0x8, 0x0, 0x0, 0x0, 0x0) 23:11:07 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:07 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_ATTR(r0, 0x0, 0x0) 23:11:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x840, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:07 executing program 2: syz_mount_image$btrfs(&(0x7f00000002c0)='btrfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f0000000180)="8da4363ac0ed0000000000102000004d010001c4000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000105f42485266535f4d85563eff682e608e65a20b946b9c776d745364da8eeb8e3867f92cd2471ffb583ec3233ec24a9eaec7f30c33ea6b47df541a38d34cb88f29610a9ac417074def0003b39692fc5bcd83d11a81a2e3928db82b20afee336fd3aadbdb43cd440358defd5518f762e844ea4db3498253c4fc9a38398624af", 0xbe, 0x10000}], 0x0, 0x0) 23:11:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4, 0x14) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x9d) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:07 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 239.736560] 9pnet: Insufficient options for proto=fd [ 239.811008] 9pnet: Insufficient options for proto=fd 23:11:08 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:08 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:08 executing program 3: r0 = socket(0xa, 0x200020000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x400, 0xd8, 0x400, 0x400, 0xd8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ip={@empty, @initdev, 0x0, 0x0, 'rose0\x00', 'veth0_to_bridge\x00', {}, {0xff}}, 0x0, 0x98, 0xd8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@empty}}}, {{@uncond, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_to_bond\x00', 'hwsim0\x00'}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast1}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) 23:11:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 23:11:08 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2, 0x0, 0x2, r2}) [ 240.371667] 9pnet: Insufficient options for proto=fd 23:11:08 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 240.426296] gfs2: not a GFS2 filesystem 23:11:08 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 240.457596] 9pnet: Insufficient options for proto=fd 23:11:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7d3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:11:08 executing program 3: r0 = socket(0x11, 0x2, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 240.603796] 9pnet: Insufficient options for proto=fd 23:11:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20000000000002, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:08 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(0x0, &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 240.657568] 9pnet: Insufficient options for proto=fd 23:11:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x80, 0x0}, 0xfd00) 23:11:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:08 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0xffffff8d}, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x14, 0x3], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x4]}, @mcast2}}}}}}}, 0x0) 23:11:08 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7d3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:11:09 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:09 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$KDSETMODE(r0, 0x4b3a, 0x10001) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}, 0x2c, {[], [{@context={'context', 0x3d, 'staff_u'}}]}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000004c0)={0x0, 0x9, 0x5, 0x4, 0x5, 0x7ff, 0x1023, 0x6, {0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x5, 0x1, 0x40, 0x5}}, &(0x7f0000000580)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000600)={0x2, 0x8000, 0x5, 0x6, r2}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000000)="b5c049fa26909531080720ba0f90492e3f690d7c9aacadbb733bcb2dcdb17bdbea864c4847bb5f0132f7730e5894662ad4b99de1af75d0c579734bb03adfc8abb83bb0b943a5ead4a15088647a0703c48c8826c9e4f5650f1353fd26c8bcdee7714be2ed559a910935eec2f3e3048b4b01b283b620ad51146ab09dfbf686a37ea1249ab5850f480d3a8f60f0dbbb83730dc2c4d0d773b6e528e9b31232baa8d9b85c7d7097d4c0beaf144696d51ddd273f115c5d5b3977e413a0412e279501f14e126e31cf2f", 0xfffffffffffffe89) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000300)=""/134) lsetxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x3, 0x3) 23:11:09 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) recvmsg$kcm(r1, &(0x7f0000001380)={&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/112, 0x70}], 0x4, &(0x7f0000000380)=""/4096, 0x1000}, 0x120) getrlimit(0x7, &(0x7f0000000000)) times(&(0x7f0000000240)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.net//yz1\x00', 0x1ff) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioperm(0xb7, 0x0, 0x5) sendmmsg(r0, &(0x7f0000007fc0), 0x800000000000160, 0xfffffffffffffffe) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='0..:d]:.,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 241.209954] 9pnet: Insufficient options for proto=fd [ 241.255697] libceph: resolve '0..' (ret=-3): failed [ 241.255709] libceph: resolve '0..' (ret=-3): failed [ 241.263262] libceph: parse_ips bad ip '0..:d]:.,[' [ 241.266102] libceph: parse_ips bad ip '0..:d]:.,[' 23:11:09 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:09 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7d3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r1}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 23:11:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) lremovexattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)=@random={'btrfs.', 'security:\x98\x00'}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:09 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000380)={0x1, 0x1}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0x80086601, &(0x7f0000000180)) [ 241.449894] 9pnet: Insufficient options for proto=fd 23:11:09 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(0x0, &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:09 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) select(0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() select(0x48f6760204c00a0e, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xb) ptrace$cont(0x21, r1, 0x0, 0x0) 23:11:09 executing program 0: getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f00000001c0)='./file0/file0\x00', 0x1422, 0x3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000057edb000000000000030000f80000000803000008020000f8000000280400002804000028040000280400002804000005000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/80], @ANYBLOB="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"], 0x520) r2 = msgget(0x2, 0x4) msgsnd(r2, &(0x7f0000000240)={0x1, "5b6cefa494e46ca3cb69557ade8303c08a2630e4cfc25c28473315ef63a4da6ed03f5d9d78df62d0796c67781664438ed1b321eadce817449e7f7821d9211e2bc2ffddb1ad22832998556a9622e394ad6a3cfbb5027472b0418e2caeb36a33ac904f"}, 0x6a, 0x800) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 23:11:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_sctp(0x2, 0xfffffffffffffffd, 0x84) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000140)={{0x8}, 0x20}, 0x10) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebf8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000002c0)='./bus\x00') sendfile(r2, r2, &(0x7f0000000240), 0x808100000000) [ 241.518061] 9pnet: Insufficient options for proto=fd 23:11:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xfffffffffffffe61) kcmp(r1, r2, 0x6, r0, r0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="74721cec2e5eb3ab8f466d8bc41880cc0bfa68a70d23674fb2fb0685271079134a1186028d3a3f553665923a5888aed9b4b324da3672a43d2ebdc7841f718cd3563a6ee2c686c49d932946f7f7286b1bf6ea536b0b013923fe634af9cac814b8480e8e22206fb8b2048fe23c9de5008fdb52e89a02d0b7a1e85051c4bf41a1f9cea8b4e2bf49010d8e34156d7e32844f79726de7ef92b21b56db8fc9374e482a6016b79f7b3ef2d0eeb8ebd31cdb49284d919cd397ade0b662051b993ad8786c84b76f6ce0ba336c42c7895d98b66d21103584c4cf4ecb2da55f0b5d3904a15b4db2df886c", @ANYRESHEX=r3, @ANYBLOB=',w\x00\x00\x00\x00=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:09 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642c7066646e6f3d1dfddb2fcb8a5e9dd2d5e960", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 241.631839] 9pnet: Insufficient options for proto=fd [ 241.699752] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000b96) [ 241.712053] FAT-fs (loop2): Filesystem has been set read-only [ 241.718665] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000b96) [ 241.754260] 9pnet: Insufficient options for proto=fd 23:11:10 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:10 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000001380)="0adc1f123c123f319bd070") syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x3000)=nil, 0x3000}) 23:11:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77075dc2d7b305ad6976fbac76f21898a800", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) sched_setparam(r2, &(0x7f00000000c0)=0x6) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) [ 242.215377] 9pnet: Insufficient options for proto=fd [ 242.225111] 9pnet: Insufficient options for proto=fd [ 242.283668] FAULT_FLAG_ALLOW_RETRY missing 70 [ 242.288734] CPU: 0 PID: 11081 Comm: syz-executor.2 Not tainted 4.14.112 #2 [ 242.291726] 9pnet: Insufficient options for proto=fd [ 242.296423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.311033] Call Trace: [ 242.313614] dump_stack+0x138/0x19c [ 242.317274] handle_userfault.cold+0x3c/0x50 [ 242.321702] ? save_trace+0x290/0x290 [ 242.325596] ? userfaultfd_ioctl+0x2e80/0x2e80 [ 242.330307] ? __handle_mm_fault+0x2b30/0x3470 [ 242.334982] ? find_held_lock+0x35/0x130 [ 242.339038] ? __handle_mm_fault+0x2b30/0x3470 [ 242.343631] ? lock_downgrade+0x6e0/0x6e0 [ 242.347807] __handle_mm_fault+0x2b41/0x3470 [ 242.352573] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 242.357414] ? find_held_lock+0x35/0x130 [ 242.361510] ? handle_mm_fault+0x1b6/0x7c0 [ 242.365749] handle_mm_fault+0x293/0x7c0 [ 242.370097] __do_page_fault+0x4c1/0xb80 [ 242.374374] ? vmalloc_fault+0xe60/0xe60 [ 242.378482] ? page_fault+0x2f/0x50 [ 242.382297] do_page_fault+0x71/0x515 [ 242.386130] ? page_fault+0x2f/0x50 [ 242.389969] page_fault+0x45/0x50 [ 242.393876] RIP: 0033:0x452670 [ 242.397163] RSP: 002b:00007eff10ff27a8 EFLAGS: 00010202 [ 242.402614] RAX: 00007eff10ff2850 RBX: 0000000000000003 RCX: 000000000000000e [ 242.410622] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007eff10ff2850 [ 242.418201] RBP: 000000000073bf00 R08: 00000000000003ff R09: 0000000000000000 [ 242.425642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff10ff36d4 23:11:10 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(0x0, &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x1) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:10 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:10 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) r3 = add_key$user(0x0, &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500), 0x0, 0xfffffffffffffff8) r4 = add_key$user(&(0x7f0000000600)='user\x00', 0x0, &(0x7f0000000680)="7e346365309f211afade490af10725742961df5053cc267f9567628b450806567b8d137f78ce4e", 0x27, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000700)={0x0, r3, r4}, &(0x7f0000000740)=""/131, 0x83, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) r7 = dup2(r5, r5) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000900)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x5, 0x80, 0x9, 0xb0}, &(0x7f0000000200)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000440)={r8, 0x1, 0x89a6efce2c05e388}, 0xc) sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x1}}, 0x44801) ioctl$LOOP_CLR_FD(r7, 0x4c01) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00L\x00\x00\x00\b'], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) fstat(r7, &(0x7f00000003c0)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x100000000) sendto$inet(r5, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000004c0), 0x4) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) [ 242.433114] R13: 00000000004c7975 R14: 00000000004dda00 R15: 00000000ffffffff 23:11:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) mprotect(&(0x7f0000299000/0x4000)=nil, 0x4000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000040)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x40) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x51400dfa}, &(0x7f00000002c0)=0x8) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x3f, @ipv4={[], [], @multicast2}, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="b8cb8ff02dfb60c9a280c7ceeb100c23d68ef16e5d5e827ff3c8272f89550db6786d709cca392199a918c4623f03fc11a11800955776e9bb4e64ee3ba0ee8fb220110928a365422d4b180e88df12113b2012487feff102df93ec5f7581aeac854a8d5fd02e03ca56a74bb231894d37e689f7e9e6e78d09507aa744dab005ee7365ab455bfb6b3512582a7fc0", 0x8c}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000180)="9773ee48254951d73719f3c8c25cdb8ba3d0cdf036edfdbf313fa5f345eccae6412916ffb3076cbec23042912a37b9bf9e51ce07d7d8dc76d425bca7cc3b85681e6bbca6d1c29602fa581e51ecfe27d9a4622a32dffcd3e391cbd8efd4920f1e", 0x60}], 0x3, &(0x7f0000000300)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x2a}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x8, 0x8008, 0x3, 0x2, 0x4, 0x9, 0x7fffffff, r3}}, @authinfo={0x18, 0x84, 0x6, {0x20}}], 0xa0, 0x20000000}, 0x3430f3a1d3d588cb) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 242.532872] 9pnet: Insufficient options for proto=fd 23:11:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0xe18, 0x0, 0x0, "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"}], 0xe18}, 0x5}], 0x1, 0x40800) 23:11:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) mprotect(&(0x7f0000299000/0x4000)=nil, 0x4000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:11 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x40) getresgid(&(0x7f0000000140)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) r3 = getegid() getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setresgid(r2, r3, r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) inotify_init() epoll_create(0xa60d) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/18, 0x12) 23:11:11 executing program 3: 23:11:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) mprotect(&(0x7f0000299000/0x4000)=nil, 0x4000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user'}, {@cache_mmap='cache=mmap'}, {@mmap='mmap'}, {@dfltgid={'dfltgid', 0x3d, r2}}]}}) 23:11:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) mprotect(&(0x7f0000299000/0x4000)=nil, 0x4000, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:11 executing program 3: 23:11:11 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:11 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:11 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:11 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:11 executing program 3: 23:11:11 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000440)={0x0, 0x1, [0xd6, 0x2, 0x5, 0x2418, 0x8, 0x0, 0x2, 0x3]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x101}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5, 0x4, 0x5ee, 0x0, 0x7fffffff}, &(0x7f00000001c0)=0x98) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000003c0)={r1, 0x3}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() setregid(r4, r5) r6 = open(&(0x7f0000000380)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="1d73ba8398b364", @ANYRESHEX=r3, @ANYBLOB=',\x00']) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)=0x9, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000300)={0x3, 0x2, {0x3, 0x0, 0xffffffff, 0x0, 0x2}}) 23:11:11 executing program 3: 23:11:11 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 243.445101] 9pnet: Insufficient options for proto=fd 23:11:11 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)) 23:11:11 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) mprotect(&(0x7f0000299000/0x4000)=nil, 0x4000, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:12 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2000, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="006827ce6fa2f38da0ca0e4231d4a8", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) socket$inet6(0xa, 0x80803, 0x6) 23:11:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:12 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) mprotect(&(0x7f0000299000/0x4000)=nil, 0x4000, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:12 executing program 3: syz_genetlink_get_family_id$tipc(0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x1, 0x0, 0x3}, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 23:11:12 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) 23:11:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) mprotect(&(0x7f0000299000/0x4000)=nil, 0x4000, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:12 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) 23:11:12 executing program 3: [ 244.286885] 9pnet: Insufficient options for proto=fd 23:11:12 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:12 executing program 3: 23:11:12 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10180, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'veth1_to_team\x00'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 23:11:13 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) 23:11:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:13 executing program 3: 23:11:13 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:13 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 3: 23:11:13 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 245.148984] 9pnet: Insufficient options for proto=fd 23:11:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="0000572277572a4ce1c734358e91b7a0451b25ebed98b63aae9a9eedb6849e24fac3c3e9eeb8ec000022a1c435a60300000000001c"]) open(&(0x7f0000000000)='./file0\x00', 0x501000, 0x20) 23:11:13 executing program 3: 23:11:13 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 3: [ 245.271591] 9pnet: Insufficient options for proto=fd 23:11:13 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 245.397621] 9pnet: Insufficient options for proto=fd 23:11:13 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:13 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x4000) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3, 0x8001}}, 0x30) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 3: r0 = socket$packet(0x11, 0x2000000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x3}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x3d) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) 23:11:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:13 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:13 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 245.901244] 9pnet: Insufficient options for proto=fd 23:11:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x80003, 0x5) r1 = creat(&(0x7f0000000040)='\x00', 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x448, 0x118, 0x0, 0x0, 0x280, 0x280, 0x378, 0x378, 0x378, 0x378, 0x378, 0x4, &(0x7f0000000080), {[{{@ipv6={@empty, @remote, [0xff, 0x0, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff], 'team0\x00', 'rose0\x00', {0xff}, {}, 0x3f, 0x35971436, 0x2, 0x11}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@socket1={0x28, 'socket\x00', 0x1, 0x1}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d3, 0x5, 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth1_to_bond\x00', 0xf98}}}, {{@ipv6={@mcast2, @remote, [0xffffff00, 0x0, 0xff000000, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xffffffff], 'ip6_vti0\x00', 'sit0\x00', {0xff}, {}, 0x33, 0x800, 0x6, 0x28}, 0x0, 0xc8, 0xf8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x442, 0xf7, 0x6, 0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) mknod(&(0x7f0000000000)='./file0\x00', 0x1420, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @rand_addr=0x3}, @in6={0xa, 0x4e23, 0x6, @mcast1, 0x80}, @in={0x2, 0x4e22, @local}], 0x4c) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:13 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:13 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) 23:11:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x111) connect$rds(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) mknod(&(0x7f0000000180)='./file0\x00', 0xe405, 0xfffffffe) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) [ 246.070164] protocol 88fb is buggy, dev hsr_slave_0 [ 246.075524] protocol 88fb is buggy, dev hsr_slave_1 [ 246.088191] 9pnet: Insufficient options for proto=fd [ 246.116635] 9pnet: Insufficient options for proto=fd [ 246.150146] protocol 88fb is buggy, dev hsr_slave_0 [ 246.155509] protocol 88fb is buggy, dev hsr_slave_1 [ 246.189831] 9pnet: Insufficient options for proto=fd 23:11:14 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:14 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) 23:11:14 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+', 0x8226}, 0x28, 0x2) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00']) 23:11:14 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0x11f4) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0)) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x15) [ 246.784840] 9pnet: Insufficient options for proto=fd 23:11:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:14 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) 23:11:14 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400001, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1b8, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x38, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x75e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xde3f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8fed}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x14a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe95}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd3e}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) read(r2, &(0x7f0000000000)=""/110, 0x6e) 23:11:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='p'], 0x1) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) 23:11:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 23:11:14 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 247.019770] 9pnet: Insufficient options for proto=fd 23:11:15 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='p'], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x109200, 0x0) 23:11:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 23:11:15 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETA(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x57, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}) 23:11:15 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:15 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 247.663640] 9pnet: Insufficient options for proto=fd 23:11:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) [ 247.765034] 9pnet: Insufficient options for proto=fd 23:11:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 247.805632] sp0: Synchronizing with TNC 23:11:15 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:15 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) [ 247.895568] sp0: Synchronizing with TNC [ 247.904053] 9pnet: Insufficient options for proto=fd [ 247.919116] 9pnet: Insufficient options for proto=fd 23:11:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:16 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:16 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:16 executing program 3 (fault-call:2 fault-nth:0): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:16 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000040)='./file0\x00', 0x1420, 0x1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 23:11:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) 23:11:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) 23:11:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x2, 0xb58, 0x6, 0x1, 0x80000001, 0xffffffffffffffff, 0x2b, {0x0, @in6={{0xa, 0x4e21, 0xffffffff, @mcast1, 0x400000000}}, 0x1, 0x9, 0x4, 0x8, 0x81}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x4000000000000000}, 0xc) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000001c0)={0x3, 0x4, [0x2]}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c776efefaaa3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 248.581699] FAULT_INJECTION: forcing a failure. [ 248.581699] name failslab, interval 1, probability 0, space 0, times 0 [ 248.597465] 9pnet: Insufficient options for proto=fd 23:11:16 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 248.649193] CPU: 1 PID: 11470 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 248.656265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.665635] Call Trace: [ 248.668247] dump_stack+0x138/0x19c [ 248.671983] should_fail.cold+0x10f/0x159 [ 248.676146] should_failslab+0xdb/0x130 [ 248.680150] __kmalloc_track_caller+0x2ef/0x790 [ 248.684880] ? __sb_end_write+0xc1/0x100 [ 248.688985] ? strndup_user+0x62/0xf0 [ 248.692789] memdup_user+0x26/0xa0 23:11:16 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) [ 248.692802] strndup_user+0x62/0xf0 [ 248.692817] SyS_mount+0x3c/0x120 [ 248.692827] ? copy_mnt_ns+0x8c0/0x8c0 [ 248.692848] do_syscall_64+0x1eb/0x630 [ 248.692859] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.700020] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.700030] RIP: 0033:0x458c29 [ 248.700035] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.700047] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 248.700053] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:16 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:16 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x800) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth1_to_bond\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="d9b905822d63c6d75bfe", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 248.700059] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 248.700064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 248.700068] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 248.782039] 9pnet: Insufficient options for proto=fd [ 248.835988] 9pnet: Insufficient options for proto=fd 23:11:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:16 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 23:11:16 executing program 3 (fault-call:2 fault-nth:1): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:16 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e7, &(0x7f00000000c0)="3bd6680fd1355b2242288ca03d5c2abc8e05180241ffa68e3a2c48bbbf4a5f8706b1405e2a215ff110e05369b7") ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='lo\x00') pselect6(0x40, &(0x7f0000000100)={0x2, 0x58764e38, 0x7f, 0x0, 0x1, 0x7ff, 0x81, 0x20}, &(0x7f0000000140)={0x7, 0x0, 0x7fffffff, 0x4, 0x70, 0x2, 0x4, 0x80}, &(0x7f0000000180)={0x80000000, 0x4e4a, 0x401, 0x7, 0x5, 0x8, 0x6a2e, 0x10000}, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={0x9}, 0x8}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000004280)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)=""/25, 0x19}, {&(0x7f0000000280)=""/171, 0xab}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}, {&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000001740)=""/77, 0x4d}, {&(0x7f00000017c0)=""/119, 0x77}], 0x7, &(0x7f00000018c0)=""/112, 0x70}, 0x8}, {{&(0x7f0000001940)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000019c0)=""/92, 0x5c}, {&(0x7f00000005c0)}], 0x2, &(0x7f0000001a80)=""/26, 0x1a}, 0x8}, {{&(0x7f0000001ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000001b40)=""/44, 0x2c}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/112, 0x70}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/200, 0xc8}, {&(0x7f0000003d00)=""/197, 0xc5}], 0x6}, 0xf6}, {{&(0x7f0000003e80)=@rc, 0x80, &(0x7f0000004080)=[{&(0x7f0000003f00)=""/66, 0x42}, {&(0x7f0000003f80)=""/238, 0xee}], 0x2, &(0x7f00000040c0)=""/181, 0xb5}, 0x297}], 0x4, 0x10040, &(0x7f00000042c0)={r2, r3+10000000}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c60626f3d8ef260674999092471ece3c11eef3a1ee6b5e4785f8ffecf21ff24a896fbf3f93cee389e58cb18010000002158f901613e14363d3ad45097dd55ecf358e16fe4097d15595de17f499ca8a40131d2ec61e07f2e5f0876eaa531977f6508ed41e86cef6ac6618414e9b5ff64f68910acb72c40937db1b38e6c26ee178118c93171152ed91df4b833be4b7eadc776e4b5830fa0ecfb4c8b09bf2e6a821ec79bb0f8c415c165217140679c3578c470afc372afea", @ANYRESHEX, @ANYBLOB="350600000000000000879531b1c752f4a570"]) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x200000000000032) openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x12000, 0x0) pwrite64(r0, &(0x7f0000000080)="86e4ca2a4e6bc5", 0x7, 0x0) 23:11:16 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) [ 248.962389] 9pnet: Insufficient options for proto=fd 23:11:16 executing program 5 (fault-call:2 fault-nth:0): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:17 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0xfff) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 248.996313] FAULT_INJECTION: forcing a failure. [ 248.996313] name failslab, interval 1, probability 0, space 0, times 0 [ 249.037267] CPU: 0 PID: 11516 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 249.044518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.053984] Call Trace: [ 249.056585] dump_stack+0x138/0x19c [ 249.060235] should_fail.cold+0x10f/0x159 [ 249.064174] FAULT_INJECTION: forcing a failure. [ 249.064174] name failslab, interval 1, probability 0, space 0, times 0 [ 249.064411] should_failslab+0xdb/0x130 [ 249.079609] kmem_cache_alloc_trace+0x2ec/0x790 [ 249.084378] ? kasan_check_write+0x14/0x20 [ 249.088610] ? _copy_from_user+0x99/0x110 [ 249.092758] copy_mount_options+0x5c/0x2f0 [ 249.096991] SyS_mount+0x87/0x120 [ 249.100434] ? copy_mnt_ns+0x8c0/0x8c0 [ 249.104320] do_syscall_64+0x1eb/0x630 [ 249.108198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.113043] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.118332] RIP: 0033:0x458c29 [ 249.121513] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.129223] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 23:11:17 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) 23:11:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000140)={0xaee0}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6f6664016e6f45ca00143379e3bdf2a7f6a5af72e310d90f44576a02bda84eca739e0a822b45e2e38ee55e9050b47cc2e0067d00f1fd53d2624ec7b5f381c31696dd7935ce6c4de5b3f55a8ae7d0518747c94957854f68f2b918cd78344192489b9fa00fafc0c199f1f649abe8f16cd271c098d511710a4b49edd48bf708f9992e23f62ff3a88c1d8eac533fb54f2ea71f8c3abdee07b443a8", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 249.136496] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 249.144021] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 249.151370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 249.158640] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 249.166217] CPU: 1 PID: 11523 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 249.173518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.182894] Call Trace: [ 249.185498] dump_stack+0x138/0x19c [ 249.189220] should_fail.cold+0x10f/0x159 [ 249.193519] should_failslab+0xdb/0x130 [ 249.197787] __kmalloc_track_caller+0x2ef/0x790 [ 249.203083] ? __sb_end_write+0xc1/0x100 [ 249.207258] ? strndup_user+0x62/0xf0 [ 249.211325] memdup_user+0x26/0xa0 [ 249.214858] strndup_user+0x62/0xf0 [ 249.218483] SyS_mount+0x3c/0x120 [ 249.221929] ? copy_mnt_ns+0x8c0/0x8c0 [ 249.225819] do_syscall_64+0x1eb/0x630 [ 249.229699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.234546] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.239751] RIP: 0033:0x458c29 [ 249.242939] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.250664] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 249.257930] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 249.265218] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 249.272482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 249.279740] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:17 executing program 3 (fault-call:2 fault-nth:2): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:17 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:17 executing program 5 (fault-call:2 fault-nth:1): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 249.303836] 9pnet: Insufficient options for proto=fd [ 249.314037] 9pnet: Insufficient options for proto=fd [ 249.402361] FAULT_INJECTION: forcing a failure. [ 249.402361] name failslab, interval 1, probability 0, space 0, times 0 [ 249.432739] FAULT_INJECTION: forcing a failure. [ 249.432739] name failslab, interval 1, probability 0, space 0, times 0 [ 249.435173] CPU: 1 PID: 11544 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 249.451005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.451010] Call Trace: [ 249.451028] dump_stack+0x138/0x19c [ 249.451046] should_fail.cold+0x10f/0x159 [ 249.451062] should_failslab+0xdb/0x130 [ 249.451075] kmem_cache_alloc+0x2d9/0x780 [ 249.470956] ? kmem_cache_alloc_trace+0x57d/0x790 [ 249.470969] ? find_held_lock+0x35/0x130 [ 249.470982] getname_flags+0xcb/0x580 [ 249.470996] user_path_at_empty+0x2f/0x50 [ 249.496024] do_mount+0x12b/0x27d0 [ 249.499559] ? copy_mount_options+0x5c/0x2f0 [ 249.503961] ? rcu_read_lock_sched_held+0x110/0x130 [ 249.508980] ? copy_mount_string+0x40/0x40 [ 249.513214] ? copy_mount_options+0x1fe/0x2f0 [ 249.517712] SyS_mount+0xab/0x120 [ 249.521175] ? copy_mnt_ns+0x8c0/0x8c0 [ 249.525062] do_syscall_64+0x1eb/0x630 [ 249.529918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.534773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.539958] RIP: 0033:0x458c29 [ 249.543136] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.551469] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 249.558745] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 249.566036] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 249.573388] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 249.580657] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 249.587957] CPU: 0 PID: 11546 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 249.594999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.604358] Call Trace: [ 249.607053] dump_stack+0x138/0x19c [ 249.610732] should_fail.cold+0x10f/0x159 [ 249.614903] should_failslab+0xdb/0x130 [ 249.614919] kmem_cache_alloc_trace+0x2ec/0x790 [ 249.614929] ? kasan_check_write+0x14/0x20 [ 249.614938] ? _copy_from_user+0x99/0x110 [ 249.614951] copy_mount_options+0x5c/0x2f0 [ 249.623574] SyS_mount+0x87/0x120 [ 249.623581] ? copy_mnt_ns+0x8c0/0x8c0 [ 249.623594] do_syscall_64+0x1eb/0x630 [ 249.623602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.623620] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.623628] RIP: 0033:0x458c29 [ 249.623632] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.623642] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 249.623647] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 249.623653] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 249.623657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 249.623662] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) 23:11:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0xfffff24b) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xfffffffffffffff7, 0x4) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:17 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:17 executing program 3 (fault-call:2 fault-nth:3): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:17 executing program 5 (fault-call:2 fault-nth:2): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 249.773615] FAULT_INJECTION: forcing a failure. [ 249.773615] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.785637] CPU: 0 PID: 11557 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 249.792662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.802029] Call Trace: [ 249.804632] dump_stack+0x138/0x19c [ 249.808294] should_fail.cold+0x10f/0x159 [ 249.812455] __alloc_pages_nodemask+0x1d6/0x7a0 [ 249.812471] ? fs_reclaim_acquire+0x20/0x20 23:11:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) 23:11:17 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 249.821532] ? __alloc_pages_slowpath+0x2930/0x2930 [ 249.821552] cache_grow_begin+0x80/0x410 [ 249.821565] kmem_cache_alloc+0x6a8/0x780 [ 249.821574] ? kmem_cache_alloc_trace+0x57d/0x790 [ 249.821588] getname_flags+0xcb/0x580 [ 249.821599] user_path_at_empty+0x2f/0x50 [ 249.821612] do_mount+0x12b/0x27d0 [ 249.821621] ? copy_mount_options+0x5c/0x2f0 [ 249.821632] ? rcu_read_lock_sched_held+0x110/0x130 [ 249.821643] ? copy_mount_string+0x40/0x40 [ 249.821657] ? copy_mount_options+0x1fe/0x2f0 [ 249.861174] SyS_mount+0xab/0x120 [ 249.861185] ? copy_mnt_ns+0x8c0/0x8c0 [ 249.861198] do_syscall_64+0x1eb/0x630 [ 249.861207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.861224] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.861232] RIP: 0033:0x458c29 [ 249.861237] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.861248] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 249.861254] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:17 executing program 4: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 249.861259] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 249.861265] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 249.861270] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 249.863939] FAULT_INJECTION: forcing a failure. [ 249.863939] name failslab, interval 1, probability 0, space 0, times 0 [ 249.884633] CPU: 0 PID: 11559 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 249.903012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.903018] Call Trace: [ 249.903038] dump_stack+0x138/0x19c 23:11:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) [ 249.903056] should_fail.cold+0x10f/0x159 [ 249.903071] should_failslab+0xdb/0x130 [ 249.903082] kmem_cache_alloc+0x2d9/0x780 [ 249.903091] ? __schedule+0x7c6/0x1cf0 [ 249.903101] ? find_held_lock+0x35/0x130 [ 249.903113] getname_flags+0xcb/0x580 [ 249.903123] ? trace_hardirqs_on_caller+0x400/0x590 [ 249.903134] user_path_at_empty+0x2f/0x50 [ 249.903145] do_mount+0x12b/0x27d0 [ 249.903154] ? retint_kernel+0x2d/0x2d 23:11:18 executing program 4: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 249.903167] ? copy_mount_string+0x40/0x40 [ 249.918002] ? copy_mount_options+0x18f/0x2f0 [ 249.989868] ? copy_mount_options+0x199/0x2f0 [ 249.989879] ? copy_mount_options+0x1fe/0x2f0 [ 249.989892] SyS_mount+0xab/0x120 [ 250.020625] ? copy_mnt_ns+0x8c0/0x8c0 [ 250.020641] do_syscall_64+0x1eb/0x630 [ 250.020649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.020666] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.020673] RIP: 0033:0x458c29 23:11:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x1) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:18 executing program 3 (fault-call:2 fault-nth:4): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:18 executing program 5 (fault-call:2 fault-nth:3): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 250.020679] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.020688] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 250.020694] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 250.020698] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 250.020706] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 250.038830] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 250.169397] FAULT_INJECTION: forcing a failure. [ 250.169397] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.182806] CPU: 0 PID: 11580 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 250.184989] FAULT_INJECTION: forcing a failure. [ 250.184989] name failslab, interval 1, probability 0, space 0, times 0 [ 250.189832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.189837] Call Trace: [ 250.189856] dump_stack+0x138/0x19c [ 250.189880] should_fail.cold+0x10f/0x159 [ 250.223081] __alloc_pages_nodemask+0x1d6/0x7a0 [ 250.227772] ? fs_reclaim_acquire+0x20/0x20 [ 250.232145] ? __alloc_pages_slowpath+0x2930/0x2930 [ 250.237173] cache_grow_begin+0x80/0x410 [ 250.241236] kmem_cache_alloc+0x6a8/0x780 [ 250.245379] ? fs_reclaim_acquire+0x20/0x20 [ 250.249785] getname_flags+0xcb/0x580 [ 250.253605] user_path_at_empty+0x2f/0x50 [ 250.257754] do_mount+0x12b/0x27d0 [ 250.261285] ? copy_mount_options+0x5c/0x2f0 [ 250.265688] ? rcu_read_lock_sched_held+0x110/0x130 [ 250.270713] ? copy_mount_string+0x40/0x40 [ 250.274943] ? _copy_from_user+0x99/0x110 [ 250.279087] ? copy_mount_options+0x1fe/0x2f0 [ 250.283675] SyS_mount+0xab/0x120 [ 250.287144] ? copy_mnt_ns+0x8c0/0x8c0 [ 250.291037] do_syscall_64+0x1eb/0x630 [ 250.295096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.299951] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.305142] RIP: 0033:0x458c29 [ 250.308321] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.316029] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 250.323301] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 250.330573] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 250.337995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 250.345255] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 250.352537] CPU: 1 PID: 11584 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 250.359944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.369293] Call Trace: [ 250.369317] dump_stack+0x138/0x19c [ 250.369333] should_fail.cold+0x10f/0x159 [ 250.369347] should_failslab+0xdb/0x130 [ 250.375542] kmem_cache_alloc+0x2d9/0x780 [ 250.375557] ? lock_downgrade+0x6e0/0x6e0 [ 250.375573] alloc_vfsmnt+0x28/0x7d0 [ 250.383663] vfs_kern_mount.part.0+0x2a/0x3d0 [ 250.383677] do_mount+0x417/0x27d0 [ 250.383697] ? copy_mount_options+0x5c/0x2f0 [ 250.383708] ? rcu_read_lock_sched_held+0x110/0x130 [ 250.383723] ? copy_mount_string+0x40/0x40 [ 250.392100] ? copy_mount_options+0x1fe/0x2f0 [ 250.392115] SyS_mount+0xab/0x120 [ 250.392125] ? copy_mnt_ns+0x8c0/0x8c0 [ 250.392142] do_syscall_64+0x1eb/0x630 [ 250.400444] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.400463] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.400471] RIP: 0033:0x458c29 [ 250.400476] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.400486] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 250.400492] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getgroups(0x3, &(0x7f0000000040)=[0xee00, 0x0, 0xee01]) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@cache_mmap='cache=mmap'}, {@version_L='version=9p2000.L'}, {@cache_mmap='cache=mmap'}, {@uname={'uname', 0x3d, 'trans=fd,'}}, {@nodevmap='nodevmap'}, {@access_uid={'access', 0x3d, r3}}]}}) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x6, &(0x7f0000000140)=0x4) 23:11:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:18 executing program 4: mknod(0x0, 0x1420, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:18 executing program 3 (fault-call:2 fault-nth:5): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 250.400497] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 250.400505] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 250.417939] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:18 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:18 executing program 5 (fault-call:2 fault-nth:4): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0c00}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x800, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x80}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc040}, 0x80) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000004}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x23c, r4, 0x204, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc58}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe022}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16a0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4b4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2e2fe787}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @remote, 0x53a4}}}}]}, @TIPC_NLA_BEARER={0x140, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, [], 0xe}}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe68c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x5, 0x4, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ID={0x8}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000804) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) [ 250.534377] FAULT_INJECTION: forcing a failure. [ 250.534377] name failslab, interval 1, probability 0, space 0, times 0 23:11:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 250.635820] FAULT_INJECTION: forcing a failure. [ 250.635820] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.651807] CPU: 0 PID: 11598 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 250.658863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.668229] Call Trace: [ 250.670836] dump_stack+0x138/0x19c [ 250.674505] should_fail.cold+0x10f/0x159 [ 250.678761] should_failslab+0xdb/0x130 [ 250.682763] kmem_cache_alloc+0x2d9/0x780 [ 250.686936] ? lock_downgrade+0x6e0/0x6e0 [ 250.691101] alloc_vfsmnt+0x28/0x7d0 [ 250.694872] vfs_kern_mount.part.0+0x2a/0x3d0 [ 250.699541] do_mount+0x417/0x27d0 [ 250.703122] ? copy_mount_options+0x5c/0x2f0 [ 250.707540] ? rcu_read_lock_sched_held+0x110/0x130 [ 250.712673] ? copy_mount_string+0x40/0x40 [ 250.717127] ? copy_mount_options+0x1fe/0x2f0 [ 250.721638] SyS_mount+0xab/0x120 [ 250.725177] ? copy_mnt_ns+0x8c0/0x8c0 [ 250.729128] do_syscall_64+0x1eb/0x630 23:11:18 executing program 0: kexec_load(0xdb95, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000000)="ad57ae467650d52a3c8d068b3741", 0xe, 0x1, 0x45}, {&(0x7f0000000040)="49f6e04627918be7bde87bd4cc32f05ae28276c7bf45bf731a1ceef8f1306cc4005f", 0x22, 0x1, 0x200}, {&(0x7f0000000140)="c0a5c1378b29b222de58db13aa4e32ed640c57e190bcab7c1e06bab809", 0x1d, 0x20}, {&(0x7f00000000c0)="9d2d9665d74e91206724c80f68c48229d5c31e63576fdbcaecd57e89ac0c2ca76fb43082299cd8874b82c255487b054c0c4788833af4b25b5bd8b09dd1c7639d6ff46d2361f56527e590bc0a1345", 0x4e, 0x80, 0xf}, {&(0x7f0000000240)="2b9af9ce6885cc0a2a938ffae11d7483e9d5962678158c0412a26e7c7745b624130938bb4983a4098174f58f744f70bd7f91083e4899bf85c6af8617ee2dfae9b944222335d223a7bc93b322417330b8a661a3f942d192d5d2ad7835b3f00bfe3388296fa463b44c00ae480176e13cd6a84f61c93bd1026446de1353a33edf962eb8fee20f0d33f6ca4d474bd80060d641f4f4eca07a1d66d14db1c1ded3aaa682aac62e8100fa7c5d1bce7b8b0b0a713bdecea71e053a284fdd3c5761", 0xbd, 0xe11, 0x80000000}], 0x80000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x80000000) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x20) lsetxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64\x00', &(0x7f00000004c0)='wfdno', 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="0000af197efb13ec207ab48535a295524b6a01fbed250d7f8e281f9d14bf0962c2e44ce83504df233af575dc292dda138974e74781"]) [ 250.733024] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.737971] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.743174] RIP: 0033:0x458c29 [ 250.746542] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.754372] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 250.754378] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 250.754384] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 250.754391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 250.754397] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 250.765622] CPU: 0 PID: 11614 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 250.798578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.798584] Call Trace: [ 250.798604] dump_stack+0x138/0x19c [ 250.798623] should_fail.cold+0x10f/0x159 [ 250.798633] ? __might_sleep+0x93/0xb0 [ 250.798654] __alloc_pages_nodemask+0x1d6/0x7a0 [ 250.798666] ? __alloc_pages_slowpath+0x2930/0x2930 [ 250.831937] alloc_pages_current+0xec/0x1e0 23:11:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 250.836279] __get_free_pages+0xf/0x40 [ 250.840188] get_zeroed_page+0x11/0x20 [ 250.844174] mount_fs+0x1d2/0x2a7 [ 250.847658] vfs_kern_mount.part.0+0x5e/0x3d0 [ 250.852172] do_mount+0x417/0x27d0 [ 250.855811] ? copy_mount_options+0x5c/0x2f0 [ 250.860392] ? rcu_read_lock_sched_held+0x110/0x130 [ 250.865519] ? copy_mount_string+0x40/0x40 [ 250.869777] ? copy_mount_options+0x1fe/0x2f0 [ 250.874279] SyS_mount+0xab/0x120 [ 250.877734] ? copy_mnt_ns+0x8c0/0x8c0 [ 250.881649] do_syscall_64+0x1eb/0x630 23:11:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1110, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 250.885555] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.890424] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.895621] RIP: 0033:0x458c29 [ 250.898909] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.906621] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 250.914169] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 250.921598] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 250.928878] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 250.936180] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:19 executing program 3 (fault-call:2 fault-nth:6): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:19 executing program 5 (fault-call:2 fault-nth:5): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 23:11:19 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 251.359556] FAULT_INJECTION: forcing a failure. [ 251.359556] name failslab, interval 1, probability 0, space 0, times 0 [ 251.377518] FAULT_INJECTION: forcing a failure. [ 251.377518] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.439194] CPU: 1 PID: 11650 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 251.446291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.455651] Call Trace: [ 251.458445] dump_stack+0x138/0x19c [ 251.462176] should_fail.cold+0x10f/0x159 [ 251.462194] should_failslab+0xdb/0x130 [ 251.470314] kmem_cache_alloc_trace+0x2ec/0x790 [ 251.470329] ? free_pages+0x46/0x50 [ 251.470340] ? selinux_sb_copy_data+0x21e/0x390 [ 251.470354] v9fs_mount+0x5e/0x870 23:11:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000380)={0x7b, 0x0, [0x8b, 0x8, 0x1f, 0x16]}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',o=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffffc0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="264b4915d22cd0416d9245acb4e7cf77dac96828207debb92264a1b2aa4331cfdd18ba44118b0dcd3eef376e0b39bbcb60f60e756453c9607aba0337442d3126add1e394fe6a76bbd198bae07ef96974ead53aace0ba4e594ffbe4a66a30a2c4fb4245d153e12e07a5eeae1877e21e02d960d0f21e0150f782130497beb7af37a5b79a33981f4114267f21fa184720368fa2747c8500a2e0a03dffda7b60748c04599ced2c210a9487ea6adfe4788701b76d0f407c71653b5ab2b654a3ff425e26c4ed021e2f2e8d4c04e6a0d44aae5a062e17af9a6b0ac87321", 0xda, 0x1400000}, {&(0x7f0000000240)="a8ed2ca89f12099cc2682affc2a55fe0dc64503a3a40cf2aae3912879c5982f1dd41d0be44b6bb11daa495420a6394e8db154d3da778b4f5b9fa40213daf5eca4871723c588df93953ab5f3233eba0e9f6dfa81ac926d990b2aa68c7e7341c1a41fa9f032db0b91a4a482ae6590ecd3ee880af1bfeed38b82d9c3c250665aa23c06ded0b193cd60b2f09d187ee7314c040e43f02a9bb2a2351adca2d880c3c22b43f063754d6a64df90d9be0dd11b9410f1ae0a16910876d1325449836eb75d3a9b2f122a3db8d630d5a098893291918cbfaf252c88af900a904a48055fbd6dd995bc0036d40bfe84394", 0xea, 0x20}], 0x2, &(0x7f0000000340)='\x00') [ 251.470368] mount_fs+0x9d/0x2a7 [ 251.470382] vfs_kern_mount.part.0+0x5e/0x3d0 [ 251.470395] do_mount+0x417/0x27d0 [ 251.470404] ? copy_mount_options+0x5c/0x2f0 [ 251.470414] ? rcu_read_lock_sched_held+0x110/0x130 [ 251.470425] ? copy_mount_string+0x40/0x40 [ 251.470438] ? copy_mount_options+0x1fe/0x2f0 [ 251.470450] SyS_mount+0xab/0x120 [ 251.470462] ? copy_mnt_ns+0x8c0/0x8c0 [ 251.494857] do_syscall_64+0x1eb/0x630 [ 251.494867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.494884] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.502995] RIP: 0033:0x458c29 [ 251.503000] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.503010] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 251.503015] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 251.503021] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 251.503026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 251.503031] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 251.510600] CPU: 1 PID: 11653 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 251.566744] 9pnet: Insufficient options for proto=fd [ 251.571036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.571042] Call Trace: [ 251.571061] dump_stack+0x138/0x19c [ 251.571078] should_fail.cold+0x10f/0x159 [ 251.571088] ? __might_sleep+0x93/0xb0 [ 251.571100] __alloc_pages_nodemask+0x1d6/0x7a0 [ 251.571111] ? __alloc_pages_slowpath+0x2930/0x2930 [ 251.571130] alloc_pages_current+0xec/0x1e0 [ 251.571145] __get_free_pages+0xf/0x40 23:11:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 251.571154] get_zeroed_page+0x11/0x20 [ 251.571163] mount_fs+0x1d2/0x2a7 [ 251.571177] vfs_kern_mount.part.0+0x5e/0x3d0 [ 251.571189] do_mount+0x417/0x27d0 [ 251.571202] ? copy_mount_options+0x5c/0x2f0 [ 251.660112] ? rcu_read_lock_sched_held+0x110/0x130 [ 251.665337] ? copy_mount_string+0x40/0x40 [ 251.669671] ? copy_mount_options+0x1fe/0x2f0 [ 251.674218] SyS_mount+0xab/0x120 [ 251.677677] ? copy_mnt_ns+0x8c0/0x8c0 [ 251.681730] do_syscall_64+0x1eb/0x630 [ 251.685616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 251.690656] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 251.695841] RIP: 0033:0x458c29 [ 251.699013] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 251.706800] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 251.714279] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 251.721566] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 251.728946] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 23:11:19 executing program 3 (fault-call:2 fault-nth:7): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:19 executing program 5 (fault-call:2 fault-nth:6): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 251.736226] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:19 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, 0x0, 0x0) 23:11:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x0, 0x80007, 0x3) recvmsg$kcm(r1, &(0x7f0000000340)={&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/219, 0xdb}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/62, 0x3e}], 0x3, &(0x7f0000000280)=""/166, 0xa6}, 0x60) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 251.775440] 9pnet: Insufficient options for proto=fd [ 251.847962] FAULT_INJECTION: forcing a failure. [ 251.847962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.909640] CPU: 1 PID: 11681 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 251.911813] FAULT_INJECTION: forcing a failure. [ 251.911813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 251.916866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.916872] Call Trace: [ 251.916892] dump_stack+0x138/0x19c [ 251.916909] should_fail.cold+0x10f/0x159 [ 251.916929] ? __might_sleep+0x93/0xb0 [ 251.952786] __alloc_pages_nodemask+0x1d6/0x7a0 [ 251.957710] ? check_preemption_disabled+0x3c/0x250 [ 251.962840] ? __alloc_pages_slowpath+0x2930/0x2930 [ 251.967969] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 251.973420] ? __alloc_pages_nodemask+0x63b/0x7a0 [ 251.978255] ? retint_kernel+0x2d/0x2d [ 251.982226] alloc_pages_current+0xec/0x1e0 [ 251.986635] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 251.991397] __get_free_pages+0xf/0x40 [ 251.995277] get_zeroed_page+0x11/0x20 [ 251.999418] selinux_sb_copy_data+0x2a/0x390 [ 252.003825] security_sb_copy_data+0x7b/0xb0 [ 252.008228] mount_fs+0x1f2/0x2a7 [ 252.011796] vfs_kern_mount.part.0+0x5e/0x3d0 [ 252.016295] do_mount+0x417/0x27d0 [ 252.020096] ? copy_mount_options+0x5c/0x2f0 [ 252.024512] ? rcu_read_lock_sched_held+0x110/0x130 [ 252.034008] ? copy_mount_string+0x40/0x40 [ 252.038271] ? copy_mount_options+0x1fe/0x2f0 [ 252.042870] SyS_mount+0xab/0x120 [ 252.046330] ? copy_mnt_ns+0x8c0/0x8c0 [ 252.050234] do_syscall_64+0x1eb/0x630 [ 252.054134] ? trace_hardirqs_off_thunk+0x1a/0x1c 23:11:20 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) [ 252.058995] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.064234] RIP: 0033:0x458c29 [ 252.067554] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.075265] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 252.075272] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 252.075277] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 252.075283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 23:11:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 252.075292] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 252.124385] CPU: 0 PID: 11691 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 252.133271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.133276] Call Trace: [ 252.133295] dump_stack+0x138/0x19c [ 252.133313] should_fail.cold+0x10f/0x159 [ 252.133324] ? __might_sleep+0x93/0xb0 23:11:20 executing program 5 (fault-call:2 fault-nth:7): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 252.133337] __alloc_pages_nodemask+0x1d6/0x7a0 [ 252.133347] ? check_preemption_disabled+0x3c/0x250 [ 252.133358] ? __alloc_pages_slowpath+0x2930/0x2930 [ 252.133368] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 252.133378] ? __alloc_pages_nodemask+0x63b/0x7a0 [ 252.133393] alloc_pages_current+0xec/0x1e0 [ 252.133406] __get_free_pages+0xf/0x40 [ 252.133419] get_zeroed_page+0x11/0x20 [ 252.149144] selinux_sb_copy_data+0x2a/0x390 [ 252.149165] security_sb_copy_data+0x7b/0xb0 23:11:20 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0xfff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:20 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='unconfined_u:system_r:insmod_t:s0:c1023 system_u'], 0x30) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x80) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x7fff, 0x1, 0x10001, 0x1, 0xe496, 0xf09}, 0x5, 0xc0, 0x1}) [ 252.149179] mount_fs+0x1f2/0x2a7 [ 252.149195] vfs_kern_mount.part.0+0x5e/0x3d0 [ 252.149207] do_mount+0x417/0x27d0 [ 252.157671] ? copy_mount_options+0x5c/0x2f0 [ 252.157683] ? rcu_read_lock_sched_held+0x110/0x130 [ 252.157697] ? copy_mount_string+0x40/0x40 [ 252.157713] ? copy_mount_options+0x1fe/0x2f0 [ 252.157726] SyS_mount+0xab/0x120 [ 252.157738] ? copy_mnt_ns+0x8c0/0x8c0 [ 252.246867] do_syscall_64+0x1eb/0x630 [ 252.251097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.255960] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.261257] RIP: 0033:0x458c29 [ 252.264437] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.272250] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 252.279544] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 252.286812] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 252.294398] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 252.301864] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 252.368766] FAULT_INJECTION: forcing a failure. [ 252.368766] name failslab, interval 1, probability 0, space 0, times 0 [ 252.384827] CPU: 0 PID: 11716 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 252.392027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.401568] Call Trace: [ 252.404172] dump_stack+0x138/0x19c [ 252.407816] should_fail.cold+0x10f/0x159 [ 252.411986] should_failslab+0xdb/0x130 [ 252.415993] kmem_cache_alloc_trace+0x2ec/0x790 [ 252.416008] ? free_pages+0x46/0x50 [ 252.416022] ? selinux_sb_copy_data+0x21e/0x390 [ 252.416035] v9fs_mount+0x5e/0x870 [ 252.416048] mount_fs+0x9d/0x2a7 [ 252.428997] vfs_kern_mount.part.0+0x5e/0x3d0 [ 252.429013] do_mount+0x417/0x27d0 [ 252.429023] ? copy_mount_options+0x5c/0x2f0 [ 252.429035] ? rcu_read_lock_sched_held+0x110/0x130 [ 252.429047] ? copy_mount_string+0x40/0x40 [ 252.457871] ? copy_mount_options+0x1fe/0x2f0 [ 252.462472] SyS_mount+0xab/0x120 23:11:20 executing program 3 (fault-call:2 fault-nth:8): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x20000000000009, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0xc, &(0x7f00000000c0), 0x8) dup3(r3, r2, 0x0) close(r1) 23:11:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 252.465980] ? copy_mnt_ns+0x8c0/0x8c0 [ 252.469888] do_syscall_64+0x1eb/0x630 [ 252.473817] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.478680] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.483886] RIP: 0033:0x458c29 [ 252.483892] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.494877] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 252.494882] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 252.494887] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 252.494892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 252.494897] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 252.506436] FAULT_INJECTION: forcing a failure. [ 252.506436] name failslab, interval 1, probability 0, space 0, times 0 [ 252.546348] CPU: 0 PID: 11722 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 252.553395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.562759] Call Trace: [ 252.565445] dump_stack+0x138/0x19c [ 252.569102] should_fail.cold+0x10f/0x159 [ 252.573300] should_failslab+0xdb/0x130 [ 252.577376] __kmalloc_track_caller+0x2ef/0x790 [ 252.582058] ? trace_hardirqs_on+0x10/0x10 [ 252.586330] ? trace_hardirqs_on_caller+0x400/0x590 [ 252.591354] ? v9fs_session_init+0x9b/0x1590 [ 252.595778] kstrdup+0x3a/0x70 [ 252.598988] v9fs_session_init+0x9b/0x1590 [ 252.603245] ? check_preemption_disabled+0x3c/0x250 [ 252.608275] ? v9fs_show_options+0x730/0x730 [ 252.612710] ? rcu_lockdep_current_cpu_online+0xf2/0x140 23:11:20 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000100)=0x165) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x8, 0x4, 0x2, 0xffffffff80000000, 0x4000000000, 0x4}) [ 252.618206] ? v9fs_mount+0x5e/0x870 [ 252.621971] ? rcu_read_lock_sched_held+0x110/0x130 [ 252.627007] ? kmem_cache_alloc_trace+0x626/0x790 [ 252.631865] ? free_pages+0x46/0x50 [ 252.635516] v9fs_mount+0x7d/0x870 [ 252.639076] mount_fs+0x9d/0x2a7 [ 252.642454] vfs_kern_mount.part.0+0x5e/0x3d0 [ 252.642479] do_mount+0x417/0x27d0 [ 252.650532] ? copy_mount_options+0x5c/0x2f0 [ 252.650544] ? rcu_read_lock_sched_held+0x110/0x130 [ 252.650556] ? copy_mount_string+0x40/0x40 [ 252.650569] ? copy_mount_options+0x1fe/0x2f0 [ 252.650583] SyS_mount+0xab/0x120 [ 252.672197] ? copy_mnt_ns+0x8c0/0x8c0 [ 252.676313] do_syscall_64+0x1eb/0x630 [ 252.680390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.685250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.690446] RIP: 0033:0x458c29 [ 252.693699] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.701508] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 252.709962] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:20 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, 0x0, 0x0) 23:11:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:20 executing program 3 (fault-call:2 fault-nth:9): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 252.717231] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 252.724500] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 252.731774] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:20 executing program 5 (fault-call:2 fault-nth:8): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:20 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x140202, 0x0) [ 252.797652] FAULT_INJECTION: forcing a failure. [ 252.797652] name failslab, interval 1, probability 0, space 0, times 0 [ 252.857979] FAULT_INJECTION: forcing a failure. [ 252.857979] name failslab, interval 1, probability 0, space 0, times 0 [ 252.885521] CPU: 0 PID: 11745 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 252.892933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.892939] Call Trace: [ 252.892959] dump_stack+0x138/0x19c [ 252.892977] should_fail.cold+0x10f/0x159 [ 252.904949] should_failslab+0xdb/0x130 [ 252.904965] __kmalloc_track_caller+0x2ef/0x790 [ 252.904977] ? trace_hardirqs_on+0x10/0x10 [ 252.904988] ? trace_hardirqs_on_caller+0x400/0x590 [ 252.904998] ? v9fs_session_init+0xdc/0x1590 [ 252.905012] kstrdup+0x3a/0x70 [ 252.912857] v9fs_session_init+0xdc/0x1590 [ 252.912880] ? check_preemption_disabled+0x3c/0x250 [ 252.912891] ? v9fs_show_options+0x730/0x730 [ 252.912906] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 252.957635] ? v9fs_mount+0x5e/0x870 [ 252.961434] ? rcu_read_lock_sched_held+0x110/0x130 [ 252.966464] ? kmem_cache_alloc_trace+0x626/0x790 [ 252.971315] ? free_pages+0x46/0x50 [ 252.974954] v9fs_mount+0x7d/0x870 [ 252.978528] mount_fs+0x9d/0x2a7 [ 252.981897] vfs_kern_mount.part.0+0x5e/0x3d0 [ 252.986390] do_mount+0x417/0x27d0 [ 252.989948] ? copy_mount_options+0x5c/0x2f0 [ 252.994361] ? rcu_read_lock_sched_held+0x110/0x130 [ 252.999397] ? copy_mount_string+0x40/0x40 [ 253.003731] ? copy_mount_options+0x1fe/0x2f0 [ 253.008225] SyS_mount+0xab/0x120 [ 253.011693] ? copy_mnt_ns+0x8c0/0x8c0 [ 253.015581] do_syscall_64+0x1eb/0x630 [ 253.019470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.024346] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.029529] RIP: 0033:0x458c29 [ 253.032713] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.040418] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 253.047811] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:21 executing program 3 (fault-call:2 fault-nth:10): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 253.055531] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 253.062806] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 253.070071] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 253.077452] CPU: 1 PID: 11752 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 253.084656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.094018] Call Trace: [ 253.096630] dump_stack+0x138/0x19c [ 253.100365] should_fail.cold+0x10f/0x159 [ 253.104538] should_failslab+0xdb/0x130 [ 253.108626] kmem_cache_alloc_trace+0x2ec/0x790 [ 253.113317] ? free_pages+0x46/0x50 [ 253.117068] ? selinux_sb_copy_data+0x21e/0x390 [ 253.121740] v9fs_mount+0x5e/0x870 [ 253.125793] mount_fs+0x9d/0x2a7 [ 253.129401] vfs_kern_mount.part.0+0x5e/0x3d0 [ 253.134021] do_mount+0x417/0x27d0 [ 253.137702] ? copy_mount_options+0x5c/0x2f0 [ 253.142325] ? rcu_read_lock_sched_held+0x110/0x130 [ 253.147452] ? copy_mount_string+0x40/0x40 [ 253.151691] ? copy_mount_options+0x1fe/0x2f0 [ 253.156273] SyS_mount+0xab/0x120 [ 253.159715] ? copy_mnt_ns+0x8c0/0x8c0 [ 253.163801] do_syscall_64+0x1eb/0x630 [ 253.167705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.172560] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.177750] RIP: 0033:0x458c29 [ 253.180929] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.188717] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 253.196464] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:21 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:21 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x8880000}, 0xc) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1ffc31}], 0x1, 0x0) 23:11:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:21 executing program 5 (fault-call:2 fault-nth:9): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 253.203754] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 253.211033] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 253.218321] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 253.341467] FAULT_INJECTION: forcing a failure. [ 253.341467] name failslab, interval 1, probability 0, space 0, times 0 [ 253.369923] FAULT_INJECTION: forcing a failure. [ 253.369923] name failslab, interval 1, probability 0, space 0, times 0 [ 253.388022] CPU: 0 PID: 11774 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 253.395359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.404810] Call Trace: [ 253.407410] dump_stack+0x138/0x19c [ 253.411041] should_fail.cold+0x10f/0x159 [ 253.415182] should_failslab+0xdb/0x130 [ 253.419321] __kmalloc_track_caller+0x2ef/0x790 [ 253.423974] ? trace_hardirqs_on+0x10/0x10 [ 253.428194] ? trace_hardirqs_on_caller+0x400/0x590 [ 253.433228] ? v9fs_session_init+0xdc/0x1590 [ 253.437636] kstrdup+0x3a/0x70 [ 253.440902] v9fs_session_init+0xdc/0x1590 [ 253.445129] ? check_preemption_disabled+0x3c/0x250 [ 253.450218] ? v9fs_show_options+0x730/0x730 [ 253.454721] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.460263] ? v9fs_mount+0x5e/0x870 [ 253.463960] ? rcu_read_lock_sched_held+0x110/0x130 [ 253.468958] ? kmem_cache_alloc_trace+0x626/0x790 [ 253.473886] ? free_pages+0x46/0x50 [ 253.477502] v9fs_mount+0x7d/0x870 [ 253.481094] mount_fs+0x9d/0x2a7 [ 253.484620] vfs_kern_mount.part.0+0x5e/0x3d0 [ 253.489104] do_mount+0x417/0x27d0 [ 253.492629] ? copy_mount_options+0x5c/0x2f0 [ 253.497066] ? rcu_read_lock_sched_held+0x110/0x130 [ 253.502072] ? copy_mount_string+0x40/0x40 [ 253.506294] ? copy_mount_options+0x1fe/0x2f0 [ 253.510968] SyS_mount+0xab/0x120 [ 253.514412] ? copy_mnt_ns+0x8c0/0x8c0 [ 253.518288] do_syscall_64+0x1eb/0x630 [ 253.522158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 253.527002] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.532713] RIP: 0033:0x458c29 [ 253.535887] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:11:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 253.543775] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 253.551030] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 253.558305] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 253.565829] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 253.573105] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 253.580641] CPU: 1 PID: 11777 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 253.587683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.597138] Call Trace: [ 253.597164] dump_stack+0x138/0x19c [ 253.597184] should_fail.cold+0x10f/0x159 [ 253.597201] should_failslab+0xdb/0x130 [ 253.597214] kmem_cache_alloc_trace+0x2ec/0x790 [ 253.597224] ? find_held_lock+0x35/0x130 [ 253.597241] p9_client_create+0xa3/0x1130 [ 253.603798] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.603815] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 253.603827] ? __kmalloc_track_caller+0x375/0x790 23:11:21 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 253.603840] ? __lockdep_init_map+0x10c/0x570 [ 253.603852] ? lockdep_init_map+0x9/0x10 [ 253.612144] ? __raw_spin_lock_init+0x2d/0x100 [ 253.612160] v9fs_session_init+0x1dc/0x1590 [ 253.612182] ? check_preemption_disabled+0x3c/0x250 [ 253.612193] ? v9fs_show_options+0x730/0x730 [ 253.612204] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.612214] ? v9fs_mount+0x5e/0x870 [ 253.612223] ? rcu_read_lock_sched_held+0x110/0x130 [ 253.612235] ? kmem_cache_alloc_trace+0x626/0x790 [ 253.612247] ? free_pages+0x46/0x50 [ 253.612260] v9fs_mount+0x7d/0x870 [ 253.612273] mount_fs+0x9d/0x2a7 [ 253.620978] vfs_kern_mount.part.0+0x5e/0x3d0 [ 253.620994] do_mount+0x417/0x27d0 [ 253.621009] ? copy_mount_options+0x5c/0x2f0 [ 253.621021] ? rcu_read_lock_sched_held+0x110/0x130 [ 253.621035] ? copy_mount_string+0x40/0x40 [ 253.621048] ? copy_mount_options+0x1fe/0x2f0 [ 253.621060] SyS_mount+0xab/0x120 [ 253.621068] ? copy_mnt_ns+0x8c0/0x8c0 [ 253.621080] do_syscall_64+0x1eb/0x630 [ 253.621089] ? trace_hardirqs_off_thunk+0x1a/0x1c 23:11:21 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, 0x0, 0x0) 23:11:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010807041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x60, 0x12000) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x5) 23:11:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:21 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:21 executing program 5 (fault-call:2 fault-nth:10): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 253.621105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 253.621115] RIP: 0033:0x458c29 [ 253.735641] 9pnet: Insufficient options for proto=fd [ 253.737117] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.737129] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 253.737136] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 253.737142] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 253.737148] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 253.737152] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 253.809196] 9pnet: Insufficient options for proto=fd [ 253.823934] FAULT_INJECTION: forcing a failure. [ 253.823934] name failslab, interval 1, probability 0, space 0, times 0 [ 253.835206] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.892019] CPU: 0 PID: 11789 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 253.897593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.899541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.899547] Call Trace: [ 253.899566] dump_stack+0x138/0x19c [ 253.899585] should_fail.cold+0x10f/0x159 [ 253.928481] should_failslab+0xdb/0x130 [ 253.932562] kmem_cache_alloc_trace+0x2ec/0x790 [ 253.937243] ? find_held_lock+0x35/0x130 [ 253.937264] p9_client_create+0xa3/0x1130 [ 253.937278] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.945591] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 253.945608] ? __kmalloc_track_caller+0x375/0x790 [ 253.956600] ? __lockdep_init_map+0x10c/0x570 [ 253.965927] ? lockdep_init_map+0x9/0x10 [ 253.965939] ? __raw_spin_lock_init+0x2d/0x100 [ 253.974773] v9fs_session_init+0x1dc/0x1590 [ 253.979138] ? check_preemption_disabled+0x3c/0x250 [ 253.984168] ? v9fs_show_options+0x730/0x730 [ 253.984181] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 253.984196] ? v9fs_mount+0x5e/0x870 [ 253.994138] ? rcu_read_lock_sched_held+0x110/0x130 [ 253.994152] ? kmem_cache_alloc_trace+0x626/0x790 [ 253.994164] ? free_pages+0x46/0x50 [ 253.994179] v9fs_mount+0x7d/0x870 [ 253.994192] mount_fs+0x9d/0x2a7 [ 253.994205] vfs_kern_mount.part.0+0x5e/0x3d0 [ 253.994217] do_mount+0x417/0x27d0 [ 254.002963] ? copy_mount_options+0x5c/0x2f0 [ 254.002975] ? rcu_read_lock_sched_held+0x110/0x130 [ 254.002987] ? copy_mount_string+0x40/0x40 [ 254.003000] ? copy_mount_options+0x1fe/0x2f0 [ 254.003014] SyS_mount+0xab/0x120 [ 254.041611] FAULT_INJECTION: forcing a failure. [ 254.041611] name failslab, interval 1, probability 0, space 0, times 0 [ 254.045020] ? copy_mnt_ns+0x8c0/0x8c0 [ 254.045038] do_syscall_64+0x1eb/0x630 [ 254.045046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.045063] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 254.082418] RIP: 0033:0x458c29 23:11:21 executing program 3 (fault-call:2 fault-nth:11): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 254.085601] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.093310] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 254.100582] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 254.107844] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 254.115106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 254.122457] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 254.129919] CPU: 1 PID: 11810 Comm: syz-executor.3 Not tainted 4.14.112 #2 23:11:22 executing program 5 (fault-call:2 fault-nth:11): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:22 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xcb0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x400) r3 = socket$inet6(0xa, 0x7, 0x1ff) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000002140)=ANY=[@ANYBLOB="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"], 0x0) sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x7) fsetxattr$security_ima(r2, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000300)=@v1={0x2, "92f6feef3f01e7b4b0"}, 0xa, 0x3) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6, @broadcast}, 0x10) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x02\x00\x00\x02\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) msgget(0x3, 0x204) ioctl$BLKBSZSET(r7, 0x40081271, &(0x7f00000002c0)=0x3) [ 254.136962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.146357] Call Trace: [ 254.148975] dump_stack+0x138/0x19c [ 254.152675] should_fail.cold+0x10f/0x159 [ 254.156851] should_failslab+0xdb/0x130 [ 254.160865] __kmalloc_track_caller+0x2ef/0x790 [ 254.165552] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 254.170759] ? p9_idpool_get+0xbd/0x100 [ 254.174873] ? p9_client_create+0x2ff/0x1130 [ 254.179456] kstrdup+0x3a/0x70 [ 254.183344] p9_client_create+0x2ff/0x1130 [ 254.187755] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.193206] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 254.198935] ? __kmalloc_track_caller+0x375/0x790 [ 254.204370] ? __lockdep_init_map+0x10c/0x570 [ 254.208866] ? lockdep_init_map+0x9/0x10 [ 254.212926] ? __raw_spin_lock_init+0x2d/0x100 [ 254.217954] v9fs_session_init+0x1dc/0x1590 [ 254.222598] ? check_preemption_disabled+0x3c/0x250 [ 254.227887] ? v9fs_show_options+0x730/0x730 [ 254.232301] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.237760] ? v9fs_mount+0x5e/0x870 [ 254.241487] ? rcu_read_lock_sched_held+0x110/0x130 [ 254.246500] ? kmem_cache_alloc_trace+0x626/0x790 [ 254.251352] ? free_pages+0x46/0x50 [ 254.255003] v9fs_mount+0x7d/0x870 [ 254.258530] mount_fs+0x9d/0x2a7 [ 254.261889] vfs_kern_mount.part.0+0x5e/0x3d0 [ 254.266374] do_mount+0x417/0x27d0 [ 254.269897] ? copy_mount_options+0x5c/0x2f0 [ 254.274306] ? rcu_read_lock_sched_held+0x110/0x130 [ 254.279336] ? copy_mount_string+0x40/0x40 [ 254.283671] ? copy_mount_options+0x1fe/0x2f0 [ 254.288159] SyS_mount+0xab/0x120 [ 254.291612] ? copy_mnt_ns+0x8c0/0x8c0 [ 254.295527] do_syscall_64+0x1eb/0x630 [ 254.299428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.304827] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 254.310007] RIP: 0033:0x458c29 [ 254.313193] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.320909] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 254.328351] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 254.335643] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 23:11:22 executing program 3 (fault-call:2 fault-nth:12): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 254.343078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 254.350434] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 254.447214] FAULT_INJECTION: forcing a failure. [ 254.447214] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 254.451517] 9pnet: Insufficient options for proto=fd [ 254.459093] CPU: 0 PID: 11825 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 254.459101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.459105] Call Trace: [ 254.459126] dump_stack+0x138/0x19c [ 254.459144] should_fail.cold+0x10f/0x159 [ 254.471041] FAULT_INJECTION: forcing a failure. [ 254.471041] name failslab, interval 1, probability 0, space 0, times 0 [ 254.471273] __alloc_pages_nodemask+0x1d6/0x7a0 [ 254.507211] ? fs_reclaim_acquire+0x20/0x20 [ 254.511711] ? __alloc_pages_slowpath+0x2930/0x2930 [ 254.516735] cache_grow_begin+0x80/0x410 [ 254.520888] kmem_cache_alloc_trace+0x6b5/0x790 [ 254.525638] ? find_held_lock+0x35/0x130 [ 254.530202] p9_client_create+0xa3/0x1130 [ 254.534536] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.540165] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 254.545702] ? __kmalloc_track_caller+0x375/0x790 [ 254.550565] ? __lockdep_init_map+0x10c/0x570 [ 254.555059] ? lockdep_init_map+0x9/0x10 [ 254.559199] ? __raw_spin_lock_init+0x2d/0x100 [ 254.563776] v9fs_session_init+0x1dc/0x1590 [ 254.568123] ? check_preemption_disabled+0x3c/0x250 [ 254.573225] ? v9fs_show_options+0x730/0x730 [ 254.577627] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.583085] ? v9fs_mount+0x5e/0x870 [ 254.586884] ? rcu_read_lock_sched_held+0x110/0x130 [ 254.591894] ? kmem_cache_alloc_trace+0x626/0x790 [ 254.596780] ? free_pages+0x46/0x50 [ 254.600417] v9fs_mount+0x7d/0x870 [ 254.604047] mount_fs+0x9d/0x2a7 [ 254.607503] vfs_kern_mount.part.0+0x5e/0x3d0 [ 254.611991] do_mount+0x417/0x27d0 [ 254.615527] ? copy_mount_options+0x5c/0x2f0 [ 254.619928] ? rcu_read_lock_sched_held+0x110/0x130 [ 254.624956] ? copy_mount_string+0x40/0x40 [ 254.629223] ? copy_mount_options+0x1fe/0x2f0 [ 254.633712] SyS_mount+0xab/0x120 [ 254.637199] ? copy_mnt_ns+0x8c0/0x8c0 [ 254.641082] do_syscall_64+0x1eb/0x630 [ 254.645138] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.650138] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 254.655320] RIP: 0033:0x458c29 [ 254.658517] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.666221] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 254.673484] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 254.681262] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 254.689488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 254.696787] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 254.704638] CPU: 1 PID: 11827 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 254.712360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.712365] Call Trace: [ 254.712384] dump_stack+0x138/0x19c [ 254.712400] should_fail.cold+0x10f/0x159 [ 254.712413] should_failslab+0xdb/0x130 [ 254.712429] kmem_cache_alloc_trace+0x2ec/0x790 [ 254.740985] ? find_held_lock+0x35/0x130 [ 254.745063] p9_client_create+0xa3/0x1130 [ 254.749240] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.754796] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 254.760527] ? __kmalloc_track_caller+0x375/0x790 [ 254.765378] ? __lockdep_init_map+0x10c/0x570 [ 254.769876] ? lockdep_init_map+0x9/0x10 [ 254.773945] ? __raw_spin_lock_init+0x2d/0x100 [ 254.778618] v9fs_session_init+0x1dc/0x1590 [ 254.782962] ? check_preemption_disabled+0x3c/0x250 [ 254.787982] ? v9fs_show_options+0x730/0x730 [ 254.792485] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 254.797948] ? v9fs_mount+0x5e/0x870 [ 254.801660] ? rcu_read_lock_sched_held+0x110/0x130 [ 254.806866] ? kmem_cache_alloc_trace+0x626/0x790 [ 254.806881] ? free_pages+0x46/0x50 [ 254.806904] v9fs_mount+0x7d/0x870 [ 254.806918] mount_fs+0x9d/0x2a7 [ 254.822517] vfs_kern_mount.part.0+0x5e/0x3d0 [ 254.827884] do_mount+0x417/0x27d0 [ 254.831533] ? copy_mount_options+0x5c/0x2f0 [ 254.835951] ? rcu_read_lock_sched_held+0x110/0x130 [ 254.840977] ? copy_mount_string+0x40/0x40 [ 254.845227] ? copy_mount_options+0x1fe/0x2f0 [ 254.845243] SyS_mount+0xab/0x120 [ 254.845253] ? copy_mnt_ns+0x8c0/0x8c0 [ 254.845276] do_syscall_64+0x1eb/0x630 [ 254.845284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 254.845302] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 254.871143] RIP: 0033:0x458c29 [ 254.874513] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 254.882299] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 254.889557] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:22 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 254.897024] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 254.904542] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 254.911894] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:22 executing program 0: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x80000001, 0x200000) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) clone(0x2e828903, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000180)={0x0, 0x7, 0x1000}) pipe2$9p(&(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 23:11:22 executing program 5 (fault-call:2 fault-nth:12): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:22 executing program 3 (fault-call:2 fault-nth:13): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 255.046445] 9pnet: Insufficient options for proto=fd 23:11:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 255.068059] FAULT_INJECTION: forcing a failure. [ 255.068059] name failslab, interval 1, probability 0, space 0, times 0 [ 255.103357] FAULT_INJECTION: forcing a failure. [ 255.103357] name failslab, interval 1, probability 0, space 0, times 0 [ 255.119163] CPU: 1 PID: 11840 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 255.126221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.126228] Call Trace: [ 255.126259] dump_stack+0x138/0x19c [ 255.126277] should_fail.cold+0x10f/0x159 [ 255.126294] should_failslab+0xdb/0x130 [ 255.126306] __kmalloc_track_caller+0x2ef/0x790 [ 255.126317] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 255.126327] ? p9_idpool_get+0xbd/0x100 [ 255.126334] ? p9_client_create+0x2ff/0x1130 23:11:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 255.126345] kstrdup+0x3a/0x70 [ 255.126354] p9_client_create+0x2ff/0x1130 [ 255.126367] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 255.126378] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 255.126387] ? __kmalloc_track_caller+0x375/0x790 [ 255.126396] ? __lockdep_init_map+0x10c/0x570 [ 255.126408] ? lockdep_init_map+0x9/0x10 [ 255.126416] ? __raw_spin_lock_init+0x2d/0x100 [ 255.126430] v9fs_session_init+0x1dc/0x1590 [ 255.126448] ? check_preemption_disabled+0x3c/0x250 [ 255.126459] ? v9fs_show_options+0x730/0x730 [ 255.126469] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 255.126479] ? v9fs_mount+0x5e/0x870 [ 255.126488] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.126499] ? kmem_cache_alloc_trace+0x626/0x790 [ 255.126509] ? free_pages+0x46/0x50 [ 255.126522] v9fs_mount+0x7d/0x870 [ 255.126535] mount_fs+0x9d/0x2a7 [ 255.126548] vfs_kern_mount.part.0+0x5e/0x3d0 [ 255.142244] do_mount+0x417/0x27d0 [ 255.142256] ? copy_mount_options+0x5c/0x2f0 [ 255.142268] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.142282] ? copy_mount_string+0x40/0x40 [ 255.142296] ? copy_mount_options+0x1fe/0x2f0 [ 255.142308] SyS_mount+0xab/0x120 [ 255.279634] ? copy_mnt_ns+0x8c0/0x8c0 [ 255.283540] do_syscall_64+0x1eb/0x630 [ 255.287698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.292569] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.297865] RIP: 0033:0x458c29 [ 255.301065] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.309187] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 255.316558] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 255.323928] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 255.331213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 255.338509] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 255.346010] CPU: 0 PID: 11850 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 255.353293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.363113] Call Trace: [ 255.366013] dump_stack+0x138/0x19c [ 255.369685] should_fail.cold+0x10f/0x159 [ 255.374113] should_failslab+0xdb/0x130 [ 255.378430] kmem_cache_alloc_trace+0x2ec/0x790 [ 255.383675] ? __lockdep_init_map+0x10c/0x570 [ 255.388501] p9_idpool_create+0x40/0x120 [ 255.392999] p9_client_create+0x1e5/0x1130 [ 255.398262] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 255.404314] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 255.409897] ? __kmalloc_track_caller+0x375/0x790 [ 255.415394] ? __lockdep_init_map+0x10c/0x570 [ 255.420235] ? lockdep_init_map+0x9/0x10 [ 255.424399] ? __raw_spin_lock_init+0x2d/0x100 [ 255.429001] v9fs_session_init+0x1dc/0x1590 [ 255.433793] ? check_preemption_disabled+0x3c/0x250 [ 255.439075] ? v9fs_show_options+0x730/0x730 [ 255.443501] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 255.449166] ? v9fs_mount+0x5e/0x870 [ 255.452890] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.458048] ? kmem_cache_alloc_trace+0x626/0x790 [ 255.463466] ? free_pages+0x46/0x50 [ 255.467711] v9fs_mount+0x7d/0x870 [ 255.471835] mount_fs+0x9d/0x2a7 [ 255.476110] vfs_kern_mount.part.0+0x5e/0x3d0 [ 255.481158] do_mount+0x417/0x27d0 [ 255.484914] ? copy_mount_options+0x5c/0x2f0 [ 255.489557] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.495107] ? copy_mount_string+0x40/0x40 [ 255.499516] ? copy_mount_options+0x1fe/0x2f0 [ 255.504265] SyS_mount+0xab/0x120 [ 255.508038] ? copy_mnt_ns+0x8c0/0x8c0 [ 255.512106] do_syscall_64+0x1eb/0x630 [ 255.515994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.520911] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.526156] RIP: 0033:0x458c29 [ 255.529576] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.538189] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 255.546873] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 255.555363] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 23:11:23 executing program 5 (fault-call:2 fault-nth:13): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:23 executing program 3 (fault-call:2 fault-nth:14): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 255.562740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 255.571671] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 255.664918] FAULT_INJECTION: forcing a failure. [ 255.664918] name failslab, interval 1, probability 0, space 0, times 0 [ 255.694504] FAULT_INJECTION: forcing a failure. [ 255.694504] name failslab, interval 1, probability 0, space 0, times 0 23:11:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 255.708041] CPU: 1 PID: 11880 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 255.715704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.725706] Call Trace: [ 255.728329] dump_stack+0x138/0x19c [ 255.732169] should_fail.cold+0x10f/0x159 [ 255.736542] should_failslab+0xdb/0x130 [ 255.740718] __kmalloc+0x2f3/0x7a0 [ 255.744302] ? match_token+0x231/0x480 [ 255.748557] ? match_strdup+0x5f/0xa0 [ 255.752546] match_strdup+0x5f/0xa0 [ 255.756727] p9_client_create+0x3dc/0x1130 [ 255.761525] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 255.768062] ? __kmalloc_track_caller+0x375/0x790 [ 255.773088] ? __lockdep_init_map+0x10c/0x570 [ 255.777771] ? lockdep_init_map+0x9/0x10 [ 255.782022] ? __raw_spin_lock_init+0x2d/0x100 [ 255.787490] v9fs_session_init+0x1dc/0x1590 [ 255.792356] ? check_preemption_disabled+0x3c/0x250 [ 255.798789] ? v9fs_show_options+0x730/0x730 [ 255.805127] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 255.811830] ? v9fs_mount+0x5e/0x870 [ 255.816065] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.821728] ? kmem_cache_alloc_trace+0x626/0x790 [ 255.827047] ? free_pages+0x46/0x50 [ 255.831040] v9fs_mount+0x7d/0x870 [ 255.835233] mount_fs+0x9d/0x2a7 [ 255.839156] vfs_kern_mount.part.0+0x5e/0x3d0 [ 255.843986] do_mount+0x417/0x27d0 [ 255.848440] ? copy_mount_options+0x5c/0x2f0 [ 255.853112] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.853124] ? copy_mount_string+0x40/0x40 [ 255.853136] ? copy_mount_options+0x1fe/0x2f0 [ 255.853148] SyS_mount+0xab/0x120 [ 255.853155] ? copy_mnt_ns+0x8c0/0x8c0 [ 255.853186] do_syscall_64+0x1eb/0x630 [ 255.853194] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.853211] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.853218] RIP: 0033:0x458c29 [ 255.853224] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.853233] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 23:11:23 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:23 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 255.853238] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 255.853244] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 255.853250] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 255.853257] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 255.975723] CPU: 0 PID: 11878 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 255.983251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.005595] Call Trace: [ 256.005616] dump_stack+0x138/0x19c [ 256.005632] should_fail.cold+0x10f/0x159 [ 256.005645] should_failslab+0xdb/0x130 [ 256.005656] __kmalloc+0x2f3/0x7a0 [ 256.005665] ? match_token+0x231/0x480 [ 256.005677] ? match_strdup+0x5f/0xa0 [ 256.018343] match_strdup+0x5f/0xa0 [ 256.018360] p9_client_create+0x3dc/0x1130 [ 256.018377] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 256.018391] ? __kmalloc_track_caller+0x375/0x790 [ 256.032094] ? __lockdep_init_map+0x10c/0x570 [ 256.046202] ? lockdep_init_map+0x9/0x10 [ 256.046213] ? __raw_spin_lock_init+0x2d/0x100 [ 256.046229] v9fs_session_init+0x1dc/0x1590 [ 256.046247] ? check_preemption_disabled+0x3c/0x250 [ 256.056911] ? v9fs_show_options+0x730/0x730 [ 256.056926] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 256.056937] ? v9fs_mount+0x5e/0x870 [ 256.056948] ? rcu_read_lock_sched_held+0x110/0x130 [ 256.093273] 9pnet: Insufficient options for proto=fd [ 256.096940] ? kmem_cache_alloc_trace+0x626/0x790 [ 256.096957] ? free_pages+0x46/0x50 [ 256.096975] v9fs_mount+0x7d/0x870 [ 256.096990] mount_fs+0x9d/0x2a7 [ 256.128224] vfs_kern_mount.part.0+0x5e/0x3d0 [ 256.133067] do_mount+0x417/0x27d0 [ 256.133077] ? copy_mount_options+0x5c/0x2f0 [ 256.133088] ? rcu_read_lock_sched_held+0x110/0x130 [ 256.133100] ? copy_mount_string+0x40/0x40 [ 256.133113] ? copy_mount_options+0x1fe/0x2f0 [ 256.142695] SyS_mount+0xab/0x120 [ 256.142707] ? copy_mnt_ns+0x8c0/0x8c0 [ 256.142721] do_syscall_64+0x1eb/0x630 [ 256.142729] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.142746] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.200491] RIP: 0033:0x458c29 [ 256.205398] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 256.213952] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 256.222965] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 256.233219] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 256.260812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 256.281424] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xd5, 0x200040) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000040)={0x7f, 0x2, [0xc0000102, 0x0, 0x1b]}) 23:11:25 executing program 3 (fault-call:2 fault-nth:15): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:25 executing program 5 (fault-call:2 fault-nth:14): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:25 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:25 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 258.036478] FAULT_INJECTION: forcing a failure. [ 258.036478] name failslab, interval 1, probability 0, space 0, times 0 [ 258.059947] FAULT_INJECTION: forcing a failure. [ 258.059947] name failslab, interval 1, probability 0, space 0, times 0 [ 258.094383] CPU: 0 PID: 11917 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 258.103372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.113779] Call Trace: [ 258.116569] dump_stack+0x138/0x19c [ 258.120442] should_fail.cold+0x10f/0x159 [ 258.124848] should_failslab+0xdb/0x130 [ 258.128838] kmem_cache_alloc_trace+0x2ec/0x790 [ 258.133780] ? kfree+0x186/0x270 [ 258.137337] ? p9_client_create+0x580/0x1130 23:11:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 258.141842] ? trace_hardirqs_on_caller+0x400/0x590 [ 258.146999] p9_idpool_create+0x40/0x120 [ 258.151522] p9_client_create+0x5c6/0x1130 [ 258.155935] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 258.162231] ? __kmalloc_track_caller+0x375/0x790 [ 258.163226] 9pnet: Insufficient options for proto=fd [ 258.167311] ? __lockdep_init_map+0x10c/0x570 [ 258.167324] ? lockdep_init_map+0x9/0x10 [ 258.167334] ? __raw_spin_lock_init+0x2d/0x100 [ 258.167348] v9fs_session_init+0x1dc/0x1590 [ 258.167366] ? check_preemption_disabled+0x3c/0x250 [ 258.201677] ? v9fs_show_options+0x730/0x730 [ 258.206899] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.212999] ? v9fs_mount+0x5e/0x870 [ 258.217274] ? rcu_read_lock_sched_held+0x110/0x130 [ 258.222644] ? kmem_cache_alloc_trace+0x626/0x790 [ 258.227785] ? free_pages+0x46/0x50 [ 258.231596] v9fs_mount+0x7d/0x870 [ 258.235454] mount_fs+0x9d/0x2a7 [ 258.238834] vfs_kern_mount.part.0+0x5e/0x3d0 [ 258.243864] do_mount+0x417/0x27d0 [ 258.243874] ? copy_mount_options+0x5c/0x2f0 [ 258.243884] ? rcu_read_lock_sched_held+0x110/0x130 [ 258.243896] ? copy_mount_string+0x40/0x40 [ 258.243910] ? copy_mount_options+0x1fe/0x2f0 [ 258.243924] SyS_mount+0xab/0x120 [ 258.243932] ? copy_mnt_ns+0x8c0/0x8c0 [ 258.243975] do_syscall_64+0x1eb/0x630 [ 258.243985] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.244003] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.244010] RIP: 0033:0x458c29 [ 258.244018] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 23:11:26 executing program 5 (fault-call:2 fault-nth:15): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 258.257765] ORIG_RAX: 00000000000000a5 [ 258.257773] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 258.257778] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 258.257784] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 258.257790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 258.257795] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 258.344019] CPU: 1 PID: 11915 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 258.351349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.361002] Call Trace: [ 258.363768] dump_stack+0x138/0x19c [ 258.367722] should_fail.cold+0x10f/0x159 [ 258.371990] should_failslab+0xdb/0x130 [ 258.376492] __kmalloc_track_caller+0x2ef/0x790 [ 258.381478] ? vfs_kern_mount.part.0+0x5e/0x3d0 [ 258.386230] ? do_mount+0x417/0x27d0 [ 258.390476] ? SyS_mount+0xab/0x120 [ 258.394591] ? save_trace+0x290/0x290 [ 258.398583] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 258.403838] ? parse_opts.part.0+0x83/0x2e0 [ 258.408665] kstrdup+0x3a/0x70 [ 258.411858] parse_opts.part.0+0x83/0x2e0 [ 258.416189] ? p9_fd_show_options+0x1a0/0x1a0 [ 258.420972] ? check_preemption_disabled+0x3c/0x250 [ 258.426522] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.432145] ? p9_idpool_create+0x40/0x120 [ 258.437133] p9_fd_create+0x86/0x340 [ 258.441109] ? parse_opts.part.0+0x2e0/0x2e0 [ 258.445634] ? __raw_spin_lock_init+0x2d/0x100 [ 258.450402] p9_client_create+0x64e/0x1130 [ 258.454817] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 258.460945] ? __kmalloc_track_caller+0x375/0x790 [ 258.465960] ? __lockdep_init_map+0x10c/0x570 [ 258.470586] ? lockdep_init_map+0x9/0x10 [ 258.474738] ? __raw_spin_lock_init+0x2d/0x100 [ 258.479552] v9fs_session_init+0x1dc/0x1590 [ 258.483985] ? check_preemption_disabled+0x3c/0x250 [ 258.489219] ? v9fs_show_options+0x730/0x730 [ 258.493856] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.499408] ? v9fs_mount+0x5e/0x870 [ 258.503305] ? rcu_read_lock_sched_held+0x110/0x130 [ 258.508625] ? kmem_cache_alloc_trace+0x626/0x790 [ 258.513901] ? free_pages+0x46/0x50 [ 258.517647] v9fs_mount+0x7d/0x870 [ 258.521189] mount_fs+0x9d/0x2a7 [ 258.524827] vfs_kern_mount.part.0+0x5e/0x3d0 [ 258.529888] do_mount+0x417/0x27d0 [ 258.533785] ? copy_mount_options+0x5c/0x2f0 [ 258.538547] ? rcu_read_lock_sched_held+0x110/0x130 [ 258.544030] ? copy_mount_string+0x40/0x40 [ 258.548760] ? copy_mount_options+0x1fe/0x2f0 [ 258.554217] SyS_mount+0xab/0x120 [ 258.559337] ? copy_mnt_ns+0x8c0/0x8c0 [ 258.563656] do_syscall_64+0x1eb/0x630 [ 258.568130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.573692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.578885] RIP: 0033:0x458c29 [ 258.582330] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 258.590999] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 23:11:26 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 258.598966] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 258.607802] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 258.617488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 258.626238] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 258.639309] 9pnet: Insufficient options for proto=fd 23:11:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:26 executing program 3 (fault-call:2 fault-nth:16): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 258.726024] FAULT_INJECTION: forcing a failure. [ 258.726024] name failslab, interval 1, probability 0, space 0, times 0 [ 258.768359] CPU: 1 PID: 11934 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 258.777256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.777261] Call Trace: [ 258.777281] dump_stack+0x138/0x19c [ 258.777301] should_fail.cold+0x10f/0x159 [ 258.777320] should_failslab+0xdb/0x130 [ 258.804243] __kmalloc+0x2f3/0x7a0 [ 258.808622] ? match_token+0x231/0x480 [ 258.812650] ? match_strdup+0x5f/0xa0 [ 258.817042] match_strdup+0x5f/0xa0 [ 258.817056] p9_client_create+0x3dc/0x1130 [ 258.817074] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 258.817088] ? __kmalloc_track_caller+0x375/0x790 [ 258.817100] ? __lockdep_init_map+0x10c/0x570 [ 258.817111] ? lockdep_init_map+0x9/0x10 [ 258.847405] ? __raw_spin_lock_init+0x2d/0x100 [ 258.847424] v9fs_session_init+0x1dc/0x1590 [ 258.847444] ? check_preemption_disabled+0x3c/0x250 [ 258.847455] ? v9fs_show_options+0x730/0x730 [ 258.867777] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.873552] ? v9fs_mount+0x5e/0x870 [ 258.877559] ? rcu_read_lock_sched_held+0x110/0x130 [ 258.882684] ? kmem_cache_alloc_trace+0x626/0x790 [ 258.882699] ? free_pages+0x46/0x50 [ 258.882716] v9fs_mount+0x7d/0x870 [ 258.882731] mount_fs+0x9d/0x2a7 [ 258.882748] vfs_kern_mount.part.0+0x5e/0x3d0 [ 258.895969] do_mount+0x417/0x27d0 [ 258.895981] ? copy_mount_options+0x5c/0x2f0 23:11:26 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40002, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='/dev/hwrng\x00', 0xb) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) 23:11:26 executing program 0: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffec1, 0x0, 0x0, 0x0) 23:11:26 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 258.895994] ? rcu_read_lock_sched_held+0x110/0x130 [ 258.896008] ? copy_mount_string+0x40/0x40 [ 258.925010] ? copy_mount_options+0x1fe/0x2f0 [ 258.929974] SyS_mount+0xab/0x120 [ 258.933561] ? copy_mnt_ns+0x8c0/0x8c0 [ 258.937470] do_syscall_64+0x1eb/0x630 [ 258.941478] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.946509] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.951960] RIP: 0033:0x458c29 [ 258.955170] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:11:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 258.963073] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 258.970936] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 258.970943] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 258.970948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 258.970954] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 258.995379] FAULT_INJECTION: forcing a failure. [ 258.995379] name failslab, interval 1, probability 0, space 0, times 0 23:11:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x2ff], [0xc2]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x44a100, 0x0) write$P9_RXATTRWALK(r3, &(0x7f0000000040)={0xf, 0x1f, 0x1, 0x8000}, 0xf) [ 259.048302] CPU: 1 PID: 11953 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 259.057604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.068434] Call Trace: [ 259.068455] dump_stack+0x138/0x19c [ 259.068472] should_fail.cold+0x10f/0x159 [ 259.068487] should_failslab+0xdb/0x130 [ 259.068504] __kmalloc+0x2f3/0x7a0 [ 259.068517] ? match_number.isra.0+0x86/0x1e0 [ 259.068527] match_number.isra.0+0x86/0x1e0 [ 259.068541] ? match_strdup+0xa0/0xa0 [ 259.090287] ? match_wildcard+0x2d0/0x2d0 [ 259.090301] match_int+0x41/0x50 [ 259.090316] parse_opts.part.0+0x1c9/0x2e0 [ 259.090328] ? p9_fd_show_options+0x1a0/0x1a0 [ 259.090344] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 259.090353] ? p9_idpool_create+0x40/0x120 [ 259.090364] p9_fd_create+0x86/0x340 [ 259.137092] ? parse_opts.part.0+0x2e0/0x2e0 [ 259.141910] ? __raw_spin_lock_init+0x2d/0x100 [ 259.147242] p9_client_create+0x64e/0x1130 [ 259.152267] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 259.160829] ? __kmalloc_track_caller+0x375/0x790 [ 259.166154] ? __lockdep_init_map+0x10c/0x570 [ 259.170808] ? lockdep_init_map+0x9/0x10 [ 259.176835] ? __raw_spin_lock_init+0x2d/0x100 [ 259.182474] v9fs_session_init+0x1dc/0x1590 [ 259.188558] ? check_preemption_disabled+0x3c/0x250 [ 259.194725] ? v9fs_show_options+0x730/0x730 [ 259.201383] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 259.208831] ? v9fs_mount+0x5e/0x870 [ 259.213931] ? rcu_read_lock_sched_held+0x110/0x130 [ 259.221179] ? kmem_cache_alloc_trace+0x626/0x790 [ 259.226912] ? free_pages+0x46/0x50 [ 259.231068] v9fs_mount+0x7d/0x870 [ 259.235449] mount_fs+0x9d/0x2a7 [ 259.239102] vfs_kern_mount.part.0+0x5e/0x3d0 [ 259.243897] do_mount+0x417/0x27d0 [ 259.247993] ? copy_mount_options+0x5c/0x2f0 [ 259.252749] ? rcu_read_lock_sched_held+0x110/0x130 [ 259.258681] ? copy_mount_string+0x40/0x40 [ 259.263462] ? copy_mount_options+0x1fe/0x2f0 [ 259.268523] SyS_mount+0xab/0x120 [ 259.271990] ? copy_mnt_ns+0x8c0/0x8c0 [ 259.276053] do_syscall_64+0x1eb/0x630 [ 259.280933] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.286142] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.292360] RIP: 0033:0x458c29 23:11:27 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 259.295811] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 259.304860] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 259.313364] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 259.321118] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 259.328898] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 259.336903] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) 23:11:27 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:27 executing program 5 (fault-call:2 fault-nth:16): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) [ 259.455956] 9pnet: Insufficient options for proto=fd 23:11:27 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:27 executing program 3 (fault-call:2 fault-nth:17): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 259.567740] FAULT_INJECTION: forcing a failure. [ 259.567740] name failslab, interval 1, probability 0, space 0, times 0 [ 259.570575] FAULT_INJECTION: forcing a failure. [ 259.570575] name failslab, interval 1, probability 0, space 0, times 0 [ 259.610146] CPU: 1 PID: 11992 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 259.618657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.618662] Call Trace: [ 259.618684] dump_stack+0x138/0x19c [ 259.618704] should_fail.cold+0x10f/0x159 [ 259.640929] should_failslab+0xdb/0x130 [ 259.645398] __kmalloc_track_caller+0x2ef/0x790 [ 259.650358] ? vfs_kern_mount.part.0+0x5e/0x3d0 [ 259.655496] ? do_mount+0x417/0x27d0 [ 259.655506] ? SyS_mount+0xab/0x120 [ 259.655521] ? save_trace+0x290/0x290 [ 259.655532] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 259.655545] ? parse_opts.part.0+0x83/0x2e0 [ 259.678006] kstrdup+0x3a/0x70 [ 259.681356] parse_opts.part.0+0x83/0x2e0 [ 259.685632] ? p9_fd_show_options+0x1a0/0x1a0 [ 259.690378] ? check_preemption_disabled+0x3c/0x250 [ 259.696147] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 259.703686] ? p9_idpool_create+0x40/0x120 [ 259.709148] p9_fd_create+0x86/0x340 [ 259.713130] ? parse_opts.part.0+0x2e0/0x2e0 [ 259.717847] ? __raw_spin_lock_init+0x2d/0x100 [ 259.722632] p9_client_create+0x64e/0x1130 [ 259.726994] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 259.733162] ? __kmalloc_track_caller+0x375/0x790 [ 259.738726] ? __lockdep_init_map+0x10c/0x570 [ 259.743826] ? lockdep_init_map+0x9/0x10 [ 259.747985] ? __raw_spin_lock_init+0x2d/0x100 [ 259.753201] v9fs_session_init+0x1dc/0x1590 [ 259.758158] ? check_preemption_disabled+0x3c/0x250 [ 259.763575] ? v9fs_show_options+0x730/0x730 [ 259.768976] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 259.776642] ? v9fs_mount+0x5e/0x870 [ 259.780727] ? rcu_read_lock_sched_held+0x110/0x130 [ 259.785932] ? kmem_cache_alloc_trace+0x626/0x790 [ 259.791002] ? free_pages+0x46/0x50 [ 259.794911] v9fs_mount+0x7d/0x870 [ 259.799284] mount_fs+0x9d/0x2a7 [ 259.803065] vfs_kern_mount.part.0+0x5e/0x3d0 [ 259.808167] do_mount+0x417/0x27d0 [ 259.812014] ? copy_mount_options+0x5c/0x2f0 [ 259.816623] ? rcu_read_lock_sched_held+0x110/0x130 [ 259.822174] ? copy_mount_string+0x40/0x40 [ 259.826702] ? copy_mount_options+0x1fe/0x2f0 [ 259.831508] SyS_mount+0xab/0x120 [ 259.835243] ? copy_mnt_ns+0x8c0/0x8c0 [ 259.839941] do_syscall_64+0x1eb/0x630 [ 259.843854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.848754] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.854058] RIP: 0033:0x458c29 23:11:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000600)={@rand_addr, 0x0}, &(0x7f0000000640)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000800)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000900)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000b00)={@loopback, 0x0}, &(0x7f0000000b40)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'vlan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000e40)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000e80)={0x0, @multicast2, @broadcast}, &(0x7f0000000ec0)=0xc) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x2400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000f00)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001040)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000001140)=0xe8) recvmsg(r0, &(0x7f0000002380)={&(0x7f0000001180)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002240)=[{&(0x7f0000001200)}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x2, &(0x7f0000002280)=""/226, 0xe2}, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002480)={'vcan0\x00', 0x0}) accept4$packet(0xffffffffffffff9c, &(0x7f00000024c0)={0x11, 0x0, 0x0}, &(0x7f0000002500)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002540)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002700)={@local, 0x0}, &(0x7f0000002740)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000027c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002800)={'ip6_vti0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002c80)={@multicast1, @empty, 0x0}, &(0x7f0000002cc0)=0xc) accept4(r0, &(0x7f0000002d00)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000002d80)=0x80, 0x80000) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003400)={&(0x7f0000002dc0)={0x634, r1, 0x202, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xc31}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x178, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r14}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x80000001, 0x1, 0x7fff, 0xc907}, {0x53, 0x2, 0xd4e1, 0x576f}, {0x100000000, 0x4, 0x6, 0x9}, {0x80, 0x0, 0x101, 0x5}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x19c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r20}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}]}, 0x634}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r22 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r22, @ANYBLOB="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"], 0x28}}, 0x0) 23:11:27 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 259.857480] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 259.865728] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 259.873184] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 259.880944] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 259.888488] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 259.895767] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 259.903154] CPU: 0 PID: 11991 Comm: syz-executor.5 Not tainted 4.14.112 #2 23:11:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x800000000002) [ 259.910442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.920433] Call Trace: [ 259.923042] dump_stack+0x138/0x19c [ 259.926853] should_fail.cold+0x10f/0x159 [ 259.931047] should_failslab+0xdb/0x130 [ 259.935092] kmem_cache_alloc_trace+0x2ec/0x790 [ 259.939962] ? kfree+0x186/0x270 [ 259.943537] ? p9_client_create+0x580/0x1130 [ 259.948188] ? trace_hardirqs_on_caller+0x400/0x590 [ 259.953586] p9_idpool_create+0x40/0x120 [ 259.958434] p9_client_create+0x5c6/0x1130 [ 259.960118] 9pnet: Insufficient options for proto=fd [ 259.962915] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 259.962930] ? __kmalloc_track_caller+0x375/0x790 [ 259.962942] ? __lockdep_init_map+0x10c/0x570 [ 259.980964] ? lockdep_init_map+0x9/0x10 [ 259.980973] ? __raw_spin_lock_init+0x2d/0x100 [ 259.980988] v9fs_session_init+0x1dc/0x1590 [ 259.981006] ? check_preemption_disabled+0x3c/0x250 [ 259.981016] ? v9fs_show_options+0x730/0x730 [ 259.981026] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 259.981036] ? v9fs_mount+0x5e/0x870 [ 259.981046] ? rcu_read_lock_sched_held+0x110/0x130 [ 259.981062] ? kmem_cache_alloc_trace+0x626/0x790 [ 260.013300] ? free_pages+0x46/0x50 [ 260.013321] v9fs_mount+0x7d/0x870 [ 260.013335] mount_fs+0x9d/0x2a7 23:11:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) 23:11:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) [ 260.013348] vfs_kern_mount.part.0+0x5e/0x3d0 [ 260.013360] do_mount+0x417/0x27d0 [ 260.013369] ? copy_mount_options+0x5c/0x2f0 [ 260.013380] ? rcu_read_lock_sched_held+0x110/0x130 [ 260.013393] ? copy_mount_string+0x40/0x40 [ 260.085571] ? copy_mount_options+0x1fe/0x2f0 [ 260.090279] SyS_mount+0xab/0x120 [ 260.094104] ? copy_mnt_ns+0x8c0/0x8c0 [ 260.098279] do_syscall_64+0x1eb/0x630 [ 260.102304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.107357] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 260.112842] RIP: 0033:0x458c29 [ 260.116430] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.124520] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 260.132002] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 260.141680] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 260.149953] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 23:11:28 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffd}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) connect$caif(r1, &(0x7f0000000080)=@dgm={0x25, 0x2, 0x4}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) 23:11:28 executing program 3 (fault-call:2 fault-nth:18): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 260.158666] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 260.233357] FAULT_INJECTION: forcing a failure. [ 260.233357] name failslab, interval 1, probability 0, space 0, times 0 [ 260.246607] CPU: 0 PID: 12019 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 260.254347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.264376] Call Trace: [ 260.264403] dump_stack+0x138/0x19c [ 260.264422] should_fail.cold+0x10f/0x159 [ 260.264437] should_failslab+0xdb/0x130 [ 260.264447] kmem_cache_alloc_trace+0x2ec/0x790 [ 260.264461] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 260.264471] ? p9_idpool_create+0x40/0x120 [ 260.264482] p9_fd_create+0x137/0x340 [ 260.264493] ? parse_opts.part.0+0x2e0/0x2e0 [ 260.264503] ? __raw_spin_lock_init+0x2d/0x100 [ 260.264515] p9_client_create+0x64e/0x1130 [ 260.264530] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 260.264542] ? __kmalloc_track_caller+0x375/0x790 [ 260.276031] ? __lockdep_init_map+0x10c/0x570 [ 260.276045] ? lockdep_init_map+0x9/0x10 [ 260.276053] ? __raw_spin_lock_init+0x2d/0x100 [ 260.276067] v9fs_session_init+0x1dc/0x1590 [ 260.285015] ? check_preemption_disabled+0x3c/0x250 [ 260.285027] ? v9fs_show_options+0x730/0x730 [ 260.285039] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 260.354163] ? v9fs_mount+0x5e/0x870 [ 260.354175] ? rcu_read_lock_sched_held+0x110/0x130 [ 260.354188] ? kmem_cache_alloc_trace+0x626/0x790 [ 260.354200] ? free_pages+0x46/0x50 [ 260.354216] v9fs_mount+0x7d/0x870 [ 260.354230] mount_fs+0x9d/0x2a7 [ 260.354243] vfs_kern_mount.part.0+0x5e/0x3d0 [ 260.354256] do_mount+0x417/0x27d0 [ 260.354265] ? copy_mount_options+0x5c/0x2f0 [ 260.354274] ? rcu_read_lock_sched_held+0x110/0x130 [ 260.354285] ? copy_mount_string+0x40/0x40 [ 260.354299] ? copy_mount_options+0x1fe/0x2f0 [ 260.370489] SyS_mount+0xab/0x120 [ 260.370501] ? copy_mnt_ns+0x8c0/0x8c0 [ 260.370516] do_syscall_64+0x1eb/0x630 [ 260.370523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.370539] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 260.370547] RIP: 0033:0x458c29 [ 260.370552] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.370562] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 260.370571] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 260.465703] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 260.473795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 23:11:28 executing program 5 (fault-call:2 fault-nth:17): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) 23:11:28 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:28 executing program 0: clock_getres(0x4, 0x0) 23:11:28 executing program 3 (fault-call:2 fault-nth:19): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:28 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 260.481703] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 260.582686] FAULT_INJECTION: forcing a failure. [ 260.582686] name failslab, interval 1, probability 0, space 0, times 0 [ 260.595494] CPU: 0 PID: 12040 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 260.602828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.612937] Call Trace: [ 260.615654] dump_stack+0x138/0x19c [ 260.620097] should_fail.cold+0x10f/0x159 [ 260.625553] should_failslab+0xdb/0x130 23:11:28 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 260.630780] kmem_cache_alloc_trace+0x4b/0x790 [ 260.635824] ? find_held_lock+0x35/0x130 [ 260.639934] p9_client_prepare_req.part.0+0x4d8/0xa90 [ 260.645672] p9_client_rpc+0x170/0x1190 [ 260.650031] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 260.652652] FAULT_INJECTION: forcing a failure. [ 260.652652] name failslab, interval 1, probability 0, space 0, times 0 [ 260.656869] ? p9_conn_create+0x4c0/0x4c0 [ 260.673941] ? pipe_poll+0x263/0x2d0 [ 260.677942] ? generic_pipe_buf_confirm+0x10/0x10 [ 260.682915] ? p9_conn_create+0x3c0/0x4c0 [ 260.687587] ? p9_fd_create+0x245/0x340 [ 260.692570] ? parse_opts.part.0+0x2e0/0x2e0 [ 260.697175] p9_client_create+0x9a3/0x1130 [ 260.701819] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 260.707644] ? __kmalloc_track_caller+0x375/0x790 [ 260.707652] FAULT_INJECTION: forcing a failure. [ 260.707652] name failslab, interval 1, probability 0, space 0, times 0 [ 260.712599] ? __lockdep_init_map+0x10c/0x570 [ 260.712611] ? lockdep_init_map+0x9/0x10 [ 260.712621] ? __raw_spin_lock_init+0x2d/0x100 [ 260.712635] v9fs_session_init+0x1dc/0x1590 [ 260.712654] ? check_preemption_disabled+0x3c/0x250 [ 260.712664] ? v9fs_show_options+0x730/0x730 [ 260.712674] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 260.712684] ? v9fs_mount+0x5e/0x870 [ 260.712694] ? rcu_read_lock_sched_held+0x110/0x130 [ 260.712706] ? kmem_cache_alloc_trace+0x626/0x790 [ 260.712760] ? free_pages+0x46/0x50 [ 260.712777] v9fs_mount+0x7d/0x870 [ 260.712790] mount_fs+0x9d/0x2a7 [ 260.712803] vfs_kern_mount.part.0+0x5e/0x3d0 [ 260.792199] do_mount+0x417/0x27d0 [ 260.795985] ? copy_mount_options+0x5c/0x2f0 [ 260.800577] ? rcu_read_lock_sched_held+0x110/0x130 [ 260.805757] ? copy_mount_string+0x40/0x40 [ 260.810462] ? copy_mount_options+0x1fe/0x2f0 [ 260.815281] SyS_mount+0xab/0x120 [ 260.818920] ? copy_mnt_ns+0x8c0/0x8c0 [ 260.823266] do_syscall_64+0x1eb/0x630 [ 260.827440] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.832660] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 260.837882] RIP: 0033:0x458c29 [ 260.841251] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 260.849611] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 260.857065] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 260.864524] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 260.872427] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 260.880570] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 260.887958] CPU: 1 PID: 12051 Comm: syz-executor.2 Not tainted 4.14.112 #2 [ 260.887961] 9pnet: Couldn't grow tag array [ 260.899880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.910565] Call Trace: [ 260.913804] dump_stack+0x138/0x19c [ 260.919294] should_fail.cold+0x10f/0x159 [ 260.919310] should_failslab+0xdb/0x130 [ 260.919330] kmem_cache_alloc_node_trace+0x283/0x770 [ 260.935301] ? __mutex_lock+0x36a/0x1470 [ 260.935320] ? __might_fault+0x110/0x1d0 [ 260.935335] ? _parse_integer+0xe8/0x140 [ 260.944082] __kmalloc_node+0x3d/0x80 [ 260.944100] kvmalloc_node+0x4e/0xe0 [ 260.955260] traverse+0x46c/0x890 [ 260.962848] ? save_trace+0x290/0x290 [ 260.962863] ? get_pid_task+0x98/0x140 [ 260.962872] ? seq_hlist_next+0xc0/0xc0 [ 260.962886] seq_read+0xa00/0x12a0 [ 260.962903] ? trace_hardirqs_on+0x10/0x10 23:11:28 executing program 3 (fault-call:2 fault-nth:20): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:28 executing program 0: mmap(&(0x7f0000e06000/0x3000)=nil, 0x3000, 0x1, 0x40031, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000040)) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x20}, 0x4) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000000c0)={@local, @multicast1}, &(0x7f0000000100)=0xc) ioctl$sock_ifreq(r0, 0x8938, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x4}) 23:11:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400000000000001) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) write$P9_RSTATu(r4, &(0x7f00000003c0)={0x84, 0x7d, 0x2, {{0x0, 0x6d, 0x49, 0x5, {0x40, 0x4, 0x7}, 0x40000, 0x4, 0xfffffffffffffff8, 0x8, 0x9, '/dev/kvm\x00', 0x0, '', 0x26, 'system+eth0},mime_typeproctrusted%%em1', 0xb, ',{mime_type'}, 0x2, '{\\', r5, r6, r7}}, 0x84) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x140, 0x0, 0x40000002], [0xc2]}) [ 260.962911] ? save_trace+0x290/0x290 [ 260.962921] ? seq_lseek+0x3c0/0x3c0 [ 260.962930] ? fsnotify+0x933/0x11e0 [ 260.962948] __vfs_read+0x107/0x6b0 [ 260.962958] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 260.962969] ? seq_lseek+0x3c0/0x3c0 [ 260.962979] ? vfs_copy_file_range+0xa40/0xa40 [ 260.962991] ? __inode_security_revalidate+0xd6/0x130 [ 260.963003] ? avc_policy_seqno+0x9/0x20 [ 260.963012] ? selinux_file_permission+0x85/0x480 [ 260.963025] ? security_file_permission+0x8f/0x1f0 [ 260.963036] ? rw_verify_area+0xea/0x2b0 [ 260.963047] vfs_read+0x137/0x350 [ 260.963059] SyS_pread64+0x115/0x140 [ 260.963069] ? SyS_write+0x180/0x180 [ 260.963078] ? do_syscall_64+0x53/0x630 [ 260.963088] ? SyS_write+0x180/0x180 [ 260.963099] do_syscall_64+0x1eb/0x630 [ 261.069346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.074968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.081348] RIP: 0033:0x458c29 [ 261.084943] RSP: 002b:00007eff10ff2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 261.093429] RAX: ffffffffffffffda RBX: 00007eff10ff2c90 RCX: 0000000000458c29 [ 261.102259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 261.111368] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 261.122153] R10: 0000800000000002 R11: 0000000000000246 R12: 00007eff10ff36d4 23:11:29 executing program 2 (fault-call:5 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:29 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 261.130353] R13: 00000000004c5961 R14: 00000000004d9cb0 R15: 0000000000000005 [ 261.140257] CPU: 0 PID: 12043 Comm: syz-executor.5 Not tainted 4.14.112 #2 [ 261.148351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.158259] Call Trace: [ 261.160869] dump_stack+0x138/0x19c [ 261.164757] should_fail.cold+0x10f/0x159 [ 261.169450] should_failslab+0xdb/0x130 [ 261.173547] __kmalloc_track_caller+0x2ef/0x790 [ 261.179016] ? vfs_kern_mount.part.0+0x5e/0x3d0 [ 261.184060] ? do_mount+0x417/0x27d0 [ 261.187904] ? SyS_mount+0xab/0x120 [ 261.191733] ? save_trace+0x290/0x290 [ 261.196346] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 261.201557] ? parse_opts.part.0+0x83/0x2e0 [ 261.206945] kstrdup+0x3a/0x70 [ 261.211046] parse_opts.part.0+0x83/0x2e0 [ 261.215478] ? p9_fd_show_options+0x1a0/0x1a0 [ 261.220501] ? check_preemption_disabled+0x3c/0x250 [ 261.225848] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 261.231697] ? p9_idpool_create+0x40/0x120 [ 261.235938] p9_fd_create+0x86/0x340 [ 261.239890] ? parse_opts.part.0+0x2e0/0x2e0 [ 261.244494] ? __raw_spin_lock_init+0x2d/0x100 [ 261.249398] p9_client_create+0x64e/0x1130 [ 261.254592] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 261.261057] ? __kmalloc_track_caller+0x375/0x790 [ 261.266179] ? __lockdep_init_map+0x10c/0x570 [ 261.270727] ? lockdep_init_map+0x9/0x10 [ 261.275255] ? __raw_spin_lock_init+0x2d/0x100 [ 261.280243] v9fs_session_init+0x1dc/0x1590 [ 261.284758] ? check_preemption_disabled+0x3c/0x250 [ 261.289907] ? v9fs_show_options+0x730/0x730 [ 261.294579] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 261.300034] ? v9fs_mount+0x5e/0x870 [ 261.303759] ? rcu_read_lock_sched_held+0x110/0x130 [ 261.308905] ? kmem_cache_alloc_trace+0x626/0x790 [ 261.313754] ? free_pages+0x46/0x50 [ 261.317386] v9fs_mount+0x7d/0x870 [ 261.321018] mount_fs+0x9d/0x2a7 [ 261.324390] vfs_kern_mount.part.0+0x5e/0x3d0 [ 261.328925] do_mount+0x417/0x27d0 [ 261.332559] ? copy_mount_options+0x5c/0x2f0 [ 261.337090] ? rcu_read_lock_sched_held+0x110/0x130 [ 261.342124] ? copy_mount_string+0x40/0x40 [ 261.346712] ? copy_mount_options+0x1fe/0x2f0 [ 261.351206] SyS_mount+0xab/0x120 [ 261.354668] ? copy_mnt_ns+0x8c0/0x8c0 [ 261.358574] do_syscall_64+0x1eb/0x630 [ 261.362556] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.367534] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.372724] RIP: 0033:0x458c29 [ 261.375963] RSP: 002b:00007f29b6174c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.384000] RAX: ffffffffffffffda RBX: 00007f29b6174c90 RCX: 0000000000458c29 [ 261.391286] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 261.398552] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 261.405895] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29b61756d4 [ 261.413167] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 261.448462] 9pnet: Insufficient options for proto=fd [ 261.494209] FAULT_INJECTION: forcing a failure. [ 261.494209] name failslab, interval 1, probability 0, space 0, times 0 [ 261.505557] CPU: 0 PID: 12068 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 261.512575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.522103] Call Trace: [ 261.524952] dump_stack+0x138/0x19c [ 261.528569] should_fail.cold+0x10f/0x159 [ 261.532707] should_failslab+0xdb/0x130 [ 261.536664] kmem_cache_alloc_trace+0x4b/0x790 [ 261.541250] ? find_held_lock+0x35/0x130 [ 261.545319] p9_client_prepare_req.part.0+0x4d8/0xa90 [ 261.550597] p9_client_rpc+0x170/0x1190 [ 261.555016] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 261.561069] ? p9_conn_create+0x4c0/0x4c0 [ 261.565202] ? pipe_poll+0x263/0x2d0 [ 261.568899] ? generic_pipe_buf_confirm+0x10/0x10 [ 261.573945] ? p9_conn_create+0x3c0/0x4c0 [ 261.578077] ? p9_fd_create+0x245/0x340 [ 261.582148] ? parse_opts.part.0+0x2e0/0x2e0 [ 261.586543] p9_client_create+0x9a3/0x1130 [ 261.590940] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 261.596476] ? __kmalloc_track_caller+0x375/0x790 [ 261.601302] ? __lockdep_init_map+0x10c/0x570 [ 261.605804] ? lockdep_init_map+0x9/0x10 [ 261.609885] ? __raw_spin_lock_init+0x2d/0x100 [ 261.614553] v9fs_session_init+0x1dc/0x1590 [ 261.618866] ? check_preemption_disabled+0x3c/0x250 [ 261.623882] ? v9fs_show_options+0x730/0x730 [ 261.628276] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 261.633721] ? v9fs_mount+0x5e/0x870 [ 261.637551] ? rcu_read_lock_sched_held+0x110/0x130 [ 261.642650] ? kmem_cache_alloc_trace+0x626/0x790 [ 261.647481] ? free_pages+0x46/0x50 [ 261.651099] v9fs_mount+0x7d/0x870 [ 261.654633] mount_fs+0x9d/0x2a7 [ 261.657988] vfs_kern_mount.part.0+0x5e/0x3d0 [ 261.662482] do_mount+0x417/0x27d0 [ 261.666272] ? copy_mount_options+0x5c/0x2f0 [ 261.670760] ? rcu_read_lock_sched_held+0x110/0x130 [ 261.675952] ? copy_mount_string+0x40/0x40 [ 261.680389] ? copy_mount_options+0x1fe/0x2f0 [ 261.685132] SyS_mount+0xab/0x120 [ 261.688592] ? copy_mnt_ns+0x8c0/0x8c0 [ 261.692480] do_syscall_64+0x1eb/0x630 [ 261.696439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.701275] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 261.706626] RIP: 0033:0x458c29 [ 261.709796] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 261.717485] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 261.724763] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 261.732209] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 23:11:29 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='wfdno', &(0x7f0000000080)='ppp0em1\x00', &(0x7f00000000c0)='wfdno', &(0x7f0000000100)='(\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='9p\x00', &(0x7f0000000280)='system\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='^\x00', &(0x7f0000000340)='9p\x00', &(0x7f0000000380)='rfdno'], 0x1100) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) fanotify_mark(r0, 0x2, 0x40000001, r0, &(0x7f0000000640)='./file0\x00') setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r1}, 0x14) 23:11:29 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:29 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) [ 261.739469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 261.746869] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 261.754230] 9pnet: Couldn't grow tag array 23:11:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000480)={0x26ed, 0x1, r1, 0x0, r4, 0x0, 0x2, 0x100000000}) r5 = add_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="161c772c1d94ca8c1e4bc561c3f325cb200c0054d769c9d699b1e474c21f4a9bc76c66dd3a753306fba9820cb8e1feeb32538e68948e545b904bade9ce46256ca28ec1990d60b8c12b616f2b699e396f5313b8a19ba7b705e28575f7daeeed547247efafe546b7c44ad8fe13090ee8b35faf6f967353fbb1916a9b4c7fe56acc1a4e4e70042bb840ebd3e006a670c4e4136090b208c64150f85961e8d5b7161492428f5eb6cf245d7cc5028a3cf3ba884f381ff0ddcee15705507823befe4c54d2e07f079e287a19d6442cdfb7bf06ad1f72e19de04e8eb5e6ed9507f9", 0xdd, 0xfffffffffffffff8) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="4015a64ddb5987826fb1d79d1ef0b195ad7029dfe26400a298c5df1abe0c3c3db163c3895c011c4af089a4b0f3953efad4e9f3db3dd0165ec719a06f95902736bde950524266ae67cde6ca07aca9e3a983a1df9c114ef68c0ca0520eb0eaffd7fd0f5edd44be6c54dfbd2ec7033f4f3b685a11c18b5efb7abcbb6cd2b8ab182920ed050e1e01b38c87d808301568715c5e373449da8a760ab05643ae686189260e249c1bbd18576553e5d0bd9ac3e54258464e6a9df4e9339beebd93a4a068e205cfcc8ef6e9fc8bb4db0bca26d93ad1912f3b765a9eb9b8881fefbc6d6ebd9c863458a6e9", 0xe5, r5) pread64(r3, 0x0, 0x0, 0x800000000002) 23:11:29 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) 23:11:29 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@ipx, &(0x7f0000000000)=0x80, 0x800) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x8000000000000000) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) getpeername(r1, &(0x7f00000000c0)=@hci, &(0x7f0000000140)=0x80) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x9) 23:11:29 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000040)='wfdno', &(0x7f0000000080)='ppp0em1\x00', &(0x7f00000000c0)='wfdno', &(0x7f0000000100)='(\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)='9p\x00', &(0x7f0000000280)='system\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='^\x00', &(0x7f0000000340)='9p\x00', &(0x7f0000000380)='rfdno'], 0x1100) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) fanotify_mark(r0, 0x2, 0x40000001, r0, &(0x7f0000000640)='./file0\x00') setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000540)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r1}, 0x14) 23:11:29 executing program 3 (fault-call:2 fault-nth:21): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000280)="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") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:30 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) socket$key(0xf, 0x3, 0x2) mount$9p_xen(&(0x7f0000000000)='\\cpuset\\\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x442, &(0x7f0000000240)={'trans=xen,', {[{@msize={'msize', 0x3d, 0x2}}, {@mmap='mmap'}, {@cache_none='cache=none'}, {@aname={'aname', 0x3d, 'trans=fd,'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x67, 0x39, 0x35, 0x73, 0x0, 0x0, 0x65, 0x66], 0x2d, [0x64, 0x33, 0x36, 0x79], 0x2d, [0x61, 0x63, 0x32, 0x37], 0x2d, [0x36, 0x76, 0x37], 0x2d, [0x33, 0x32, 0x65, 0x7b, 0x39, 0x33, 0x75]}}}, {@uid_eq={'uid', 0x3d, r0}}]}}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x3) gettid() mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00']) 23:11:30 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, 0x0) [ 262.014533] FAULT_INJECTION: forcing a failure. [ 262.014533] name failslab, interval 1, probability 0, space 0, times 0 23:11:30 executing program 0: clone(0x41fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x0, 0x0) [ 262.064898] CPU: 1 PID: 12103 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 262.072079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.081614] Call Trace: [ 262.084280] dump_stack+0x138/0x19c [ 262.088011] should_fail.cold+0x10f/0x159 [ 262.092181] should_failslab+0xdb/0x130 [ 262.097049] kmem_cache_alloc_trace+0x2ec/0x790 [ 262.101737] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 262.106929] ? trace_hardirqs_on_caller+0x400/0x590 23:11:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xffffffffffffffff, @mcast1, 0x7ff}, {0xa, 0x4e20, 0x6, @mcast1, 0x4}, 0x6, [0x3, 0x1ff, 0x7f, 0x23, 0x20000, 0x6, 0x1, 0x1]}, 0x5c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) [ 262.111971] p9_client_prepare_req.part.0+0x814/0xa90 [ 262.117187] p9_client_rpc+0x170/0x1190 [ 262.121187] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 262.128160] ? p9_conn_create+0x4c0/0x4c0 [ 262.132316] ? pipe_poll+0x263/0x2d0 [ 262.136035] ? generic_pipe_buf_confirm+0x10/0x10 [ 262.136053] ? p9_conn_create+0x3c0/0x4c0 [ 262.136066] ? p9_fd_create+0x245/0x340 [ 262.136077] ? parse_opts.part.0+0x2e0/0x2e0 [ 262.136091] p9_client_create+0x9a3/0x1130 [ 262.136107] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 262.149152] ? __kmalloc_track_caller+0x375/0x790 [ 262.149166] ? __lockdep_init_map+0x10c/0x570 [ 262.149179] ? lockdep_init_map+0x9/0x10 [ 262.149189] ? __raw_spin_lock_init+0x2d/0x100 [ 262.149236] v9fs_session_init+0x1dc/0x1590 [ 262.149254] ? check_preemption_disabled+0x3c/0x250 [ 262.191527] ? v9fs_show_options+0x730/0x730 [ 262.201439] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 262.206910] ? v9fs_mount+0x5e/0x870 [ 262.210645] ? rcu_read_lock_sched_held+0x110/0x130 [ 262.215853] ? kmem_cache_alloc_trace+0x626/0x790 [ 262.220805] ? free_pages+0x46/0x50 [ 262.224462] v9fs_mount+0x7d/0x870 [ 262.228108] mount_fs+0x9d/0x2a7 [ 262.231663] vfs_kern_mount.part.0+0x5e/0x3d0 [ 262.236258] do_mount+0x417/0x27d0 [ 262.240035] ? copy_mount_options+0x5c/0x2f0 [ 262.244462] ? rcu_read_lock_sched_held+0x110/0x130 [ 262.249508] ? copy_mount_string+0x40/0x40 [ 262.254021] ? copy_mount_options+0x1fe/0x2f0 [ 262.258958] SyS_mount+0xab/0x120 [ 262.263076] ? copy_mnt_ns+0x8c0/0x8c0 [ 262.267057] do_syscall_64+0x1eb/0x630 [ 262.271225] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.276257] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.281438] RIP: 0033:0x458c29 [ 262.284621] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 262.292427] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 262.299696] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 262.307127] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 262.314409] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 262.321784] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 262.338668] 9pnet: Couldn't grow tag array 23:11:30 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) pread64(r1, 0x0, 0x0, 0x800000000002) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x6, 0x9, 0x100000000, 0x3f, 0x2, 0x6, 0x51f, 0x156, 0x40, 0x3c3, 0xfffffffffffffc01, 0x225, 0x38, 0x1, 0x3, 0x10001, 0x399e}, [{0x6474e551, 0x6, 0xb26a, 0x8, 0x1ff, 0x5, 0x2, 0x65f7}, {0x6474e557, 0x7, 0x7ff, 0x6, 0x3, 0x8, 0x5, 0x8}], "792188f6a62aae773ba29f41660122e84524468be051f139d5b05751c297e8ab79883c24fc351212d6a54a57d1ede2a0", [[], [], [], [], [], [], [], []]}, 0x8e0) getpeername$packet(r1, &(0x7f0000003280)={0x11, 0x0, 0x0}, &(0x7f00000032c0)=0x14) bind$bt_hci(r1, &(0x7f0000003300)={0x1f, r2, 0x2}, 0xc) 23:11:30 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:30 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 23:11:30 executing program 3 (fault-call:2 fault-nth:22): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 262.642490] 9pnet: Insufficient options for proto=fd [ 262.649172] FAULT_INJECTION: forcing a failure. [ 262.649172] name failslab, interval 1, probability 0, space 0, times 0 [ 262.676737] CPU: 0 PID: 12135 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 262.683802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.683807] Call Trace: [ 262.683827] dump_stack+0x138/0x19c [ 262.683844] should_fail.cold+0x10f/0x159 [ 262.683859] should_failslab+0xdb/0x130 [ 262.683875] __kmalloc+0x2f3/0x7a0 [ 262.683887] ? __lockdep_init_map+0x10c/0x570 [ 262.683897] ? __lockdep_init_map+0x10c/0x570 [ 262.683906] ? p9_fcall_alloc+0x1d/0x90 [ 262.683917] p9_fcall_alloc+0x1d/0x90 [ 262.683927] p9_client_prepare_req.part.0+0x73c/0xa90 [ 262.683946] p9_client_rpc+0x170/0x1190 [ 262.703842] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 262.703853] ? p9_conn_create+0x4c0/0x4c0 [ 262.703865] ? pipe_poll+0x263/0x2d0 [ 262.703876] ? generic_pipe_buf_confirm+0x10/0x10 [ 262.720540] ? p9_conn_create+0x3c0/0x4c0 [ 262.720554] ? p9_fd_create+0x245/0x340 [ 262.720563] ? parse_opts.part.0+0x2e0/0x2e0 [ 262.720576] p9_client_create+0x9a3/0x1130 [ 262.720592] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 262.720605] ? __kmalloc_track_caller+0x375/0x790 [ 262.720615] ? __lockdep_init_map+0x10c/0x570 [ 262.720626] ? lockdep_init_map+0x9/0x10 [ 262.728582] ? __raw_spin_lock_init+0x2d/0x100 [ 262.728600] v9fs_session_init+0x1dc/0x1590 [ 262.728618] ? check_preemption_disabled+0x3c/0x250 [ 262.774283] ? v9fs_show_options+0x730/0x730 [ 262.774298] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 262.774310] ? v9fs_mount+0x5e/0x870 [ 262.774321] ? rcu_read_lock_sched_held+0x110/0x130 [ 262.774337] ? kmem_cache_alloc_trace+0x626/0x790 [ 262.784819] ? free_pages+0x46/0x50 [ 262.784839] v9fs_mount+0x7d/0x870 [ 262.784854] mount_fs+0x9d/0x2a7 [ 262.784869] vfs_kern_mount.part.0+0x5e/0x3d0 [ 262.821374] do_mount+0x417/0x27d0 [ 262.821388] ? copy_mount_options+0x5c/0x2f0 [ 262.831131] audit: type=1400 audit(1555715490.792:61): avc: denied { setattr } for pid=12141 comm="syz-executor.2" path="/proc/12141/smaps" dev="proc" ino=43806 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 262.831250] ? rcu_read_lock_sched_held+0x110/0x130 [ 262.831267] ? copy_mount_string+0x40/0x40 23:11:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) clone(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r1, 0xf, 0x3}, 0x14) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:30 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:30 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x181000, 0x10) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'vlan0\x00', 0x401}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x0, 0xffffffff00000000, 0x100000000, 0x5}) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x1, 0x1b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x2, 0x0, &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bc\x00', 's\x01\x000\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0xa8, 0xa8, 0x120, [@cluster={'cluster\x00', 0x10, {{0x0, 0x4}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "2ce719c99cffcbf4d7e80e410bb5007c6981466b6431c7e6b129fcead3f149b589996102627779dc3b23bf8250fc3acd9e8be08a4bbab9be219f504cae3a7e4d"}}}}]}, {0x0, '\x00', 0x1, 0xfffffdfffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x228) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0x80, 0x9}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, {0xe, 0x8}, {0x4, 0xd}, {0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) [ 262.831281] ? copy_mount_options+0x1fe/0x2f0 [ 262.842156] SyS_mount+0xab/0x120 [ 262.842168] ? copy_mnt_ns+0x8c0/0x8c0 [ 262.842181] do_syscall_64+0x1eb/0x630 [ 262.842189] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.842205] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.842213] RIP: 0033:0x458c29 [ 262.842217] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 262.842226] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 262.842232] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 262.842240] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 262.881590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 262.881597] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 262.893323] 9pnet: Couldn't grow tag array 23:11:30 executing program 3 (fault-call:2 fault-nth:23): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 263.028616] 9pnet: Insufficient options for proto=fd [ 263.068904] FAULT_INJECTION: forcing a failure. [ 263.068904] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.079537] xt_cluster: this node mask cannot be higher than the total number of nodes [ 263.081092] CPU: 1 PID: 12171 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 263.081100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.081104] Call Trace: [ 263.081129] dump_stack+0x138/0x19c [ 263.081146] should_fail.cold+0x10f/0x159 23:11:31 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 263.081161] __alloc_pages_nodemask+0x1d6/0x7a0 [ 263.109916] xt_cluster: this node mask cannot be higher than the total number of nodes [ 263.112264] ? find_held_lock+0x35/0x130 [ 263.112277] ? __alloc_pages_slowpath+0x2930/0x2930 [ 263.112300] cache_grow_begin+0x80/0x410 [ 263.112312] __kmalloc+0x6c2/0x7a0 [ 263.134600] 9pnet: Insufficient options for proto=fd [ 263.138566] ? __lockdep_init_map+0x10c/0x570 [ 263.138582] ? p9_fcall_alloc+0x1d/0x90 [ 263.138593] p9_fcall_alloc+0x1d/0x90 [ 263.138606] p9_client_prepare_req.part.0+0x7b5/0xa90 [ 263.160136] p9_client_rpc+0x170/0x1190 [ 263.160151] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 263.160162] ? p9_conn_create+0x4c0/0x4c0 [ 263.173611] ? pipe_poll+0x263/0x2d0 [ 263.173624] ? generic_pipe_buf_confirm+0x10/0x10 [ 263.173641] ? p9_conn_create+0x3c0/0x4c0 [ 263.173653] ? p9_fd_create+0x245/0x340 [ 263.173664] ? parse_opts.part.0+0x2e0/0x2e0 [ 263.173678] p9_client_create+0x9a3/0x1130 [ 263.197532] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 263.197547] ? __kmalloc_track_caller+0x375/0x790 [ 263.205948] ? __lockdep_init_map+0x10c/0x570 [ 263.205961] ? lockdep_init_map+0x9/0x10 [ 263.205974] ? __raw_spin_lock_init+0x2d/0x100 [ 263.215851] v9fs_session_init+0x1dc/0x1590 [ 263.215868] ? retint_kernel+0x2d/0x2d [ 263.215883] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 263.247374] ? v9fs_show_options+0x730/0x730 [ 263.251791] ? retint_kernel+0x2d/0x2d [ 263.255697] v9fs_mount+0x7d/0x870 [ 263.259331] mount_fs+0x9d/0x2a7 [ 263.262695] vfs_kern_mount.part.0+0x5e/0x3d0 [ 263.267367] do_mount+0x417/0x27d0 [ 263.270900] ? copy_mount_options+0x5c/0x2f0 [ 263.275297] ? rcu_read_lock_sched_held+0x110/0x130 [ 263.280304] ? copy_mount_string+0x40/0x40 [ 263.284528] ? copy_mount_options+0x1fe/0x2f0 [ 263.289060] SyS_mount+0xab/0x120 [ 263.292513] ? copy_mnt_ns+0x8c0/0x8c0 [ 263.296391] do_syscall_64+0x1eb/0x630 [ 263.300271] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.305118] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.310294] RIP: 0033:0x458c29 [ 263.313476] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 263.321199] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 263.328479] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 263.335849] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 263.343119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 263.350484] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getpid() prctl$PR_SET_MM(0x23, 0xb, &(0x7f00002ce000/0x3000)=nil) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0xfffffdbc, 0x800000000002) 23:11:31 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x90) 23:11:31 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:31 executing program 3 (fault-call:2 fault-nth:24): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x1, 0x0, 0x9917, 0x1ffff}, 0x20000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008032, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0xc00, 0x0) openat$cgroup_int(r2, &(0x7f0000000140)='cpu.weight\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x5, 0x6, 0x9, 0x0, 0x81, 0x200, 0x7, 0x2, 0x80000000, 0x2ed, 0xf07, 0x10001, 0x400000, 0x1, 0x1, 0x4, 0x9, 0x9, 0x2116a6d6, 0x10000, 0xffffffff00000000, 0x4, 0x100, 0x2, 0x3, 0x7, 0x0, 0x9, 0x2, 0x3, 0xfffffffffffffbff, 0xe261, 0x800, 0x5, 0x5, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000040), 0xc}, 0x20000, 0x6, 0x81, 0x2, 0x800000000000, 0x800}, r1, 0x10, r0, 0x8) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000000000), 0x2, 0x10000000002) 23:11:31 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1001420, 0x7) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 263.598464] FAULT_INJECTION: forcing a failure. [ 263.598464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.610433] CPU: 0 PID: 12192 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 263.610448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.610454] Call Trace: [ 263.610478] dump_stack+0x138/0x19c [ 263.610498] should_fail.cold+0x10f/0x159 [ 263.610514] __alloc_pages_nodemask+0x1d6/0x7a0 [ 263.610530] ? cache_grow_end.part.0+0x92/0x160 [ 263.610543] ? __alloc_pages_slowpath+0x2930/0x2930 [ 263.627229] cache_grow_begin+0x80/0x410 [ 263.627244] __kmalloc+0x6c2/0x7a0 [ 263.627254] ? __lockdep_init_map+0x10c/0x570 [ 263.627267] ? p9_fcall_alloc+0x1d/0x90 [ 263.627277] p9_fcall_alloc+0x1d/0x90 [ 263.627287] p9_client_prepare_req.part.0+0x73c/0xa90 [ 263.627303] p9_client_rpc+0x170/0x1190 [ 263.627317] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 263.627329] ? p9_conn_create+0x4c0/0x4c0 [ 263.633676] ? pipe_poll+0x263/0x2d0 [ 263.633688] ? generic_pipe_buf_confirm+0x10/0x10 [ 263.633703] ? p9_conn_create+0x3c0/0x4c0 [ 263.652656] 9pnet: Insufficient options for proto=fd [ 263.656347] ? p9_fd_create+0x245/0x340 [ 263.656360] ? parse_opts.part.0+0x2e0/0x2e0 [ 263.656378] p9_client_create+0x9a3/0x1130 [ 263.704885] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 263.713973] ? __kmalloc_track_caller+0x375/0x790 [ 263.713984] ? __lockdep_init_map+0x10c/0x570 [ 263.713995] ? lockdep_init_map+0x9/0x10 [ 263.714003] ? __raw_spin_lock_init+0x2d/0x100 23:11:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) io_setup(0x100000000, &(0x7f0000000040)=0x0) openat$cgroup(r2, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) io_submit(r3, 0x5, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0xf, 0x3, r0, &(0x7f0000000080)="efd3eb120e467b45c9a8f30ae4b033aa2efd7467559cb358869f64924e3a108c6e4a5bb264740543505e7a98fb00ed9b52ba14bc9b082a3c7667d9d907006c80d9c28251363edd48b70b48ffd2ebf2bdfe9a730f3904e6b6e2b6a143eb2c74b9f936fe157a54119dbe8eb9e97afbb1912c8d37b4048ffe", 0x77, 0x4, 0x0, 0x2, r2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x100000001, r2, &(0x7f0000000140)="34ca577a2ceb0a70bf72429b3e9116d0d7de2a82ce009e349863a30e087eddf9118c033be0963257a66d5e3ddece3ce1639dc6b376657368dc1bc4172db4c39fea9c2226bae5c2ed7b1e8027180f5b5eca830fe157ee360343cef35bd7f1cfb1d9d78de8398840d0e5a13c4e3da5", 0x6e, 0x0, 0x0, 0x1, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x2, r2, &(0x7f0000000280)="d7ce2da3660491de1bb6b6c5deffdfe57eb4321564f08661dbafa8e392c57bbbe44512e2de9a66add5ddda94c82a70c2b379f5bcfdbfb763481583930fdc35e2729bb1da79c91e896b0e1a56c25be6989719f86f6c6021696b180b5f681701c4d7b15a70f6ff7271559e08999c80335dfd325d1a1112f2db0446e1078189d9", 0x7f, 0x8, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x5, r2, &(0x7f0000000340)="cb47466761e25302f8952a8cc177267946a83adea95caeecb59f8f2848b8077633a89a18137e126e51587bc78ab77accdf0b1ab2155f", 0x36, 0x80000001, 0x0, 0x2, r2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7ff, r0, &(0x7f00000003c0)="d53c4273a954f89a54b7befc4d027b31aa8bbb8fb7f807b33c5069f119ef048c07270f434a8f89bca31f751b693d3c483800ca924be578314a4e68b6b5f05383ef608fbf6e23169658a19774d97b0534a3e4452870e6c4ec54e22a69c8a810cdfddf8ede2b8619c0e6151dcaae4ee01fbb3cc495babb54a920a8238743cb1ec5966eaf696ad9001302b273031485b29a7b9b92157073768834ca7e0b209c624830b84dfe", 0xa4, 0xa9, 0x0, 0x1, 0xffffffffffffff9c}]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) 23:11:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f00000017c0)) lsetxattr$security_smack_entry(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)='security.SMACK64IPIN\x00', &(0x7f0000001900)='overriderockperm', 0x10, 0x1) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x7, &(0x7f0000001700)=[{&(0x7f0000000100)="eac82ea70ffe246bd3bd1fe1f11409dbb6122a46ede9fdbf6810b1d4b37ad3e6ed4c1ea02736cdd61ad9d3093b1d1a908c7d3bbd78a15fa50f6064d3fe330587c10ea97aff55ebb2f825e44cd10af4457d97d22a040c4ee369a49998b542c0", 0x5f, 0x8}, {&(0x7f0000000280)="8a74b99a3a27d5db39ec335280a1461692fb2f55bcf747c455e1afeb5f70597626dd9ae4383badbf3a09df54c691453ce00dc88562ce602ee7f748c6e71bff051b960800b1aab41b956a5b5bb5b1b4636488880eb04942368ee303d09ea0d6429018edd9a41fd09e6963be0145a9dbb0a24e0b12f2805da95147623127682afc345b4693ec13aebe803793a7df4f926c87efe04c4aa003ff9080d22a83b62fc71d86cfb5425ec1dbfb1693936247ba8e1193bd2c38e66ba88ed5bac22ddd5b4c9bf8cad479df05a4fb424c4fd6b459768a4adc53e36117b5135f2d315277ffeb4ab39daab51c91fa800703f2b834358e0de4ba", 0xf3}, {&(0x7f0000000380)="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", 0x1000, 0x10001}, {&(0x7f0000001380)="c723a66c82d2190690068f8dbb10c81606a23ab5c4e6347cf0a49a0818571c95b3104d53b4b80856a1de0bea498e1491eef74c4ea21544f66e0c751606f9fb6a4a68ff496513fa2b6868d58f4753b02b94297b41325d0d2e90b9170ca309e36359ca896f2e30a215cf89a9a62b8a88a212c0b00b3ce23c6aa2645f3bfb5ca06dadc88ae7313e80c97716eccf0d4296f47a27b18acecbebe9034efa879c9d804c7b6e85", 0xa3, 0x4}, {&(0x7f0000001440)="08d8b5dd55696772a918a527f5563837e1b6544616c9c05b3ce02c748b83b8d285f13890c513e68a12245fd692bf76c2f5b4474a7ca83b6084b3a2de7973eb852df4c9ca4a3169f59dbdbbd1037d477389abc81d31693c5869ab81c69e184842759b81a954188096e40f5fdbf23a3f8bdd5e8e512f34d98797818e773655a8f552947cbba03b2885cb8c71b709b95b703e437572a825c9a3a96279b910c846", 0x9f, 0x3}, {&(0x7f0000001500)="de70c04c666bb34f6718eee84392c04edc1a328c4a766d671f8683094598a216658d2ef33316b16d579d73e27d0b0b44a4a67ed5f66cba76ac5778a7b075d4bec983f3b7d24ea5495309455421e4a13fb091162a316202db5e55921a4439c206f5bd62ca1e0824aa49d44408136773ea5fd9649a44131bb5a92f298f08a70e3396d80d49541395a1ada08af73141a1e476942576ceb1434a945688c47e16841719c579ef197bc06b2949b67aed0ab5c94467584521930640b96f2dece7adb7b16bbbf30ca8bd14625f93dbfe8a78b4b5adb4e87ed66c50ccb31b67aac5de93784c26e6e2a15d1d23e0", 0xe9, 0x2}, {&(0x7f0000001600)="a96233d0ee561d051db9d13191a74370cfe79143477a29987d6232dbe5b9f1520c84dc421e80714355f6a5aaf80ba8c7f117d0f6727ff35d0cb98f9b61612e5526b3e0e3ac3c6c534c6288bd71919dfa3cf0f420ea3a622882216d7ea1ace01e26c9cc58cacd790db228998ca7d20f35682cd349873e90929576623624289d1bd17e2d91fac01df434f37a70939c0a86aa0fe5a17c817dbe1a096a25eca814bcfb21c03f87d4dd0db7996f9839c7361c0c281ff341b99a47998edd2562ff63ff859f214174e3f9d10b31216c5842741c3cee80fd6c16ea3e789a258133fd76770ca89c", 0xe3, 0x5}], 0x21, &(0x7f0000001800)={[{@gid={'gid', 0x3d, r2}}, {@unhide='unhide'}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@hide='hide'}, {@block={'block', 0x3d, 0x600}}, {@check_strict='check=strict'}, {@overriderock='overriderockperm'}], [{@dont_measure='dont_measure'}]}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x401, 0x80000000, @name="ddc41cf9ec4523593805bc851e243ea7a9fa4401c85f98e8308933ede8b71f14"}) pread64(r1, 0x0, 0x0, 0x800000000002) [ 263.714017] v9fs_session_init+0x1dc/0x1590 [ 263.714035] ? check_preemption_disabled+0x3c/0x250 [ 263.714044] ? v9fs_show_options+0x730/0x730 [ 263.714055] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 263.714066] ? v9fs_mount+0x5e/0x870 [ 263.714076] ? rcu_read_lock_sched_held+0x110/0x130 [ 263.714086] ? kmem_cache_alloc_trace+0x626/0x790 [ 263.714098] ? free_pages+0x46/0x50 [ 263.783183] v9fs_mount+0x7d/0x870 [ 263.786826] mount_fs+0x9d/0x2a7 [ 263.786841] vfs_kern_mount.part.0+0x5e/0x3d0 [ 263.794735] do_mount+0x417/0x27d0 [ 263.798281] ? copy_mount_options+0x5c/0x2f0 [ 263.798295] ? rcu_read_lock_sched_held+0x110/0x130 [ 263.807990] ? copy_mount_string+0x40/0x40 [ 263.812354] ? copy_mount_options+0x1fe/0x2f0 [ 263.816975] SyS_mount+0xab/0x120 [ 263.820457] ? copy_mnt_ns+0x8c0/0x8c0 [ 263.824361] do_syscall_64+0x1eb/0x630 [ 263.828316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.833279] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 263.838489] RIP: 0033:0x458c29 [ 263.841688] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:11:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00008a8000/0x4000)=nil) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)=0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:31 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:31 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x6, 0x4) mount(&(0x7f0000000100)=@sg0='/dev/sg0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1000, 0x0) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000080)) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) clone(0x2000000000003ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() unlink(&(0x7f0000000680)='./file0\x00') ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3a) creat(&(0x7f0000000000)='./file0\x00', 0x0) 23:11:31 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) open(&(0x7f0000000080)='./file0\x00', 0x4000, 0xa) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x20010, &(0x7f0000000100)=ANY=[@ANYBLOB='tcans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 263.849427] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 263.849436] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 263.864148] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 263.871445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 263.871452] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:31 executing program 3 (fault-call:2 fault-nth:25): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 263.965779] 9pnet: Insufficient options for proto=fd [ 264.004762] FAULT_INJECTION: forcing a failure. [ 264.004762] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.016868] CPU: 0 PID: 12224 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 264.023894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.037841] Call Trace: [ 264.040454] dump_stack+0x138/0x19c [ 264.044188] should_fail.cold+0x10f/0x159 [ 264.048374] __alloc_pages_nodemask+0x1d6/0x7a0 [ 264.053090] ? find_held_lock+0x35/0x130 [ 264.057257] ? __alloc_pages_slowpath+0x2930/0x2930 [ 264.062383] cache_grow_begin+0x80/0x410 [ 264.066477] __kmalloc+0x6c2/0x7a0 [ 264.070023] ? __lockdep_init_map+0x10c/0x570 [ 264.074537] ? p9_fcall_alloc+0x1d/0x90 [ 264.078530] p9_fcall_alloc+0x1d/0x90 [ 264.082434] p9_client_prepare_req.part.0+0x7b5/0xa90 [ 264.087652] p9_client_rpc+0x170/0x1190 [ 264.091666] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 264.097741] ? p9_conn_create+0x4c0/0x4c0 [ 264.101904] ? pipe_poll+0x263/0x2d0 [ 264.105627] ? generic_pipe_buf_confirm+0x10/0x10 [ 264.110571] ? p9_conn_create+0x3c0/0x4c0 [ 264.114826] ? p9_fd_create+0x245/0x340 [ 264.118808] ? parse_opts.part.0+0x2e0/0x2e0 [ 264.123229] p9_client_create+0x9a3/0x1130 [ 264.127477] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 264.133030] ? __kmalloc_track_caller+0x375/0x790 [ 264.137885] ? __lockdep_init_map+0x10c/0x570 [ 264.142402] ? lockdep_init_map+0x9/0x10 [ 264.146477] ? __raw_spin_lock_init+0x2d/0x100 [ 264.151280] v9fs_session_init+0x1dc/0x1590 [ 264.155636] ? check_preemption_disabled+0x3c/0x250 [ 264.160660] ? v9fs_show_options+0x730/0x730 [ 264.165161] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 264.170821] ? v9fs_mount+0x5e/0x870 [ 264.174643] ? rcu_read_lock_sched_held+0x110/0x130 [ 264.179671] ? kmem_cache_alloc_trace+0x626/0x790 [ 264.184530] ? free_pages+0x46/0x50 [ 264.188259] v9fs_mount+0x7d/0x870 [ 264.191991] mount_fs+0x9d/0x2a7 [ 264.199871] vfs_kern_mount.part.0+0x5e/0x3d0 [ 264.204955] do_mount+0x417/0x27d0 [ 264.208505] ? copy_mount_options+0x5c/0x2f0 [ 264.212939] ? rcu_read_lock_sched_held+0x110/0x130 [ 264.217972] ? copy_mount_string+0x40/0x40 [ 264.222222] ? copy_mount_options+0x1fe/0x2f0 [ 264.226733] SyS_mount+0xab/0x120 [ 264.230207] ? copy_mnt_ns+0x8c0/0x8c0 [ 264.234364] do_syscall_64+0x1eb/0x630 [ 264.238267] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.243131] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.248328] RIP: 0033:0x458c29 23:11:32 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x90) 23:11:32 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x1420, 0x1) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x7fff, 0xcd, 0x6, 0xfffffffffffffffa}}) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:32 executing program 0: r0 = socket(0x20004000000015, 0x80005, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1080008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000007100002", @ANYRES32=0x0, @ANYBLOB="00007369740104000200080813000800000000000000000080000000", @ANYRES32=r3], 0x38}}, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000001000)=""/1, &(0x7f0000000000)=0x126) 23:11:32 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 264.251605] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.259418] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 264.266735] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 264.274371] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 264.281688] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 264.288972] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:32 executing program 3 (fault-call:2 fault-nth:26): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:32 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x800000002, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) [ 264.409678] 9pnet: Insufficient options for proto=fd 23:11:32 executing program 0: r0 = socket$unix(0x1, 0x1000000805, 0x0) r1 = socket$unix(0x1, 0x1000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r1, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r2 = dup2(r0, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000000)) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 264.466350] FAULT_INJECTION: forcing a failure. [ 264.466350] name failslab, interval 1, probability 0, space 0, times 0 [ 264.534059] CPU: 0 PID: 12260 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 264.541143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.541149] Call Trace: [ 264.541171] dump_stack+0x138/0x19c [ 264.541189] should_fail.cold+0x10f/0x159 [ 264.541205] should_failslab+0xdb/0x130 [ 264.541219] __kmalloc+0x2f3/0x7a0 [ 264.541229] ? memcpy+0x46/0x50 [ 264.541240] ? p9pdu_readf+0x347/0x1780 [ 264.541251] p9pdu_readf+0x347/0x1780 [ 264.541261] ? p9_conn_create+0x4c0/0x4c0 23:11:32 executing program 4 (fault-call:2 fault-nth:0): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x1, 0x0) syslog(0x3, &(0x7f00000003c0)=""/147, 0xfffffed9) r1 = open(&(0x7f0000000e00)='./file1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000180)={r1, 0x200}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0x7ff, 0x1, {0x3, 0x3, 0x4, 0x1, 0x200}}) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x1}, 0x6e) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000002c0)) sendfile(r0, r2, 0x0, 0x80000008000000b) [ 264.541270] ? pipe_poll+0x263/0x2d0 [ 264.541280] ? p9pdu_writef+0xd0/0xd0 [ 264.541296] ? p9_fd_create+0x245/0x340 [ 264.541306] ? parse_opts.part.0+0x2e0/0x2e0 [ 264.541320] p9_client_create+0xa2b/0x1130 [ 264.541337] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 264.541348] ? __kmalloc_track_caller+0x375/0x790 [ 264.541367] ? __lockdep_init_map+0x10c/0x570 [ 264.541382] ? lockdep_init_map+0x9/0x10 [ 264.541394] ? __raw_spin_lock_init+0x2d/0x100 [ 264.541408] v9fs_session_init+0x1dc/0x1590 [ 264.595791] ? check_preemption_disabled+0x3c/0x250 [ 264.604576] ? v9fs_show_options+0x730/0x730 [ 264.604588] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 264.604599] ? v9fs_mount+0x5e/0x870 [ 264.604611] ? rcu_read_lock_sched_held+0x110/0x130 [ 264.604624] ? kmem_cache_alloc_trace+0x626/0x790 [ 264.604636] ? free_pages+0x46/0x50 [ 264.604650] v9fs_mount+0x7d/0x870 [ 264.604668] mount_fs+0x9d/0x2a7 [ 264.627571] FAULT_INJECTION: forcing a failure. [ 264.627571] name failslab, interval 1, probability 0, space 0, times 0 [ 264.628630] vfs_kern_mount.part.0+0x5e/0x3d0 [ 264.628647] do_mount+0x417/0x27d0 [ 264.720712] ? copy_mount_options+0x5c/0x2f0 [ 264.725116] ? rcu_read_lock_sched_held+0x110/0x130 [ 264.730150] ? copy_mount_string+0x40/0x40 [ 264.734561] ? copy_mount_options+0x1fe/0x2f0 [ 264.739056] SyS_mount+0xab/0x120 [ 264.742532] ? copy_mnt_ns+0x8c0/0x8c0 [ 264.746520] do_syscall_64+0x1eb/0x630 [ 264.750403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.755250] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.760432] RIP: 0033:0x458c29 [ 264.763622] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.771323] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 23:11:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:32 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0xa) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 264.778773] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 264.786214] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 264.793487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 264.800835] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 264.808119] CPU: 1 PID: 12276 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 264.815195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.824834] Call Trace: [ 264.827555] dump_stack+0x138/0x19c [ 264.831198] should_fail.cold+0x10f/0x159 [ 264.835360] should_failslab+0xdb/0x130 [ 264.839430] __kmalloc_track_caller+0x2ef/0x790 [ 264.844267] ? __sb_end_write+0xc1/0x100 [ 264.848331] ? strndup_user+0x62/0xf0 [ 264.852148] memdup_user+0x26/0xa0 [ 264.855682] strndup_user+0x62/0xf0 [ 264.859299] SyS_mount+0x3c/0x120 [ 264.862870] ? copy_mnt_ns+0x8c0/0x8c0 [ 264.866758] do_syscall_64+0x1eb/0x630 [ 264.870970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.875918] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 264.881122] RIP: 0033:0x458c29 [ 264.884309] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 264.892034] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 264.899432] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 264.906913] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 264.914279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 264.921561] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:32 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x90) 23:11:32 executing program 3 (fault-call:2 fault-nth:27): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:32 executing program 4 (fault-call:2 fault-nth:1): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") recvfrom$inet(r0, &(0x7f0000000100)=""/194, 0xc2, 0x0, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b41f144e6cb7ab9ce9953743d07a000000000000006f0000000000000073013500000000009500000000000000a3e1a1e170edc8d0be329d752f0e25642d49e56319f79d175976f54b67d74a7531e60b8c8a17a138849f206085"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 265.039329] FAULT_INJECTION: forcing a failure. [ 265.039329] name failslab, interval 1, probability 0, space 0, times 0 [ 265.052450] FAULT_INJECTION: forcing a failure. [ 265.052450] name failslab, interval 1, probability 0, space 0, times 0 [ 265.072327] CPU: 0 PID: 12288 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 265.079501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.079508] Call Trace: [ 265.079528] dump_stack+0x138/0x19c [ 265.079544] should_fail.cold+0x10f/0x159 [ 265.079560] should_failslab+0xdb/0x130 [ 265.099389] __kmalloc_track_caller+0x2ef/0x790 [ 265.099404] ? __lockdep_init_map+0x10c/0x570 [ 265.099417] ? v9fs_session_init+0x368/0x1590 [ 265.099433] kstrdup+0x3a/0x70 [ 265.099445] v9fs_session_init+0x368/0x1590 [ 265.108320] ? v9fs_show_options+0x730/0x730 [ 265.108334] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 265.108346] ? v9fs_mount+0x5e/0x870 [ 265.108360] ? rcu_read_lock_sched_held+0x110/0x130 [ 265.117589] ? kmem_cache_alloc_trace+0x626/0x790 [ 265.117604] ? free_pages+0x46/0x50 [ 265.117622] v9fs_mount+0x7d/0x870 [ 265.117637] mount_fs+0x9d/0x2a7 [ 265.160096] vfs_kern_mount.part.0+0x5e/0x3d0 [ 265.164595] do_mount+0x417/0x27d0 [ 265.168314] ? copy_mount_options+0x5c/0x2f0 [ 265.172717] ? rcu_read_lock_sched_held+0x110/0x130 [ 265.177943] ? copy_mount_string+0x40/0x40 [ 265.182356] ? copy_mount_options+0x1fe/0x2f0 [ 265.187238] SyS_mount+0xab/0x120 [ 265.190706] ? copy_mnt_ns+0x8c0/0x8c0 [ 265.194602] do_syscall_64+0x1eb/0x630 [ 265.198483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.203333] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.208776] RIP: 0033:0x458c29 [ 265.212265] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 265.220284] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 265.227553] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40000, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 265.235103] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 265.242546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 265.249812] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 265.257092] CPU: 1 PID: 12290 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 265.264126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.273853] Call Trace: [ 265.276473] dump_stack+0x138/0x19c [ 265.280318] should_fail.cold+0x10f/0x159 [ 265.284575] should_failslab+0xdb/0x130 [ 265.288570] kmem_cache_alloc_trace+0x2ec/0x790 [ 265.293250] ? kasan_check_write+0x14/0x20 [ 265.297486] ? _copy_from_user+0x99/0x110 [ 265.301630] copy_mount_options+0x5c/0x2f0 [ 265.305979] SyS_mount+0x87/0x120 [ 265.309449] ? copy_mnt_ns+0x8c0/0x8c0 [ 265.313334] do_syscall_64+0x1eb/0x630 [ 265.317217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.322075] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.327385] RIP: 0033:0x458c29 [ 265.330571] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:11:33 executing program 3 (fault-call:2 fault-nth:28): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:33 executing program 4 (fault-call:2 fault-nth:2): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 265.338479] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 265.346264] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 265.354851] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 265.362139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 265.369498] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:33 executing program 1 (fault-call:8 fault-nth:0): syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 265.490287] FAULT_INJECTION: forcing a failure. [ 265.490287] name failslab, interval 1, probability 0, space 0, times 0 [ 265.498306] FAULT_INJECTION: forcing a failure. [ 265.498306] name failslab, interval 1, probability 0, space 0, times 0 [ 265.527786] CPU: 1 PID: 12309 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 265.534865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.534871] Call Trace: [ 265.534896] dump_stack+0x138/0x19c [ 265.534915] should_fail.cold+0x10f/0x159 [ 265.534933] should_failslab+0xdb/0x130 [ 265.534945] kmem_cache_alloc+0x2d9/0x780 [ 265.534960] ? fs_reclaim_acquire+0x20/0x20 [ 265.555065] ? find_held_lock+0x35/0x130 [ 265.555081] getname_flags+0xcb/0x580 [ 265.555097] user_path_at_empty+0x2f/0x50 [ 265.579770] do_mount+0x12b/0x27d0 [ 265.579783] ? copy_mount_options+0x5c/0x2f0 23:11:33 executing program 4 (fault-call:2 fault-nth:3): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 265.579795] ? rcu_read_lock_sched_held+0x110/0x130 [ 265.579807] ? copy_mount_string+0x40/0x40 [ 265.597173] ? _copy_from_user+0x99/0x110 [ 265.601326] ? copy_mount_options+0x1fe/0x2f0 [ 265.601341] SyS_mount+0xab/0x120 [ 265.601351] ? copy_mnt_ns+0x8c0/0x8c0 [ 265.601364] do_syscall_64+0x1eb/0x630 [ 265.601372] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.601389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.601397] RIP: 0033:0x458c29 [ 265.601405] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 [ 265.613203] ORIG_RAX: 00000000000000a5 23:11:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)={0x0, @reserved}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x54773088}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="1b000000000000000000052a068f1e3017fded907cdb58bde7694006e7ad23"], &(0x7f0000000100)=0x23) ioctl(r0, 0x4, &(0x7f0000000340)="f3048186fa525f8911ae08ba36c6308b4082a8338dd3a6934b4705757d3cbb453cd01d48f205b6f1872c3aef7f26d1706aa86edd6ecc36dd1a128fa18ca8366b3abb8bccb5cc2de8f4cb4ce546b80fc22ea8b8ba138194bc38a57389864e2f289ae80393800baf36a09fbd7ea2436b2934b335c271d7cc4c09e8c830120420912b9db352b269a8b4e109fd1c65b689e31d9d13ff7ad71965468918991c9f2049d015705f7a4b821151c77cdf8da70c46a360073bd058b18995638c116f13806c") [ 265.613211] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 265.613217] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 265.613224] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 265.613230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 265.613236] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 265.653482] FAULT_INJECTION: forcing a failure. [ 265.653482] name failslab, interval 1, probability 0, space 0, times 0 [ 265.659177] CPU: 0 PID: 12311 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 265.695321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.705108] Call Trace: [ 265.707706] dump_stack+0x138/0x19c [ 265.711375] should_fail.cold+0x10f/0x159 [ 265.715530] should_failslab+0xdb/0x130 [ 265.719593] kmem_cache_alloc_trace+0x2ec/0x790 [ 265.724276] p9_fid_create+0x4e/0x3b0 [ 265.728076] p9_client_attach+0x7f/0x6a0 [ 265.732130] ? trace_hardirqs_off+0xd/0x10 [ 265.736361] ? p9_client_readlink+0x410/0x410 [ 265.740860] ? trace_hardirqs_on_caller+0x400/0x590 [ 265.745965] v9fs_session_init+0xbe8/0x1590 [ 265.750552] ? v9fs_session_init+0xbe8/0x1590 [ 265.755059] ? v9fs_show_options+0x730/0x730 [ 265.759649] ? v9fs_mount+0x5e/0x870 [ 265.763501] ? rcu_read_lock_sched_held+0x110/0x130 [ 265.768548] ? kmem_cache_alloc_trace+0x626/0x790 [ 265.773394] ? free_pages+0x46/0x50 [ 265.777019] v9fs_mount+0x7d/0x870 [ 265.781604] mount_fs+0x9d/0x2a7 [ 265.784971] vfs_kern_mount.part.0+0x5e/0x3d0 [ 265.789548] do_mount+0x417/0x27d0 [ 265.793082] ? copy_mount_options+0x5c/0x2f0 [ 265.797488] ? rcu_read_lock_sched_held+0x110/0x130 [ 265.802515] ? copy_mount_string+0x40/0x40 [ 265.806746] ? copy_mount_options+0x1fe/0x2f0 [ 265.811248] SyS_mount+0xab/0x120 [ 265.814697] ? copy_mnt_ns+0x8c0/0x8c0 [ 265.818586] do_syscall_64+0x1eb/0x630 [ 265.822468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.827397] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.832578] RIP: 0033:0x458c29 [ 265.835763] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 265.844601] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 265.852048] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 265.859414] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 265.866772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 265.874037] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 265.881698] CPU: 1 PID: 12325 Comm: syz-executor.1 Not tainted 4.14.112 #2 [ 265.888736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.898224] Call Trace: [ 265.900833] dump_stack+0x138/0x19c [ 265.904467] should_fail.cold+0x10f/0x159 [ 265.908603] should_failslab+0xdb/0x130 [ 265.912651] kmem_cache_alloc+0x2d9/0x780 [ 265.916790] ? save_trace+0x290/0x290 [ 265.920579] getname_flags+0xcb/0x580 [ 265.924371] user_path_at_empty+0x2f/0x50 [ 265.928507] vfs_statx+0xcd/0x160 [ 265.932118] ? vfs_statx_fd+0xa0/0xa0 [ 265.935909] SYSC_newstat+0x95/0x100 [ 265.939607] ? cp_new_stat+0x5a0/0x5a0 [ 265.943503] ? wait_for_completion+0x420/0x420 [ 265.948438] ? __sb_end_write+0xc1/0x100 [ 265.952628] ? fput+0xd4/0x150 [ 265.955831] ? SyS_write+0x10b/0x180 [ 265.959566] ? do_syscall_64+0x53/0x630 [ 265.963527] ? SyS_fstat+0x30/0x30 [ 265.967189] SyS_newstat+0x1e/0x30 [ 265.970784] do_syscall_64+0x1eb/0x630 [ 265.974746] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.979586] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.984765] RIP: 0033:0x458c29 23:11:34 executing program 3 (fault-call:2 fault-nth:29): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:34 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x80}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x6, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) setxattr$security_evm(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@sha1={0x1, "504b0a5b6b694551d149d84e23b581acc03906c0"}, 0x15, 0x2) write$binfmt_aout(r1, &(0x7f0000000640)={{0x108, 0x8, 0x1000, 0x240, 0x306, 0x4, 0xd0, 0x800}, 'b', [[], [], [], [], [], [], []]}, 0x721) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f00000000c0)) [ 265.987940] RSP: 002b:00007f25c1554c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 265.995639] RAX: ffffffffffffffda RBX: 00007f25c1554c90 RCX: 0000000000458c29 [ 266.002989] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000020000000 [ 266.010450] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 266.017956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c15556d4 [ 266.029302] R13: 00000000004e3fbb R14: 00000000004dd358 R15: 0000000000000006 23:11:34 executing program 1 (fault-call:8 fault-nth:1): syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 266.105866] FAULT_INJECTION: forcing a failure. [ 266.105866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.117816] CPU: 0 PID: 12337 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 266.124936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.125410] FAULT_INJECTION: forcing a failure. [ 266.125410] name failslab, interval 1, probability 0, space 0, times 0 [ 266.134758] Call Trace: [ 266.134791] dump_stack+0x138/0x19c [ 266.152551] should_fail.cold+0x10f/0x159 [ 266.156779] __alloc_pages_nodemask+0x1d6/0x7a0 [ 266.161437] ? fs_reclaim_acquire+0x20/0x20 [ 266.166012] ? __alloc_pages_slowpath+0x2930/0x2930 [ 266.171029] cache_grow_begin+0x80/0x410 [ 266.175245] kmem_cache_alloc+0x6a8/0x780 [ 266.179384] ? fs_reclaim_acquire+0x20/0x20 [ 266.183719] getname_flags+0xcb/0x580 [ 266.187510] user_path_at_empty+0x2f/0x50 [ 266.191821] do_mount+0x12b/0x27d0 [ 266.200250] ? copy_mount_options+0x5c/0x2f0 [ 266.204654] ? rcu_read_lock_sched_held+0x110/0x130 [ 266.209771] ? copy_mount_string+0x40/0x40 [ 266.215153] ? _copy_from_user+0x99/0x110 [ 266.219383] ? copy_mount_options+0x1fe/0x2f0 [ 266.223880] SyS_mount+0xab/0x120 [ 266.227329] ? copy_mnt_ns+0x8c0/0x8c0 [ 266.231216] do_syscall_64+0x1eb/0x630 [ 266.235094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.240626] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.245816] RIP: 0033:0x458c29 [ 266.248997] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.256707] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 266.263963] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 266.271221] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 266.278476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 266.285731] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 266.293009] CPU: 1 PID: 12339 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 266.300381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.309824] Call Trace: [ 266.309843] dump_stack+0x138/0x19c [ 266.309860] should_fail.cold+0x10f/0x159 [ 266.309874] should_failslab+0xdb/0x130 [ 266.316078] kmem_cache_alloc+0x47/0x780 [ 266.316090] ? is_bpf_text_address+0x7f/0x120 [ 266.316104] ? __lock_acquire+0x5f9/0x45e0 [ 266.316118] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 266.324403] radix_tree_extend+0x208/0x430 [ 266.324419] idr_get_free_cmn+0x60a/0x8d0 [ 266.324431] ? __kernel_text_address+0xd/0x40 [ 266.324446] idr_alloc_cmn+0x10e/0x210 [ 266.337433] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 266.337445] ? lock_acquire+0x16f/0x430 [ 266.337455] ? p9_idpool_get+0x63/0x100 [ 266.337470] p9_idpool_get+0x84/0x100 [ 266.347397] ? p9_idpool_check+0x30/0x30 [ 266.347415] p9_client_prepare_req.part.0+0x67/0xa90 [ 266.347433] p9_client_rpc+0x170/0x1190 [ 266.347443] ? p9_idpool_get+0xa3/0x100 [ 266.356350] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 266.356364] ? find_held_lock+0x35/0x130 23:11:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x80) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0xed78, 0x38414761, 0x1, @stepwise={0xffffffffffffff5e, 0x2c, 0x38000000000000, 0x35c0000000000000, 0x5, 0xf111}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) write(r1, &(0x7f0000000040)="c0cdd0de51d8e3db4205458e45e79dd8c716d63dfe2c2e10597ac510238d86dc57", 0x21) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) [ 266.356375] ? p9_fid_create+0x2d5/0x3b0 [ 266.400056] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 266.400070] ? trace_hardirqs_on_caller+0x400/0x590 [ 266.400081] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 266.418324] p9_client_attach+0x152/0x6a0 [ 266.418340] ? trace_hardirqs_off+0xd/0x10 [ 266.418351] ? p9_client_readlink+0x410/0x410 [ 266.418362] ? trace_hardirqs_on_caller+0x400/0x590 [ 266.441679] v9fs_session_init+0xbe8/0x1590 [ 266.446013] ? v9fs_session_init+0xbe8/0x1590 [ 266.450528] ? v9fs_show_options+0x730/0x730 23:11:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x10000, 0x80080) pread64(r1, 0x0, 0x0, 0x800000000002) [ 266.455073] ? v9fs_mount+0x5e/0x870 [ 266.458809] ? rcu_read_lock_sched_held+0x110/0x130 [ 266.463848] ? kmem_cache_alloc_trace+0x626/0x790 [ 266.468707] ? free_pages+0x46/0x50 [ 266.472471] v9fs_mount+0x7d/0x870 [ 266.476034] mount_fs+0x9d/0x2a7 [ 266.479673] vfs_kern_mount.part.0+0x5e/0x3d0 [ 266.484190] do_mount+0x417/0x27d0 [ 266.484199] ? copy_mount_options+0x5c/0x2f0 [ 266.484210] ? rcu_read_lock_sched_held+0x110/0x130 [ 266.484222] ? copy_mount_string+0x40/0x40 [ 266.484236] ? copy_mount_options+0x1fe/0x2f0 [ 266.484249] SyS_mount+0xab/0x120 [ 266.484259] ? copy_mnt_ns+0x8c0/0x8c0 [ 266.513785] do_syscall_64+0x1eb/0x630 [ 266.517693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.522650] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.528305] RIP: 0033:0x458c29 [ 266.528311] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.528327] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 266.546872] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 266.546880] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 266.546886] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 266.546891] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:34 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x40200) sendto(r0, &(0x7f00000000c0)="4258aec4d200e7b3cf208ab20f7c61f9a325ba3f74ae77aa15ce9e391d49571962e7cde1b885b42edb97058ec19d3d9e60ec894a3e01b7c3eb2bd66a05e882efad2cfd72c830356d57399bd78c2d39d2805b53a7f7f4b2817e6f9d4e5e347d9d69aba64de973c19ad2ecd78293839e33b5228f4e557fc80f6611f30ed9e49619605f509b343d9dd8c9b891bbd21db93ee78dc804bdd6efe9f9978a8c61b08df138986b9a66c42fdccdddc3bc57d646da76f41aaae17c53679724e5", 0xbb, 0x8800, &(0x7f0000000180)=@llc={0x1a, 0x30c, 0x40, 0x1, 0x100, 0xd13d2db, @random="a0c4e320af3a"}, 0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x17, &(0x7f0000325f23)=""/221, &(0x7f0000000040)=0xa6) 23:11:34 executing program 4 (fault-call:2 fault-nth:4): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:34 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="9844593d8af112ac0674806e6dca819718b77266646e893d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x800, 0xa8, 0xffffffffffffffff, 0x6, 0x0, 0x237e, 0x100, 0x6, 0x80000001, 0x6, 0x10000, 0x200, 0x0, 0x8000, 0x2, 0x9, 0x101, 0x8, 0x4, 0xffffffffffffff10, 0x3f, 0x400, 0x7a, 0xc9c3, 0x2, 0x6, 0x14e, 0x8001, 0x9, 0x5, 0x401, 0x2c, 0x1, 0x102, 0x9, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x802, 0xe000, 0x100, 0x4, 0x4, 0x401, 0x80000000}, 0xffffffffffffffff, 0xc, r0, 0x3) 23:11:34 executing program 3 (fault-call:2 fault-nth:30): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\x05\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xea\x00\x00\x00\x00\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x400) [ 266.688262] FAULT_INJECTION: forcing a failure. [ 266.688262] name failslab, interval 1, probability 0, space 0, times 0 23:11:34 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) accept$alg(r0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 266.747593] FAULT_INJECTION: forcing a failure. [ 266.747593] name failslab, interval 1, probability 0, space 0, times 0 [ 266.771444] CPU: 1 PID: 12365 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 266.778598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.787997] Call Trace: [ 266.788021] dump_stack+0x138/0x19c 23:11:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") madvise(&(0x7f0000885000/0x4000)=nil, 0x4000, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$RTC_AIE_ON(r1, 0x7001) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 266.788039] should_fail.cold+0x10f/0x159 [ 266.788055] should_failslab+0xdb/0x130 [ 266.788067] kmem_cache_alloc+0x2d9/0x780 [ 266.788080] ? lock_downgrade+0x6e0/0x6e0 [ 266.788093] alloc_vfsmnt+0x28/0x7d0 [ 266.788104] vfs_kern_mount.part.0+0x2a/0x3d0 [ 266.788115] do_mount+0x417/0x27d0 [ 266.788123] ? copy_mount_options+0x5c/0x2f0 [ 266.788136] ? rcu_read_lock_sched_held+0x110/0x130 [ 266.822877] ? copy_mount_string+0x40/0x40 [ 266.822894] ? copy_mount_options+0x1fe/0x2f0 [ 266.822908] SyS_mount+0xab/0x120 [ 266.822916] ? copy_mnt_ns+0x8c0/0x8c0 [ 266.822929] do_syscall_64+0x1eb/0x630 [ 266.822937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 266.822954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 266.836694] RIP: 0033:0x458c29 [ 266.836700] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.836712] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 266.836718] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 266.836724] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 266.836731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 266.836736] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 266.866123] CPU: 1 PID: 12378 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 266.873960] FAULT_INJECTION: forcing a failure. [ 266.873960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.929594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.939372] Call Trace: [ 266.941962] dump_stack+0x138/0x19c [ 266.946711] should_fail.cold+0x10f/0x159 [ 266.950940] should_failslab+0xdb/0x130 [ 266.954904] kmem_cache_alloc_trace+0x2ec/0x790 [ 266.959655] ? p9_idpool_get+0xbd/0x100 [ 266.963619] ? p9_idpool_check+0x30/0x30 [ 266.967766] p9_client_prepare_req.part.0+0x814/0xa90 [ 266.972972] p9_client_rpc+0x170/0x1190 [ 266.977026] ? p9_idpool_get+0xa3/0x100 [ 266.981078] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 266.987394] ? find_held_lock+0x35/0x130 [ 266.991465] ? p9_fid_create+0x2d5/0x3b0 [ 266.995526] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 267.000619] ? trace_hardirqs_on_caller+0x400/0x590 [ 267.005628] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 267.010814] p9_client_attach+0x152/0x6a0 [ 267.015046] ? trace_hardirqs_off+0xd/0x10 [ 267.019456] ? p9_client_readlink+0x410/0x410 [ 267.023961] ? trace_hardirqs_on_caller+0x400/0x590 [ 267.028972] v9fs_session_init+0xbe8/0x1590 [ 267.033368] ? v9fs_session_init+0xbe8/0x1590 [ 267.037861] ? v9fs_show_options+0x730/0x730 [ 267.042375] ? v9fs_mount+0x5e/0x870 [ 267.046084] ? rcu_read_lock_sched_held+0x110/0x130 [ 267.051438] ? kmem_cache_alloc_trace+0x626/0x790 [ 267.056356] ? free_pages+0x46/0x50 [ 267.059987] v9fs_mount+0x7d/0x870 [ 267.063530] mount_fs+0x9d/0x2a7 [ 267.066890] vfs_kern_mount.part.0+0x5e/0x3d0 [ 267.071377] do_mount+0x417/0x27d0 [ 267.074908] ? copy_mount_options+0x5c/0x2f0 [ 267.079378] ? rcu_read_lock_sched_held+0x110/0x130 [ 267.084416] ? copy_mount_string+0x40/0x40 [ 267.088646] ? copy_mount_options+0x1fe/0x2f0 [ 267.093141] SyS_mount+0xab/0x120 [ 267.096680] ? copy_mnt_ns+0x8c0/0x8c0 [ 267.100649] do_syscall_64+0x1eb/0x630 [ 267.104613] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.109542] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.114748] RIP: 0033:0x458c29 [ 267.117926] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.125729] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 267.133174] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 267.140450] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 23:11:35 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) socket$netlink(0x10, 0x3, 0xa) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 267.147805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 267.155069] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 267.162435] CPU: 0 PID: 12389 Comm: syz-executor.1 Not tainted 4.14.112 #2 [ 267.169591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.180182] Call Trace: [ 267.182783] dump_stack+0x138/0x19c [ 267.186564] should_fail.cold+0x10f/0x159 [ 267.190733] __alloc_pages_nodemask+0x1d6/0x7a0 [ 267.193220] 9pnet: Couldn't grow tag array 23:11:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r2, @ANYBLOB="000029bd7000ffdbdf250e0000001c000200080008000500000008000b000a0000000801060004000000080006000800000008000400580000001400020008000400001000000800080007000000580003001400f6ffffff000000000000000000000000000014000600fe8000000000000000000000000000110800030004000000080003000200000008000400b60300001400060000000000000000000000ffff000000002000010008000600666f000014000300ff010000000000000000000108000400ff0f0000140003000800042009000000080004000200000008000500000000000400030000000000"], 0xf4}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x7, 0x3}, 'port1\x00', 0x40, 0x20000, 0x8, 0x2, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x1, 0x7}) [ 267.195498] ? fs_reclaim_acquire+0x20/0x20 [ 267.204043] ? __alloc_pages_slowpath+0x2930/0x2930 [ 267.209072] cache_grow_begin+0x80/0x410 [ 267.213153] kmem_cache_alloc+0x6a8/0x780 [ 267.217318] getname_flags+0xcb/0x580 [ 267.221135] user_path_at_empty+0x2f/0x50 [ 267.221147] vfs_statx+0xcd/0x160 [ 267.221157] ? vfs_statx_fd+0xa0/0xa0 [ 267.221169] SYSC_newstat+0x95/0x100 [ 267.221177] ? cp_new_stat+0x5a0/0x5a0 [ 267.221187] ? wait_for_completion+0x420/0x420 [ 267.221196] ? __sb_end_write+0xc1/0x100 [ 267.221210] ? fput+0xd4/0x150 [ 267.221219] ? SyS_write+0x10b/0x180 [ 267.221238] ? do_syscall_64+0x53/0x630 [ 267.221247] ? SyS_fstat+0x30/0x30 [ 267.221255] SyS_newstat+0x1e/0x30 [ 267.221265] do_syscall_64+0x1eb/0x630 [ 267.221277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.232800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.232809] RIP: 0033:0x458c29 [ 267.232813] RSP: 002b:00007f25c1554c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 267.232823] RAX: ffffffffffffffda RBX: 00007f25c1554c90 RCX: 0000000000458c29 [ 267.232829] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000020000000 [ 267.232834] RBP: 000000000073c040 R08: 0000000000000000 R09: 0000000000000000 [ 267.232839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f25c15556d4 [ 267.232844] R13: 00000000004e3fbb R14: 00000000004dd358 R15: 0000000000000006 23:11:35 executing program 1 (fault-call:8 fault-nth:2): syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:35 executing program 4 (fault-call:2 fault-nth:5): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:35 executing program 3 (fault-call:2 fault-nth:31): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:35 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x9936, 0x10, 0xab8, 0x9}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0x1008) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) [ 267.379914] audit: type=1400 audit(1555715495.332:62): avc: denied { create } for pid=12399 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 267.443408] audit: type=1400 audit(1555715495.392:63): avc: denied { write } for pid=12399 comm="syz-executor.0" path="socket:[44831]" dev="sockfs" ino=44831 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 23:11:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") read(r0, &(0x7f0000000280)=""/52, 0x34) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x2, 0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r2, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10) pread64(r1, 0x0, 0x0, 0x800000000002) [ 267.496856] FAULT_INJECTION: forcing a failure. [ 267.496856] name failslab, interval 1, probability 0, space 0, times 0 [ 267.515129] FAULT_INJECTION: forcing a failure. [ 267.515129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.556210] CPU: 1 PID: 12416 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 267.563453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.572905] Call Trace: [ 267.575563] dump_stack+0x138/0x19c [ 267.579222] should_fail.cold+0x10f/0x159 [ 267.583521] should_failslab+0xdb/0x130 [ 267.587711] __kmalloc+0x2f3/0x7a0 [ 267.591355] ? __lockdep_init_map+0x10c/0x570 [ 267.595863] ? __lockdep_init_map+0x10c/0x570 [ 267.600365] ? p9_fcall_alloc+0x1d/0x90 [ 267.604383] p9_fcall_alloc+0x1d/0x90 [ 267.608342] p9_client_prepare_req.part.0+0x7b5/0xa90 [ 267.613741] p9_client_rpc+0x170/0x1190 [ 267.617752] ? p9_idpool_get+0xa3/0x100 [ 267.621737] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 267.627970] ? find_held_lock+0x35/0x130 [ 267.632293] ? p9_fid_create+0x2d5/0x3b0 [ 267.636362] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 267.642987] ? trace_hardirqs_on_caller+0x400/0x590 [ 267.648032] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 267.653148] p9_client_attach+0x152/0x6a0 [ 267.657403] ? trace_hardirqs_off+0xd/0x10 [ 267.661651] ? p9_client_readlink+0x410/0x410 [ 267.666155] ? trace_hardirqs_on_caller+0x400/0x590 [ 267.671280] v9fs_session_init+0xbe8/0x1590 [ 267.675609] ? v9fs_session_init+0xbe8/0x1590 [ 267.680299] ? v9fs_show_options+0x730/0x730 [ 267.684800] ? v9fs_mount+0x5e/0x870 [ 267.689037] ? rcu_read_lock_sched_held+0x110/0x130 [ 267.694072] ? kmem_cache_alloc_trace+0x626/0x790 [ 267.699094] ? free_pages+0x46/0x50 [ 267.702845] v9fs_mount+0x7d/0x870 [ 267.706392] mount_fs+0x9d/0x2a7 [ 267.709764] vfs_kern_mount.part.0+0x5e/0x3d0 [ 267.714359] do_mount+0x417/0x27d0 [ 267.717982] ? copy_mount_options+0x5c/0x2f0 [ 267.722501] ? rcu_read_lock_sched_held+0x110/0x130 [ 267.727525] ? copy_mount_string+0x40/0x40 [ 267.731777] ? copy_mount_options+0x1fe/0x2f0 [ 267.736414] SyS_mount+0xab/0x120 [ 267.739891] ? copy_mnt_ns+0x8c0/0x8c0 [ 267.743785] do_syscall_64+0x1eb/0x630 [ 267.747686] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.752718] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.758240] RIP: 0033:0x458c29 [ 267.761521] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.769234] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 267.776503] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 267.783779] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 267.791218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 267.798577] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 267.824727] CPU: 0 PID: 12415 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 267.831791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.834243] 9pnet: Couldn't grow tag array [ 267.841143] Call Trace: [ 267.841162] dump_stack+0x138/0x19c [ 267.841185] should_fail.cold+0x10f/0x159 [ 267.841196] ? __might_sleep+0x93/0xb0 [ 267.841208] __alloc_pages_nodemask+0x1d6/0x7a0 [ 267.841219] ? __alloc_pages_slowpath+0x2930/0x2930 [ 267.841238] alloc_pages_current+0xec/0x1e0 [ 267.841251] __get_free_pages+0xf/0x40 [ 267.841259] get_zeroed_page+0x11/0x20 [ 267.841267] mount_fs+0x1d2/0x2a7 [ 267.841281] vfs_kern_mount.part.0+0x5e/0x3d0 [ 267.889709] do_mount+0x417/0x27d0 [ 267.893276] ? copy_mount_options+0x5c/0x2f0 [ 267.897697] ? rcu_read_lock_sched_held+0x110/0x130 [ 267.902728] ? copy_mount_string+0x40/0x40 [ 267.906976] ? copy_mount_options+0x1fe/0x2f0 [ 267.911489] SyS_mount+0xab/0x120 [ 267.915030] ? copy_mnt_ns+0x8c0/0x8c0 [ 267.919026] do_syscall_64+0x1eb/0x630 [ 267.922924] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.927795] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 267.932982] RIP: 0033:0x458c29 [ 267.936174] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.943885] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 267.951166] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 267.958526] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 267.965797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 23:11:35 executing program 3 (fault-call:2 fault-nth:32): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:35 executing program 4 (fault-call:2 fault-nth:6): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:35 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 267.973076] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:36 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) fcntl$notify(r0, 0x402, 0x10) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 268.086628] FAULT_INJECTION: forcing a failure. [ 268.086628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.118655] FAULT_INJECTION: forcing a failure. [ 268.118655] name failslab, interval 1, probability 0, space 0, times 0 [ 268.118752] CPU: 1 PID: 12438 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 268.138691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.138698] Call Trace: [ 268.138716] dump_stack+0x138/0x19c [ 268.138732] should_fail.cold+0x10f/0x159 [ 268.138746] ? __might_sleep+0x93/0xb0 [ 268.162498] __alloc_pages_nodemask+0x1d6/0x7a0 [ 268.167173] ? __alloc_pages_slowpath+0x2930/0x2930 [ 268.167198] alloc_pages_current+0xec/0x1e0 [ 268.176716] __get_free_pages+0xf/0x40 [ 268.180614] get_zeroed_page+0x11/0x20 [ 268.184704] mount_fs+0x1d2/0x2a7 [ 268.188163] vfs_kern_mount.part.0+0x5e/0x3d0 [ 268.197180] do_mount+0x417/0x27d0 [ 268.200739] ? copy_mount_string+0x40/0x40 [ 268.204984] ? copy_mount_options+0x151/0x2f0 [ 268.209528] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 268.214385] ? copy_mount_options+0x1fe/0x2f0 [ 268.218896] SyS_mount+0xab/0x120 [ 268.222420] ? copy_mnt_ns+0x8c0/0x8c0 [ 268.226312] do_syscall_64+0x1eb/0x630 [ 268.230203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.235148] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.240341] RIP: 0033:0x458c29 [ 268.243527] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 268.251329] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 268.258952] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 268.266260] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 268.273715] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 268.281075] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 268.288367] CPU: 0 PID: 12441 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 268.294243] 9pnet: Insufficient options for proto=fd [ 268.295655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.295660] Call Trace: [ 268.295678] dump_stack+0x138/0x19c [ 268.295696] should_fail.cold+0x10f/0x159 [ 268.295712] should_failslab+0xdb/0x130 [ 268.295722] __kmalloc+0x2f3/0x7a0 [ 268.295738] ? __lockdep_init_map+0x10c/0x570 [ 268.310191] ? p9_fcall_alloc+0x1d/0x90 [ 268.310205] p9_fcall_alloc+0x1d/0x90 [ 268.310218] p9_client_prepare_req.part.0+0x73c/0xa90 [ 268.310234] p9_client_rpc+0x170/0x1190 [ 268.310243] ? p9_idpool_get+0xa3/0x100 [ 268.310255] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 268.310266] ? find_held_lock+0x35/0x130 [ 268.310275] ? p9_fid_create+0x2d5/0x3b0 [ 268.310292] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 268.310304] ? trace_hardirqs_on_caller+0x400/0x590 [ 268.316622] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 268.316638] p9_client_attach+0x152/0x6a0 23:11:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 268.316652] ? trace_hardirqs_off+0xd/0x10 [ 268.316664] ? p9_client_readlink+0x410/0x410 [ 268.316674] ? trace_hardirqs_on_caller+0x400/0x590 [ 268.316687] v9fs_session_init+0xbe8/0x1590 [ 268.324977] ? v9fs_session_init+0xbe8/0x1590 [ 268.325007] ? v9fs_show_options+0x730/0x730 [ 268.325021] ? v9fs_mount+0x5e/0x870 [ 268.325033] ? rcu_read_lock_sched_held+0x110/0x130 [ 268.325048] ? kmem_cache_alloc_trace+0x626/0x790 [ 268.428659] ? free_pages+0x46/0x50 [ 268.432304] v9fs_mount+0x7d/0x870 [ 268.435845] mount_fs+0x9d/0x2a7 [ 268.439238] vfs_kern_mount.part.0+0x5e/0x3d0 [ 268.443731] do_mount+0x417/0x27d0 [ 268.447296] ? copy_mount_options+0x5c/0x2f0 [ 268.451798] ? rcu_read_lock_sched_held+0x110/0x130 [ 268.456818] ? copy_mount_string+0x40/0x40 [ 268.461086] ? copy_mount_options+0x1fe/0x2f0 [ 268.465849] SyS_mount+0xab/0x120 [ 268.469398] ? copy_mnt_ns+0x8c0/0x8c0 [ 268.473378] do_syscall_64+0x1eb/0x630 [ 268.477282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.482133] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.487406] RIP: 0033:0x458c29 [ 268.490586] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 268.498318] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 268.505578] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 268.512949] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 268.520239] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 268.527540] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 268.539537] 9pnet: Couldn't grow tag array 23:11:36 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x8) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}, 0x20) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r2, 0x2}) 23:11:36 executing program 3 (fault-call:2 fault-nth:33): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:36 executing program 4 (fault-call:2 fault-nth:7): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 268.637533] FAULT_INJECTION: forcing a failure. [ 268.637533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.654904] FAULT_INJECTION: forcing a failure. [ 268.654904] name failslab, interval 1, probability 0, space 0, times 0 [ 268.673912] CPU: 0 PID: 12467 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 268.702018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.711374] Call Trace: [ 268.711393] dump_stack+0x138/0x19c [ 268.711410] should_fail.cold+0x10f/0x159 [ 268.711419] ? __might_sleep+0x93/0xb0 [ 268.711430] __alloc_pages_nodemask+0x1d6/0x7a0 [ 268.711441] ? check_preemption_disabled+0x3c/0x250 [ 268.711453] ? __alloc_pages_slowpath+0x2930/0x2930 [ 268.711463] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 268.711476] ? __alloc_pages_nodemask+0x63b/0x7a0 [ 268.717670] alloc_pages_current+0xec/0x1e0 [ 268.717686] __get_free_pages+0xf/0x40 [ 268.717695] get_zeroed_page+0x11/0x20 [ 268.717707] selinux_sb_copy_data+0x2a/0x390 [ 268.767986] security_sb_copy_data+0x7b/0xb0 [ 268.772499] mount_fs+0x1f2/0x2a7 [ 268.775953] vfs_kern_mount.part.0+0x5e/0x3d0 [ 268.780553] do_mount+0x417/0x27d0 [ 268.784118] ? copy_mount_options+0x5c/0x2f0 [ 268.788515] ? rcu_read_lock_sched_held+0x110/0x130 [ 268.793534] ? copy_mount_string+0x40/0x40 [ 268.797853] ? copy_mount_options+0x1fe/0x2f0 [ 268.802462] SyS_mount+0xab/0x120 [ 268.806088] ? copy_mnt_ns+0x8c0/0x8c0 [ 268.809975] do_syscall_64+0x1eb/0x630 [ 268.813854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.818701] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.823887] RIP: 0033:0x458c29 [ 268.827431] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:11:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_proto_private(r1, 0x89e0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) 23:11:36 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10000, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x1}, 0x8) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:36 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x4000000109842, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000002340)={&(0x7f0000000180), 0xc, &(0x7f0000002300)={&(0x7f0000000280)=ANY=[@ANYBLOB="78000000f2961dffa16e5f1e27247c8f8234dfa02a0a7a5ca2ae28ee8d862086ec2278413cab46c1ff82de3a71613b60f8a069ba4121fab264f398a8fe35b94cdd6c5c468958fb5b23a24122b003fb521a0040dad899862cc7c25d9095ee4a4d8610531df6fe5c8f72d3f8a8d6229182f74411977503d18aa5fc67269cbb3f1377395ba158e32a1b31e939df0b4e08ec390f247c2f31737794fe868e990c449bad75fbdd22a72e4a8ecdbdabd66017f471bf7ebd496b209d9698d39c5a3eda3d17333fdd7854ad6538f43b256dd54c9af466ca5a7e438daf62cfd271", @ANYRES16=r1, @ANYBLOB="000826bd7000ffdbdf250d0000004400090008000200a30300000800010001000000480001000400000008000200ff7f00000800020001f9000000080002000600000008000100020000000800010008000000200002000800010065908d6c0800020005000000080002000200000004000400"], 0x78}}, 0x94) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r3 = getpgid(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r4, 0x0, 0x0, 0x800000000002) [ 268.835155] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 268.842432] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 268.849727] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 268.857072] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 268.857083] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 268.891303] CPU: 1 PID: 12466 Comm: syz-executor.3 Not tainted 4.14.112 #2 [ 268.898367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.908026] Call Trace: [ 268.910633] dump_stack+0x138/0x19c [ 268.914284] should_fail.cold+0x10f/0x159 [ 268.918445] should_failslab+0xdb/0x130 [ 268.922430] kmem_cache_alloc+0x2d9/0x780 [ 268.926588] ? snprintf+0xd0/0xd0 [ 268.930052] ? kmem_cache_alloc_trace+0x626/0x790 [ 268.934907] __fscache_acquire_cookie+0xe1/0x430 [ 268.939679] v9fs_cache_session_get_cookie+0xa0/0x1d0 [ 268.945075] v9fs_session_init+0xc77/0x1590 [ 268.947822] 9pnet: Insufficient options for proto=fd [ 268.949443] ? v9fs_show_options+0x730/0x730 [ 268.949457] ? v9fs_mount+0x5e/0x870 [ 268.949471] ? rcu_read_lock_sched_held+0x110/0x130 [ 268.967708] ? kmem_cache_alloc_trace+0x626/0x790 [ 268.972575] ? free_pages+0x46/0x50 [ 268.976296] v9fs_mount+0x7d/0x870 [ 268.979854] mount_fs+0x9d/0x2a7 [ 268.983255] vfs_kern_mount.part.0+0x5e/0x3d0 [ 268.987814] do_mount+0x417/0x27d0 23:11:36 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000300)={@ll={0x11, 0xf6, r1, 0x1, 0x1000, 0x6, @random="0066dd5c3c8f"}, {&(0x7f0000000240)=""/156, 0x9c}, &(0x7f0000000140), 0x40}, 0xa0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x0, 0x3) 23:11:36 executing program 4 (fault-call:2 fault-nth:8): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 268.991185] FAULT_INJECTION: forcing a failure. [ 268.991185] name failslab, interval 1, probability 0, space 0, times 0 [ 268.991370] ? copy_mount_options+0x5c/0x2f0 [ 268.991387] ? rcu_read_lock_sched_held+0x110/0x130 [ 269.006990] ? copy_mount_string+0x40/0x40 [ 269.007005] ? copy_mount_options+0x1fe/0x2f0 [ 269.007018] SyS_mount+0xab/0x120 [ 269.016300] ? copy_mnt_ns+0x8c0/0x8c0 [ 269.016315] do_syscall_64+0x1eb/0x630 [ 269.016324] ? trace_hardirqs_off_thunk+0x1a/0x1c 23:11:37 executing program 0: r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000001740)=r0, 0x8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000001140)=0x9) fcntl$dupfd(r1, 0x0, r0) 23:11:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x5, 0x9a15, 0x7fff, 0x56}, 0x14) pread64(r1, 0x0, 0x0, 0x800000000002) [ 269.016342] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.032542] RIP: 0033:0x458c29 [ 269.032550] RSP: 002b:00007f05ec6e6c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.032565] RAX: ffffffffffffffda RBX: 00007f05ec6e6c90 RCX: 0000000000458c29 [ 269.032569] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 269.032574] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 269.032579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f05ec6e76d4 [ 269.032585] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 269.073239] CPU: 0 PID: 12487 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 269.083881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.083886] Call Trace: [ 269.083903] dump_stack+0x138/0x19c [ 269.083919] should_fail.cold+0x10f/0x159 [ 269.098455] should_failslab+0xdb/0x130 [ 269.098468] __kmalloc_track_caller+0x2ef/0x790 [ 269.098481] ? trace_hardirqs_on+0x10/0x10 [ 269.118343] ? trace_hardirqs_on_caller+0x400/0x590 [ 269.118357] ? v9fs_session_init+0x9b/0x1590 [ 269.118370] kstrdup+0x3a/0x70 [ 269.118380] v9fs_session_init+0x9b/0x1590 [ 269.127032] ? check_preemption_disabled+0x3c/0x250 [ 269.127045] ? v9fs_show_options+0x730/0x730 [ 269.127068] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 269.136379] ? v9fs_mount+0x5e/0x870 [ 269.136392] ? rcu_read_lock_sched_held+0x110/0x130 [ 269.136405] ? kmem_cache_alloc_trace+0x626/0x790 [ 269.136417] ? free_pages+0x46/0x50 [ 269.143995] v9fs_mount+0x7d/0x870 [ 269.144012] mount_fs+0x9d/0x2a7 [ 269.144026] vfs_kern_mount.part.0+0x5e/0x3d0 [ 269.144039] do_mount+0x417/0x27d0 [ 269.153350] ? copy_mount_options+0x5c/0x2f0 [ 269.153362] ? rcu_read_lock_sched_held+0x110/0x130 [ 269.153376] ? copy_mount_string+0x40/0x40 [ 269.153388] ? copy_mount_options+0x1fe/0x2f0 [ 269.153400] SyS_mount+0xab/0x120 [ 269.153408] ? copy_mnt_ns+0x8c0/0x8c0 [ 269.153420] do_syscall_64+0x1eb/0x630 [ 269.153428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.153444] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.163264] RIP: 0033:0x458c29 23:11:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) connect$ax25(r0, &(0x7f0000000100)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0x8) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000340)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000180)=""/193, 0xc1, 0x1f, 0x3, 0x6bae92d1, 0x7fff, 0x7fff}, 0x120) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 23:11:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f00008e0000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000719000/0x3000)=nil) lookup_dcookie(0x6000000000, &(0x7f00000000c0)=""/216, 0xd8) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={{0x5, 0x2, 0x400, 0x5a, 0x5, 0xffff}, 0x90}) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) socket$can_bcm(0x1d, 0x2, 0x2) [ 269.163269] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.163281] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 269.163287] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 269.163292] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 269.163297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 269.163302] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:37 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7b712a47a0c923b9675fed400c579cf3fed9fd738d57ed56f5697b5a9548813a701362295237f09003ef89d7d5f26ea494e9a82fc09c2256ae7c0bc43e3118bb67099204d7971eeee9ae7bc40aaeafa270a58157a36037c7f81e5607066d98d8775ca6f955c5d912759bd46d108d4bd8d60dd4e0a23fc852ff1eb848c7e87a0f96c25bdb98332acc640ac4f3c9a4cdf59b169eeaa508103e9f4cdff4c08930fd99951556107d4e88bf085acc3375", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0099b380250f21d314af6b2b656657e0248e5f162ceae118a49ed141"]) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000000)=0x8eb) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="f001dc832bc2146a7fb07edbc00e2c856f12", &(0x7f0000000080)=""/215}, 0x18) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000240)="52ad7a4f6217832bc07326277f78bf1715e5fcf5fa2545d6ce02c963c2f28e6bf0db4c2ab6fff2ebc8668285cfe9eabe577c99af8163d6ad71acc8e0802959f5fee450f7743051b222c8ac9e0c5e91d91df0370b3bb7e64c3f68c1b9f662627083b6dda73d8ec0d56498e429cf814555d1e6f0c1c4d63f3341d8efc33ebda8326daf46837fe180d28882c40cb1a38825b957e7a714c95a231e5df5698f8823744c006a3c612ed9daa8d7d9b05f705927526ff9b78aadcd97499fb2ef50393fccf495d1c65bd633d3e34b4b27b2dd480575a88af1ad") 23:11:37 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000080)) socket$vsock_stream(0x28, 0x1, 0x0) 23:11:37 executing program 4 (fault-call:2 fault-nth:9): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) connect$ax25(r0, &(0x7f0000000100)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r1, 0x8) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) write$UHID_CREATE(r2, &(0x7f0000000340)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000180)=""/193, 0xc1, 0x1f, 0x3, 0x6bae92d1, 0x7fff, 0x7fff}, 0x120) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) 23:11:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r1, &(0x7f0000000280)='smaps\x00\x92#8\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0083Z]\xe2\xe6\x1b\xa4\x1c\xe5V(\xc5\x8aA\x9bu\xf0_\xad\xf8\x89\xe91)\xebl\xd6\xea\x14\xc6g!\xdbj\"\x02F\x84\xc1Y?+\xf7\a]\a\xber\xb4\xe2\x15\xd4\xc5\x87\x82\xb0\xb1>\x9a\x82j\xd93QOU\xba\x984\x92\x8c-\xf2^/\xac\xe0\xd3#\x06\x83\x9f\xe8\x1d\x91\xeb\xe5\x1et\xe63\x16\x04\r\x10D\xe5d^q%\xbb\xb3*\xf6\xdf\xf3?\xd4\xa2\x00\x80\r\a\xc2\x87\xbb\b\xe4\xc7VF\x17\x9fb\xc1\x01\xd1') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0xfffffffffffffc41, 0x80000) 23:11:37 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x1, {0x7, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540)='nbd\x00') sendto$rose(r1, &(0x7f0000000100)="656d6cd29b421ca2baf45d9a3c4857be247a113efc67ce3716aa9e8b3fb5855d8097dad643aa52536d0f210a5e7d22b3538d2ac1daa314a6e270527e3498fabb884ec2da8c2783503fc30abffea17138a8cf805be3c3aba5cc771641142441a4391d7779570f856eb67bc18518f7f6361d4c96b600bd6b", 0x77, 0x84, &(0x7f0000000700)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x3, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x18000100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r3, 0x8, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 23:11:37 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x4) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@context={'context', 0x3d, 'sysadm_u'}}, {@appraise='appraise'}, {@obj_type={'obj_type', 0x3d, 'rfdno'}}, {@dont_appraise='dont_appraise'}, {@dont_hash='dont_hash'}, {@seclabel='seclabel'}]}}) [ 269.779067] FAULT_INJECTION: forcing a failure. [ 269.779067] name failslab, interval 1, probability 0, space 0, times 0 [ 269.828938] CPU: 0 PID: 12536 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 269.836333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.845790] Call Trace: [ 269.848440] dump_stack+0x138/0x19c [ 269.852095] should_fail.cold+0x10f/0x159 [ 269.856262] should_failslab+0xdb/0x130 [ 269.860366] __kmalloc_track_caller+0x2ef/0x790 [ 269.865046] ? trace_hardirqs_on+0x10/0x10 [ 269.869455] ? trace_hardirqs_on_caller+0x400/0x590 [ 269.874472] ? v9fs_session_init+0xdc/0x1590 [ 269.878965] kstrdup+0x3a/0x70 [ 269.882330] v9fs_session_init+0xdc/0x1590 [ 269.886688] ? check_preemption_disabled+0x3c/0x250 [ 269.891803] ? v9fs_show_options+0x730/0x730 [ 269.896209] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 269.901657] ? v9fs_mount+0x5e/0x870 [ 269.905368] ? rcu_read_lock_sched_held+0x110/0x130 [ 269.910385] ? kmem_cache_alloc_trace+0x626/0x790 [ 269.915224] ? free_pages+0x46/0x50 [ 269.918857] v9fs_mount+0x7d/0x870 [ 269.922834] mount_fs+0x9d/0x2a7 [ 269.926294] vfs_kern_mount.part.0+0x5e/0x3d0 [ 269.930792] do_mount+0x417/0x27d0 [ 269.934361] ? copy_mount_options+0x5c/0x2f0 [ 269.938877] ? rcu_read_lock_sched_held+0x110/0x130 [ 269.943930] ? copy_mount_string+0x40/0x40 [ 269.948356] ? copy_mount_options+0x1fe/0x2f0 [ 269.952889] SyS_mount+0xab/0x120 [ 269.956440] ? copy_mnt_ns+0x8c0/0x8c0 [ 269.960349] do_syscall_64+0x1eb/0x630 [ 269.964241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.969110] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 269.974307] RIP: 0033:0x458c29 [ 269.977501] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.985222] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 269.992684] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 270.000107] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 270.008260] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 270.015578] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 270.033563] 9pnet: Insufficient options for proto=fd 23:11:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xfff, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) 23:11:38 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x4) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x5, 0x200002) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000240)=""/191, &(0x7f00000001c0)=0xbf) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x210003, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000340)={0x4, 0x0, [{0xc0000001, 0xdb, 0x3ff, 0x3, 0x2d36e1a3}, {0x8000000f, 0x3ff, 0xa2ef, 0x9, 0x1}, {0x0, 0xb1, 0x0, 0x80c}, {0x7, 0x7, 0x7fffffff, 0x0, 0x4}]}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7472616e733df39d37662c7266646e6f3d00", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="913d385825c79042ff667294c13aa80fed3b67b466c96638b652eda8294b2b27808e236b0d3839461083e89e688197967f4cc48f0402a9c90f535d915a9fc66516dd99c55cdd77"]) ioctl$RTC_WIE_ON(r0, 0x700f) [ 270.203188] 9pnet: Could not find request transport: ó7f 23:11:38 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000480)={0x2e, &(0x7f0000000380)="6796169fe708e9df104834fbd5c21b32160de83441f7648ab9d3351154574c4a806dc60cb8974d27b2ba541782dd"}) syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f00003d30308503e04d30303030303030303030303030303030343030303046097365725f69643d", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d20607505f0d465432db350", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) fdatasync(r1) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) 23:11:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r2 = socket(0x1f, 0xa, 0x7) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000140)=0x3ff, 0x4) r3 = syz_open_procfs(r1, &(0x7f0000000040)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x800000000002) 23:11:38 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x4700, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0], &(0x7f0000000140)=0x2) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fi,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x7, @mcast2, 0x8}}, [0x8, 0x1, 0xffffffff00000001, 0x4, 0x7fffffff, 0x0, 0xfffffffffffffff9, 0x9, 0x40, 0x8001, 0x8, 0x3, 0x3, 0x5ede, 0x3]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r3, 0x4) 23:11:38 executing program 0: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10000, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x1}, 0x8) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 270.261644] 9pnet: Could not find request transport: ó7f 23:11:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 270.445887] 9pnet: Could not find request transport: fi 23:11:38 executing program 4 (fault-call:2 fault-nth:10): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:38 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x1422, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:38 executing program 0: r0 = socket(0xf, 0x802, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701050007000200e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f000051dffc)=0x7fff, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000077f000), 0x4) accept(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80) sendto(r0, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144aff0ae9", 0x12, 0x0, 0x0, 0x0) 23:11:38 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="a1a2"]) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 23:11:38 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket(0x18, 0x0, 0x0) socket(0x0, 0x0, 0x0) fcntl$getflags(r1, 0x1) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = shmget$private(0x0, 0x1000, 0x78000040, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000300)=""/2) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) prctl$PR_SET_UNALIGN(0x6, 0x3) [ 270.708280] 9pnet: Insufficient options for proto=fd [ 270.708738] FAULT_INJECTION: forcing a failure. [ 270.708738] name failslab, interval 1, probability 0, space 0, times 0 [ 270.746000] 9pnet: Insufficient options for proto=fd 23:11:38 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='+\x00']) 23:11:38 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000140)={0x56, &(0x7f0000000240)="9bf82bf6dfad0daecaf2cdfc4048a2340d9e50ec4d4ca5609fb49182fe1db5d8c88862423e0208f1d364a97c098be62ad28e012c9212fbbb16044b1bd060c6fd36f0ae490565c7e081154123e8f559733d80ce4e0ccf"}) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x100000000, 0x2}, &(0x7f00000000c0)=0x8) [ 270.800725] CPU: 0 PID: 12611 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 270.807897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.817358] Call Trace: [ 270.819964] dump_stack+0x138/0x19c [ 270.823605] should_fail.cold+0x10f/0x159 [ 270.827865] should_failslab+0xdb/0x130 [ 270.831860] __kmalloc_track_caller+0x2ef/0x790 [ 270.836642] ? trace_hardirqs_on+0x10/0x10 [ 270.840894] ? trace_hardirqs_on_caller+0x400/0x590 [ 270.845928] ? v9fs_session_init+0xdc/0x1590 [ 270.850355] kstrdup+0x3a/0x70 [ 270.853625] v9fs_session_init+0xdc/0x1590 [ 270.857867] ? check_preemption_disabled+0x3c/0x250 [ 270.862984] ? v9fs_show_options+0x730/0x730 [ 270.867391] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 270.872844] ? v9fs_mount+0x5e/0x870 [ 270.876634] ? rcu_read_lock_sched_held+0x110/0x130 [ 270.881835] ? kmem_cache_alloc_trace+0x626/0x790 [ 270.886710] ? free_pages+0x46/0x50 [ 270.890348] v9fs_mount+0x7d/0x870 [ 270.893991] mount_fs+0x9d/0x2a7 [ 270.897350] vfs_kern_mount.part.0+0x5e/0x3d0 [ 270.901860] do_mount+0x417/0x27d0 [ 270.905596] ? copy_mount_options+0x5c/0x2f0 [ 270.910023] ? rcu_read_lock_sched_held+0x110/0x130 [ 270.915062] ? copy_mount_string+0x40/0x40 [ 270.919399] ? copy_mount_options+0x1fe/0x2f0 [ 270.923894] SyS_mount+0xab/0x120 [ 270.927332] ? copy_mnt_ns+0x8c0/0x8c0 [ 270.931226] do_syscall_64+0x1eb/0x630 [ 270.935137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.940103] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 270.945318] RIP: 0033:0x458c29 23:11:38 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="a1a2"]) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 23:11:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10001, &(0x7f0000000040)="0adc1f123c123f319bd070") fcntl$getown(r0, 0x9) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x41, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x0, 0x0, 0x6}}, 0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) fcntl$getown(r0, 0x9) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000280)='net/route\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x800000000002) [ 270.948584] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 270.956288] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 270.963634] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 270.970987] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 270.978447] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 270.987725] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:39 executing program 4 (fault-call:2 fault-nth:11): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:39 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x4, 0x3f, 0x2, 0x8, 0x3f, 0x80000001}, 0x2}) [ 271.085914] 9pnet: Insufficient options for proto=fd [ 271.092280] 9pnet: Insufficient options for proto=fd [ 271.123892] 9pnet: Insufficient options for proto=fd 23:11:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000280)={{0x3, @name="986172e31ec091b742bd92ea4ba137d7a79817d5019a500d79ac0877d1510285"}, "63ac8d1cc6280f08746f1ecba50d8afbdb95e9072fe410c330e675b1d3000b50", 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x8, 0x9, 0x5, 'queue0\x00', 0x800}) [ 271.134552] FAULT_INJECTION: forcing a failure. [ 271.134552] name failslab, interval 1, probability 0, space 0, times 0 23:11:39 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) utimensat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x100) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000140)=0x78) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f00000001c0)={0x413b, 0x85, 0x7fff, 0x4, 0x19, 0x1ff}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472611d733d00002c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',fsname=wfdno,smackfsfloor=trans=fd,,\x00']) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000002c0)) 23:11:39 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000003ff8), 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ptrace$getsig(0x4202, r1, 0x7f4, &(0x7f0000000080)) [ 271.249062] CPU: 0 PID: 12640 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 271.256144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.265770] Call Trace: [ 271.268379] dump_stack+0x138/0x19c [ 271.272112] should_fail.cold+0x10f/0x159 [ 271.276283] should_failslab+0xdb/0x130 [ 271.280279] kmem_cache_alloc_trace+0x2ec/0x790 [ 271.284967] ? __lockdep_init_map+0x10c/0x570 [ 271.289483] p9_idpool_create+0x40/0x120 [ 271.293645] p9_client_create+0x1e5/0x1130 [ 271.293663] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 271.303627] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 271.303640] ? __kmalloc_track_caller+0x375/0x790 [ 271.303651] ? __lockdep_init_map+0x10c/0x570 [ 271.303661] ? lockdep_init_map+0x9/0x10 [ 271.303669] ? __raw_spin_lock_init+0x2d/0x100 [ 271.303685] v9fs_session_init+0x1dc/0x1590 [ 271.303702] ? check_preemption_disabled+0x3c/0x250 [ 271.303713] ? v9fs_show_options+0x730/0x730 [ 271.303731] ? rcu_lockdep_current_cpu_online+0xf2/0x140 23:11:39 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = msgget$private(0x0, 0x200) msgrcv(r1, &(0x7f0000000640)={0x0, ""/4096}, 0x1008, 0x8000000, 0xfffffffffffffffc) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04042dbdaa7f3b4642f75e640000fcff0300090000000800060006000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r3 = msgget(0x0, 0x420) r4 = shmget(0x3, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f00000000c0)=""/143) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x10) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/133) [ 271.303740] ? v9fs_mount+0x5e/0x870 [ 271.303753] ? rcu_read_lock_sched_held+0x110/0x130 [ 271.318710] ? kmem_cache_alloc_trace+0x626/0x790 [ 271.318733] ? free_pages+0x46/0x50 [ 271.327548] v9fs_mount+0x7d/0x870 [ 271.327563] mount_fs+0x9d/0x2a7 [ 271.337009] vfs_kern_mount.part.0+0x5e/0x3d0 [ 271.337023] do_mount+0x417/0x27d0 [ 271.371257] ? copy_mount_options+0x5c/0x2f0 [ 271.379285] ? rcu_read_lock_sched_held+0x110/0x130 [ 271.388738] ? copy_mount_string+0x40/0x40 [ 271.393004] ? copy_mount_options+0x1fe/0x2f0 [ 271.397526] SyS_mount+0xab/0x120 [ 271.401087] ? copy_mnt_ns+0x8c0/0x8c0 [ 271.404995] do_syscall_64+0x1eb/0x630 [ 271.408898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.413765] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.419019] RIP: 0033:0x458c29 [ 271.422219] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.430023] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 271.430030] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:39 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x20, 0x5, [0x80, 0x100000000, 0x7, 0xb8d, 0x80]}, &(0x7f00000000c0)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x6c, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @mcast1, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x5}]}, &(0x7f0000000240)=0x10) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/12) [ 271.430035] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 271.430040] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 271.430045] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:39 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000000)='./file2\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66e11e", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:39 executing program 0: r0 = userfaultfd(0x80003) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x6}) 23:11:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='wchan\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) 23:11:39 executing program 4 (fault-call:2 fault-nth:12): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:39 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="020000006e6f3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:39 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{0x7, 0x100}, {0x0, 0x2}, {0xe1d6, 0x7ff}, {0x0, 0xfffffffffffff001}, {0x7, 0x9}, {0x10001, 0x5}, {0x10000, 0x6000000000000}, {0x8}, {0x4, 0x2}, {0x4, 0xe12}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000720000/0x2000)=nil, &(0x7f000026d000/0x2000)=nil, 0x2000, 0x1}) clone(0x103ffff, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) 23:11:39 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x20, 0x5, [0x80, 0x100000000, 0x7, 0xb8d, 0x80]}, &(0x7f00000000c0)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x6c, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @mcast1, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x5}]}, &(0x7f0000000240)=0x10) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/12) [ 271.593623] FAULT_INJECTION: forcing a failure. [ 271.593623] name failslab, interval 1, probability 0, space 0, times 0 [ 271.603372] 9pnet: Insufficient options for proto=fd [ 271.612346] 9pnet: Insufficient options for proto=fd [ 271.646514] CPU: 0 PID: 12692 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 271.653843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.663205] Call Trace: [ 271.665808] dump_stack+0x138/0x19c [ 271.669553] should_fail.cold+0x10f/0x159 [ 271.673727] should_failslab+0xdb/0x130 [ 271.677827] __kmalloc_track_caller+0x2ef/0x790 [ 271.682527] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 271.687645] ? p9_idpool_get+0xbd/0x100 [ 271.691636] ? p9_client_create+0x2ff/0x1130 [ 271.696172] kstrdup+0x3a/0x70 [ 271.699507] p9_client_create+0x2ff/0x1130 [ 271.703855] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 271.709404] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 271.714966] ? __kmalloc_track_caller+0x375/0x790 [ 271.719828] ? __lockdep_init_map+0x10c/0x570 [ 271.724333] ? lockdep_init_map+0x9/0x10 [ 271.728496] ? __raw_spin_lock_init+0x2d/0x100 [ 271.733457] v9fs_session_init+0x1dc/0x1590 [ 271.737892] ? check_preemption_disabled+0x3c/0x250 23:11:39 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="740e03ec2073fc9272616e733d6664", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:39 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 271.742922] ? v9fs_show_options+0x730/0x730 [ 271.747342] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 271.752889] ? v9fs_mount+0x5e/0x870 [ 271.752901] ? rcu_read_lock_sched_held+0x110/0x130 [ 271.752914] ? kmem_cache_alloc_trace+0x626/0x790 [ 271.752925] ? free_pages+0x46/0x50 [ 271.752940] v9fs_mount+0x7d/0x870 [ 271.752953] mount_fs+0x9d/0x2a7 [ 271.752966] vfs_kern_mount.part.0+0x5e/0x3d0 [ 271.752978] do_mount+0x417/0x27d0 [ 271.761724] ? copy_mount_options+0x5c/0x2f0 [ 271.761737] ? rcu_read_lock_sched_held+0x110/0x130 [ 271.761749] ? copy_mount_string+0x40/0x40 [ 271.761762] ? copy_mount_options+0x1fe/0x2f0 [ 271.761774] SyS_mount+0xab/0x120 [ 271.761782] ? copy_mnt_ns+0x8c0/0x8c0 [ 271.761795] do_syscall_64+0x1eb/0x630 [ 271.761809] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.761826] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.761834] RIP: 0033:0x458c29 [ 271.761840] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.761851] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 23:11:39 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x20, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2$9p(&(0x7f0000000000), 0x800) 23:11:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', r2}) pread64(r1, 0x0, 0x0, 0x800000000002) [ 271.761856] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 271.761861] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 271.761866] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 271.761871] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:39 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x1c, 0x80800) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000380)=0x7, 0x4) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:39 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x1420, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000080)={0x800, 0x7, 0x507, 0x6b0e}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) inotify_init1(0x80000) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) 23:11:39 executing program 4 (fault-call:2 fault-nth:13): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:40 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x20, 0x5, [0x80, 0x100000000, 0x7, 0xb8d, 0x80]}, &(0x7f00000000c0)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x6c, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @mcast1, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x5}]}, &(0x7f0000000240)=0x10) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/12) 23:11:40 executing program 5: r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dffafb03dc8e95d4c68c3ccef053e3b7ef87c49d8b501a5bbba003c4da3f4db4877a8d48e25824fc572ebce41f05ebb3d6d17ac5399ba404d62f2d8a859f1fb7d155819563d19f09bff3dd1cbe60928bf329f1b282dcb6f3b186748d27ac8444b92b2ee409abd135dc6dad19edee530f2d428736cae35ea497cf7737cb36b48c31259be3ef0f60997be9e4995e86bbb9e5400511f2e8dcf194c8dd2b46f7280a7e2a561b2b522e137e12569a467e1a76caf9452fd3a5115ebb3135c5e924ba5e589468e0366d4eb40d45262fbd1a285db9f98ffa179500c1db4ec9990ea5476169c3851239ca218de6a153ed8d2fe943d48980645d6c1ef17a544d93e984cd13be879f67ee100"/296, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 272.037991] FAULT_INJECTION: forcing a failure. [ 272.037991] name failslab, interval 1, probability 0, space 0, times 0 [ 272.104955] CPU: 0 PID: 12739 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 272.112135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.121513] Call Trace: [ 272.124128] dump_stack+0x138/0x19c [ 272.127797] should_fail.cold+0x10f/0x159 [ 272.131963] should_failslab+0xdb/0x130 [ 272.135954] kmem_cache_alloc_trace+0x2ec/0x790 [ 272.140652] ? __lockdep_init_map+0x10c/0x570 [ 272.147077] p9_idpool_create+0x40/0x120 [ 272.151328] p9_client_create+0x1e5/0x1130 [ 272.155676] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 272.161135] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 272.166693] ? __kmalloc_track_caller+0x375/0x790 [ 272.171551] ? __lockdep_init_map+0x10c/0x570 [ 272.176260] ? lockdep_init_map+0x9/0x10 [ 272.180330] ? __raw_spin_lock_init+0x2d/0x100 [ 272.185112] v9fs_session_init+0x1dc/0x1590 [ 272.189457] ? check_preemption_disabled+0x3c/0x250 [ 272.189471] ? v9fs_show_options+0x730/0x730 [ 272.189485] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 272.209372] ? v9fs_mount+0x5e/0x870 [ 272.209385] ? rcu_read_lock_sched_held+0x110/0x130 [ 272.209399] ? kmem_cache_alloc_trace+0x626/0x790 [ 272.209414] ? free_pages+0x46/0x50 [ 272.227085] v9fs_mount+0x7d/0x870 [ 272.227105] mount_fs+0x9d/0x2a7 [ 272.234447] vfs_kern_mount.part.0+0x5e/0x3d0 [ 272.239047] do_mount+0x417/0x27d0 [ 272.242696] ? copy_mount_options+0x5c/0x2f0 [ 272.247233] ? rcu_read_lock_sched_held+0x110/0x130 23:11:40 executing program 5: mknod(&(0x7f0000000000)='./file0\x00', 0x800a, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wo=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 272.252527] ? copy_mount_string+0x40/0x40 [ 272.257133] ? copy_mount_options+0x1fe/0x2f0 [ 272.261680] SyS_mount+0xab/0x120 [ 272.265376] ? copy_mnt_ns+0x8c0/0x8c0 [ 272.268139] 9pnet: Insufficient options for proto=fd [ 272.269362] do_syscall_64+0x1eb/0x630 [ 272.269373] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.269392] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.277194] 9pnet: Insufficient options for proto=fd [ 272.279013] RIP: 0033:0x458c29 [ 272.279019] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:11:40 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x3, &(0x7f0000000100)=[{&(0x7f0000000080)="70f75aeecef62640c50fb445a88a8bbc225107f367b05c295068e2fc8a28cb570e83bd7c8c3936ae6357d03ea942630ee8c8085d5276db53d48ee0fb8101d351c0207d71bf3167929656272cd33ed66150a990d5d01eeefbce72e8c2b165a4f89b54a1ed6c3b52e3788f3fff3168", 0x6e, 0x2}, {&(0x7f0000000240)="c49765a84e5d71e0d4389321c2c3f13d8d5872ab70672f844238c5f94548d359ff46bcff94af66001db8207fac3c0cc58a3f43c288f08ccca85ff2b436765f46d7642082c750825c65b89e52cd19b7e0fa5e92f397701332d9a3a91db6dc5759256b84005b13817d3e97e7ddaca1e4e46235e3759306f74d2df0088f206079d7d461f34f17def4cc53df79217e1f7840b4699233b4e5312f7a54752ea3977617f4c2957c355a46f797cb257935aececd", 0xb0, 0x1}, {&(0x7f0000000300)="25fe94798df8cd3974ffb6ea19ac1ae2d625b65b7a728ca8b32a4100254e572540f25bcf0d3b8629e2a1e293067d63e269415583b4ea63f4ba3b0447ba0c63decc48234341313c0ca90a8f533498bdcdce4bb533d5410a368857a73cc65a03805217b55d3c49a769baa731c05452dc17c3d74072170f30fce7b55ed908a57a39ac8e211ff56bed115f278610e647638f24cb49d942c0542a4be0684e75f9dd73edab01f0f0756abcd0bf6473d0cb6a6ea770223cb0628c", 0xb7, 0x7fffffff}], 0x8, &(0x7f00000001c0)={[{@spectator='spectator'}, {@ignore_local_fs='ignore_local_fs'}, {@meta='meta'}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}, {@seclabel='seclabel'}]}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00005f7000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:40 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x20, 0x5, [0x80, 0x100000000, 0x7, 0xb8d, 0x80]}, &(0x7f00000000c0)=0x12) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0x6c, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x40, @mcast1, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @rand_addr=0x5}]}, &(0x7f0000000240)=0x10) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/12) 23:11:40 executing program 4 (fault-call:2 fault-nth:14): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 272.279031] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 272.279036] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 272.279041] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 272.279051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 272.312759] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:40 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x10000) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000004c0)={0x6, 0x4, 0xffff, 0x8000}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6faa393a6e3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000500)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x24c, r2, 0x0, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16c6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8632}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc3f4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb71}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xed}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @rand_addr="56a8f11a3629dd55b9649382c7c4285c", 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf01}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x31}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x24c}}, 0x4) [ 272.386270] gfs2: not a GFS2 filesystem [ 272.436085] FAULT_INJECTION: forcing a failure. [ 272.436085] name failslab, interval 1, probability 0, space 0, times 0 [ 272.475715] 9pnet: Insufficient options for proto=fd [ 272.497726] gfs2: not a GFS2 filesystem [ 272.515335] CPU: 0 PID: 12773 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 272.522398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.531764] Call Trace: [ 272.534371] dump_stack+0x138/0x19c [ 272.538061] should_fail.cold+0x10f/0x159 [ 272.542331] should_failslab+0xdb/0x130 [ 272.546336] kmem_cache_alloc_trace+0x2ec/0x790 [ 272.551291] ? kfree+0x186/0x270 [ 272.554768] ? p9_client_create+0x580/0x1130 [ 272.559442] ? trace_hardirqs_on_caller+0x400/0x590 [ 272.564641] p9_idpool_create+0x40/0x120 [ 272.568700] p9_client_create+0x5c6/0x1130 [ 272.572934] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 272.578548] ? __kmalloc_track_caller+0x375/0x790 [ 272.583473] ? __lockdep_init_map+0x10c/0x570 [ 272.588040] ? lockdep_init_map+0x9/0x10 [ 272.592173] ? __raw_spin_lock_init+0x2d/0x100 [ 272.596744] v9fs_session_init+0x1dc/0x1590 [ 272.601243] ? check_preemption_disabled+0x3c/0x250 [ 272.606252] ? v9fs_show_options+0x730/0x730 [ 272.610652] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 272.616086] ? v9fs_mount+0x5e/0x870 [ 272.619805] ? rcu_read_lock_sched_held+0x110/0x130 [ 272.624808] ? kmem_cache_alloc_trace+0x626/0x790 [ 272.629641] ? free_pages+0x46/0x50 [ 272.633257] v9fs_mount+0x7d/0x870 [ 272.636786] mount_fs+0x9d/0x2a7 [ 272.640141] vfs_kern_mount.part.0+0x5e/0x3d0 [ 272.644648] do_mount+0x417/0x27d0 [ 272.648178] ? retint_kernel+0x2d/0x2d [ 272.652068] ? copy_mount_string+0x40/0x40 [ 272.656388] ? copy_mount_options+0x1a0/0x2f0 [ 272.660957] ? copy_mount_options+0x1fe/0x2f0 [ 272.665444] SyS_mount+0xab/0x120 [ 272.668878] ? copy_mnt_ns+0x8c0/0x8c0 [ 272.672773] do_syscall_64+0x1eb/0x630 [ 272.676647] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.681490] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 272.686839] RIP: 0033:0x458c29 [ 272.690164] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 23:11:40 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = syz_open_dev$dmmidi(&(0x7f0000000b80)='/dev/dmmidi#\x00', 0x7fffffff, 0x40000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000bc0)=0x4) r2 = semget$private(0x0, 0x0, 0x28c) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000300)=""/114) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) r3 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x1, 0x0) write$vnet(r3, &(0x7f0000000b00)={0x1, {&(0x7f0000000980)=""/107, 0x6b, &(0x7f0000000a00)=""/225, 0x3, 0x6}}, 0x68) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000480)={{0x2, 0x4, 0x2, 0x1, 'syz0\x00', 0xd9ed}, 0x1, [0x3, 0x20, 0x7, 0x6dc, 0x6f1, 0x1000, 0x8, 0x42, 0x80000001, 0xc000000000000000, 0x3, 0x5, 0x136f, 0x0, 0xc7, 0x4, 0x3, 0x1, 0x80000001, 0x0, 0x1, 0x9, 0x7, 0x5, 0x100, 0x3ea6d711, 0x5, 0x3f, 0x0, 0xb1, 0x9, 0x7, 0x6, 0x1, 0x362, 0x0, 0x94f6, 0x0, 0x9, 0x5, 0x4, 0xfffffffffffffffd, 0x1, 0x9995, 0x4, 0xd5a, 0x32, 0x100000001, 0x9, 0x20, 0xe76, 0x3, 0x5, 0x5, 0x10000, 0x5, 0x7, 0x20, 0x401, 0x3, 0x800000, 0x7, 0x8000000000000000, 0x101, 0x1, 0x100000000, 0x2, 0x0, 0x0, 0x6, 0x3, 0x5, 0x3, 0x74bf, 0x7, 0x5, 0x76e, 0x4, 0x100, 0x9, 0x1, 0x1, 0x9, 0x9a5e, 0x100, 0x1000, 0x5, 0x1, 0x4, 0x4, 0x6, 0x30a, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffe, 0x4, 0xd7d3, 0x4, 0x100000001, 0x80000000, 0x7, 0x294545e2, 0x1000, 0xff, 0x2, 0xb, 0x7, 0x8, 0x190d, 0x62, 0xffff, 0x6, 0x0, 0x80000000, 0x5, 0x7, 0x2, 0x9, 0x9, 0x3, 0x3, 0x100000000, 0x4, 0x4, 0xfff]}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:40 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{0x7, 0x100}, {0x0, 0x2}, {0xe1d6, 0x7ff}, {0x0, 0xfffffffffffff001}, {0x7, 0x9}, {0x10001, 0x5}, {0x10000, 0x6000000000000}, {0x8}, {0x4, 0x2}, {0x4, 0xe12}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) read(r2, &(0x7f0000009f9c)=""/100, 0x64) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:40 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x40}) 23:11:40 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={r1, 0x3f}) [ 272.697944] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 272.705211] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 272.712463] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 272.720099] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 272.727393] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 272.741839] 9pnet: Insufficient options for proto=fd 23:11:40 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{0x7, 0x100}, {0x0, 0x2}, {0xe1d6, 0x7ff}, {0x0, 0xfffffffffffff001}, {0x7, 0x9}, {0x10001, 0x5}, {0x10000, 0x6000000000000}, {0x8}, {0x4, 0x2}, {0x4, 0xe12}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:40 executing program 4 (fault-call:2 fault-nth:15): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:40 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{0x7, 0x100}, {0x0, 0x2}, {0xe1d6, 0x7ff}, {0x0, 0xfffffffffffff001}, {0x7, 0x9}, {0x10001, 0x5}, {0x10000, 0x6000000000000}, {0x8}, {0x4, 0x2}, {0x4, 0xe12}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:40 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000000)=0x4) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 272.932261] FAULT_INJECTION: forcing a failure. [ 272.932261] name failslab, interval 1, probability 0, space 0, times 0 23:11:40 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10001, 0x400) lseek(r0, 0x0, 0x7) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7d66646e6f3dd351016411caf29f2968cdd16d41d4de8587509a73eda861f452dbcde3a744401382c4e736f5f428589c6a59c3ba8e4e961993b61fe107b2d84b285e394662ae152aee3e3cef8de31dbe7caa1b46fbff74e6092cbf5bd33bb9b3a3c716f00ddc3eea9c0590ee21c7a972fd03d4bade1a8aa3f115f42e7de4102f7200c7aa1cc7a41e7de9", @ANYRESHEX=r1, @ANYBLOB="0000ad4858de05000000454ea4753081d5bc7c43"]) [ 272.995704] CPU: 0 PID: 12810 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 273.003157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.012518] Call Trace: [ 273.015303] dump_stack+0x138/0x19c [ 273.019029] should_fail.cold+0x10f/0x159 [ 273.023187] should_failslab+0xdb/0x130 [ 273.023201] __kmalloc+0x2f3/0x7a0 [ 273.023215] ? match_number.isra.0+0x86/0x1e0 [ 273.023227] match_number.isra.0+0x86/0x1e0 [ 273.023238] ? match_strdup+0xa0/0xa0 [ 273.023249] ? match_wildcard+0x2d0/0x2d0 [ 273.023261] match_int+0x41/0x50 [ 273.023277] parse_opts.part.0+0x1c9/0x2e0 [ 273.023289] ? p9_fd_show_options+0x1a0/0x1a0 [ 273.023305] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 273.023317] ? p9_idpool_create+0x40/0x120 [ 273.070510] p9_fd_create+0x86/0x340 [ 273.074299] ? parse_opts.part.0+0x2e0/0x2e0 [ 273.078821] ? __raw_spin_lock_init+0x2d/0x100 [ 273.083490] p9_client_create+0x64e/0x1130 [ 273.087738] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 273.093942] ? __kmalloc_track_caller+0x375/0x790 [ 273.098783] ? __lockdep_init_map+0x10c/0x570 [ 273.103287] ? lockdep_init_map+0x9/0x10 [ 273.107341] ? __raw_spin_lock_init+0x2d/0x100 [ 273.112022] v9fs_session_init+0x1dc/0x1590 [ 273.116458] ? check_preemption_disabled+0x3c/0x250 [ 273.121575] ? v9fs_show_options+0x730/0x730 [ 273.125986] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 273.131627] ? v9fs_mount+0x5e/0x870 [ 273.135346] ? rcu_read_lock_sched_held+0x110/0x130 [ 273.140368] ? kmem_cache_alloc_trace+0x626/0x790 [ 273.145214] ? free_pages+0x46/0x50 [ 273.148857] v9fs_mount+0x7d/0x870 [ 273.152506] mount_fs+0x9d/0x2a7 [ 273.155961] vfs_kern_mount.part.0+0x5e/0x3d0 [ 273.160636] do_mount+0x417/0x27d0 [ 273.164202] ? copy_mount_options+0x5c/0x2f0 [ 273.168788] ? rcu_read_lock_sched_held+0x110/0x130 [ 273.173828] ? copy_mount_string+0x40/0x40 [ 273.178165] ? copy_mount_options+0x1fe/0x2f0 [ 273.182678] SyS_mount+0xab/0x120 [ 273.186344] ? copy_mnt_ns+0x8c0/0x8c0 [ 273.190503] do_syscall_64+0x1eb/0x630 [ 273.194508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.199386] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.204579] RIP: 0033:0x458c29 [ 273.207759] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.215570] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 273.222837] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 273.230104] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 273.237650] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 23:11:41 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 273.245006] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 273.263682] 9pnet: Insufficient options for proto=fd 23:11:41 executing program 5: mknod(&(0x7f00000001c0)='./file0\x00', 0x141e, 0xffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000380)={0x0, 0xfb, 0x81, 0x4, 0xfff, "01262eb062bb7b992850fdab503e389a", "cdc85cad2266dc93c0741936156837c0eb960133b04fff3583e5586826700a043afabded00e520fd02ebf45bc62102e032603cdba1ba18fc5472f1602bfafb7d2c3401c3a99150b19aca71819cd0d3273aec8692d78493682596be6622085b5afca2c1fb7b6ed3f86b422f03"}, 0x81, 0x2) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000440)={0x401, 0x3, [0x7, 0x9, 0x0, 0x5, 0x9], 0x5}) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000000)=@rc={0x1f, {0x101, 0xf23, 0x40, 0x1, 0x2, 0x1f}, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000640)="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", 0x1000}], 0x1, &(0x7f0000000240)=[{0xc0, 0x0, 0x2b0, "42e27e380604a73332a9ae9adbca60d3113d2139d21f55de543e4cb5b30a7539e869ed72e6961fb6bc855bd56e24c8c251cca36a301a15580301de56742a38aca6d464b86a533e41c37ac58f5f96ff3c3469b57d964e8804a953ea3c5844c70ba507d1942046c43ef0ceed5a6aaecaa9509ecb4dc19f5311f5c6878ab1c9f06c6e90986a98c8d3d7fdf3c4e4f65e22731c9ae19fc46f8816b459a379f9e36496a61bd93333db2b2e882e563e233276"}, {0x50, 0x11b, 0x4, "6ebf0474aa70200bb4bbfdb5bbcadd238e181fd6b008c40c1c454688eab54e1aa91f8bdee806bba1c337b1a7bda3d476f05b2ed64d566ae7db2bb3de35c369"}], 0x110}, 0x9}], 0x1, 0x24008010) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 273.344913] 9pnet: Insufficient options for proto=fd [ 273.371712] 9pnet: Insufficient options for proto=fd 23:11:41 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:41 executing program 4 (fault-call:2 fault-nth:16): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 273.527548] 9pnet: Insufficient options for proto=fd [ 273.527594] FAULT_INJECTION: forcing a failure. [ 273.527594] name failslab, interval 1, probability 0, space 0, times 0 [ 273.552803] CPU: 1 PID: 12850 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 273.560041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.570031] Call Trace: [ 273.572625] dump_stack+0x138/0x19c [ 273.576628] should_fail.cold+0x10f/0x159 [ 273.581078] should_failslab+0xdb/0x130 [ 273.585164] __kmalloc+0x2f3/0x7a0 [ 273.588702] ? match_number.isra.0+0x86/0x1e0 [ 273.593186] match_number.isra.0+0x86/0x1e0 [ 273.597690] ? match_strdup+0xa0/0xa0 [ 273.601501] ? match_wildcard+0x2d0/0x2d0 [ 273.605669] match_int+0x41/0x50 [ 273.609114] parse_opts.part.0+0x1c9/0x2e0 [ 273.613398] ? p9_fd_show_options+0x1a0/0x1a0 [ 273.617902] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 273.623375] ? p9_idpool_create+0x40/0x120 [ 273.627628] p9_fd_create+0x86/0x340 [ 273.631350] ? parse_opts.part.0+0x2e0/0x2e0 [ 273.635757] ? __raw_spin_lock_init+0x2d/0x100 [ 273.640337] p9_client_create+0x64e/0x1130 [ 273.644578] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 273.650375] ? __kmalloc_track_caller+0x375/0x790 [ 273.655220] ? __lockdep_init_map+0x10c/0x570 [ 273.659830] ? lockdep_init_map+0x9/0x10 [ 273.663889] ? __raw_spin_lock_init+0x2d/0x100 [ 273.668481] v9fs_session_init+0x1dc/0x1590 [ 273.672913] ? check_preemption_disabled+0x3c/0x250 [ 273.677930] ? v9fs_show_options+0x730/0x730 [ 273.682348] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 273.687808] ? v9fs_mount+0x5e/0x870 [ 273.691791] ? rcu_read_lock_sched_held+0x110/0x130 [ 273.696831] ? kmem_cache_alloc_trace+0x626/0x790 [ 273.701688] ? free_pages+0x46/0x50 [ 273.705337] v9fs_mount+0x7d/0x870 [ 273.708965] mount_fs+0x9d/0x2a7 [ 273.712324] vfs_kern_mount.part.0+0x5e/0x3d0 [ 273.712336] do_mount+0x417/0x27d0 [ 273.712345] ? copy_mount_options+0x5c/0x2f0 [ 273.712356] ? rcu_read_lock_sched_held+0x110/0x130 [ 273.712368] ? copy_mount_string+0x40/0x40 [ 273.712382] ? copy_mount_options+0x1fe/0x2f0 [ 273.738833] SyS_mount+0xab/0x120 [ 273.742284] ? copy_mnt_ns+0x8c0/0x8c0 [ 273.755877] do_syscall_64+0x1eb/0x630 [ 273.759765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.764625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 273.770231] RIP: 0033:0x458c29 23:11:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x329, 0x4) syz_open_procfs(r2, &(0x7f00000000c0)='attr\x00') clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:41 executing program 5: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = getpid() r2 = timerfd_create(0x1, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x7fff, 0xb, 0x4, 0x400, {0x0, 0x7530}, {0x7, 0x8, 0xcc8e, 0x3, 0x8, 0x1000, "1598195a"}, 0xff00000000000000, 0x7, @fd=0xffffffffffffff9c, 0x4}) kcmp(r0, r1, 0x7, r2, r3) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) 23:11:41 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xfffffffffffffffd, 0x6, &(0x7f0000000840)=[{&(0x7f0000000380)="0cbe318fc1f5f9765e0a4b42f86efc5d34a7aeff7121dd17885c6a79d0f64e7a2b65eb4ea160cebf6e40924a6841da5732f07ed490aeb3c6ebe96d", 0x3b, 0x3}, {&(0x7f0000000480)="8b91a72dd018d6b1718a85853496959c9c41a8aa5d9caa76c4037bf25d48344f2cccff39355f8d0a6889ddf6e5a383ea6ff8e7d0c2c578a3801da87ebcbc641c5bfc909ca0243b14dda115fb57bbf7cd6e54c5e5652acad0617b3f1d38b2a49bfde67bf1b3d2f9cbd3ce71dd92d3dd54ee34f0cecd729346f07576218537df8de1f19fc42bf039c58a8a354574544865a05fffe44c2053d4f26f3ac80e6dba479e5085afa8bc56886e5338bbe143cf80ea801fa224c1f8e17d4948134fed936936523dece5880b85d1824661ddfa70e6c610c83c809e42afcd7fbd4e5cd1590c95a3b0e081558913baef", 0xea, 0x4}, {&(0x7f0000000580)="c55f268b765a152c021d539c9730af627158963dbb63f32f3eb41771acfd6ccbafa3a0d54edd34b3194527a676356f7f7c03d39e29627d395c7f2565f1957328e1f1e3ba64", 0x45, 0x776}, {&(0x7f0000000600)="8ea08a8f48353b8713319930e8fc4efdd0829a55d5030e1296de80c6cc1b4bdbbef7f0266a2f7e07250460d86609e28115e94eb9d2f67f5e1e17ae1bc7a1ce9ec7181c8320c9b377172ab58055eb767a4ee21ebaa931f3315879a1bb80e151b848f0dabf340ce08df8fea271361f3ee545e484759445bc1e95a8ea7986040d601798a21bfcc43e4fb16e42f7541883e6a307a3967f51", 0x96, 0xf9a1}, {&(0x7f00000006c0)="6c15b2f9638d994e4dbe519d4e12db535cd058412035de120509414bf4e0122e498353da8a9be910ec936c1caf14ca78f101dc7be86a7c30b621a7537e6b2ffb8da49c1734582976ab874184db1de36ff09ee0ea2686ccf70953cd9f905680c1ca42bf", 0x63, 0x200}, {&(0x7f0000000740)="02edf86b1e4f3d56341ea9ebcf33c0ec65e7da8e78b06b6eabb5809d1b64b45d61b7e81d67a14dc215a5430ba0f6bd219b580f4e142284186001e8e7fb0d94be4b8b3e96aee9df49996c3394c0a9713cba07d176de7fbedfe446d1d36d75f97778afc00c0dd540e9fedd4209371bda23dbbb3bccc0d538478d108fed06857c4d6359fb940866708e900b2fc42890c82e34a565d843cbcf86b916b3419c0a0c9c98394654635062d24d3780098816cdbf5896b02bd80c791497a8a3314bc1ea851b74ca934eeca715d26b18335800e359b0194b1db6dee764866d3bff7718ffa2c3643140c4c9243a59", 0xe9, 0x5}], 0x2900009, &(0x7f0000000900)={[{@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}], [{@audit='audit'}, {@subj_role={'subj_role', 0x3d, 'vmnet0md5sum'}}, {@subj_type={'subj_type', 0x3d, 'md5sum'}}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f00000009c0)=0x100) r2 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x1, 0x2) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/mls\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000020c0)={&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x2, 0x0, 0x4, {0xa, 0x4e22, 0xfffffffffffffffa, @local, 0x7}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b00)="53344115c2546db7fd34407068060246691082e3065dd0251b7aa82fc7eb2ea69b224c1e1b022014b18c8739410722597aa8e6b3a4aef347f6fd74017aea6f2de2578beeee5081372f22856fb3db307eabf94cecfd3edb94b04da0bed0b63d4b1bc548ef937c8c62366ae86b53221c87765054fbdd96bc52c04c5d388d3dd40097be68d348b9c89e5677c388c8f331736886983225b83b0f5777123f6b524c45c410cf4f88069de5c975cc58d1e84fbd", 0xb0}, {&(0x7f0000000bc0)="ce14e42a416b9f30756435580409473922d81acd3f2ece30b9127656142124c6e64876402703012467fdf18ae9f35865ec0437d04b33fe9b058e7c9998acde75df7f324c392f5f9565332e0c4f98eedef756654750057da200776e94f7140891a3ccaa71d4594bf65616ab11a23d26311d3b16abe5479f930830b0d229b430e198aa5a99cffd90d520a6759ce303ece4a1bb7625d2c6b4dc58474bbddda2dccf039dae5d8e0d700c844cf6e46799851d28a7390a9c6ae8952dce60a344d09812ab488f1095c9a6f8797782e644183e7e89a1426eff1d90d2174f407e700aa45b000c8e0d2cefb84a11c048fcba8935", 0xef}], 0x2, &(0x7f0000000d00)=[{0xa8, 0x0, 0x45, "07af96ebc3529aebd1718a9ec3ea1ba7bdf325a0e75f01e01f5204b6e3a035cf1d09e9fd870a5a92095309899d381f8b0f0538a4cefbfd5ff8223899a13dad596d4e00595aa07df23d01359a445ff9f86bcbdf8f91cf9c0fedbc584e8d8116ac353d5bc8c809ee79698b37eee0e007773a1f322474040f920e9ac21ce9f54c9b6899d4e72cbc07eadd2488946049da48b691c21a79c439ba"}, {0xe8, 0x0, 0x6, "945a6f5994cb37061a76ca5023fb1111e4f191570b665ac24de1748a4e3c4e781b682485785f251712175d18fd073f661db62ead69a3c12150e039809adc61edfef22338948a65fd91914d01bf6e61c8959249518ec63d4f7428feecf0c7a7b4d621432fa46a9461bb8f5c612559a05d4f9e296750b5d055baddddc1df7291f812ef0336a4b2c22c7d8b92f3b7a0cc8e85dc31b64fa8b009ccdbd27dcfac8711a8375d5d090a55d70b62a3ebee83716a3c9d8860f7864767095a0782931d09c45b9af473bb1007af1e32bc84e58620f36f5f34e296"}, {0xb0, 0x100, 0x800, "00057b9ab42b13933301bf0d74df3ff4cd85d91ffc083be979291611f9e186272c71424cc5fd6819a394d8894d7572b9b38bb1d5a0e5d1b4a81aee38e41b1019a387be3cc9e0c0a5b9a3f8209bf17a74a939a33a315da6c5aa1b480deb26bb7048b560884638a152f77186ae1d7ddf4dd29fad9a5d67501adaead898bf9c103e979930f8ae1cd3ae5bf874f4d158602dd1ffc97d3a41d47df7e95ebc"}, {0x10, 0x107, 0xffffffffffffffc1}, {0x58, 0x101, 0x811, "a5a4cf52ff94dad27228aa71e985e9c0c47b986954dd9b1b7a8935bc57990033411c262663b64ab26f868a21002860dbfbe357b8f1a81df29d3bdbfde9fb8254759b2f59b3"}, {0x50, 0x117, 0xffffffffffff8001, "2852705123e18284c2042dd4a4d37698142435cccca2fcbacd4c8df427df7a9def453c1f136d750af14d5107bb0211e8d5eb2571f2225aa0f9aaaf157c"}], 0x2f8}, 0x8080) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:41 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000240)=""/68) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="f380660882000000000000002a60d431098a5a57a6fe04507e52a96035af53a4f071885e77e6e8187b678159840baf586d8f3ef41cdc8f7ec8620752703008197e002c75b97607ff481d40c1c8423cbb112b06ba26d9bc16a7c87e64c883eaca7531f6dc1a5fb961ee82d038c0b79c44f5040c859afa771647aefb1e50ddb34a542f15948d3cdca96fab9126762aa6b4925917dd6ae7622dcc821d3cf332097ed243949a6328acfc08d95ddde28ff83958de21d503123f9df2a68c080f893f4a3bb88f4abb75f5995184c7f7981598c76f88e3c9af4c221f251d54", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 23:11:41 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 273.773409] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.781103] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 273.788385] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 273.797188] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 273.804536] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 273.811811] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:41 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000000)=0xff) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) r2 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00?\x00', 0x19, 0x2, 0x208, [0x20000180, 0x0, 0x0, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x5, 0x0, 0x0, 'veth0_to_team\x00', 'dummy0\x00', 'dummy0\x00', 'syzkaller1\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {{{0xb, 0x0, 0x0, 'syzkaller1\x00', 'gretap0\x00', 'vlan0\x00\x00\x00\x00\xff\xff\xff\xe6\x00', 'dummy0\x00', @link_local, [], @remote, [], 0x70, 0x70, 0xa8}}, @arpreply={'arpreply\x00', 0x10, {{@link_local}}}}]}]}, 0x280) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clock_getres(0x6, &(0x7f00000000c0)) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x3, 0x3c58c25e, 0x4, 0x0, 0x7}) pread64(r2, 0x0, 0x1f8, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) [ 273.842869] 9pnet: Insufficient options for proto=fd [ 273.861038] 9pnet: Insufficient options for proto=fd 23:11:41 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7757640e708f", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:41 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e73afb64084a6293d66642c", @ANYRESHEX=r0, @ANYBLOB="2c608466646e6f00a2f4130e00000000000083228c", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0xa0d, 0x0, 0x1}, {0xfe3, 0x0, 0x1}, {0x207, 0x0, 0x7}, {0x77f, 0x0, 0xbc2}, {0x3aa, 0x0, 0xb0}]}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xffffffffffff6c78, 0x4) accept$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000140)=0x1f4a8cf72f4f1c92) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x1, 0x2) [ 273.947188] 9pnet: Insufficient options for proto=fd 23:11:41 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x4, 0x3ff, 0x3, 0x3, 0x9, 0x10001}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000080)) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 273.988451] 9pnet: Insufficient options for proto=fd [ 274.033705] 9pnet: Insufficient options for proto=fd 23:11:42 executing program 4 (fault-call:2 fault-nth:17): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:42 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1422, 0x4000) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) renameat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') truncate(&(0x7f0000000080)='./file0\x00', 0x10000) 23:11:42 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 274.101051] 9pnet: Insufficient options for proto=fd [ 274.174832] 9pnet: Insufficient options for proto=fd [ 274.188703] FAULT_INJECTION: forcing a failure. [ 274.188703] name failslab, interval 1, probability 0, space 0, times 0 [ 274.216313] CPU: 1 PID: 12915 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 274.223381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.232938] Call Trace: [ 274.235563] dump_stack+0x138/0x19c [ 274.239201] should_fail.cold+0x10f/0x159 [ 274.243433] should_failslab+0xdb/0x130 [ 274.247412] __kmalloc_track_caller+0x2ef/0x790 [ 274.252137] ? vfs_kern_mount.part.0+0x5e/0x3d0 [ 274.256795] ? do_mount+0x417/0x27d0 [ 274.260602] ? SyS_mount+0xab/0x120 [ 274.264220] ? save_trace+0x290/0x290 [ 274.268019] ? debug_check_no_obj_freed+0x2aa/0x7b7 [ 274.273101] ? parse_opts.part.0+0x83/0x2e0 [ 274.277415] kstrdup+0x3a/0x70 [ 274.280599] parse_opts.part.0+0x83/0x2e0 [ 274.284842] ? p9_fd_show_options+0x1a0/0x1a0 [ 274.289346] ? check_preemption_disabled+0x3c/0x250 [ 274.294361] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 274.299823] ? p9_idpool_create+0x40/0x120 [ 274.304434] p9_fd_create+0x86/0x340 [ 274.308253] ? parse_opts.part.0+0x2e0/0x2e0 [ 274.312709] ? __raw_spin_lock_init+0x2d/0x100 [ 274.317287] p9_client_create+0x64e/0x1130 [ 274.321749] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 274.327285] ? __kmalloc_track_caller+0x375/0x790 [ 274.332125] ? __lockdep_init_map+0x10c/0x570 [ 274.336608] ? lockdep_init_map+0x9/0x10 [ 274.340658] ? __raw_spin_lock_init+0x2d/0x100 [ 274.345236] v9fs_session_init+0x1dc/0x1590 [ 274.349555] ? check_preemption_disabled+0x3c/0x250 [ 274.354575] ? v9fs_show_options+0x730/0x730 [ 274.359309] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 274.364780] ? v9fs_mount+0x5e/0x870 [ 274.368498] ? rcu_read_lock_sched_held+0x110/0x130 [ 274.373623] ? kmem_cache_alloc_trace+0x626/0x790 [ 274.378663] ? free_pages+0x46/0x50 [ 274.382297] v9fs_mount+0x7d/0x870 [ 274.385952] mount_fs+0x9d/0x2a7 [ 274.389310] vfs_kern_mount.part.0+0x5e/0x3d0 [ 274.393889] do_mount+0x417/0x27d0 [ 274.397420] ? copy_mount_options+0x5c/0x2f0 [ 274.401822] ? rcu_read_lock_sched_held+0x110/0x130 [ 274.406838] ? copy_mount_string+0x40/0x40 [ 274.411144] ? copy_mount_options+0x1fe/0x2f0 [ 274.415651] SyS_mount+0xab/0x120 [ 274.419107] ? copy_mnt_ns+0x8c0/0x8c0 [ 274.423027] do_syscall_64+0x1eb/0x630 [ 274.427035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.431911] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.437107] RIP: 0033:0x458c29 [ 274.440305] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 274.448107] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 274.455365] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 274.462710] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 23:11:42 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) r1 = dup2(r0, r0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f00000001c0)=0x800) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x6, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="c444d047ef9da94f5c3907cf5887b4ee3d091289c29bd425cf0ba161e44c959a40d3f0400433d6778601ca0c9152ca8ce2223d0cde9bc8a49dd67ee2b6bf176f0c0fe4dabf2a8fb190cb391296cf69fd642f33eeecec32260637c7", 0x5b, 0x100000000}], 0x2000008, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@nodiscard='nodiscard'}, {@nomblk_io_submit='nomblk_io_submit'}, {@commit={'commit', 0x3d, 0xfffffffffffffffc}}, {@nomblk_io_submit='nomblk_io_submit'}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@nouid32='nouid32'}, {@usrquota='usrquota'}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/fuse\x00'}}]}) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12a}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x800000000002) 23:11:42 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:42 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='t1ans5fd,rfdno<', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2eef35d906573100"]) 23:11:42 executing program 4 (fault-call:2 fault-nth:18): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 274.469987] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 274.477257] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 274.487183] 9pnet: Insufficient options for proto=fd [ 274.568983] 9pnet: Insufficient options for proto=fd [ 274.583681] FAULT_INJECTION: forcing a failure. [ 274.583681] name failslab, interval 1, probability 0, space 0, times 0 [ 274.615117] CPU: 1 PID: 12932 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 274.622352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.622358] Call Trace: [ 274.622377] dump_stack+0x138/0x19c [ 274.622395] should_fail.cold+0x10f/0x159 [ 274.622419] should_failslab+0xdb/0x130 [ 274.647373] kmem_cache_alloc_trace+0x2ec/0x790 [ 274.652080] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 274.657632] ? p9_idpool_create+0x40/0x120 [ 274.661879] p9_fd_create+0x137/0x340 [ 274.665698] ? parse_opts.part.0+0x2e0/0x2e0 [ 274.670127] ? __raw_spin_lock_init+0x2d/0x100 [ 274.674719] p9_client_create+0x64e/0x1130 [ 274.674740] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 274.674754] ? __kmalloc_track_caller+0x375/0x790 [ 274.674764] ? __lockdep_init_map+0x10c/0x570 [ 274.674775] ? lockdep_init_map+0x9/0x10 [ 274.689400] ? __raw_spin_lock_init+0x2d/0x100 [ 274.689426] v9fs_session_init+0x1dc/0x1590 [ 274.689446] ? check_preemption_disabled+0x3c/0x250 [ 274.689456] ? v9fs_show_options+0x730/0x730 23:11:42 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="74723e6e7361acf3980ef646dde1d4", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 274.716803] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 274.722315] ? v9fs_mount+0x5e/0x870 [ 274.726131] ? rcu_read_lock_sched_held+0x110/0x130 [ 274.731250] ? kmem_cache_alloc_trace+0x626/0x790 [ 274.736107] ? free_pages+0x46/0x50 [ 274.739745] v9fs_mount+0x7d/0x870 [ 274.743577] mount_fs+0x9d/0x2a7 [ 274.747057] vfs_kern_mount.part.0+0x5e/0x3d0 [ 274.751571] do_mount+0x417/0x27d0 [ 274.755124] ? copy_mount_options+0x5c/0x2f0 [ 274.759545] ? rcu_read_lock_sched_held+0x110/0x130 [ 274.764586] ? copy_mount_string+0x40/0x40 [ 274.768828] ? copy_mount_options+0x1fe/0x2f0 [ 274.773322] SyS_mount+0xab/0x120 [ 274.776775] ? copy_mnt_ns+0x8c0/0x8c0 [ 274.780682] do_syscall_64+0x1eb/0x630 [ 274.784569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.789436] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.794635] RIP: 0033:0x458c29 [ 274.797826] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 274.805539] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 274.812901] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:42 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x210101, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800) pread64(r2, &(0x7f0000000340)=""/250, 0x50c, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) 23:11:42 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 23:11:42 executing program 3: mknod(&(0x7f00000003c0)='./file0\x00', 0x7e, 0x1000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400000) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000240)="217922b2c49819bf881d8aef19b790e675e7242a81f957c2ffa703a7ed7bdea85814afa65b263000bae46e044d78c828194ac22b3966e3b9bb4ae01afd54cf1948db2480eb0c7658b560f8390a0d0c63873aeb90e296cf", 0x57}], 0x231, &(0x7f00000002c0)=[@rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1]}], 0x48, 0x880}], 0x1, 0x20000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) fallocate(r1, 0x10, 0x8, 0xe82b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 23:11:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 274.812907] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 274.812912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 274.812917] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:42 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c776664ee6f3d6ab9a7f966d55c9c9263cbe4c56bf11c9d7828ad0878749fac5768b323f0130549627a03e52a2d0312da5579db2f2f9bce50d160e1f8c1ee35f62f303cb2da214a82bdfc0d64ca2f47cb0eba315ce20eb81d6d5d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 23:11:42 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 274.869444] 9pnet: Insufficient options for proto=fd [ 274.964935] 9pnet: Insufficient options for proto=fd [ 274.994225] 9pnet: Insufficient options for proto=fd [ 275.093006] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 23:11:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='fuse\x00', 0x804c02, &(0x7f0000000640)=ANY=[]) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000400)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000580)) r2 = dup3(r0, r0, 0x8000000000080000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, &(0x7f0000000300)="03e061e8a036fc32c469f85534c762b0ee5eef225b27e301cdac2b289923b062687d04b4f5635074736d5c0abe74aff4232a1ae965d0dcff22fba2060059179a27374a15857fdd1f17a4e9517cee64ba1c1fae99c587f01fb5ab9479b63931b6a083250202dc61ed827fb418fc5026f088fd8cfe40df36d16c1d56e4296f36328c20257c4cbce55536511187d9342b85945ab0260506479be4434f0f0ba81802e6715375cb147c1cd9364853d6a6e307960f438745ea301121eeffaa8a7d32d8cbd68ac741bf183af6a7f72daff0cee7b37f5686fce73f1b3a64c82b45656543f9a8144ee6e22227170a", &(0x7f0000000480)=""/176}, 0x18) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f0000000180)={0x3, &(0x7f0000000640)=""/107, &(0x7f00000006c0)=[{0x100, 0x1000, 0x8, &(0x7f00000020c0)=""/4096}, {0x9, 0xd7, 0x3, &(0x7f00000007c0)=""/215}, {0x40, 0xfc, 0x1f, &(0x7f00000008c0)=""/252}]}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000200)={0x9, 0x2, "aa7d37f17ff53f419dde9b0ffad86e1b3477c1455ea202e36d376e13d65a590d", 0x8, 0x7fffffff, 0x4, 0x7f, 0x101}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 23:11:43 executing program 4 (fault-call:2 fault-nth:19): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000003c0)={0xf5, 0x0, [0x7fffffff, 0x102, 0x3, 0x3]}) socket$isdn_base(0x22, 0x3, 0x0) personality(0xc020013) uname(&(0x7f00000000c0)=""/176) accept4$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000280)=0x6e, 0x80000) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x82000, 0x0) fallocate(r0, 0x0, 0x9, 0x100) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:43 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141002, 0xfffffffffffffffd) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="631c9cccd6f5660344fa14ec05280e9974ed274e7fffb2b0e3e443222d0f59c2c7fb4c7a333aa9f2f1346a55d79c9d6731e1a6ebf8a5dadc6819b683d59754ccc76aec0851d9b7efe9b1e59d6f90ab810b38ad5ba618eeb4a57cee5eb4b06a8f36ae45360108e651887b5808bbaea6c9db0d280e9be26fb2df247bef2ae4377ae85e5c03130ce600a04eb4f34b1bb5577d834ff92087c5267ecac59cbf0ecd4e5f14bd58eea12d7a5b56833c9b01957f2f21c65974bc949520144fd3ea26a0cfbd2b235dd2", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:43 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x6) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="b900"]) [ 275.174514] FAULT_INJECTION: forcing a failure. [ 275.174514] name failslab, interval 1, probability 0, space 0, times 0 [ 275.185760] CPU: 0 PID: 12992 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 275.185762] 9pnet: Insufficient options for proto=fd [ 275.186659] 9pnet: Insufficient options for proto=fd [ 275.193505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.193511] Call Trace: [ 275.193535] dump_stack+0x138/0x19c [ 275.193553] should_fail.cold+0x10f/0x159 [ 275.193568] should_failslab+0xdb/0x130 [ 275.193580] kmem_cache_alloc_trace+0x4b/0x790 [ 275.193589] ? find_held_lock+0x35/0x130 [ 275.193605] p9_client_prepare_req.part.0+0x4d8/0xa90 [ 275.193622] p9_client_rpc+0x170/0x1190 [ 275.193636] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 275.193645] ? p9_conn_create+0x4c0/0x4c0 [ 275.193654] ? pipe_poll+0x263/0x2d0 [ 275.193664] ? generic_pipe_buf_confirm+0x10/0x10 [ 275.193676] ? p9_conn_create+0x3c0/0x4c0 [ 275.193685] ? p9_fd_create+0x245/0x340 [ 275.193697] ? parse_opts.part.0+0x2e0/0x2e0 [ 275.220984] p9_client_create+0x9a3/0x1130 [ 275.229116] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 275.229130] ? __kmalloc_track_caller+0x375/0x790 [ 275.229143] ? __lockdep_init_map+0x10c/0x570 [ 275.247459] ? lockdep_init_map+0x9/0x10 [ 275.247470] ? __raw_spin_lock_init+0x2d/0x100 [ 275.247489] v9fs_session_init+0x1dc/0x1590 [ 275.274374] ? check_preemption_disabled+0x3c/0x250 [ 275.274390] ? v9fs_show_options+0x730/0x730 23:11:43 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:43 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) fcntl$getown(r0, 0x9) [ 275.274401] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 275.274413] ? v9fs_mount+0x5e/0x870 [ 275.288038] 9pnet: Insufficient options for proto=fd [ 275.288834] ? rcu_read_lock_sched_held+0x110/0x130 [ 275.288849] ? kmem_cache_alloc_trace+0x626/0x790 [ 275.288863] ? free_pages+0x46/0x50 [ 275.288882] v9fs_mount+0x7d/0x870 [ 275.320875] mount_fs+0x9d/0x2a7 [ 275.330122] vfs_kern_mount.part.0+0x5e/0x3d0 [ 275.330139] do_mount+0x417/0x27d0 [ 275.330147] ? copy_mount_options+0x5c/0x2f0 [ 275.330158] ? rcu_read_lock_sched_held+0x110/0x130 23:11:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x410008) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="e2cab7ffe4d7b5bc7ef6d4ffb7c0f2a475639c760c1b7be805594a3881ce5c1cba16e43b0c11cb9a5f77617a02abb6b85f7b10a3800ba1a74985a27a44a431c368d566fb47ed8e66c9b5500ef652c69bda78a2f1b852e08ed09377fe5e43741e2b7f6f8ed9ef7f9752b702d739ca638885cf3188536de672568f158816bb6a94585ebbabad834ff75215966087d8fc452292b5a9101743711834d0f41933a188cbf8927a17992c47be36a34531455256d75477d72cb3bac2759f6d234a081f4d68c10f30c345772872518e72c6e6166f11826f76657519029e9485c30bc0a4a85978bdb2fd7ef0e09d130cacdecb3bee24e155e97660ede41a8f") clone(0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x3102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_trie\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x0, 0x6) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") read(r2, &(0x7f0000000040)=""/230, 0x20000126) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') pread64(r1, 0x0, 0x0, 0x800000000002) recvfrom$ax25(r1, &(0x7f0000000040)=""/168, 0xa8, 0x10000, &(0x7f0000000100)={{0x3, @bcast, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) 23:11:43 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 275.330170] ? copy_mount_string+0x40/0x40 [ 275.330184] ? copy_mount_options+0x1fe/0x2f0 [ 275.330195] SyS_mount+0xab/0x120 [ 275.330203] ? copy_mnt_ns+0x8c0/0x8c0 [ 275.330214] do_syscall_64+0x1eb/0x630 [ 275.330222] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.330240] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.330250] RIP: 0033:0x458c29 [ 275.340440] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.340452] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 23:11:43 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x9, 0x9, 0x55b, 0x10000, 0x3}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x8, 0xffff}, 0x8) ioctl$void(r0, 0x0) write$P9_RLERROR(r0, &(0x7f0000000240)={0x1e, 0x7, 0x2, {0x15, 'self#bdev#\'wlan0.ppp0'}}, 0x1e) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "20e5ceb25a6bbb51ce0e89e66200b2d6"}, 0x11, 0x3) fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "2a468132f1ac5349e3d5b93c7b091396631914cb"}, 0x15, 0x1) 23:11:43 executing program 4 (fault-call:2 fault-nth:20): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 275.340457] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 275.340463] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 275.340474] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 275.340480] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 275.340500] 9pnet: Couldn't grow tag array [ 275.497095] FAULT_INJECTION: forcing a failure. [ 275.497095] name failslab, interval 1, probability 0, space 0, times 0 [ 275.518869] tmpfs: No value for mount option 'DCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.518869] /32 link BROADCAST [ 275.556018] CPU: 1 PID: 13017 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 275.617388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.617394] Call Trace: [ 275.617411] dump_stack+0x138/0x19c [ 275.617427] should_fail.cold+0x10f/0x159 [ 275.629401] should_failslab+0xdb/0x130 [ 275.629414] __kmalloc+0x2f3/0x7a0 [ 275.629428] ? __lockdep_init_map+0x10c/0x570 [ 275.637309] ? __lockdep_init_map+0x10c/0x570 [ 275.637328] ? p9_fcall_alloc+0x1d/0x90 [ 275.637339] p9_fcall_alloc+0x1d/0x90 [ 275.644851] p9_client_prepare_req.part.0+0x7b5/0xa90 [ 275.644870] p9_client_rpc+0x170/0x1190 [ 275.644885] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 275.654107] ? p9_conn_create+0x4c0/0x4c0 [ 275.654120] ? pipe_poll+0x263/0x2d0 [ 275.654132] ? generic_pipe_buf_confirm+0x10/0x10 [ 275.662067] ? p9_conn_create+0x3c0/0x4c0 [ 275.662080] ? p9_fd_create+0x245/0x340 [ 275.662091] ? parse_opts.part.0+0x2e0/0x2e0 [ 275.662105] p9_client_create+0x9a3/0x1130 [ 275.662121] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 275.671376] ? __kmalloc_track_caller+0x375/0x790 [ 275.671389] ? __lockdep_init_map+0x10c/0x570 [ 275.671402] ? lockdep_init_map+0x9/0x10 [ 275.671410] ? __raw_spin_lock_init+0x2d/0x100 [ 275.671424] v9fs_session_init+0x1dc/0x1590 [ 275.671442] ? check_preemption_disabled+0x3c/0x250 [ 275.681629] ? v9fs_show_options+0x730/0x730 [ 275.681642] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 275.681654] ? v9fs_mount+0x5e/0x870 [ 275.681664] ? rcu_read_lock_sched_held+0x110/0x130 [ 275.681674] ? kmem_cache_alloc_trace+0x626/0x790 [ 275.681687] ? free_pages+0x46/0x50 [ 275.690222] v9fs_mount+0x7d/0x870 [ 275.690238] mount_fs+0x9d/0x2a7 [ 275.690253] vfs_kern_mount.part.0+0x5e/0x3d0 [ 275.690267] do_mount+0x417/0x27d0 [ 275.690277] ? copy_mount_options+0x5c/0x2f0 [ 275.698846] ? rcu_read_lock_sched_held+0x110/0x130 [ 275.698861] ? copy_mount_string+0x40/0x40 [ 275.698876] ? copy_mount_options+0x1fe/0x2f0 [ 275.698889] SyS_mount+0xab/0x120 [ 275.707746] ? copy_mnt_ns+0x8c0/0x8c0 [ 275.707762] do_syscall_64+0x1eb/0x630 [ 275.707772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.707789] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.718254] RIP: 0033:0x458c29 [ 275.718259] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.718271] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 275.718278] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 275.718285] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 275.718293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 275.780944] tmpfs: No value for mount option 'DCAST [ 275.780944] /32 link BROADCAST [ 275.780944] /32 link BâÊ·ÿä×µ¼~öÔÿ·Àò¤ucœv {èYJ8Î\ºä; Ëš_waz«¶¸_{£€ ¡§I…¢zD¤1ÃhÕfûGíŽfɵPöRÆ›Úx¢ñ¸RàŽÐ“wþ^Ct+oŽÙï—R·×9Êcˆ…Ï1ˆSmærVˆ»j”X^»«­ƒO÷R–`‡ØüE"’µ©Cq4Ðô3¡ˆËø’z™' [ 275.782980] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 275.909317] 9pnet: Couldn't grow tag array 23:11:43 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e533dd36b6219e77bbeaf602c66e83fef97e0312eda765ee2a591e1efe0cb718318c96d4d54f3bb616440df68fcff2a0f4fcfa6ad184152eff55b0af7d0f0f60563909fdb81bb0e1aae9ad8fad386f6010000009228ae6eb28a7f536e0cc96bb72729a7dc1e40bd113c76edb3a4c11ed361f0235c42a187d10400000000000000afed58a376e1304de2c4e8a7", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303031303030303065a9b2128773c308fd7b28a00f052e3030303834303030004f757365725f69643dd68f43d692f1e2b67d6a8c5b2b9f98120cb833542ef2aebb5cc693573ebcd8d4120f1135ffa6d11d0f36c23015848daa3c0d40c7e7a87f244e2e761e37478b7887415ac52bbaf1c015c27a87186f7e3dcd9c1f7b46cb458b7118a0317ba62e2208e9842bf82b90ab1f6dc0308c0bfcaf99a491ee1f6158658d877d4fde10f0", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x101, 0x200) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000340)=0x1) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:43 executing program 0: mknod(0x0, 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:43 executing program 4 (fault-call:2 fault-nth:21): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:43 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x1d5) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x115000, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000001c0)=0x3, 0x4) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000000)) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type'}}, {@subj_role={'subj_role', 0x3d, 'em1vboxnet1'}}, {@euid_gt={'euid>', r2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r2}}]}}) 23:11:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000080)=""/190) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) 23:11:43 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0xa00, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x8, 0x0, [{0x80000001, 0x6, 0x4, 0x2, 0x0, 0x1f, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x3f, 0x3ff, 0x10001}, {0xc0000007, 0x5, 0x4, 0x1c8c00000000000, 0xffffffffffffffff, 0x5, 0x100}, {0x6, 0x7, 0x4, 0x7f, 0x10001, 0x3, 0x9}, {0x0, 0x100000000, 0x3, 0x4, 0x3ff, 0x7, 0x100}, {0x80000000, 0x80000000, 0x1, 0x5, 0x2, 0x3f, 0x1}, {0x80000007, 0x3, 0x4, 0x17b52267, 0xe1, 0xfffffffffffff000, 0x80000000}, {0x80000019, 0x10001, 0x6, 0x7, 0xf5, 0xfffffffffffffffb, 0xfffffffffffffff7}]}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x800, 0xe2, 0x7]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x6]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0x4, 0x9, 0x9, 0x1]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3ff, 0x0, 0x10000, 0xffff, 0x0]}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x804) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x500, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8004) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\a\x00\x00\x00n\x00=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:44 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xd79e, 0x284002) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000240)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, 'wlan0-\xbe!^}\\^'}}]}}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x4, 0x0, 0x10, &(0x7f0000ffa000/0x2000)=nil, 0x1d13}) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x100, 0x0) [ 276.012432] FAULT_INJECTION: forcing a failure. [ 276.012432] name failslab, interval 1, probability 0, space 0, times 0 23:11:44 executing program 0: mknod(0x0, 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 276.069902] 9pnet: Insufficient options for proto=fd 23:11:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000040)=""/119) clone(0x200200, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 276.116128] CPU: 0 PID: 13052 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 276.123308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.123315] Call Trace: [ 276.123336] dump_stack+0x138/0x19c [ 276.123355] should_fail.cold+0x10f/0x159 [ 276.123369] should_failslab+0xdb/0x130 [ 276.123379] __kmalloc+0x2f3/0x7a0 [ 276.123390] ? __lockdep_init_map+0x10c/0x570 [ 276.123407] ? __lockdep_init_map+0x10c/0x570 [ 276.123418] ? p9_fcall_alloc+0x1d/0x90 23:11:44 executing program 0: mknod(0x0, 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 276.123432] p9_fcall_alloc+0x1d/0x90 [ 276.123443] p9_client_prepare_req.part.0+0x7b5/0xa90 [ 276.123461] p9_client_rpc+0x170/0x1190 [ 276.123476] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 276.123485] ? p9_conn_create+0x4c0/0x4c0 [ 276.123494] ? pipe_poll+0x263/0x2d0 [ 276.123505] ? generic_pipe_buf_confirm+0x10/0x10 [ 276.123517] ? p9_conn_create+0x3c0/0x4c0 [ 276.123527] ? p9_fd_create+0x245/0x340 [ 276.123541] ? parse_opts.part.0+0x2e0/0x2e0 23:11:44 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='9p\x00', 0x8020c1, &(0x7f00000000c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq', 0x3d, 0x1151}}], [{@dont_hash='dont_hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, '!'}}]}}) [ 276.147421] p9_client_create+0x9a3/0x1130 [ 276.147442] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 276.147454] ? __kmalloc_track_caller+0x375/0x790 [ 276.147470] ? __lockdep_init_map+0x10c/0x570 [ 276.163976] ? lockdep_init_map+0x9/0x10 [ 276.163986] ? __raw_spin_lock_init+0x2d/0x100 [ 276.164000] v9fs_session_init+0x1dc/0x1590 [ 276.164018] ? check_preemption_disabled+0x3c/0x250 [ 276.172997] ? v9fs_show_options+0x730/0x730 [ 276.173010] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 276.173020] ? v9fs_mount+0x5e/0x870 23:11:44 executing program 4 (fault-call:2 fault-nth:22): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 276.173033] ? rcu_read_lock_sched_held+0x110/0x130 [ 276.183146] ? kmem_cache_alloc_trace+0x626/0x790 [ 276.183160] ? free_pages+0x46/0x50 [ 276.183176] v9fs_mount+0x7d/0x870 [ 276.183189] mount_fs+0x9d/0x2a7 [ 276.183203] vfs_kern_mount.part.0+0x5e/0x3d0 [ 276.183215] do_mount+0x417/0x27d0 [ 276.183225] ? copy_mount_options+0x5c/0x2f0 [ 276.200711] ? rcu_read_lock_sched_held+0x110/0x130 [ 276.200727] ? copy_mount_string+0x40/0x40 [ 276.200743] ? copy_mount_options+0x1fe/0x2f0 [ 276.200757] SyS_mount+0xab/0x120 [ 276.200765] ? copy_mnt_ns+0x8c0/0x8c0 [ 276.200780] do_syscall_64+0x1eb/0x630 [ 276.209007] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.209029] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.209037] RIP: 0033:0x458c29 [ 276.209046] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 [ 276.217781] ORIG_RAX: 00000000000000a5 [ 276.217788] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 276.217794] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:44 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getpeername$tipc(r0, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10) syz_open_dev$adsp(&(0x7f0000000540)='/dev/adsp#\x00', 0x3, 0x24000) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000080)={0x3, 0x8c, "7f65b6872ce3824021fa45c760efc98549f38adad1db3183df23ef37fb2006ef0b3f15fad547da18812d141838feb73fdc5ad9024e4c26590549362ef75cebf87cd04f88befda8b6a6790cc7aaf571105e8fae860ef3c72a088994d43383efaf8dfee315ff7d55ec302e276df49266d38e1f9d3afb594541c9c44cc1365f3b87bb897c169bc402b993028977"}) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) sendto(r0, &(0x7f0000000040)="bc2c3c03be698a5cb840", 0xa, 0x8800, &(0x7f0000000240)=@xdp={0x2c, 0x2, r1, 0x16}, 0x80) mount$9p_fd(0x0, &(0x7f0000000f80)='./file0\x00', &(0x7f0000000e80)='9p\x00', 0x0, &(0x7f0000000f40)=ANY=[]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) accept$packet(r2, 0x0, &(0x7f00000002c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000480)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @ib={0x1b, 0xd25, 0xb4, {"99ed49eb096af9fbaeef5d3975db7a74"}, 0x0, 0x0, 0x10000}}}, 0x90) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000d00)=0xe8) syz_mount_image$gfs2(&(0x7f0000000640)='gfs2\x00', &(0x7f0000000680)='.\x00', 0x7, 0x7, &(0x7f0000000a80)=[{&(0x7f00000006c0)="7bcdaec93fbf28639029474555d64c391683e7d1d0bdcfede864d4d9f2c79c813c5c54a278e86031438d7b35f06f19658a8151f3763f2e87f7d8f8efa2980f145aefac23b620dbe72c7c819bddd80c40798d7e9ab3ad8122c4a14049e34298f8dfe13f470cdcaf82fb08467b53f4e6e5142d8c9309886d9cbf5398002bea943ae14981a8691eb8b98f4f26c3ffc036632345899fb2f84a3563336cb990c0b6d4d270eb0415cc1fbd9e", 0xa9, 0x59cd60f1}, {&(0x7f0000000780)="309fe5dc31d22fd203b6547897801657a1ddff6335b0aa4508bb7e3d269c82072e34449197253323f8d6887a1873305e775b0e50c9c338913f1d85452a57b933bebcfa172ee503ac26e891293ac5256924c1cc5f519c45711859", 0x5a}, {&(0x7f0000000800)="7e9c833c9377936cafdc966f457b43bdc93a9f3d7023d182a96e168d040649148946f0e0ca9c6efd1a78a2f95eb4d4e226cd2c6b0cd775448ec83e3cc7e33e8989aefa846777dae11fa1d08c3ac3ded63b690a9fda3c054c9cd69b8257ccfb083aee77ed3e86ea872dbdca173209083eefc51d2a54132d69fe49dc9c1bbdb2b9", 0x80, 0x401}, {&(0x7f0000000880)="3a69942a9d2dedb965a29eeec7e457dd1ac33be350e5ff15421acb5de4c64f34209c60f73d875ff962a686fe48941bcebee6d7b80e5cd5083667b3446485d3bf989b316852d346a76c3bfa924c6a7d146758c4e93842dbe0994b8594adb5b6daa2aeaafa0f658fca5c3123f238a9908063608160bb4d69ede6e041b13533ba046322aab942f60abaf477fdb01f3054d3df0a5df5034ad2a7", 0x98, 0xf890}, {&(0x7f0000000940)="d1f83efa382d5221b1be0121026605cc427d869502626f9d954a19adc838440ceb9022feb2ed3f24cbadcdb02d58b854740c949ba629516f73b42ecce81d13f7d6fa44e3696c31056973765aa093484b682580486c77bcf52344b5c57913a3cb483f74d29414cd7d9e1746bcd1d8b3", 0x6f, 0x8001}, {&(0x7f00000009c0)="df38aa27f0d6faa57a2a5cc1ae973d2211d937ba361935caec8b4710cc9521f91fff747faf09a0305961787b8dc1c6b6d90763460923bce1ba0805cb91dcd06e664bdc", 0x43, 0x4e}, {&(0x7f0000000a40)="fa9d381dbc871682841e958a2454", 0xe, 0x764}], 0x40, &(0x7f0000000d40)={[{@noquota='noquota'}, {@norgrplvb='norgrplvb'}, {@ignore_local_fs='ignore_local_fs'}, {@loccookie='loccookie'}, {@loccookie='loccookie'}, {@quota_on='quota=on'}], [{@audit='audit'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@seclabel='seclabel'}, {@euid_gt={'euid>', r4}}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x77, 0x62, 0x64, 0x63, 0x62, 0x37], 0x2d, [0x61, 0x32, 0x31, 0x39], 0x2d, [0x39, 0x8664b8fdf37ad117, 0x3d, 0x32], 0x2d, [0x7f, 0x65, 0x39, 0x73], 0x2d, [0x36, 0x39, 0x7c, 0x37, 0x7d, 0x0, 0x32, 0x65]}}}, {@uid_gt={'uid>', r5}}, {@dont_hash='dont_hash'}]}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000380)="63ec19bd01997932300758a34d066c57688a93789e4d590d6611dff9fbff75fa0ebf128f5dcb53ce1d04610d05c9c3c0a9cc756549cb07925f218d457e6659674f0fb3da8db6dd1d") [ 276.217799] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 276.217805] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 276.217811] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 276.231233] 9pnet: Couldn't grow tag array 23:11:44 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000300)={0xffffffffffffff9a, 0x0, 0x1, {0x7, 0x1d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2}}, 0xfffffffffffffed8) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000380)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:44 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 276.441556] FAULT_INJECTION: forcing a failure. [ 276.441556] name failslab, interval 1, probability 0, space 0, times 0 [ 276.473590] 9pnet: Insufficient options for proto=fd 23:11:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$llc(r1, &(0x7f00000004c0)={0x1a, 0x33f, 0x8, 0x6, 0x7fff, 0xc3b, @local}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@updsa={0x18c, 0x1a, 0x4, 0x70bd2a, 0x25dfdbfe, {{@in=@multicast2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e24, 0x3, 0x4e24, 0x4, 0xa, 0x80, 0xa0, 0x5c, r2, r3}, {@in=@multicast1, 0x4d2, 0x33}, @in=@empty, {0x800, 0x1, 0xb988, 0x9, 0xffffffff, 0x9d, 0x0, 0x5}, {0x8, 0xb2a02e2, 0x7, 0xab3b}, {0x5, 0x31ad, 0xde}, 0x70bd29, 0x34ff, 0xca7ee82eef5bf039, 0x0, 0x1, 0x4}, [@sec_ctx={0x50, 0x8, {0x49, 0x8, 0x1, 0x3ffc, 0x41, "d14fba02aa78568a00c73428ee3cdb58eda856c51fb5b9f1af6d36e7c8624b18e5ed4fb61733c9bc5ea661b81db5edeffb60eb385a83cdcfabc054aa091e266a85"}}, @proto={0x8, 0x19, 0x3f}, @lifetime_val={0x24, 0x9, {0x1ff, 0x1f, 0x4, 0x3}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd27, 0x70bd27, 0x70bd27, 0x70bd2c, 0x8, [0x3]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:44 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f000079df88)) msgsnd(r1, &(0x7f0000c40ff8)={0x1}, 0x8, 0x0) msgsnd(r1, &(0x7f00004adff7)={0x2}, 0x8, 0x0) msgctl$IPC_RMID(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dc8abb439681a2e8c4ce8df0b1ecbd1b4f0f48c6561d0045ff572cafd87d472f211000718978a451ee99c512c6d3412e1b5d02f5b3f2d7d3ae7993348bf69bcb3658f93825725734d71ceed654c13ad00873f148f2d42a3664216", @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3db7e67fe7f7241c1995ec6250156885f5be31337abf35", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$TCXONC(r0, 0x540a, 0x9) [ 276.552738] CPU: 0 PID: 13086 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 276.559800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.559808] Call Trace: [ 276.571865] dump_stack+0x138/0x19c [ 276.575529] should_fail.cold+0x10f/0x159 [ 276.579850] should_failslab+0xdb/0x130 [ 276.583842] kmem_cache_alloc_trace+0x2ec/0x790 [ 276.588525] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 276.593870] ? trace_hardirqs_on_caller+0x400/0x590 23:11:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f00000004c0)="0adc1f123c08d461a5319bf302372a721bfd5ef99d0629f2ccb76a96a49bc95340ff241a096793f9e41c0a0ad35f173897b96dc01e6c625383a476e49306e6b412fb21874afd84f3e6e8a996db421f3afd82fe7ae8a2d7e3f99c33eda42353773b05aabb587885efb95e1e87d614eb6c5bfd79f646e918499c2e0672defd47bd3319bd606285a26c617985be9545964f0706688b2ee52ee93354dc97f1d0e6ff928b9006e2a1ee66c013fb7188bc342e") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 276.599066] p9_client_prepare_req.part.0+0x814/0xa90 [ 276.599087] p9_client_rpc+0x170/0x1190 [ 276.599101] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 276.599112] ? p9_conn_create+0x4c0/0x4c0 [ 276.618560] ? pipe_poll+0x263/0x2d0 [ 276.622296] ? generic_pipe_buf_confirm+0x10/0x10 [ 276.627163] ? p9_conn_create+0x3c0/0x4c0 [ 276.631417] ? p9_fd_create+0x245/0x340 [ 276.635495] ? parse_opts.part.0+0x2e0/0x2e0 [ 276.640004] p9_client_create+0x9a3/0x1130 [ 276.644415] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 276.650235] ? __kmalloc_track_caller+0x375/0x790 [ 276.655184] ? __lockdep_init_map+0x10c/0x570 [ 276.660461] ? lockdep_init_map+0x9/0x10 [ 276.664516] ? __raw_spin_lock_init+0x2d/0x100 [ 276.669101] v9fs_session_init+0x1dc/0x1590 [ 276.673432] ? check_preemption_disabled+0x3c/0x250 [ 276.678446] ? v9fs_show_options+0x730/0x730 [ 276.682837] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 276.688368] ? v9fs_mount+0x5e/0x870 [ 276.692079] ? rcu_read_lock_sched_held+0x110/0x130 [ 276.697095] ? kmem_cache_alloc_trace+0x626/0x790 [ 276.702024] ? free_pages+0x46/0x50 [ 276.705753] v9fs_mount+0x7d/0x870 [ 276.709398] mount_fs+0x9d/0x2a7 [ 276.712789] vfs_kern_mount.part.0+0x5e/0x3d0 [ 276.717398] do_mount+0x417/0x27d0 [ 276.720935] ? copy_mount_options+0x5c/0x2f0 [ 276.725384] ? rcu_read_lock_sched_held+0x110/0x130 [ 276.730408] ? copy_mount_string+0x40/0x40 [ 276.734658] ? copy_mount_options+0x1fe/0x2f0 [ 276.739666] SyS_mount+0xab/0x120 [ 276.743188] ? copy_mnt_ns+0x8c0/0x8c0 [ 276.747067] do_syscall_64+0x1eb/0x630 23:11:44 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77a5bf6e6e3d09b552df3c4f8667a28969fd851599443651313dc36f90abbb5a2edb7d0a83fd766102584dca9d9e89ea49ffee1ef56748944614fd7cf3201c3de40d8f512562f6d29f723e183db5180a4f19a9cb3467a49724ffd562fc4f916bc8f5a7a05faa128aff0b1068fd20154de527e40d8620b1afc6d36ed806cd66d253a40c8b", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 276.749995] 9pnet: Insufficient options for proto=fd [ 276.750943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 276.750961] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 276.750969] RIP: 0033:0x458c29 [ 276.750975] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 276.750987] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 276.750992] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 276.750997] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 23:11:44 executing program 4 (fault-call:2 fault-nth:23): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 276.751002] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 276.751007] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 276.761448] 9pnet: Couldn't grow tag array [ 276.871883] 9pnet: Insufficient options for proto=fd [ 276.889492] FAULT_INJECTION: forcing a failure. [ 276.889492] name failslab, interval 1, probability 0, space 0, times 0 [ 276.907149] CPU: 0 PID: 13125 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 276.910668] 9pnet: Insufficient options for proto=fd 23:11:44 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="95003c1a47fb7d7afdbaa4f873f7d80fce2385d3090985367713e646517cd3c43bfcd1867bebc0b364e1c22926be16f6d9fa4e8c42b795e8eeb8aeb16d6411822f4cb6589c03e12ceeee1f5601f8c14b998d533d36ae91dfe3bac212e2866b57eefb62ddafb9e90b7d5a66"]) [ 276.914292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 276.914299] Call Trace: [ 276.914323] dump_stack+0x138/0x19c [ 276.914341] should_fail.cold+0x10f/0x159 [ 276.931435] should_failslab+0xdb/0x130 [ 276.939300] __kmalloc+0x2f3/0x7a0 [ 276.946870] ? __lockdep_init_map+0x10c/0x570 [ 276.951403] ? p9_fcall_alloc+0x1d/0x90 [ 276.955417] p9_fcall_alloc+0x1d/0x90 [ 276.959352] p9_client_prepare_req.part.0+0x73c/0xa90 [ 276.964652] p9_client_rpc+0x170/0x1190 [ 276.968641] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 276.974701] ? p9_conn_create+0x4c0/0x4c0 [ 276.978065] 9pnet: Insufficient options for proto=fd [ 276.978859] ? pipe_poll+0x263/0x2d0 [ 276.978873] ? generic_pipe_buf_confirm+0x10/0x10 [ 276.978887] ? p9_conn_create+0x3c0/0x4c0 [ 276.978898] ? p9_fd_create+0x245/0x340 [ 276.989574] 9pnet: Insufficient options for proto=fd [ 276.992983] ? parse_opts.part.0+0x2e0/0x2e0 [ 276.992998] p9_client_create+0x9a3/0x1130 [ 276.993017] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 23:11:44 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x2) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000000)={0x4, [0x0, 0x7, 0x8000000000000000, 0x8000]}) open(&(0x7f0000000040)='./file0\x00', 0x40002, 0x48) 23:11:45 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x280, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='ip_vti0\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) [ 276.993032] ? __kmalloc_track_caller+0x375/0x790 [ 276.993043] ? __lockdep_init_map+0x10c/0x570 [ 276.993053] ? lockdep_init_map+0x9/0x10 [ 276.993061] ? __raw_spin_lock_init+0x2d/0x100 [ 276.993076] v9fs_session_init+0x1dc/0x1590 [ 277.030949] ? check_preemption_disabled+0x3c/0x250 [ 277.030962] ? v9fs_show_options+0x730/0x730 [ 277.030972] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 277.030983] ? v9fs_mount+0x5e/0x870 [ 277.030993] ? rcu_read_lock_sched_held+0x110/0x130 [ 277.031006] ? kmem_cache_alloc_trace+0x626/0x790 [ 277.031018] ? free_pages+0x46/0x50 [ 277.031032] v9fs_mount+0x7d/0x870 [ 277.031045] mount_fs+0x9d/0x2a7 [ 277.031059] vfs_kern_mount.part.0+0x5e/0x3d0 [ 277.031071] do_mount+0x417/0x27d0 [ 277.039792] ? copy_mount_options+0x5c/0x2f0 [ 277.039804] ? rcu_read_lock_sched_held+0x110/0x130 [ 277.039820] ? copy_mount_string+0x40/0x40 [ 277.076708] ? copy_mount_options+0x1fe/0x2f0 [ 277.076725] SyS_mount+0xab/0x120 [ 277.076733] ? copy_mnt_ns+0x8c0/0x8c0 [ 277.076746] do_syscall_64+0x1eb/0x630 [ 277.091757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.091777] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.091786] RIP: 0033:0x458c29 [ 277.091792] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.091803] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 277.091809] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 277.091815] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 277.091821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 23:11:45 executing program 4 (fault-call:2 fault-nth:24): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 277.091826] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 277.109602] 9pnet: Couldn't grow tag array [ 277.176291] FAULT_INJECTION: forcing a failure. [ 277.176291] name failslab, interval 1, probability 0, space 0, times 0 [ 277.193523] CPU: 0 PID: 13148 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 277.203372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.203377] Call Trace: [ 277.203397] dump_stack+0x138/0x19c [ 277.203416] should_fail.cold+0x10f/0x159 [ 277.203431] should_failslab+0xdb/0x130 [ 277.203441] __kmalloc+0x2f3/0x7a0 [ 277.203452] ? __lockdep_init_map+0x10c/0x570 [ 277.203464] ? p9_fcall_alloc+0x1d/0x90 [ 277.203475] p9_fcall_alloc+0x1d/0x90 [ 277.203487] p9_client_prepare_req.part.0+0x73c/0xa90 [ 277.219191] p9_client_rpc+0x170/0x1190 [ 277.219206] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 277.227402] ? p9_conn_create+0x4c0/0x4c0 [ 277.227414] ? pipe_poll+0x263/0x2d0 [ 277.227425] ? generic_pipe_buf_confirm+0x10/0x10 [ 277.271079] ? p9_conn_create+0x3c0/0x4c0 [ 277.275246] ? p9_fd_create+0x245/0x340 [ 277.279229] ? parse_opts.part.0+0x2e0/0x2e0 [ 277.283664] p9_client_create+0x9a3/0x1130 [ 277.287904] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 277.293494] ? __kmalloc_track_caller+0x375/0x790 [ 277.298355] ? __lockdep_init_map+0x10c/0x570 [ 277.302861] ? lockdep_init_map+0x9/0x10 [ 277.307010] ? __raw_spin_lock_init+0x2d/0x100 [ 277.311699] v9fs_session_init+0x1dc/0x1590 [ 277.316121] ? check_preemption_disabled+0x3c/0x250 [ 277.321128] ? v9fs_show_options+0x730/0x730 [ 277.325553] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 277.331181] ? v9fs_mount+0x5e/0x870 [ 277.334925] ? rcu_read_lock_sched_held+0x110/0x130 [ 277.339955] ? kmem_cache_alloc_trace+0x626/0x790 [ 277.344812] ? free_pages+0x46/0x50 [ 277.348464] v9fs_mount+0x7d/0x870 [ 277.352002] mount_fs+0x9d/0x2a7 [ 277.355355] vfs_kern_mount.part.0+0x5e/0x3d0 [ 277.359967] do_mount+0x417/0x27d0 [ 277.363502] ? copy_mount_options+0x5c/0x2f0 [ 277.367903] ? rcu_read_lock_sched_held+0x110/0x130 [ 277.372929] ? copy_mount_string+0x40/0x40 [ 277.377168] ? copy_mount_options+0x1fe/0x2f0 [ 277.381743] SyS_mount+0xab/0x120 [ 277.385182] ? copy_mnt_ns+0x8c0/0x8c0 [ 277.389170] do_syscall_64+0x1eb/0x630 [ 277.393052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.397915] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.403096] RIP: 0033:0x458c29 [ 277.406305] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.414005] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 23:11:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) [ 277.421317] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 277.428584] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 277.435843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 277.443110] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 277.461683] 9pnet: Couldn't grow tag array 23:11:45 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) socket$inet_dccp(0x2, 0x6, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:45 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:45 executing program 4 (fault-call:2 fault-nth:25): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:45 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_any='access=any'}, {@aname={'aname', 0x3d, '/#vboxnet0+\'/ppp1vboxnet0[!nodev'}}, {@mmap='mmap'}]}}) 23:11:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x400}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x6, 0x7, [0x8001, 0x5, 0x4e46, 0xa2f, 0xe2a, 0x6, 0x0]}, 0x16) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/142, &(0x7f00000001c0)=0x8e) [ 277.595754] FAULT_INJECTION: forcing a failure. [ 277.595754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.607625] CPU: 1 PID: 13172 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 277.607632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.607636] Call Trace: [ 277.607657] dump_stack+0x138/0x19c [ 277.607674] should_fail.cold+0x10f/0x159 [ 277.607690] __alloc_pages_nodemask+0x1d6/0x7a0 [ 277.607704] ? cache_grow_end.part.0+0x92/0x160 [ 277.607717] ? __alloc_pages_slowpath+0x2930/0x2930 [ 277.607734] cache_grow_begin+0x80/0x410 [ 277.624535] __kmalloc+0x6c2/0x7a0 [ 277.624549] ? __lockdep_init_map+0x10c/0x570 [ 277.624561] ? p9_fcall_alloc+0x1d/0x90 [ 277.624572] p9_fcall_alloc+0x1d/0x90 [ 277.624582] p9_client_prepare_req.part.0+0x73c/0xa90 [ 277.624598] p9_client_rpc+0x170/0x1190 [ 277.624612] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 277.630812] ? p9_conn_create+0x4c0/0x4c0 [ 277.630823] ? pipe_poll+0x263/0x2d0 [ 277.630834] ? generic_pipe_buf_confirm+0x10/0x10 [ 277.630847] ? p9_conn_create+0x3c0/0x4c0 [ 277.630859] ? p9_fd_create+0x245/0x340 [ 277.705921] ? parse_opts.part.0+0x2e0/0x2e0 [ 277.710584] p9_client_create+0x9a3/0x1130 [ 277.714836] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 277.720454] ? __kmalloc_track_caller+0x375/0x790 [ 277.725290] ? __lockdep_init_map+0x10c/0x570 [ 277.729791] ? lockdep_init_map+0x9/0x10 [ 277.733835] ? __raw_spin_lock_init+0x2d/0x100 [ 277.738571] v9fs_session_init+0x1dc/0x1590 [ 277.742977] ? check_preemption_disabled+0x3c/0x250 [ 277.747984] ? v9fs_show_options+0x730/0x730 [ 277.752381] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 277.757998] ? v9fs_mount+0x5e/0x870 [ 277.761704] ? rcu_read_lock_sched_held+0x110/0x130 [ 277.766713] ? kmem_cache_alloc_trace+0x626/0x790 [ 277.771549] ? free_pages+0x46/0x50 [ 277.775184] v9fs_mount+0x7d/0x870 [ 277.778737] mount_fs+0x9d/0x2a7 [ 277.782139] vfs_kern_mount.part.0+0x5e/0x3d0 [ 277.786711] do_mount+0x417/0x27d0 [ 277.790341] ? copy_mount_options+0x5c/0x2f0 [ 277.794780] ? rcu_read_lock_sched_held+0x110/0x130 [ 277.799999] ? copy_mount_string+0x40/0x40 [ 277.804240] ? copy_mount_options+0x1fe/0x2f0 [ 277.808742] SyS_mount+0xab/0x120 [ 277.812779] ? copy_mnt_ns+0x8c0/0x8c0 [ 277.816673] do_syscall_64+0x1eb/0x630 [ 277.820556] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.825493] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.830673] RIP: 0033:0x458c29 [ 277.833863] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 277.841654] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 277.849034] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 277.856306] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 277.863567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 277.870850] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 277.892176] 9pnet: Insufficient options for proto=fd 23:11:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="8172616e735066642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 23:11:45 executing program 4 (fault-call:2 fault-nth:26): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200400, 0x0) r2 = getgid() setfsgid(r2) write$input_event(r1, &(0x7f0000000100)={{0x0, 0x2710}, 0x17, 0x20}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x5a, 0x0, 0x3, "64f7feb304f5f564ec191d886d002488", "7aef1eb8f516fd54e78c3b7f9abe2373bbcf8f2a798e2b79540c40bd9eccfbfe77a369fa8ff0c148ac15277ca0b7563a7075d938e79c2c2a0b9b3c374d790274b5379c461d"}, 0x5a, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) read(r0, &(0x7f0000000040)=""/125, 0x7d) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x96d2f88464a7982c, 0x800000000002) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000280)=0x1, 0x2) 23:11:45 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0xa4402) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 278.000144] FAULT_INJECTION: forcing a failure. [ 278.000144] name failslab, interval 1, probability 0, space 0, times 0 [ 278.036462] CPU: 0 PID: 13187 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 278.043706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.043712] Call Trace: [ 278.043730] dump_stack+0x138/0x19c [ 278.043748] should_fail.cold+0x10f/0x159 [ 278.055835] should_failslab+0xdb/0x130 [ 278.055851] __kmalloc_track_caller+0x2ef/0x790 [ 278.055862] ? __lockdep_init_map+0x10c/0x570 [ 278.055876] ? v9fs_session_init+0x368/0x1590 [ 278.063887] kstrdup+0x3a/0x70 [ 278.063901] v9fs_session_init+0x368/0x1590 [ 278.063919] ? v9fs_show_options+0x730/0x730 [ 278.093769] ? rcu_lockdep_current_cpu_online+0xf2/0x140 23:11:46 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x141e, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:46 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c00ab9f97a30279c5cd356bbd911a7e7659abcc72abd6d30d7320b215934fc4fb3eb6ea8614c691c4ac61881d577b34ef86ec6c0f28804f5b8483f650decfc55eb1294485674bd695fa53cf905bad7d4307a199d6d70675c4605e3e521d00f653cbd840392224bb485e07dd145ef63e7b26701eea910f147b0d06c27e0ae176d09fb60e9440be61e147916b8f00209a"]) [ 278.099239] ? v9fs_mount+0x5e/0x870 [ 278.102972] ? rcu_read_lock_sched_held+0x110/0x130 [ 278.108108] ? kmem_cache_alloc_trace+0x626/0x790 [ 278.113095] ? free_pages+0x46/0x50 [ 278.116852] v9fs_mount+0x7d/0x870 [ 278.120428] mount_fs+0x9d/0x2a7 [ 278.124241] vfs_kern_mount.part.0+0x5e/0x3d0 [ 278.129003] do_mount+0x417/0x27d0 [ 278.132719] ? copy_mount_options+0x5c/0x2f0 [ 278.137454] ? rcu_read_lock_sched_held+0x110/0x130 [ 278.142573] ? copy_mount_string+0x40/0x40 [ 278.146821] ? copy_mount_options+0x1fe/0x2f0 [ 278.151327] SyS_mount+0xab/0x120 [ 278.154943] ? copy_mnt_ns+0x8c0/0x8c0 [ 278.158922] do_syscall_64+0x1eb/0x630 [ 278.162814] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.167659] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.172833] RIP: 0033:0x458c29 [ 278.176030] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.183825] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 23:11:46 executing program 4 (fault-call:2 fault-nth:27): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 278.191175] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 278.203165] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 278.210517] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 278.217862] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 278.335995] FAULT_INJECTION: forcing a failure. [ 278.335995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.347939] CPU: 1 PID: 13215 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 278.347947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.347950] Call Trace: [ 278.347973] dump_stack+0x138/0x19c [ 278.347991] should_fail.cold+0x10f/0x159 [ 278.348005] __alloc_pages_nodemask+0x1d6/0x7a0 [ 278.348019] ? cache_grow_end.part.0+0x92/0x160 [ 278.348029] ? __alloc_pages_slowpath+0x2930/0x2930 [ 278.348048] cache_grow_begin+0x80/0x410 [ 278.348069] __kmalloc+0x6c2/0x7a0 [ 278.348082] ? __lockdep_init_map+0x10c/0x570 [ 278.348097] ? p9_fcall_alloc+0x1d/0x90 [ 278.348110] p9_fcall_alloc+0x1d/0x90 [ 278.348120] p9_client_prepare_req.part.0+0x73c/0xa90 [ 278.348137] p9_client_rpc+0x170/0x1190 [ 278.348150] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 278.348162] ? p9_conn_create+0x4c0/0x4c0 [ 278.364587] ? pipe_poll+0x263/0x2d0 [ 278.364599] ? generic_pipe_buf_confirm+0x10/0x10 [ 278.364616] ? p9_conn_create+0x3c0/0x4c0 [ 278.364626] ? p9_fd_create+0x245/0x340 [ 278.364636] ? parse_opts.part.0+0x2e0/0x2e0 [ 278.364650] p9_client_create+0x9a3/0x1130 [ 278.364666] ? p9_client_zc_rpc.constprop.0+0x1130/0x1130 [ 278.364681] ? __kmalloc_track_caller+0x375/0x790 [ 278.370978] ? __lockdep_init_map+0x10c/0x570 [ 278.370996] ? lockdep_init_map+0x9/0x10 [ 278.371005] ? __raw_spin_lock_init+0x2d/0x100 [ 278.371019] v9fs_session_init+0x1dc/0x1590 [ 278.371038] ? check_preemption_disabled+0x3c/0x250 [ 278.488769] ? v9fs_show_options+0x730/0x730 [ 278.493263] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 278.498718] ? v9fs_mount+0x5e/0x870 [ 278.502465] ? rcu_read_lock_sched_held+0x110/0x130 [ 278.507482] ? kmem_cache_alloc_trace+0x626/0x790 [ 278.512325] ? free_pages+0x46/0x50 [ 278.515946] v9fs_mount+0x7d/0x870 [ 278.519477] mount_fs+0x9d/0x2a7 [ 278.522837] vfs_kern_mount.part.0+0x5e/0x3d0 [ 278.527432] do_mount+0x417/0x27d0 [ 278.530973] ? copy_mount_options+0x5c/0x2f0 [ 278.535368] ? rcu_read_lock_sched_held+0x110/0x130 [ 278.540373] ? copy_mount_string+0x40/0x40 [ 278.544623] ? copy_mount_options+0x1fe/0x2f0 [ 278.549376] SyS_mount+0xab/0x120 [ 278.553011] ? copy_mnt_ns+0x8c0/0x8c0 [ 278.557004] do_syscall_64+0x1eb/0x630 [ 278.560886] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.565864] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.571062] RIP: 0033:0x458c29 [ 278.574733] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.582635] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 278.590742] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 278.598021] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 278.605379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 278.612809] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:46 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) setxattr$security_smack_entry(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)='security.SMACK64\x00', &(0x7f0000000400)='fuse\x00', 0x5, 0x2) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuse\x00', 0x802800, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x600}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}], [{@appraise_type='appraise_type=imasig'}, {@fsmagic={'fsmagic', 0x3d, 0x800}}, {@seclabel='seclabel'}, {@uid_lt={'uid<', r1}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'fuse\x00'}}, {@euid_lt={'euid<', r1}}]}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x4, {0x7, 0x1d, 0xfffffffffffffff8, 0x10, 0x4, 0x1, 0x3}}, 0x50) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:46 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="251711ce49d646ca34e7f81a172a79ebca85b2042dd720326359b97979b70e1830fee9ae4cb62fbfff0cf542a7077440fcfeb3e55ef9c0fbbcf1dc4b7b9695bc109aad2298473baaf3b3c3052e7c8a3f1cd7318e4f", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:46 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000100)=[{&(0x7f0000000240)="d9e5e1bc8cbcdefc23587276aff1b94d9d2ffce53a4549cc4de4a8c802287e8ccf1a52595178a5ca7b5d40970200373fc54d35ca7f42d80199e61a6e7101a56fa0d3d3f426154a8f3409a3276e4904dabf4d982a418e54fa780f23d3303fdc3034f022c6df75d90932e6f0851a78e99a4d0b4416e11c35e6ad7a6f470db0f4ed26da8c38bd69a28000714e9873bed1a80154538ad1aa9e03d806086e94c39583745d11d3d7fb3f4b1ff2b6ffc2207989ee36131d73478a159dc60317a5efe8", 0xbf, 0x4}], 0x200080, &(0x7f0000000300)={[{@errors_remount='errors=remount-ro'}, {@errors_recover='errors=recover'}], [{@uid_gt={'uid>', r0}}, {@pcr={'pcr', 0x3d, 0x36}}, {@fowner_lt={'fowner<', r1}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x2}}, {@loose='loose'}]}}) 23:11:46 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:46 executing program 4 (fault-call:2 fault-nth:28): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 278.731672] FAULT_INJECTION: forcing a failure. [ 278.731672] name failslab, interval 1, probability 0, space 0, times 0 [ 278.753548] CPU: 0 PID: 13230 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 278.760702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.770072] Call Trace: [ 278.772685] dump_stack+0x138/0x19c [ 278.776506] should_fail.cold+0x10f/0x159 [ 278.780690] should_failslab+0xdb/0x130 [ 278.784696] kmem_cache_alloc_trace+0x2ec/0x790 [ 278.789387] p9_fid_create+0x4e/0x3b0 [ 278.793198] p9_client_attach+0x7f/0x6a0 [ 278.793210] ? trace_hardirqs_off+0xd/0x10 [ 278.793222] ? p9_client_readlink+0x410/0x410 [ 278.793233] ? trace_hardirqs_on_caller+0x400/0x590 [ 278.793248] v9fs_session_init+0xbe8/0x1590 [ 278.793258] ? v9fs_session_init+0xbe8/0x1590 [ 278.793275] ? v9fs_show_options+0x730/0x730 [ 278.793287] ? v9fs_mount+0x5e/0x870 [ 278.793298] ? rcu_read_lock_sched_held+0x110/0x130 [ 278.793311] ? kmem_cache_alloc_trace+0x626/0x790 [ 278.793326] ? free_pages+0x46/0x50 [ 278.806440] v9fs_mount+0x7d/0x870 [ 278.806458] mount_fs+0x9d/0x2a7 [ 278.806476] vfs_kern_mount.part.0+0x5e/0x3d0 [ 278.824917] do_mount+0x417/0x27d0 [ 278.824929] ? copy_mount_options+0x5c/0x2f0 [ 278.824942] ? rcu_read_lock_sched_held+0x110/0x130 [ 278.824953] ? copy_mount_string+0x40/0x40 [ 278.824966] ? copy_mount_options+0x1fe/0x2f0 [ 278.862211] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 278.866588] SyS_mount+0xab/0x120 [ 278.866601] ? copy_mnt_ns+0x8c0/0x8c0 [ 278.866614] do_syscall_64+0x1eb/0x630 [ 278.866624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.902018] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.907221] RIP: 0033:0x458c29 [ 278.910412] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 278.918230] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 278.925512] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:46 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c) recvfrom$unix(r1, &(0x7f0000000100)=""/4, 0x4, 0x2000, &(0x7f0000000240)=@abs={0x1, 0x0, 0x6}, 0x6e) connect(r1, &(0x7f0000000080)=@l2={0x1f, 0x800, {0x80000001, 0x4, 0x542, 0x3, 0x401, 0x8e}, 0x9, 0x474e}, 0x80) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'vlan0\x00'}, 0x18) 23:11:46 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x9f, "d085484d701e119a327509aa5dc9864ce6c31004ce5e6cd179e420db6c8dba0cc495b4db99bb1d74755dd0b5d59d1b6222b493510fac0b34434b9f8153353a84907b4292531367f12be14c9f90ec0924ee62ba5693a3889ec633523ea4bde60b0db5720e00f57838d6b611aa37016a7140a556cd509ee00ac1692086e4ee6f61f62034e5e14b1cf260b2417afb01d6631003fda4e11fa91233f44138062bdc"}, &(0x7f00000001c0)=0xa7) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, [0x9, 0x0, 0x401, 0x6, 0x80, 0x7fffffff, 0x3, 0x7, 0x5, 0x101, 0x2, 0x7fffffff, 0x4, 0x7, 0x5]}, &(0x7f0000000540)=0x100) r3 = getegid() fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r3, 0x400) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e20, 0xff, @ipv4={[], [], @broadcast}, 0x2}, {0xa, 0x4e21, 0x6, @rand_addr="794ea0c72bcf72242d3a996ca42285e0", 0x5}, 0x1, [0x10001, 0x6, 0x4, 0x2, 0x0, 0x5, 0x6, 0x8]}, 0x5c) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000380)) 23:11:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) set_tid_address(&(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0_to_hsr\x00'}, 0x18) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008932, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) writev(r1, &(0x7f00000012c0)=[{&(0x7f0000000040)="64e44f0f9b561af9fdf5ddb0a813b3d8055035e55c01e9c2d53675ed972e755f8b35db605255398c95c1764e9485122db033bd7e50e39e0c5e4c721abb7e6543d39316f774d301f032db753ab2bcc6c8f70c41067c9fd2a522a249c111268332fb36036fde07c3fd1725a1eec8ababbdb5f5c8744e8f8343a0ea5a0671d20fdf16cd0821bf7743c3f03a462f7cc943bbabbd265af17563b50e8fac3b36fcec89787b41c416825a143ef019ce3e49e97448c22c4d002063a8b6", 0xb9}, {&(0x7f0000000100)="ce6108c9516047a47369b18aa97ce3bddfa5480a2163b751c405eee8ae5616d2ffde8defde44bea59c615fbf3c6a22690cc5b520196912e9cbd53192a305f095355a233b4bfa4793f036fb83c6f2332f4c1063d33f3a4618ab1eac2e5a4b6eacc0b2a240ec6e1efc6815587b1a4144c4696eed7358b7a2c0572119214681b4cd8fe8f8ca8e7ba3a24b628ab5fe2dfbb83ac7d362b75c7b165ea036585c9023e107a94af0ee69327d509d6b39c71c37400cfe96bcaf63ec528077cfcd09d0158a37a21bdf56", 0xc5}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="56255f8eaf08be399dac3d99d05e1932b74c7c5661c9ea99fecb9aafb9fadd7741574728e0d707687d1ee0f42478cc0813fa3a5a", 0x34}], 0x4) r2 = syz_open_dev$ndb(&(0x7f0000001300)='/dev/nbd#\x00', 0x0, 0x200000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x207ffffff, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) [ 278.932796] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 278.940080] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 278.947544] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) syz_mount_image$btrfs(&(0x7f0000000300)='btrfs\x00', &(0x7f0000000340)='./file0\x00', 0xffffffff, 0x6, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0x1000, 0x11}, {&(0x7f0000000380)="8f46e3aa6e338f28d840edcf69ed0b6bd4a448c34b2822071f3fedab9c79e0e5560cf5a84c9aca19173f90dff8aa7e754a28992de6891161bf87c941397954541a279c77e096eab60b1ccd5b74501c1a24c21b346199c9281b2f67028252efc45288ae79032e7113e00125ca54a346c4f781a73303b87e1814abc2fa91a34c5f0428df8aaeabfee06ec521601aeb6291505f6862bf9d3911deda17e991db714179be67575df6f023d0c09f1d3fa68f022171066349c234c279afb2958adcc855f2aff6e9d48ff2304bc9a3543caf43522065a392cd04c32d98344e1b7ee145b6f5b15558f954b5f943805ab00550185211b2e0e27a95419baf", 0xf9, 0x400000000000}, {&(0x7f0000000480)="0cb04c5eb91e9cc3a8a6cc31f2ba587d1221fb275b6db1336daee2abd11b1bee0ca3689db03ab87af536d9de67ec7ca621cce9b2ddbfaeb82121a8d7bd6faeaa1219b1b95da54f28c4e0fc2f76723b026fc3513ec645ca1bd737baedcd502423747d724e919b5d170eae9f1f88bf13ba57fee14c35ad38fff81ee196a36e4812df5f21e247fb967699f48ef668e6cc2b34487cfc65178ee04ce9be46030d7fcb1a", 0xa1, 0x100000001}, {&(0x7f0000000540)="ca0f81c9719592aacd6d176846d01d029dffc5d14ae9d4f61ee9ef58ace62048805bf30903625b4d33355f7c36cb", 0x2e, 0x5}, {&(0x7f0000001600)="a1753e9de584367a8b7235c1c70879e039d162fa850a1e5bc2e215dadd69d567c403c190df87bc20743daa2ca4547667bdfd2e7eeb99dc17c71b4623b72928e599609b8d51b3a7e196cb3e7012067dacacb4db37a44b452a655de9a03e08b53f64c30874a595dbc0d0cd177c6eace7145979862b45dd2f786d6e46982e2806b91facdef6e0", 0x85, 0x2}, {&(0x7f00000016c0)="c658a2f46de7c0a59555b1da4ac3ab287f04decc0863a399ac664dedc8def0c8600cee96", 0x24, 0x2}], 0x100000, &(0x7f00000017c0)={[{@discard='discard'}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77666482b13d", @ANYRESHEX=r1, @ANYBLOB=',fscontext=user_u,euid>', @ANYRESDEC=r2, @ANYBLOB=',obj_role=selinux&nodev{,(,\x00']) write$ppp(r1, &(0x7f00000001c0)="32ffcda32225abbcfa26867217a0", 0xe) setxattr$trusted_overlay_opaque(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)='trusted.overlay.opaque\x00', &(0x7f0000001880)='y\x00', 0x2, 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000001b80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={0x1f0, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x38}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2dc1ee1f}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff80000001}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x823}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0xcf9b54e44669bf5}, 0x800) 23:11:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x40000, &(0x7f0000000380)="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") pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:47 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x8000, 0x0) 23:11:47 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(r0) write$P9_RLOCK(r1, &(0x7f0000000380)={0x8, 0x35, 0x2, 0x3}, 0x8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:47 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40002, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x701c, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x600104, 0x2) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="f6838090ef773e72bffbdf2726817fe74515e990199d72cffa289d5e173850fe5ccde8fff97df1df6f7911451c0a7904762af3a74378f3d991d239523f118081a8bd1c3ab9147a5088e26b522d79fc2c4bbb2c9f320cd8b5a3bdce650a05de07b8a9fe40d5f2d78216699244b06134f30e289cba2f28e0596dc99115eb7d6a84062be917edd4d62ae27c851873494f08edf2101a8e80f60bbc0c0fe77b5acc0af44a92b9dc8e34a1f7caf962f93fb01bea68e432a061234653465d07febf55c0843cc24d11ab41b9e51a2116c0716d721719a4ac5286ff2010713ecbf48bc989202ee3dcfe6e6b64f096363d"]) 23:11:47 executing program 4 (fault-call:2 fault-nth:29): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 279.185315] 9pnet: Insufficient options for proto=fd [ 279.208819] FAULT_INJECTION: forcing a failure. [ 279.208819] name failslab, interval 1, probability 0, space 0, times 0 [ 279.219803] 9pnet: Insufficient options for proto=fd [ 279.224481] CPU: 1 PID: 13285 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 279.232408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.241953] Call Trace: [ 279.241974] dump_stack+0x138/0x19c [ 279.242002] should_fail.cold+0x10f/0x159 [ 279.242019] should_failslab+0xdb/0x130 [ 279.242032] kmem_cache_alloc_trace+0x2ec/0x790 [ 279.248525] p9_fid_create+0x4e/0x3b0 [ 279.248542] p9_client_attach+0x7f/0x6a0 [ 279.248557] ? trace_hardirqs_off+0xd/0x10 [ 279.257015] ? p9_client_readlink+0x410/0x410 [ 279.257029] ? trace_hardirqs_on_caller+0x400/0x590 [ 279.257045] v9fs_session_init+0xbe8/0x1590 [ 279.257057] ? v9fs_session_init+0xbe8/0x1590 [ 279.292651] ? v9fs_show_options+0x730/0x730 [ 279.297075] ? v9fs_mount+0x5e/0x870 [ 279.300791] ? rcu_read_lock_sched_held+0x110/0x130 [ 279.305803] ? kmem_cache_alloc_trace+0x626/0x790 [ 279.310651] ? free_pages+0x46/0x50 [ 279.314301] v9fs_mount+0x7d/0x870 [ 279.317878] mount_fs+0x9d/0x2a7 [ 279.321252] vfs_kern_mount.part.0+0x5e/0x3d0 [ 279.325743] do_mount+0x417/0x27d0 [ 279.329268] ? copy_mount_options+0x5c/0x2f0 [ 279.333670] ? rcu_read_lock_sched_held+0x110/0x130 [ 279.338711] ? copy_mount_string+0x40/0x40 [ 279.342984] ? copy_mount_options+0x1fe/0x2f0 [ 279.347514] SyS_mount+0xab/0x120 [ 279.350975] ? copy_mnt_ns+0x8c0/0x8c0 [ 279.354862] do_syscall_64+0x1eb/0x630 [ 279.358763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.363657] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 279.368930] RIP: 0033:0x458c29 [ 279.372212] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.379913] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 279.387696] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 279.395575] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 279.402856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 279.410397] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:47 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:47 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x100000000, 0xb2, 0x0, 0x1, 0x3, 0x100000000, 0x2, {0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x29, 0x3, 0x800, 0x8000, 0x4}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240)={r1, 0x50, "019d8dd8e22bea0ea5315b23d4ba463335774cb7bc06a91ff23306bc071fd144dc2cd9427a89e746f0f24cb79e495cda81d55252dd1538e8ef10f73a71fdfd1bf83270d052f1d7c0f0c67c0bd1bacf7d"}, &(0x7f00000001c0)=0x58) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x193) 23:11:47 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="b0f7"]) 23:11:47 executing program 4 (fault-call:2 fault-nth:30): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:47 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f757ba0ed2d4a", @ANYRESDEC=0x0, @ANYBLOB="2c005b17442e01ba9c6096c6c47b1235c57be3fe7e5c8045b2b0c0944b0d40c2b76a75b9f16b5a960fcc69f577e9c851f5ce4a90dfbacce56014418cddc5693f020c5d211bc5a516d33554485cb2b2cf623f650acb6485154b35e741c7d26b7a79104e170e6898e00b113890d1382470dcc6f6df9cac504dcba69bf7f5fc41ffd770adf55d38409020eaa51920d297"]) read$FUSE(r0, &(0x7f00000040c0), 0xfffffffffffffe45) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000280)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) mkdirat(r1, &(0x7f0000000440)='./file0\x00', 0x142) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 279.569490] FAULT_INJECTION: forcing a failure. [ 279.569490] name failslab, interval 1, probability 0, space 0, times 0 [ 279.588086] 9pnet: Insufficient options for proto=fd [ 279.589896] 9pnet: Insufficient options for proto=fd [ 279.603906] CPU: 1 PID: 13307 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 279.611056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.620423] Call Trace: [ 279.623019] dump_stack+0x138/0x19c [ 279.626666] should_fail.cold+0x10f/0x159 [ 279.630824] should_failslab+0xdb/0x130 [ 279.630839] kmem_cache_alloc_trace+0x2ec/0x790 [ 279.630854] ? p9_idpool_get+0xbd/0x100 [ 279.630869] ? p9_idpool_check+0x30/0x30 [ 279.639555] p9_client_prepare_req.part.0+0x814/0xa90 [ 279.652967] p9_client_rpc+0x170/0x1190 [ 279.657058] ? p9_idpool_get+0xa3/0x100 [ 279.661164] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 279.667265] ? find_held_lock+0x35/0x130 [ 279.671471] ? p9_fid_create+0x2d5/0x3b0 [ 279.676173] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 279.681535] ? trace_hardirqs_on_caller+0x400/0x590 [ 279.686752] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 279.692019] p9_client_attach+0x152/0x6a0 [ 279.696432] ? trace_hardirqs_off+0xd/0x10 [ 279.700668] ? p9_client_readlink+0x410/0x410 [ 279.705154] ? trace_hardirqs_on_caller+0x400/0x590 [ 279.710822] v9fs_session_init+0xbe8/0x1590 [ 279.715127] ? v9fs_session_init+0xbe8/0x1590 [ 279.719625] ? v9fs_show_options+0x730/0x730 [ 279.724049] ? v9fs_mount+0x5e/0x870 [ 279.728388] ? rcu_read_lock_sched_held+0x110/0x130 [ 279.733401] ? kmem_cache_alloc_trace+0x626/0x790 [ 279.738232] ? free_pages+0x46/0x50 [ 279.741848] v9fs_mount+0x7d/0x870 [ 279.745393] mount_fs+0x9d/0x2a7 [ 279.748835] vfs_kern_mount.part.0+0x5e/0x3d0 [ 279.753339] do_mount+0x417/0x27d0 [ 279.756884] ? copy_mount_options+0x5c/0x2f0 [ 279.761747] ? rcu_read_lock_sched_held+0x110/0x130 [ 279.766758] ? copy_mount_string+0x40/0x40 [ 279.770982] ? copy_mount_options+0x1fe/0x2f0 [ 279.775555] SyS_mount+0xab/0x120 [ 279.779011] ? copy_mnt_ns+0x8c0/0x8c0 [ 279.782995] do_syscall_64+0x1eb/0x630 [ 279.786880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.791741] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 279.797228] RIP: 0033:0x458c29 [ 279.800405] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.808098] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 23:11:47 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:47 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) 23:11:47 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="0857de7230e0978ca40b1dec30aadb7e612dfbe4277cee37a4a00988988a4c5276a61aac67f2c62fbbe9db14eaf332ca575a202dd56507b8669bbe27dd", 0x3d, 0x80000}], 0x805004, &(0x7f00000002c0)=ANY=[@ANYBLOB="756d61736b3d3030303030303030303030303037352c666d61736b3d3030303030303030303030303030171c3c7032323735322c757466382c73686f775f7379735f66696c65733d7965732c6572726f72733d72656d6f756e742d726f2c7cac726f72773d636f6e74696e75652c7569643d0000000000000000", @ANYRESHEX=r1, @ANYBLOB=',fsname=,seclabel,\x00']) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7435ea2672d87472616e733d66642c7266646e40fae8664e9b28606f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x400, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:47 executing program 4 (fault-call:2 fault-nth:31): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 279.815371] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 279.822653] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 279.830063] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 279.837612] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 279.851107] 9pnet: Couldn't grow tag array [ 279.893564] 9pnet: Insufficient options for proto=fd 23:11:47 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 279.984963] FAULT_INJECTION: forcing a failure. [ 279.984963] name failslab, interval 1, probability 0, space 0, times 0 [ 280.022516] CPU: 0 PID: 13341 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 280.035120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.044665] Call Trace: [ 280.047275] dump_stack+0x138/0x19c [ 280.050936] should_fail.cold+0x10f/0x159 [ 280.055103] should_failslab+0xdb/0x130 [ 280.059105] kmem_cache_alloc_trace+0x2ec/0x790 [ 280.063800] ? lock_downgrade+0x6e0/0x6e0 [ 280.068081] sget_userns+0xfe/0xc30 [ 280.068095] ? v9fs_kill_super+0xa0/0xa0 [ 280.068107] ? v9fs_kill_super+0xa0/0xa0 [ 280.068120] ? v9fs_kill_super+0xa0/0xa0 [ 280.068132] sget+0xd6/0x120 [ 280.083934] v9fs_mount+0xa8/0x870 [ 280.083952] mount_fs+0x9d/0x2a7 [ 280.083970] vfs_kern_mount.part.0+0x5e/0x3d0 [ 280.098545] do_mount+0x417/0x27d0 [ 280.102110] ? copy_mount_string+0x40/0x40 [ 280.106357] ? copy_mount_options+0x151/0x2f0 [ 280.110865] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 280.115731] ? copy_mount_options+0x1fe/0x2f0 [ 280.120345] SyS_mount+0xab/0x120 [ 280.123913] ? copy_mnt_ns+0x8c0/0x8c0 [ 280.127907] do_syscall_64+0x1eb/0x630 [ 280.131978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.137009] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.142308] RIP: 0033:0x458c29 [ 280.145506] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 280.153214] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 280.153219] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 280.153224] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 280.153229] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 23:11:48 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x60) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="747261642c7266646eeb3d00000000", @ANYRESHEX=r0, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="4c5df0924206cc138211e04974d0f5f8b91943da8ad65d1de5c377edb2f20fbf6dd0ad0a7bd2f2be2038e55c0b6596960d01930354c19abeebc6be2ef495ced25ff777b66705448e4a8c6609a295c432e425cb2b3bcbc0e6f0afecd9964ba1f0c94eefdab70c0e69504ea70bf84e3bf04379602be71f11eccfd14721378ad5451f10242ca571dd24c5d5f87cbc5224a2f3242446418a8d0a1a792c9569638a19ad02a3ba7096ea8c97c3de6581ffa97d55a88891cd161978d94dcaa61699c75140b5d11a6f5380b75972252b202c9b7efd4d770fadd2a086cd7ea5f4", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0], @ANYBLOB="c99f9eb51c8e983f8e8af7b16dd3d5499e"], @ANYRESHEX=r0, @ANYBLOB="d2e6"]) 23:11:48 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0039a94fa02bce946a5b4245c50500000064953ec6e2016ad3da4a9ba1b49cf5eadcd1c24064130b20aeeb3eaa4bc5d14649ea8282903fb488680aa12b48ac75adac8df03da564dbec9267216c53476e"]) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='auxv\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000480)={0x1, 0x0, {0x5, 0x63e6, 0x301f, 0xb, 0xa, 0x6, 0x2, 0x1}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) getgroups(0x2, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff]) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000680)={0xa0, 0x0, 0x4, {{0x6, 0x1, 0x31, 0x0, 0x9, 0x7, {0x3, 0x40, 0x2, 0xffffffff, 0xff, 0x10000, 0xe2d, 0xfe, 0xb8, 0x2, 0x9, r2, r3, 0x100000000}}, {0x0, 0x2}}}, 0xa0) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x7, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:48 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mount(0x0, &(0x7f00000016c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001740)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x2, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x200, 0x0) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f0000000200)=""/81) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) unshare(0x40000000) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xa8, 0x0) accept$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) recvfrom(r2, &(0x7f00000000c0)=""/54, 0x36, 0x10000, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x1, @empty, 'gretap0\x00'}}, 0x80) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f00000001c0)) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) 23:11:48 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x800000000002) 23:11:48 executing program 4 (fault-call:2 fault-nth:32): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 280.153234] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:48 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7473616ec83d781761e0cea4179ad5302804f17da41d66640c720000b5003d", @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC, @ANYBLOB='E%']) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x64000008) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 280.249055] 9pnet: Insufficient options for proto=fd 23:11:48 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno5', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="f2c3ca5216723a71"]) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x80000000, 0x4080) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/192, 0xc0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0xed, @multicast2, 0x4e22, 0x0, 'nq\x00', 0x38, 0x40, 0x6f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0xfff, 0x401, 0x3}}, 0x44) 23:11:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1ff, 0x5, [0x1000, 0x7, 0x81, 0x2, 0x4]}, &(0x7f0000000100)=0x12) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x9, 0x30}, 0xc) sendfile(r0, r0, &(0x7f0000000040), 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x800000000002) 23:11:48 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(0x0, 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 280.275791] FAULT_INJECTION: forcing a failure. [ 280.275791] name failslab, interval 1, probability 0, space 0, times 0 [ 280.334590] CPU: 0 PID: 13366 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 280.341744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.351194] Call Trace: [ 280.353893] dump_stack+0x138/0x19c [ 280.356285] 9pnet: Insufficient options for proto=fd [ 280.357540] should_fail.cold+0x10f/0x159 [ 280.357554] should_failslab+0xdb/0x130 [ 280.357568] __kmalloc+0x2f3/0x7a0 [ 280.368612] 9pnet: Insufficient options for proto=fd [ 280.370789] ? __lockdep_init_map+0x10c/0x570 [ 280.370802] ? __lockdep_init_map+0x10c/0x570 [ 280.370812] ? p9_fcall_alloc+0x1d/0x90 [ 280.370823] p9_fcall_alloc+0x1d/0x90 [ 280.370833] p9_client_prepare_req.part.0+0x7b5/0xa90 [ 280.370850] p9_client_rpc+0x170/0x1190 [ 280.370858] ? p9_idpool_get+0xa3/0x100 [ 280.370878] ? trace_event_raw_event_9p_client_res+0x260/0x260 [ 280.380722] 9pnet: Insufficient options for proto=fd [ 280.384097] ? find_held_lock+0x35/0x130 [ 280.384112] ? p9_fid_create+0x2d5/0x3b0 [ 280.384135] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 23:11:48 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6448, 0x484202) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x6, 0x1}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x7}, &(0x7f0000000100)=0x8) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000240)) [ 280.434052] ? trace_hardirqs_on_caller+0x400/0x590 [ 280.439087] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 280.444213] p9_client_attach+0x152/0x6a0 [ 280.448382] ? trace_hardirqs_off+0xd/0x10 [ 280.452747] ? p9_client_readlink+0x410/0x410 [ 280.457288] ? trace_hardirqs_on_caller+0x400/0x590 [ 280.462503] v9fs_session_init+0xbe8/0x1590 [ 280.466846] ? v9fs_session_init+0xbe8/0x1590 [ 280.471377] ? v9fs_show_options+0x730/0x730 [ 280.475841] ? v9fs_mount+0x5e/0x870 [ 280.479595] ? rcu_read_lock_sched_held+0x110/0x130 23:11:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000140)={0x1, @remote}) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="230000005e0007041dfffdec287eb600070000001f0000001f000000ecffffff0400ff", 0x23}], 0x1}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="6fb80184bf66241000000000000000008b3d", @ANYRESHEX=r3, @ANYBLOB=',\x00']) [ 280.484729] ? kmem_cache_alloc_trace+0x626/0x790 [ 280.489604] ? free_pages+0x46/0x50 [ 280.493266] v9fs_mount+0x7d/0x870 [ 280.496826] mount_fs+0x9d/0x2a7 [ 280.500264] vfs_kern_mount.part.0+0x5e/0x3d0 [ 280.504781] do_mount+0x417/0x27d0 [ 280.508338] ? copy_mount_options+0x5c/0x2f0 [ 280.512774] ? rcu_read_lock_sched_held+0x110/0x130 [ 280.517808] ? copy_mount_string+0x40/0x40 [ 280.522065] ? copy_mount_options+0x1fe/0x2f0 [ 280.526583] SyS_mount+0xab/0x120 [ 280.530076] ? copy_mnt_ns+0x8c0/0x8c0 [ 280.534171] do_syscall_64+0x1eb/0x630 [ 280.538073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.542954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.548159] RIP: 0033:0x458c29 [ 280.551444] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 280.554105] 9pnet: Insufficient options for proto=fd [ 280.559184] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 280.559190] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:48 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(0x0, 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='mountstats\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0xfffffe63, 0xfffffffffffffffe) 23:11:48 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x7, 0xffffffbe, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x100, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000004c0)={'batadv0\x00', 0x4, 0x1}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, 0x1}, 0x50) write$P9_RWSTAT(r1, &(0x7f00000008c0)={0x7, 0x7f, 0x2}, 0x7) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x440803, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000007c0)=0xe8) getresgid(&(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) mount$fuseblk(&(0x7f0000000600)='/dev/loop0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='fuseblk\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303135303030302c757365725f69643d05e6bb584f223a7fedcb2292e8107c68ed8f150da152d4840fddf0508eb306b246098f0aeb6c87689a303daa252872bbc904eabe6472617600685c282f301396c6abb8592b5b6dd36501d01228e0b62526cb2eeafdb4734b00925397a383bd40fa9562afa9730abe953c9015b34732e9ee21d332b84f9aafdf2068b22c9cc1b41769c0c8d5a1709a85e4f34bcf167ff0937cba1a8d0427677cb25d5c481ef1eaa1206d775464509e6921f48c2485ccf4", @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',blksize=0x0000000000000000,max_read=0x000000000000ffff,allow_other,blksize=0x253d86df087159d9,defcontext=staff_u,dont_measure,appraise_type=imasig,\x00']) r5 = syz_open_dev$vbi(&(0x7f00000005c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x5, 0x7fff, 0x6b01, 0xffffffff}, 0x8) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000300)={0x2, 0x12, 0x1, r5}) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000a00)={'TPROXY\x00'}, &(0x7f0000000a40)=0x1e) read$FUSE(r0, &(0x7f0000001000), 0x1000) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000900)={0x1, {{0xa, 0x4e22, 0x1ff, @loopback, 0xa3}}}, 0x88) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) [ 280.559196] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 280.559201] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 280.559208] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 280.656279] 9pnet: Insufficient options for proto=fd [ 280.703468] 9pnet: Couldn't grow tag array [ 280.746218] 9pnet: Insufficient options for proto=fd [ 281.050251] IPVS: ftp: loaded support on port[0] = 21 23:11:49 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d663fbb44854f669fd4", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x8000) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0x5) 23:11:49 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, r2, 0x404, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4a9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7013}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x800, @loopback, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000084) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x40, 0x0) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x8000, 0x0) mkdir(&(0x7f0000000380)='./file0/file0\x00', 0x1) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000280)='comm\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:49 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(0x0, 0x2, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:49 executing program 4 (fault-call:2 fault-nth:33): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:49 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d66642c7266646e8556d721c3fa49d06b2ba3ff95fcc8f44c35429fe0f2c4ada1907f70ac10755c1763bf1997c18315ff5c9b6015b66482108366c09fefa0e30437d23d4e399b1c07c488eb439284975dc640f32c53140213ff504632155cfb1950caec34df", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 281.359233] FAULT_INJECTION: forcing a failure. [ 281.359233] name failslab, interval 1, probability 0, space 0, times 0 [ 281.387215] 9pnet: Could not find request transport: f?»D…OfŸÔ0x0000000000000003 [ 281.387894] 9pnet: Insufficient options for proto=fd [ 281.400867] CPU: 0 PID: 13425 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 281.408263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.408689] 9pnet: Insufficient options for proto=fd [ 281.417820] Call Trace: [ 281.417909] dump_stack+0x138/0x19c [ 281.417930] should_fail.cold+0x10f/0x159 [ 281.429646] should_failslab+0xdb/0x130 [ 281.429659] __kmalloc+0x2f3/0x7a0 [ 281.429673] ? __list_lru_init+0x6b/0x630 [ 281.437789] __list_lru_init+0x6b/0x630 [ 281.437805] sget_userns+0x4e3/0xc30 [ 281.437815] ? v9fs_kill_super+0xa0/0xa0 [ 281.437829] ? v9fs_kill_super+0xa0/0xa0 [ 281.449581] sget+0xd6/0x120 [ 281.449597] v9fs_mount+0xa8/0x870 [ 281.449613] mount_fs+0x9d/0x2a7 [ 281.454132] 9pnet: Insufficient options for proto=fd [ 281.457378] vfs_kern_mount.part.0+0x5e/0x3d0 [ 281.457392] do_mount+0x417/0x27d0 [ 281.457407] ? copy_mount_options+0x5c/0x2f0 [ 281.488977] ? rcu_read_lock_sched_held+0x110/0x130 [ 281.494100] ? copy_mount_string+0x40/0x40 [ 281.498353] ? copy_mount_options+0x1fe/0x2f0 [ 281.503154] SyS_mount+0xab/0x120 [ 281.506731] ? copy_mnt_ns+0x8c0/0x8c0 [ 281.510610] do_syscall_64+0x1eb/0x630 [ 281.514504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.519613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.524883] RIP: 0033:0x458c29 [ 281.528173] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.535882] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 281.543232] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 281.550590] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 23:11:49 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:49 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') tee(r0, r0, 0x80, 0x8) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xc8, r1, 0xf10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6043}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6c81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x4) 23:11:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x3fffffc, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:49 executing program 4 (fault-call:2 fault-nth:34): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:49 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000040)='./file0/file0\x00', 0x2, 0x4) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) [ 281.557986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 281.565674] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 281.581936] 9pnet: Could not find request transport: f?»D…OfŸÔ0x0000000000000003 [ 281.709605] FAULT_INJECTION: forcing a failure. [ 281.709605] name failslab, interval 1, probability 0, space 0, times 0 [ 281.722175] CPU: 0 PID: 13455 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 281.727192] 9pnet: Insufficient options for proto=fd [ 281.729222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.729228] Call Trace: [ 281.729247] dump_stack+0x138/0x19c [ 281.729268] should_fail.cold+0x10f/0x159 [ 281.743929] should_failslab+0xdb/0x130 23:11:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x6, 0x6, 0x0, 0x5, 0x1, 0x401}) clone(0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f00004a7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="440f20c066350d000000440f22c0260f32f20f229eba4100b80000ef360fae02dfd4660f080f017d9666b8b60000000f23d00f21f86635200000070f23f8660f3807950000", 0x45}], 0x1, 0x40, &(0x7f0000000140)=[@efer={0x2, 0x8000}], 0x1) pread64(r1, 0x0, 0x0, 0x800000000002) sendfile(r1, r1, &(0x7f0000000180), 0x9) [ 281.743944] kmem_cache_alloc_trace+0x2ec/0x790 [ 281.743956] ? lock_downgrade+0x6e0/0x6e0 [ 281.743972] sget_userns+0xfe/0xc30 [ 281.743981] ? v9fs_kill_super+0xa0/0xa0 [ 281.743991] ? v9fs_kill_super+0xa0/0xa0 [ 281.744002] ? v9fs_kill_super+0xa0/0xa0 [ 281.744009] sget+0xd6/0x120 [ 281.744022] v9fs_mount+0xa8/0x870 [ 281.750234] mount_fs+0x9d/0x2a7 [ 281.750249] vfs_kern_mount.part.0+0x5e/0x3d0 [ 281.750262] do_mount+0x417/0x27d0 [ 281.750272] ? retint_kernel+0x2d/0x2d [ 281.750285] ? copy_mount_string+0x40/0x40 [ 281.786016] ? copy_mount_options+0x195/0x2f0 [ 281.793014] ? copy_mount_options+0x1fe/0x2f0 [ 281.793026] SyS_mount+0xab/0x120 [ 281.793035] ? copy_mnt_ns+0x8c0/0x8c0 [ 281.793047] do_syscall_64+0x1eb/0x630 [ 281.793055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.793072] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.793081] RIP: 0033:0x458c29 [ 281.843264] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.850955] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 23:11:49 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x9, 0x2000) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f00000003c0)={{0xc, 0x6, 0x200, 0x5f3, 0x7, 0x5}, 0x2, 0x4, 0x7}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2, r1}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="1e776c64530000", @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 281.858218] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 281.865479] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 281.873004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 281.880431] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 281.894878] 9pnet: Insufficient options for proto=fd 23:11:50 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00'}) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) 23:11:50 executing program 4 (fault-call:2 fault-nth:35): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:50 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:50 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000003,mode=0000000000000+000000011,mode=000000000000000F0000007,mode=00000000000000000000100,fowner>', @ANYRESDEC=r0, @ANYBLOB=',fowner=', @ANYRESDEC=r1, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) 23:11:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x840, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)) munlock(&(0x7f0000749000/0x1000)=nil, 0x1000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0af0ae071f0000001f123c") syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xff, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) pread64(r2, 0x0, 0x0, 0x800000000002) [ 282.367915] FAULT_INJECTION: forcing a failure. [ 282.367915] name failslab, interval 1, probability 0, space 0, times 0 [ 282.427235] CPU: 1 PID: 13486 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 282.434568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.443940] Call Trace: [ 282.446576] dump_stack+0x138/0x19c [ 282.450229] should_fail.cold+0x10f/0x159 [ 282.454754] should_failslab+0xdb/0x130 [ 282.458847] kmem_cache_alloc_trace+0x2ec/0x790 [ 282.458865] ? lock_downgrade+0x6e0/0x6e0 [ 282.467874] sget_userns+0xfe/0xc30 [ 282.467888] ? v9fs_kill_super+0xa0/0xa0 [ 282.467899] ? v9fs_kill_super+0xa0/0xa0 [ 282.479644] ? v9fs_kill_super+0xa0/0xa0 [ 282.483910] sget+0xd6/0x120 [ 282.486977] v9fs_mount+0xa8/0x870 [ 282.490639] mount_fs+0x9d/0x2a7 [ 282.494057] vfs_kern_mount.part.0+0x5e/0x3d0 [ 282.498742] do_mount+0x417/0x27d0 [ 282.502301] ? copy_mount_options+0x5c/0x2f0 [ 282.506720] ? rcu_read_lock_sched_held+0x110/0x130 [ 282.506736] ? copy_mount_string+0x40/0x40 [ 282.506749] ? copy_mount_options+0x1fe/0x2f0 [ 282.520501] SyS_mount+0xab/0x120 [ 282.523962] ? copy_mnt_ns+0x8c0/0x8c0 23:11:50 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:50 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0xc1a3, 0x8, [0x4, 0xffffffff]}) [ 282.527940] do_syscall_64+0x1eb/0x630 [ 282.527951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.527969] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 282.527980] RIP: 0033:0x458c29 [ 282.545066] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 282.552870] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 282.553353] SELinux: security_context_str_to_sid(staff_u) failed for (dev fuse, type fuse) errno=-22 [ 282.560148] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 23:11:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0xfffffd6e) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x800000000002) 23:11:50 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',Qn\t']) [ 282.560154] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 282.560160] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 282.560165] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 23:11:50 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x101000) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:50 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616eff0100002c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d2ef24d5faacd22623c5159009dc7f5d9ea8f5f60be52f87dbde8aa1b0844bc8e2d9bbaa35d1d37cd2ef75b901ab1b6019e508001587df260daf944fc0d11d6da54181f3a034bcc72edff7ec9753363b571696a7dd7664a95abb556ffbbe0f896ede77ff0aa2b4d69230c57ea9691a2eae5a1d6e930a7e06da7c0b1ce3483393c334cb7", @ANYRESHEX=r0, @ANYBLOB=',\x00']) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000001c80)={@rand_addr, @local, 0x0}, &(0x7f0000001cc0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001d00)={@dev={0xfe, 0x80, [], 0x24}, 0x1d, r1}) 23:11:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x301080) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x800000000002) r3 = mmap$binder(&(0x7f000050c000/0x4000)=nil, 0x4000, 0x2000005, 0x951, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={r3}) [ 282.780637] SELinux: security_context_str_to_sid(staff_u) failed for (dev fuse, type fuse) errno=-22 [ 282.784530] 9pnet: Insufficient options for proto=fd 23:11:50 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="03b7c66eac5efef9ba6a8cefbca4465266643d697e66689448fa1d0a235e219c85212ae5cf55f545954c0f485f04696eb61a41c50a355b72373ccbc271f243ea01cb1baa1ab9bd8756f2243961e768d190d6c7ebe5dfbcd161e937f56613469583fce57a2135592c84db092ea2", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000040c0), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x2, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}}}, 0xfffffffffffffec9) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000040)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e7}}}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x1, 0x7, 0x7, 0x100000001}, {0x2, 0x8, 0xff, 0x100000000}]}, 0x10) 23:11:50 executing program 4 (fault-call:2 fault-nth:36): mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:50 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = inotify_add_watch(r0, &(0x7f0000000000)='\x00', 0x80000220) inotify_rm_watch(r0, r1) 23:11:50 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000240)=""/164, 0xa4, 0x100, &(0x7f0000000300)={0x2, 0x4e24, @broadcast}, 0x10) 23:11:50 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7, 0x100) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000140)={0x3, @null, r4}) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x800000000002) [ 283.037140] 9pnet: Insufficient options for proto=fd [ 283.076326] FAULT_INJECTION: forcing a failure. [ 283.076326] name failslab, interval 1, probability 0, space 0, times 0 [ 283.093779] 9pnet: Insufficient options for proto=fd [ 283.121463] CPU: 1 PID: 13558 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 283.128735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.138184] Call Trace: [ 283.140793] dump_stack+0x138/0x19c [ 283.144448] should_fail.cold+0x10f/0x159 [ 283.149061] should_failslab+0xdb/0x130 [ 283.153029] __kmalloc+0x2f3/0x7a0 [ 283.153044] ? lock_downgrade+0x6e0/0x6e0 [ 283.153057] ? register_shrinker+0xbd/0x220 [ 283.153070] register_shrinker+0xbd/0x220 [ 283.153080] sget_userns+0x9c5/0xc30 [ 283.153090] ? v9fs_kill_super+0xa0/0xa0 [ 283.153104] ? v9fs_kill_super+0xa0/0xa0 [ 283.153111] sget+0xd6/0x120 [ 283.153123] v9fs_mount+0xa8/0x870 [ 283.153136] mount_fs+0x9d/0x2a7 [ 283.153151] vfs_kern_mount.part.0+0x5e/0x3d0 [ 283.153163] do_mount+0x417/0x27d0 [ 283.199539] ? copy_mount_options+0x5c/0x2f0 [ 283.203958] ? rcu_read_lock_sched_held+0x110/0x130 [ 283.209025] ? copy_mount_string+0x40/0x40 [ 283.213465] ? copy_mount_options+0x1fe/0x2f0 [ 283.218297] SyS_mount+0xab/0x120 [ 283.221764] ? copy_mnt_ns+0x8c0/0x8c0 [ 283.226026] do_syscall_64+0x1eb/0x630 [ 283.229927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.234812] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.240091] RIP: 0033:0x458c29 [ 283.243289] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.251015] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 283.258552] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 283.265820] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 283.273090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 283.280448] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 283.288379] 9pnet: Found fid 0 not clunked [ 283.293307] ================================================================== [ 283.300956] BUG: KASAN: use-after-free in p9_client_clunk+0x131/0x150 [ 283.308409] Read of size 8 at addr ffff88808c472d00 by task syz-executor.4/13558 [ 283.315941] [ 283.317573] CPU: 1 PID: 13558 Comm: syz-executor.4 Not tainted 4.14.112 #2 [ 283.324585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.333964] Call Trace: [ 283.336557] dump_stack+0x138/0x19c [ 283.340185] ? p9_client_clunk+0x131/0x150 [ 283.344548] print_address_description.cold+0x7c/0x1dc [ 283.349925] ? p9_client_clunk+0x131/0x150 [ 283.354166] kasan_report.cold+0xaf/0x2b5 [ 283.358316] __asan_report_load8_noabort+0x14/0x20 [ 283.363246] p9_client_clunk+0x131/0x150 [ 283.367310] v9fs_mount+0x6b9/0x870 [ 283.370947] mount_fs+0x9d/0x2a7 [ 283.374315] vfs_kern_mount.part.0+0x5e/0x3d0 [ 283.378818] do_mount+0x417/0x27d0 [ 283.382442] ? copy_mount_options+0x5c/0x2f0 [ 283.387023] ? rcu_read_lock_sched_held+0x110/0x130 [ 283.392135] ? copy_mount_string+0x40/0x40 [ 283.396565] ? copy_mount_options+0x1fe/0x2f0 [ 283.401108] SyS_mount+0xab/0x120 [ 283.404652] ? copy_mnt_ns+0x8c0/0x8c0 [ 283.408575] do_syscall_64+0x1eb/0x630 [ 283.412467] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.417319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.422507] RIP: 0033:0x458c29 [ 283.425695] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.433400] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 283.440680] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 283.448150] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 283.455425] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 283.462692] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 283.470173] [ 283.471806] Allocated by task 13558: [ 283.475732] save_stack_trace+0x16/0x20 [ 283.479728] save_stack+0x45/0xd0 [ 283.483277] kasan_kmalloc+0xce/0xf0 [ 283.486991] kmem_cache_alloc_trace+0x152/0x790 [ 283.491655] p9_fid_create+0x4e/0x3b0 [ 283.495448] p9_client_attach+0x7f/0x6a0 [ 283.499516] v9fs_session_init+0xbe8/0x1590 [ 283.503839] v9fs_mount+0x7d/0x870 [ 283.507372] mount_fs+0x9d/0x2a7 [ 283.510734] vfs_kern_mount.part.0+0x5e/0x3d0 [ 283.515488] do_mount+0x417/0x27d0 [ 283.519026] SyS_mount+0xab/0x120 [ 283.522474] do_syscall_64+0x1eb/0x630 [ 283.526378] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.531558] [ 283.533183] Freed by task 13558: [ 283.536556] save_stack_trace+0x16/0x20 [ 283.540626] save_stack+0x45/0xd0 [ 283.544081] kasan_slab_free+0x75/0xc0 [ 283.547973] kfree+0xcc/0x270 [ 283.551251] p9_fid_destroy+0x1cd/0x280 [ 283.555221] p9_client_destroy.cold+0x61/0xac [ 283.559718] v9fs_session_close+0x4a/0x2c0 [ 283.563951] v9fs_kill_super+0x4e/0xa0 [ 283.567837] deactivate_locked_super+0x79/0xe0 [ 283.572419] sget_userns+0x9df/0xc30 [ 283.576223] sget+0xd6/0x120 [ 283.579241] v9fs_mount+0xa8/0x870 [ 283.582776] mount_fs+0x9d/0x2a7 [ 283.586140] vfs_kern_mount.part.0+0x5e/0x3d0 [ 283.590636] do_mount+0x417/0x27d0 [ 283.594186] SyS_mount+0xab/0x120 [ 283.597644] do_syscall_64+0x1eb/0x630 [ 283.601651] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.606835] [ 283.608475] The buggy address belongs to the object at ffff88808c472d00 [ 283.608475] which belongs to the cache kmalloc-96 of size 96 [ 283.620974] The buggy address is located 0 bytes inside of [ 283.620974] 96-byte region [ffff88808c472d00, ffff88808c472d60) [ 283.632599] The buggy address belongs to the page: [ 283.637540] page:ffffea0002311c80 count:1 mapcount:0 mapping:ffff88808c472000 index:0x0 [ 283.645713] flags: 0x1fffc0000000100(slab) [ 283.649962] raw: 01fffc0000000100 ffff88808c472000 0000000000000000 0000000100000020 [ 283.658039] raw: ffffea00025b0d20 ffffea00025b77a0 ffff8880aa8004c0 0000000000000000 [ 283.666083] page dumped because: kasan: bad access detected [ 283.671817] [ 283.673445] Memory state around the buggy address: [ 283.678390] ffff88808c472c00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc 23:11:51 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 23:11:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80c0080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x925}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x75bc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x851}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x4}]}, 0x70}}, 0x4000000) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x800000000002) sched_yield() sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x218, r2, 0x120, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc992}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb82}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x352680de}]}, @TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77380000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f0}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99}]}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 23:11:51 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000000)='./file0\x00', r1, r2, 0x100) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f38e5f56b9b8a2e135ecfb839142504dd3e39176918e32e697056c90fdfe868be6844b003655019945a7720f72ed05e95e11955e242daf0df5a032023cefde816", @ANYRESHEX=r0, @ANYBLOB=',\x00']) 23:11:51 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="4d9cf0f4ec1aa9a5e5908bd8ec8d4dbd8bc6198cd59a2813636f1c55373ca66b963916b3fd4ec0755f6dedba4e4e04f887e1c6c0a69f633790609103b088e08620f8cf5104803739"]) mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x6) 23:11:51 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) [ 283.685946] ffff88808c472c80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 283.693314] >ffff88808c472d00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 283.700707] ^ [ 283.704272] ffff88808c472d80: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 283.711665] ffff88808c472e00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 283.719029] ================================================================== [ 283.726424] Disabling lock debugging due to kernel taint 23:11:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x40, 0x40) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000478000/0x4000)=nil, 0x4000, 0x2000000, 0x82030, r0, 0x0) [ 283.738033] Kernel panic - not syncing: panic_on_warn set ... [ 283.738033] [ 283.742933] kobject: 'loop1' (ffff8880a492a5e0): kobject_uevent_env [ 283.745514] CPU: 1 PID: 13558 Comm: syz-executor.4 Tainted: G B 4.14.112 #2 [ 283.756358] kobject: 'loop1' (ffff8880a492a5e0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 283.760214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.760218] Call Trace: [ 283.760235] dump_stack+0x138/0x19c [ 283.760246] ? p9_client_clunk+0x131/0x150 [ 283.760255] panic+0x1f2/0x438 [ 283.760261] ? add_taint.cold+0x16/0x16 [ 283.760274] ? ___preempt_schedule+0x16/0x18 [ 283.801382] kasan_end_report+0x47/0x4f [ 283.805395] kasan_report.cold+0x136/0x2b5 [ 283.808204] kobject: 'loop5' (ffff8880a4a51260): kobject_uevent_env [ 283.809636] __asan_report_load8_noabort+0x14/0x20 [ 283.821039] p9_client_clunk+0x131/0x150 [ 283.825112] v9fs_mount+0x6b9/0x870 [ 283.828747] mount_fs+0x9d/0x2a7 [ 283.832126] vfs_kern_mount.part.0+0x5e/0x3d0 23:11:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00\x92#0\x0e\xd4)\xbc\x16)\xa3\x90L\xd7\xe9e\x7fx\x96\xbc5P>\xdbk\a\xb4\xa8\x95nY\xbe\xa3E\xef\xc7\x05\xe6\x1e_w\xf5:6\x13zm\x9b\x86\x00'/85) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={r2, 0x80000, r1}) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000000040)="c1b1dfb274de11936fa85baa2e4a20736b63047696351b863dd7c2d5111691a3e967484a56f5f8e0497e2a2fa198c547170a5640a4fda979b3ff714b7d51d044ff21d610172bd1211710ef21fd03e43e6cc00f634ba1af32ee9af778a8bb2d9a482c3bfe91b41e8864171ce1161cc0a690124e0adcaaf745fb9c5eea4f8c4801277eb0", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000280)="d089d05054cef475ed68ebc972ba3e4f8a4e95f51d88d438a578dcda1282c8dfcdf69283d49a8c3d2e3ad26ae1a3e37d4c331f5a26407974f951c5cb8065a834ba181231e0d3662d1abab999cb2bda2a7a745eaebdfa84a44b6dabfa91c703af38b14adbc3a6dd81b8691b3e55d8a3ef20233f88f2c489efc80870aed98af0115ee50bfe5bf0fcd044d7e7e36b8ab986fd12532637c5a88f037556b302984e98acb3a64a4fdd21e013e88594769fe0454685b8de1301a2004d802d960da04fa4af7d38a938120f9d4a95d8159d8fd9236cb812153f") pread64(r1, 0x0, 0x0, 0x800000000002) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x2, 0x0) [ 283.833575] kobject: 'loop5' (ffff8880a4a51260): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 283.836625] do_mount+0x417/0x27d0 [ 283.836634] ? copy_mount_options+0x5c/0x2f0 [ 283.836647] ? rcu_read_lock_sched_held+0x110/0x130 [ 283.859112] ? copy_mount_string+0x40/0x40 [ 283.863379] ? copy_mount_options+0x1fe/0x2f0 [ 283.868076] SyS_mount+0xab/0x120 [ 283.871540] ? copy_mnt_ns+0x8c0/0x8c0 [ 283.875468] do_syscall_64+0x1eb/0x630 [ 283.877581] kobject: 'loop0' (ffff8880a48d0560): kobject_uevent_env [ 283.879357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.879373] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.879383] RIP: 0033:0x458c29 [ 283.899210] RSP: 002b:00007f6ef67e5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.906927] RAX: ffffffffffffffda RBX: 00007f6ef67e5c90 RCX: 0000000000458c29 [ 283.908152] kobject: 'loop0' (ffff8880a48d0560): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 283.914209] RDX: 00000000200005c0 RSI: 0000000020000580 RDI: 0000000000000000 [ 283.914215] RBP: 000000000073bf00 R08: 0000000020000600 R09: 0000000000000000 [ 283.914220] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ef67e66d4 [ 283.914225] R13: 00000000004c4c14 R14: 00000000004d88a0 R15: 0000000000000004 [ 283.915713] Kernel Offset: disabled [ 283.958051] Rebooting in 86400 seconds..