bdf56036f3b6968c0e324467eaaa674a76fa8db91bdcf4bd353038ea7ad0940660c6c974b6425677c13666fd5cc0b41a47037c17200c04513a89221ba50a099408a3016d2e0b2381267f8c7e245c5b59e114d0f65406f2aa6be90c23aadd4db7a0730a20faaeb270068ce973ef988a7a46a4a72376dbffae949b7a96dfa5c9fc6b12a3a2855bf9d9663abb83db5748efbbe3ee1cd05e93f13a91e3a22c55d18357fa632d8426464168f771e33b9819834e71d10a88db0495252e973b495e5f46711429ae3f1e4c528aca63bdbe9c909879e76ee88b9454c444cfba7e717a00ae3a7eb67ccf2df0da713f4dc68747bf802211f31cf556eec9d086e142234b7118c116ed30749aadf4e171188109f967b3b471f1e910ac652b3a021fb4b897629e757ef4725667fee558b0ed7d0884c0391f4ad472ab73f591ad2256881e0701510cbff7edde2f94ff97eee07895d32fc81f53d81ca3a13259e1d5c93d07b563cf5f12e52ff355c152222488c547f08428462bfa3868696629e242ac27783b4c9d377cb660292348582223b125f3f0c3fee669d409ae81ba9bb6bb521c09a09f02a95c1365f58932e678bbfdbf70e900245f27c42981d98bc07cd6b06e7a50ab7e3f0536f9d052e670259ebf2445b4e90f3f32fb92375c65d67219ff35832555a1da4c068da0b86fb13e36a57cde5d7fb6a77f6af48d63b98e11b1a17c08ed2025ef042038200ad4b10fd599a2d90391ad60953c43263ea14a4b18f53b5445eb21c2700f20e2ae5721735692ae4ee99628e6810c06e8aeae625192bf2131fcb41995f1e50506304c638a9cfb58c1bce3100226763b64a8b5d041109876064864edbd8089ccd2392d408b253cb4e86effd9caedcc000ce813f7825b0e0395dbf7e5ee0fa0b07bbee02860484008e82c5593a0b493d66d2e7482e2443e5730fc85cba1e7d70314d103e01b4339767865fa81177953686be7349ecf84dea79dbea1a1986a48bfd83349924c654aa00605caf122e628acd5d0007b0ba0359ec90fb15522e3d581ed3135cc102d9cda8dcb141184c968d7ec34aaaa4321d9d2d2b0e1d6b00aacef1bd4a421858395dd1522706e96c10ea81324a0f9e0a611e301394902c18a437c6172912c15aed5b4d7e4dd650931589ab537739bf02dd404284f97d1a69dfddc33d8891fa19e584669f07cd62b880ddb5cf4f91cea6bde1fa333d5a527ef57ebd5129c96425a92a2706dfc195eaf699a7837646842abdaf44b4b0d7557be5f22680bcd6ba870d816885614162fc3814b2370508e4ab6d05e10ea7e625398a17206012e0c70c3bdd42b60c5a41e7a037aa4472ae5b5e580402cdb355994fda947bd2d3a56c25849269821e6e7cd92a3b0283e5c2cd4f88dc2db52a3026dd84752d01d29229ebcc6298f8c0d97bff7ec8303a7cdec876349a67b2dcebe6e972e5e611e1a226540e14abbd3d541fe75332dc8a69421f835f1102ec0a0b074cdbbdffafa95c6979fca5697ea498935bd1d7bd8c749034514e458d92d86b8b110bff95225e9b1d296aab361a7053f5011918b3fed669ad0431b61348a156cda4bc02ee530a609f1840eb72234e0353a63337d29765de7af3895e6e75c8fbe896dd04c48cf59d8bed55928dde274f4f663c447d1166d1efe679209123c6faa0715c9877b6fd3da2a460f911af4fa8189cad4061abbd2701d0939c31c8f4d8324a846d6b4d287b60bf19969af2cb5ff4660feb52fd024bcb1d05bde018f06d5f76d431e6f0967bc74140176ef31e643b601aeb481459f0b67dc14f7261458af7f96fa01550688e92fc1dac20b76aee638c1ff994695bceaa643e77e085c746eab46340c611238e08743d6f715f8b1c2969c7a90affb75a066cd3d946548406b6d0a3e0aac0d935931e2ef7224ee3e0a811ae7ab2efdcf2cd3ac697c64427eb649fd00ac5fe30fec1d65213183a5f9ac2ee9f3d452862986b003670ff06c37a2c07ddf94f0bba2729684ec6dcbc5c198f0e1078584bb6b4a0593d9827775b31a91f33ff81f5a360fbd56adfcfa8f129a3215f0257c758cbe460966b3c4ef9a2170e0b5a919b75215cbafaba93118a8ac338e43bf0e193bca61e5e6e4b4bda10cbda68266c1fc3ccc2d8ae7e33416a6369979b9678ebf97b273457212606e9339dc5773b5b5af5110ce25b03f57ecb9772982119f497fec3dceb001069e41d042e3e108bdc680ec7f42ef6a7f9fef4442014ff75d4abd3e0cd91405b149b8fa1f9addef4aaed81e135d2df7cc2172e0ff625a8e41b27afa1abc7b886b9ff3acaca2b07848c9491f346cb4f6254f3a847c2b7d2ac952f40507210f764ff123556d79eac8edcfe74cc1257a59fefa3af66c5fddf8b75b39bfe8877addc59b517d73a8afdb5aaa6d6d3de1b0463b2a7db4042c237e7fe586f50653d9b8e1860ffcede6f343d655237e7d4254c088e8a525d485a45ddf20769e014d61969206c1d7321903db8b8f68f1f9a0bb0ec3c728b1987082ee537d2f1b3a33bf93fa20a4c0ae4b620135d76299c2f882d78d065bef1d04b05e8e7188206e1907e9cdcea46fde207059c671d035f72f6819b132534017a3e197388eeb3d9d509ece6b0fa6c43baf446d6666b17ab321db8bf5e230fcb021499270904de386f071241de179215f965d5ce3483a6329db963d94e14dd9e46ea24abfde8633c5785332ff81c4a830c360898bdc8bd48c4af7068b47a3e5ec0af37a78e94488b38e630fbf473aa564779ee8a5c5ef93f1ca76ec02b3d95cff8d905a09577a9940e94a2daa7ea933fe012dcfde62f472136c740a3b877fbc2bd6d9c8955c7ea92e80a963b1f51f47e65264384e9bc3e9348639ce6258c759c71421895f47fab2f78d7a3e86397a43438bb07b0daeb33ed891e1bc8e8a323ff3c33c887daa6320e0cb5e369c7da07d60fdba5a7745c39deb1ec4b11ae57751a26c633067dfac9b97dc154dce6fd460febd25485835cab76a2738810382b5dc5db468acfc26fe63edf894edeb63766ad90895fe4720e15eb1aba0b07b099af14be2a8fca562347832d9dd9ddcd5b290bdc5765f103fca0675b5e2d3d1eec606a97fbbbdd4491a98aea050a9504342c280caf93e28500758e5e086303032283a08be05e09a1fbf094f6c53e28cf55f86feaf06d9245277af05f4df707de402255f7c2bf622d267fc9422e2c3fc5edced35159fc7977da840cfa9daa85eecec8ca7c34b1c94885aab70af63fe69b4d53a0277ef7c34ccb53794a8d3b56803ed7f70660a2f6094a3ba92b149c3429d872025e70612dda129e162348ce71e41a27502045b997aeee3c5ea4cb557b7dbbda96aa647efbfcfd1a63c52ebd914f7216cd081ac79c6875005eb2abb32a2a8436428c0b69d845ec0c15c70cf21f44753936e8967236fd0415077b9946e7f20797811bb3b6e6e76982ca79af38fd03016c9339e5dafedfc7c685614844ee278b302b6edec222486c3cdb9892b468c803ff3e4c95c6ace76348e485705a311aa5488d0651be829d483e9e5e6aae8c4dace44f4a1fac5b7aa853d285926dff1428c32e9c005b7d2ada7f4478c296e0b9f44c8f7298f17b0dc055ccf32b999f09891500345abf1e2841b4b76e79c65b24310d5c892d1f9d4ae66f521dfd57e331137ec809d36e8925506b72706bc854ac25ab2f7feb09c6f5c4a58620b983edd3e8888c8673da9343dd7184c231b17af7f3585bd8c2fa737ba82c833b69071128f3b64f880fcb9287ac62997cde649bdd4e7372764483448e8", 0x1000, 0x9e}, {&(0x7f0000001280)="c5b39128e4de68336d2c6f3c6baf54f7711be575eba34e1b123009bce7c2fea490148759e7b5e4b8b4e7908e9687d1985510b71f9ae94822eab1c64d7617a903eb18fc79c8a48bb0d4e539e90881adac9b9f6a7961c04b5e4cb6c3c28386be766a8c0a6b000b0582b1fbf20b2cf8cdb84936b1a47dda01ed455695983579b14e62c493f168b868b834eb3c5563e9cc18d39a0f0926", 0x95, 0x3}, {&(0x7f0000001340)="c9c9285b12c90f85ce6bf54b4c5e6be9014f536336379668ac9458bbfa529bd909cab8e427af90c797c6481a189d19023db4f62ac9ca2f4c1383d1328ee948c8af2285cb85b938fcad096473ecf21670076cf974000eabca02b05d4ecc3458dae09029e744f50d1e2e7726d571c9e0d519a2c5ad410ac7b7edc25ecc4cf958782493238b11a1dcc22d64ab721fc14e83f496fbb91f11619633d3ae3d34bea0114cc1382f14fc7dd16dbd1e4708e34722966f6b5ffc9759", 0xb7, 0x4af4}, {&(0x7f0000001400)="5787a12625ad5ba6e7cf36e48af450b75153b7d43f9e2a671aee0782ea071076590f7080baff249ec6a161c5bbffdfc1dec2faf142468eef5b372e9c467d4342f8759320a0a4ff2af1501a948b725162b18e022a56beb17f9423a0d18986c510e04195f06821566e64670563ee99270277d55728f0a7b957ae762420746c4cbbd7a48fbc19ce75f80565554dda5f2f6515d4c8dc5a82cbcda6de13d9e113f546859f0babec8e4900eb42b254835b5f9666dbec41f6ec0ccfcbe6831fc92cec6d577f0336cad32ef496f69ca36545", 0xce, 0xffffffff}, {&(0x7f0000001500)="69f2d49b65f5e7f5051365a88bf58409e292edfb28045d556df8967e0d174b24e21aa10506c5a87002c8020e0024b028828742056be2f870880b7eab7e13420b22474a35ea491494b1387950f848e9c6f8121dfea7bb697a95a6fe2ba8c6", 0x5e, 0xb6}, {&(0x7f0000001580)="76814d56d888c5e60a3ebf5693e7e8038280664bc3a6212fbf0b1d61ea3cae674a4e35d5e970046db66029b18a9aa551cd7b91f208adf9de261ac6d44965554bb983325d7c2924baed8398", 0x4b, 0x100000000}], 0xc0000, &(0x7f00000016c0)='net/ip_mr_cache\x00') 03:33:29 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:29 executing program 7: r0 = socket$inet6(0xa, 0x8, 0xd0a) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000a5e000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="0f21e066baf80cb89ce89b85ef66bafc0cb8329c0000efb9800000c00f3235000400000f300f0766baf80cb88014c580ef66bafc0cb8f7ff0000ef66baf80cb8ff57098cef66bafc0cb076eef30f07f2f3670f01390faf6fb6660f388224a3", 0x5f}], 0x1, 0x0, &(0x7f0000000100), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc028ae92, &(0x7f0000000100)) 03:33:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)) getpgid(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001800), &(0x7f0000001840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001880)={{{@in6=@remote, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001980)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@dev, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001ac0)=0xe8) lstat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)) geteuid() 03:33:29 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1291c0, 0x0) read$FUSE(r0, &(0x7f0000000200), 0xfffffffffffffd2c) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)=ANY=[@ANYBLOB="090000000100b010ee0000eb127b2383805492f1f704bdb6b702b8e06d54a99ec2f61a"], 0x0) 03:33:29 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400040, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000180)) syz_mount_image$hfs(&(0x7f0000000140)='hfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000580)="346c251b2a2819283c70afc3a99395226ba9f1fd75fd5a172bf808577b25200f757ee2ba13ea2d507f58263d6ab3dd22e3a810efcb70c282a42edc083157cb9b6a5d37f6bae8a2cb08ff61a02f9f419705c0fe5a2632750e21a322d711a2eee9b2b8b2db9e89f0677260723657b25c210ac2047d2f3851e6cc9d862708de51025a688c59b616bc2ba9f120fc5c3b19e2e3bb97081742070806d101afe3226293bbaffef1b2d25fce3abc31308c10a5f4b9c036251ba0937550b6989b01639fafd71a5280c987452b417d36f36a324282a3f1c9c675b15d2273676d957bb9310a8bb80ee1843574a8cedfde1944ac04f3b3eeecc8fa9cd089e2da38109d271ac442175a9104f748f3426fbcca1fb7e3f6069e5e6d98f4a513eebaa011fbe88c9cbbe0e185b55d09e8c76787b110c8f83fcb070cea89aa6f71974dad2cd450ea2c48c227fb549e11f51851f3aab19a6a0ab156884aa5a3e6856829cc90886d0618660573fa9de42e0dd74eb2d16c156715cba455214110ab7ea0cd2788a7bb64e23d832351a5312b2aa26424b4891bc6f92beba3a9ded95825805470cc8aaaba5da536be92d722774bbe97a33f598bec6e80b70a76f97b585bfc43f87d877b33f049e24fb7137dca30004c9b48ca801e71a602f90a46d4e969cf7010491d000d5098684081cd51119fd96298ba6fb06c1c5c56bc8d26bd798e3f8df8e50b01e7152e59e1191023661b14aa48dc26a63937cb30be1db3e4fc05167999d897520f9928091ebc4451a92258bc17eda4dfe6c1c8d49f46a0ba4420af12107c9a62cb81cff033c231c1c1cd21eb4f9ca197ef75235465739fbf3099468af8cec1f9d39f76d772b273bfcb22f518ed75241d8f71c15803e8f7f8fc5a05e0a62ef78c24dc94ad5e690b6e602bd6c70b923c85de478b4d72efc167b3cf597e6c560b55b6305762e15d9281a46024e1f5a06ccc42c01ea390e4c54d3199eee16eb5e248759e263292a9ffeae3cbbb6e794f30e49c3eb34e5f7eef656396cd8774a4271b8278d9335caf2002ff935bef6c6d8536e2f00b307158c4d4591870db117bdcd24328cc5b486e5f858bb34b70be85f5b0f5a0d6657ffdb9a498b7d2ac46493fc65510511eb187a4f8103d834d6d030bdad4b38bf1cf946ea1741d8ac55292a6d6e97279d7b6237b156313008e2b55299f557f6fbbb82d5e014aa3a859fbedc3bb5b328d7ee6696ae8b3720903541886a5f0da3ed5440aa718d2badc9529e85db0b94b51a2ddb84600e0c3c18d91b7f6efcbefe4a197e7137bdff87984f3dfe227b2260ab249c78dd25dcb204c281df1765f6886dfad870078060d89f0727d0d72e4a8c6919d2ec9f45a09e7a1b2daca495e40427c53d3b9ab688499e3f7210b94c6dac1d79f04af1a9005faf13bfebfed15ae647cdc3b8978277fe8cbbbf7173f948726cac3487a3c1f17af141b6b07c840c3dfd6d142eab8e087f743ee460129a13e82251c927a84d499036df510ca5e37fc134b28f85b8e62dfae94978a04182b6d1ccb739ce580404e80227fc24213f246c93564dce1f5a3a2a0f973365610b484d851d5c850c51d5f4ef0352293fcf326624c9b994e66eecaeba2dbec6a963e18e35d92895c513b2b77f383cdc84472821ff1e97e738b2190d6d20a2c19c2719be01763c8a9d54900e3c9209576d29dd57b7025e986be6ca456191bea17c416d540f9922046cc9afb257666969b9ce4a501c97a9426c54e5fe98ed0a967ee26f2eea1e55f411ad73f4ca47534a6e9dc512833c6616b63e9e98467484753761d6c1146da6ebc2ed84b61dd6b28c359ffb32bb7ae8996acd50ef91ec9fdb47c6767f67180d02dce839cf671931f2a9e68548de2a30bf7dd1aa22078111c2c4dd7112f70fa49fa5b22bece1a011cc1e609379d8d2337703e98b12a929d5c95863cbea212a4c4626da8ef135e7e69e74bb08bea584e8f6de97cef0b943a75e8e80c444414d440925ea4711859a6e7c63e49c90ab2f1002ad16fc6f0c9862aa4b2b6ec59d6156593d69e211e012833cb6e41e1579845c2caf478f15adfb6e451d2042b5461da90d13a3075a7aa31a18f079f54ab84043939198677914f5fc34654e73548de82c195078910ed7b45c79933de0b938688f9db211251c44084585c5810e70471fa5433c82f0a36ac8539bdb3dea44bbecddae6c33b623cd35b799aa702c645c9e5787df0b5bdb0abf9934712bda9e34a453a7c95531c80ee929fb3f078292b2ce6532687e215945c77d10942fb3b8e0cab84c121da0a898a11195c566e2f0160d69d74905648c545fea525d6491b9573548f7c42f49f3302a47f93888a33b106eac8134182805d00a504d320e5208f6d0c30cff43d5205afe4abfff2ac65947d4fd6816b1fefe8708cc93e96f97f21bdb3f65a37793f1b92387e4480f31a322c619687e753c7e28f014ae044f96777effb28f7bf041c1882979b38ce2082b23d0d608a7544fe6b151c2808b8d70727315cf64cb7975fe3f7a75e890acebe23f74f32ce2422f61ae4d5fb2af92e8b57295b8113a06c852451979cfed3881e9ddedf14a681be61d9a269f7167f4c038fc05d0b3dcc509f4b805560826e05ab4ac9a9875453d59fc1f52339899041a05df28d52b70f71677ddca3ca4726af0c81687a68b39a6d3ce8f5b2d5735c099ae7b0e96c4a499e4f668e43b2218c3d408d1543815d00dfeb10c621cf1dfcdd17155412e2a62ee3a2f86e1dd251ab3115908ab6078bf1b30c6d07cba592082949f2b8b5bf14191c498286cc214f7a559b91c682156303268c9e99fc20caf40bdd7281bbce7f04d75e5c1c05ea33ed883d7b4c308d879b311c75bf6a5eda81982a35a33e3832fa3b35c7f23fc1dabea430de3c97f0ccebd9b6610b2b73cdcbeb255768b9192647167cd6d0c826cd2f2483ed31ba2cbb4315132f55f327a49d2834a3a117192d2df950b03966b04bfdb595e21281f312c7dc3d1a9047ee9461799932d3c284a967a499df454e7f92997746125847c11be61aa7140215617e26cafbcb4f43612beefdaa0f436e4d7c75224f63cc28675cff064efb5f228bc5df36218ad34fc017b01c5fdaa366d5bf96250944fca8386a894478ff704026144de6c0213b0f782966fb3c977f2028fc00382aaac956294f6b62e28f802bf1f79896eb0ee655fe5858a35a8f431990a85528bce45d4acf100184355f0121d90a180d18ab887cff82c5ee37cb596a695086e72ca88479bfa351e924a553bb7d57d43ec6ee9132f128462af4489a8a6ff3c1e51e52b8fe4101790ef80cd81ba96ac6969c72e85ab1ecc0602d96c7f12cf5c41fda71b102a28f722b6565cd616e692305dcc63f08cdaaaa27c035c2efd1f962209c90810690a9cb5ebf7eb4407978c125cf706dd95a61886b3ef9ab9f1334064568d9ab63eae3ea4fd64c793b84ccc979b10fc0d86533ad9e52cf50bfa5f9ca8b81ea345aa413ed50dd55fddcef65013683fcd24f5f48dbf0c154a23b874dc35a68299ba3c21396a2e33249549384069a1fda9435a073eebac871d2324d7d35d924005268b3fe3743b421b012368c866d3e11f640f0fdf4a47da47cd473843c2d9da3618f08f035d25b3e97fffc7279d0dae45e438ed9c09b6baa72750af8ad6fd08d70a695f54fd3c88d45ba5563fe9e589f0d877e45d9d86a1511c24e96f30412e8a276e24d1edcd6ed0025ccad8def557dafea349ccaa7f357a58e3c2d0d53e4185e2fd5b9836088cc6035bc9ce58878054a9a2dd7bf48349047db0ea89d4413012a99959e779c9b94edd243b05d3ae90af0c59117dc3a000fb22a8682815e5bc490b4eb2d10eab9e2173f54077263bd55acb9030cb8872f23a37d6f89dd4748db43936a45628304c36903b9ae18bf26b76cfdcfb11040b227a197d009a655fdec02fb929f7a3db527935ef82db45663f7501280631b961e578785d2ccb28fb13ab92eaa7a416ca3ede4a3e9c06bfc4ed9b2dab96eeb7269da5fc0fcfdaaa37ba33a8893f93ba22aecd6636ca38e987db6e26ffeee98a9620ca7d563ab8cba82b6eadc977fca0e386c36ebcc66a40cb09b64a1f8a73b55a82f576a755395ba98d9f76f8e8686ee4d471223e5106bd441754b4f571be378a92357cf287d8203da30038b9ca7e6b8540cabf046d53f39b6fb5bdb8655fea433628619c708d037ac9b0c9354034341a0cd712193a9885e259acd5e5f9554d1207bd1e839b6270ff33e5b3d62cf6a7705e4631df630aeacb7b5b59ef5f3b1a17caf637d38c0f38198d11b56e0b901e68d2c6226649a835864bec4682f3f3ecc0c06e73957c2b835419752f5266db3f9ec1b3476ead303358b83891976866a02c045286cf1ac1bd325ea7d74ed4f11cea4b32ff3440297ca7d0fd8dbfb81b40413fd1f23e1a17cb299d01f956d36324cca121edd61e918cacc78f6dada8c2348b2b540aa6f089342af122b6c912e799694402f53ddee236f9ff61c86484e21f299bfbc1c1b93803c61b21ce145a7eeac06eeddad33271cdba3e8b882d1757f50cd66cef98739d9512259723e28a431d491348852c755f825b55b85412f1eab3699465bae4fa1fd6c7683caa217e3f5dd9d80b18e851e3f9f143dd9881422179f074cc071c59374c2ade24f4a3c6c8f4c366982a62e96fbdd8b8896ac6dbdf301f64057e9a8e6f8df1df473af95402af7af23463c40ca26758aee505501def4e31c9098a300c71b4c11cf17f45fd9096fc62a49e21a0a6b418b91e74c26fd90c4f6454afffdea5795b6800b6a7a76bf6a2ca75b175095f8dfaaeae29ff989cd50a45198f0aa1479c90586a7a1551bf8c6359659296bda05e21c61ece4db7da0e271f4002b5087929e12da7fb07f84f04cde6f2328bfaa2bfef344211acfdd5051b8adc44158c0e29e918dc54f019b84b8bd04529b5f2c458aec87fb6ae564f9da04e99efda55c0f90feadcb13c7b60df87dab6941bfba753fe2c1d322befb5b9e00f450da0b08211ad018c9762ffbda6cacb33d064604cd2bbd09bdd5a03b11c2afbc824aaffecea778971cebb0b1ff94ce6862ea9331441d7aea53d245ea114a73800c7ff368d919b4e52bb2256c56f9c880ad8ed3af74d302c76d0de7107b861f29a782a20e8b0413a6e8c80527e41ef1586bae9a8043bb547be83ba9b842cb7014e1b3d909ca3976fcdf080cad83b96cd8c883c4ae4a054d8f9f1e27bf1eb90c5e024bd686ae2acc99d6da33ed4c4595a0e7442ee85210aeeab57a313488044afd9304ca3c5dc5ce12d98f5101291a63d68b252b708aae1788689fdb25e4366dfeaec1a3f36ef59c17f38d995ffb8e1a343d7becc9cbaf871b331362e9a8a7b739c785d43ff7d6f1fea218c9ada7618ddea2840128e3c402889a9bebaf4ba7d37aacc43f2056ef843047e679d210a3f6370f4a9fa7248303fdd94b095be798da2916b18c909ebaa1448d6bb53bc7aecb240f919d3208ee578e6e40d53d0c5d4688f27322487121b55212a979775db1efa1d0d5189deb178ca9535685f928db5e48421494926060b0c72b7e7bd3b0f1efb650227eff7f5528c752e1e70090a049047cc94adffa5bd46583fef8312fe5e356401d5642c739bcb4e6fcd8c4b1428ae0a0e52f857e0890ba552ff1f09eb4aba615e49ac21b07afb1b1d3191e52ce6cfbc7363aa43a8f34bf29bdbbd4ec19cdc727199ca8d58a5788fccf0a39426c821a5f8e037e68dd8906cbb39753368716db62872f003dea1b131972f519fe5f0e511ffa44e4c77551", 0x1000}, {&(0x7f0000000040)="09ab25160cf085aa42767f9a2d4a73ac148c9535b5a6af372331ce11a10117536543446bd56c01d0807c75674b6611d9c7a31cff1b9abe4cd90721049d3bafaab811838e3977ef732f2a7327b2e58b3a0d6e72ec7fd4e64463aea9940307858ef643c033d546d8", 0x67, 0xd79}], 0x0, &(0x7f0000000100)={[{@part={'part', 0x3d, 0x1cf}}]}) 03:33:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) socket$unix(0x1, 0x2, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:30 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x1fc0000000) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x3ff, {{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x20}, 0x8}}, {{0xa, 0x4e23, 0x0, @mcast1, 0x2}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000480)=ANY=[], 0x0) sendfile(r0, r2, &(0x7f0000000040), 0xd2) [ 252.327525] hfs: can't find a HFS filesystem on dev loop3 03:33:30 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)) getpgid(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001800), &(0x7f0000001840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001880)={{{@in6=@remote, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001980)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@dev, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001ac0)=0xe8) lstat(&(0x7f0000003440)='./file0\x00', &(0x7f0000003480)) [ 252.374158] ISOFS: Unable to identify CD-ROM format. [ 252.379002] hfs: can't find a HFS filesystem on dev loop3 03:33:30 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000300)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40, 0x0) r3 = memfd_create(&(0x7f0000000100)=']user--md5sumGPL\x00', 0x3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000140)={0x3, r3}) setsockopt$inet_mtu(r0, 0x0, 0x19, &(0x7f0000000040), 0x4) 03:33:30 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000000, 0x20000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r2, 0x1277) 03:33:30 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000100)={0x8, 0x8, [{0x22, 0x0, 0x4}, {0xfffffffffffffffa, 0x0, 0x8}, {0x1, 0x0, 0x2be2}, {0xccc, 0x0, 0x1000}, {0x6, 0x0, 0x7}, {0x6, 0x0, 0xef3}, {0x9, 0x0, 0x7}, {0xcc2, 0x0, 0x5}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) 03:33:30 executing program 3: epoll_create1(0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') readv(r2, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 03:33:30 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:30 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)) getpgid(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001800), &(0x7f0000001840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001880)={{{@in6=@remote, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001980)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@dev, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000001ac0)=0xe8) 03:33:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_score_adj\x00') ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{0x9, 0x6}, {0x5, 0xfff}, {0x2, 0x1}, {0x9, 0x1000}, {0x1, 0x4}]}) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000003c0)={0x3, 0xce, &(0x7f00000002c0)="4d56abb0be959f0eb8c79859c9431f1f02228e46bcc8f1c695da98ee6af61d80bdf658b43b3ea139efca1cce499d9a061bf2b35e251eeef35cd6277269128a8756b98ec802cd565409b2472b93ad04cfb43f74ada901d146621f564f832304d8e510b3e28839aa54b2551d419dd2471c610e8f2b925745fc6e1b2d8d459e1c28e76027d51c91e713087e8fd00a3265bdef7b9c90106f2276ff5ed034eb4a12b8e4b62eabf45ef2e29453218a61dce9cf0863fdee6d6217095864a7615ce9df3c65a7adb156d8e7e89db21697c56d"}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3, 0x0, 0x7, 0x7, 0x0, 0x166b7169, 0x84001, 0x2, 0x6, 0x4, 0x8, 0x4, 0x0, 0x2, 0x81, 0x2, 0x7, 0x1f, 0x2000000000000, 0xffffffff, 0x18, 0x8, 0x8001, 0x8000, 0xfffffffffffffffd, 0x5, 0x9, 0x9, 0xe70, 0xb8, 0x5, 0x7, 0x6d4, 0x80, 0x580, 0x0, 0x0, 0xc741, 0x3, @perf_config_ext={0x7, 0x10001}, 0x8000, 0x400000, 0x8, 0x7, 0x8, 0x1, 0x3ff}, r2, 0xd, r1, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000400)="ad010e08aa3b479707fbe5c459cfed1d8ca64c8e0cb2715494a77a43a0d0fa2942b2e4408b20edba79aaca01bb480d8a463d20b778151bc034221fd14d2d81b49316f4a4b2d9ff79988d9fa49a52de9b303cc0828c99b1cf29825e80b137ac63fa", 0x61) sendfile(r1, r3, &(0x7f0000000040), 0xd2) [ 252.625009] QAT: Invalid ioctl [ 252.636007] QAT: Invalid ioctl 03:33:30 executing program 6: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'veth1_to_team\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="24000000020207031dfffd946fa2830020200a0009000b00001d85680c1ba3a20400ff7e", 0x24}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x301040, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000200)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x80000, 0x0) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000140)=""/6, &(0x7f0000000180)=0x6) 03:33:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000140)=""/1) r3 = getpgrp(0x0) rt_tgsigqueueinfo(r2, r3, 0x12, &(0x7f0000000100)={0x38, 0x5, 0x1ff, 0xfffffffffffffff8}) 03:33:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf0}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="8d5aeeed00000033000000000000000000000000"], 0x14}}, 0x0) 03:33:30 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa46}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:30 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)) getpgid(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001800), &(0x7f0000001840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001880)={{{@in6=@remote, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001980)=0xe8) 03:33:30 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x3, &(0x7f0000000100)="0a5cc80700315f85715070c01263b29602cde0c3b97f6a155abd02c9b79176c3a69ed0be477099704833d97c21ecd421e20f7ed58d0e911ffcca7abbd7e56e40746fa576a2065abca5") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2, 0x0, 0x0, 0x800}, 0x20) 03:33:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x1100086) r1 = dup(r0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x40, 0x7f]}, &(0x7f0000000040)=0x8) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:30 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x200, &(0x7f0000000380)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x238, [0x0, 0x20000100, 0x20000130, 0x20000268], 0x0, &(0x7f0000000000), &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x2f7) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000001c0)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000140)=""/30, 0x1e}], 0x2, &(0x7f0000000280)=""/172, 0xac, 0x3}, 0x20) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) unshare(0x40000) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) unshare(0x0) sendto$inet6(r2, &(0x7f0000000140), 0xe, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 252.953153] ISOFS: Unable to identify CD-ROM format. 03:33:30 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:30 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000000)=""/99, &(0x7f0000000140)=0x63) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x101, 0x2) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0xda8, 0x1, 0x502, 0x9, 0x4, 0x4, 0x1, 0x96e, 0x1000, 0x0, 0x4, 0x9, 0x4, 0xaac, 0x3f, 0x20}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='H']}) close(r2) r4 = semget$private(0x0, 0x7, 0x100) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r4, &(0x7f0000000180)=[{0x3, 0x4badb4b3}, {0x7, 0x1f, 0x1800}], 0x2, &(0x7f0000000200)={r5, r6+30000000}) close(r1) [ 253.159405] kernel msg: ebtables bug: please report to author: Wrong len argument 03:33:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") fanotify_init(0x20, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:31 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) readahead(r0, 0x3, 0x9) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000040)=@buf={0xf6, &(0x7f00000003c0)="34c635c30e1ec8545fda2163f7f5b644115742f7ef4b9a0543afa575bc7feca2b7d109432faecb1c5f8a35d58cbdad85ed807013b6eeec07145d395a598361ea05fda35a57bc14615c610cc97c9a74bf2c6a32a9291b0b1ee0f70a5773f071c4df00363bbdd0a714e86bc5b9dfa908f17c980c7254722885b69f532f411bb2409557ea618aed5e774c1724cca5bf72b9dbe6f0de6517908a5833436d95b1107cbdafbdea86fbe3eaad5040b1d3a57e89872c0439d69a755208e5d77506149767049d07ef8743a9d577ec0a5b451406e7e1f45d2c4f8623df6a7064a11c93b514e9240b8b7f6c1014676e7b52924f475072140d53e456"}) io_setup(0x80000001, &(0x7f0000000080)=0x0) r4 = dup3(r1, r0, 0x10000080000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x10000, 0x0) io_cancel(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x3, r1, &(0x7f0000000200)="900dd4bc82f0e1b810905f87e40a32d17bb03aa41e50e51c46c61554f11ffc5e0550f63783ccdf86c56a94441b018619b6cfdafa5ef55b115eed0f44", 0x3c, 0x0, 0x0, 0x0, r4}, &(0x7f0000000280)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x1f, 0x6, 0x580, 0x0, 0x318, 0x400, 0x148, 0x258, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, &(0x7f00000004c0), {[{{@ip={@loopback, @broadcast, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {}, 0x7f, 0x0, 0x8}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x9, 0x54, 0x2, 0x200, 0x8, 0x535], 0x9, 0x573, 0x9}, {0xfffffffffffffff7, [0x5, 0x80000001, 0x3, 0x2, 0x5, 0x4], 0xff, 0xffffffffffffff4f, 0x3}}}}, {{@ip={@local, @remote, 0xffffffff, 0xffffff00, 'ip6_vti0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x9d, 0x1, 0x8}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x8, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x2}}}, {{@ip={@loopback, @broadcast, 0xffffffff, 0xffffff00, 'ip6tnl0\x00', 'bond_slave_1\x00', {0xff}, {0x4354b0b1db3d4591}, 0x1, 0x3, 0x41}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@length={0x28, 'length\x00', 0x0, {0xfffffffffffffffa, 0x101}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3f, 0x1}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x10b, 0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5e0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f00000002c0)="04150b6ddd", &(0x7f0000000380)="04"}, 0x262) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0xffffffffffffffc1}, 0x4) 03:33:31 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)) getpgid(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001800), &(0x7f0000001840)=0xc) 03:33:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:31 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000400)="6e65742f6465765f63636173ff00000053541eaccf3d8b4f0f7a79b0472f21aeefab4aa532e4abfece699ecc2acb84a01e420068a293e3b7c4b068353fbd4b965740fa605f71f7174e74457febb5ba05a9b26fe9190ce202c08b7e9a345c6da1010000005a13facf9a4b9b076c8e072c1517e37c3cb5054d32811d5fb6747b4e2bc9519e8142ff665ba6ced8372a") socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) sendfile(r0, r2, &(0x7f0000000040), 0xd2) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x5, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000200)=""/250) 03:33:31 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x12, &(0x7f00000001c0)={&(0x7f0000000000)='\x00'}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x202, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000014c0)={0x0, 0x3800000000000000, 0x8, 0x0, 0x40, 0x80000001}, &(0x7f0000001500)=0x14) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001540)={r2, 0x6, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={r3, 0x90, "1077c5eeb18e4b97be923aba3cd4e615e7fb0509e4f7632d38264109533a569bdbc0d5705b049adb04026c3bdf86451ff46ae83678ed65d30073059abdc0525eef79f780e5dc396fe19e5bffe459e340afc58b6a7db0f0f7d2e06e66efb2b111f3ab7e1a5912edd13cee7f90b98102baca60a8ea5e7f0b431e6b4a03212b091b8ee95c2eaf3d14b0f6189a69fb7299f5"}, &(0x7f0000001340)=0x98) clone(0x22000000, &(0x7f0000001380)="658f112d03ba9fc009b4f2b5453a8d7123d3babd9b220aec7b41e228f6eebdc710dc98ef0fb9573937c9f3a16ee637753f0e6c6dda2997d01b98fc4c6a8216d8173f73e90a73c5f97a60ac90631db2cfe79a982836ec92627931a8e8558fd3948d5994e06435ea884372368b91b9982c4869f8768c47519d3d68b2b52ec22d30fe51a261380234f796322377b053ddbd13", &(0x7f0000000180), &(0x7f0000001440), &(0x7f0000001480)="80749d10642164bc49009ef9da684a5cde6d7455bea86c4760cf4b") ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001300)=0x0) perf_event_open(&(0x7f0000001280)={0x5, 0x70, 0x704f, 0x1, 0x9, 0x8, 0x0, 0x4, 0x4000, 0x8, 0x7, 0x2, 0x3f, 0x401, 0x0, 0x0, 0x100000001, 0x1ff, 0x8, 0x8, 0x6fc4, 0x101, 0xfffffffffffffffc, 0x1, 0xffffffffffffffc0, 0x20, 0x80, 0x8, 0x1f, 0x6, 0x8000, 0x997, 0x19b74a85, 0xffff, 0x100000000, 0x7, 0x7, 0x80, 0x0, 0xffffffffffff30d0, 0x4, @perf_bp={&(0x7f0000001240)}, 0x1000, 0x2458e80d, 0x9, 0x0, 0x4, 0x100000001, 0x3}, r4, 0xa, r0, 0xa) [ 253.277532] kernel msg: ebtables bug: please report to author: Wrong len argument [ 253.285510] ISOFS: Unable to identify CD-ROM format. 03:33:31 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:31 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000080)=0x80) 03:33:31 executing program 3: r0 = socket(0x80000000000000a, 0x3, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000fc0)={'raw\x00', 0x2, [{}, {}]}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0xcee7}, &(0x7f00000000c0)=0x8) 03:33:31 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x95, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000340)={0x3, 0x9, 0x3}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000002c0)={0x4, 0x70, 0x3, 0x2, 0x1000, 0x9, 0x0, 0x1, 0x4000, 0x7, 0xff, 0x1060, 0x4, 0x4, 0x1000, 0x2, 0x3, 0x10001, 0x8, 0x50, 0x2, 0xff, 0xfe, 0x311, 0xf924, 0x8001, 0x8, 0x1, 0x4, 0x4, 0x8, 0x1, 0x2484, 0x20, 0x6f6, 0xb8d, 0x4, 0x8, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x10, 0x100, 0x4, 0x5, 0x2, 0x4, 0x2}) ioctl$LOOP_CLR_FD(r0, 0x1277) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000080)={0x20000, 0x0, [0x3, 0x98, 0xebd, 0x7f, 0x200, 0x1f, 0x0, 0x4]}) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000180)=""/251, 0xfb) 03:33:31 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fcntl$dupfd(r0, 0x406, r0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r1, r2, &(0x7f0000000040), 0xd2) 03:33:31 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)) getpgid(0x0) 03:33:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 253.633925] ISOFS: Unable to identify CD-ROM format. 03:33:31 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x5f07434d440945d3, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") ftruncate(r1, 0x7) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = getpgrp(0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000180)) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) fstat(r0, &(0x7f0000000280)) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x100010, r0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace(0x4208, r3) ptrace(0x4207, r4) ptrace(0x4201, r4) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x30000, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000001c0)) 03:33:31 executing program 3: getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000000c0)={0x8, 0x0, [{0x3, 0x2, 0x0, 0x0, @adapter={0x46c1, 0x1, 0x0, 0x6, 0x9}}, {0x4, 0x7, 0x0, 0x0, @adapter={0xff, 0x2, 0x0, 0xcc1, 0x6}}, {0x509af62a, 0x3, 0x0, 0x0, @sint={0x0, 0x1}}, {0xfffffffffffffff8, 0x2, 0x0, 0x0, @adapter={0xfff, 0x100000001, 0x7, 0x7fff, 0x94}}, {0x7, 0xa38de90b53180338, 0x0, 0x0, @msi={0x7, 0xda, 0x5}}, {0x3000000, 0x2, 0x0, 0x0, @irqchip={0x68b, 0x7}}, {0x4, 0x2, 0x0, 0x0, @adapter={0x80000001, 0xc8f9, 0xff, 0x80000000, 0xfff}}, {0x10001, 0x0, 0x0, 0x0, @sint={0x4, 0x1}}]}) readv(r2, &(0x7f00000025c0)=[{&(0x7f0000001200)=""/213, 0x3c7}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001340)=""/217, 0xfffffd27}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x1000000000000193) tee(r2, r1, 0x400000000008, 0x0) tee(r0, r3, 0x9, 0x0) 03:33:31 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0xd2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x88fb}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x1000, 0x7}, 0x8) 03:33:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000) ioctl$LOOP_CLR_FD(r0, 0x1277) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 03:33:31 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)) 03:33:31 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:31 executing program 6: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x402082, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000300)={0x13, 0xd9, &(0x7f0000000200)="419058b939a9d2b925a02a16c41cc1122014b834764026a70db85ce3f702ef67bf07d2f54cb7eb6a89f72d0be383c87c45bb2eed7d413d8cb60e4d249877d6b96b892018b39c3e8ee47ea5a9e3e58fa717ca3c2ba77bef6176384a228f8b5a342e9db4c4e73492deb9e87cca0e7dab4bdc6c6a946dc26711c6946fbc98bd2b88889b567358c74ed220e555a7978b7d48f797965a9d829a9e3880b0c4356938b04065693d90276fb06ec06b67a2358f03ab35aa85da27c23cdaf42caa1548913ade8fb57769dc3bf0787fbb1166bf2888d48d4124ee7464b841"}) accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x0, @remote}, 0x4, {0x2, 0x0, @dev}, "73797a5f74756e0000000300"}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) dup2(r1, r1) 03:33:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x0) accept$unix(r2, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '\x00'}, &(0x7f00000000c0)='ppp1@nodevwlan1self@posix_acl_access\x00', 0x25, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) 03:33:31 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x480000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000100)) 03:33:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:31 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000700)={{0x77, 0xdd0d}, 0x1, 0x5, 0x5da, {0x8, 0x2}, 0x4, 0x1ff}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000200)={{0x7, 0x0, 0x3, 0x9, '\x00', 0x2}, 0x1, [0x660, 0x8, 0x7ff, 0x6, 0x48d, 0xfffffffffffffffb, 0x6, 0x2, 0xe747, 0x0, 0x5, 0x1, 0x9, 0x4, 0x8, 0x7fffffff, 0x7, 0x6, 0x10001, 0x7f, 0xfffffffffffffff8, 0x6, 0x2, 0xe3ae, 0x7ff, 0x3, 0x0, 0x6a, 0x1, 0x9, 0x20, 0x43a, 0x10000, 0x5, 0x1, 0x80000000, 0x2, 0x6, 0xff, 0xf39, 0x410, 0x5, 0xff, 0x10001, 0x8000, 0x100, 0x2, 0x100, 0x2, 0xec3, 0x7f, 0xfffffffffffff001, 0x4, 0xfffffffffffffff8, 0x625, 0xb8, 0x0, 0x8a8e, 0x5, 0x5, 0x7, 0x1f, 0x7, 0x0, 0x8, 0x5, 0x0, 0x1b, 0x80000001, 0x4, 0x3, 0x9, 0x5, 0xfffffffffffffff9, 0x200, 0x5, 0xac3, 0x6b1, 0x100, 0x430b, 0x400, 0xffff, 0x1, 0x2, 0x2b, 0xffffffff00000000, 0x0, 0x100, 0x7fffffff, 0x1f, 0xe7, 0x2, 0x8, 0x7f, 0x79, 0x8000, 0x2, 0x3, 0x5, 0x8, 0x2, 0x140000000000000, 0x80, 0x79, 0x800, 0x3, 0x2f83, 0x4, 0x8, 0x9, 0xfff, 0x3, 0x9, 0x5, 0x9, 0x200, 0x10000, 0x2, 0x8, 0x8, 0x7, 0x80000000, 0x5, 0x2, 0x3, 0x101, 0xfffffffffffffc00], {0x0, 0x989680}}) sendfile(r1, r2, &(0x7f0000000040), 0xd2) 03:33:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() fcntl$getown(r2, 0x9) [ 254.187371] 9pnet: Insufficient options for proto=fd 03:33:32 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x81, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="4c8ff3d6bdf8297ff5244e9733f64b45a4ca721804b82b8b32ed0987a72cbcb15afbbbf7627c3dac05f4f41160da989819e07e914954612ddb7ad383478b26aeaf374b6d311920c1bda3fc63599b9a2b91004880590155c5", 0x58}, {&(0x7f0000000280)="bcea9c727effbc014d620ecb5e76de556b23721480ea1255539e877255eff50e7d7442c68f3b6d12ffe7559681a7536f36e1a397cfd5da8143cee0028e282279009d4da2e6f0eee0846633dca2fd4da71d7da56ce3ad79e66a12eb833a58db9e2ed36e1ffdd47382cbc136ee20bb71f2171c1e79a0ab6b9f8e83bfea64d81b21de0e50c82c33b73f90e7c81cc767700bcdd633058505370a01cf151d77d08e7f5a3dbe3e20cd07698e11fd6a1a4458d2061c44246836cdac16b9ab74d9bfd878db2661c96b6e13005a8eb88784f575fcc666c55b62a51716afd8b4e2179ba712e26bc5279899abec0e03cf53d9f86607b57f5471", 0xf4}, {&(0x7f0000000380)="f1ed833e1434ec28cee9d197617eb47011b36995f00f165be4cdadb17f30dffed4c9744b0a6abb60c3154eead9aa8e251ee10599635e7e367d02845234b14bfe1847abb12e5e8ce706ca69e9191411fc3e03a0f54a5b705bc492d6777dea7d38540b374d98f841864c90eae4a234ab44c8b9b2e350ebcdba4c2ff7b914325693f1df12deaaf4313e8929af0977b742a634adebca7e0ca175455266e3915425900a27801cff027a03d7e010379eed239c4163f9621b1fdaf75f31efa77cda364fdc75", 0xc2}, {&(0x7f0000000180)="cbddfa2d29b81fc41b8a734bb2e20a303101e9454abd559257631e78d01026b8003ab6c0ea3cc5f010083790457de5ae8185ebbe0dea1b1062f7c374395d92e794941106364babf01ab6c99451e4c440373eb3e24c1c81058eadc3593b84cb6d4e1b9a4949ee5454dd3ce23af990c1d6c847", 0x72}], 0x4, &(0x7f0000000480)=[{0x18, 0x0, 0x4, "9d724eedc58c"}, {0xf0, 0x10a, 0x100000000, "cb4f1f4a8b032dc384b440a3fc8684f9f7a021124f807d72eafbe9393aa16d4519f76e20dbb7b35cf9221ebd991c573955a6dbc2c9caa33a7fa46ec4a6f1c667752c9b85adc00b52a1468d1d27777ccccc0d34c4ef45efb486774513708f8eb4f8a200c7abf55db6a3819b9d83ac75e4e55577b6968e045ec779afa9d1a837c760ec996b1f40d53d3ebb36deea4166c91a95d9046728cca65b8496d5b761f8eed4c7a227cbb713f8f6950d6f9a474cfbcbf9567a3d6828d94e82c4cbddc86e9052afd86ad83d67f01583ec9740689e70b410fd8c5a2743e2cef91bd759"}], 0x108, 0x8000}, 0x20000880) clock_gettime(0x6, &(0x7f0000000140)) 03:33:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 254.209283] ISOFS: Unable to identify CD-ROM format. [ 254.223529] 9pnet: Insufficient options for proto=fd 03:33:32 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x420002, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x800000000000000, 0x0, 0x4, 0x0, 0x11, "a5c8d0c1cbe6064bd327027185fd51eaf14fcc4a31543163c675b25d4acef5fdf17ffdb2decd5b7966e2e778f3a5a1d007d021533b6fe44dc0380e30255502ea", "9c59b2f4f9fde4de114ac269638dec3fe9d1366b48d97704c53fbe6465d8a2655801d76902e2e28cf315d2351deef4069a55ea41ce949918d5624be86ae16454", "8a438e914e93e6726c538cf3efc9d45eedc7b2de5e9c21165c1a97a03e0bd3d5", [0x7, 0xfff]}) sigaltstack(&(0x7f0000fff000/0x1000)=nil, &(0x7f0000000140)) 03:33:32 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x8000000000005, 0x400000041fffff) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={r1, 0x19, "4a87426334d3f64ef8d710340047e9b50154c7e298c71b56a6"}, &(0x7f0000000300)=0x21) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0)}}, 0xfffffffffffffe03) sendfile(r3, r3, &(0x7f0000000040), 0x8080fffffffe) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x7) symlink(&(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)='./bus\x00') sendfile(r3, r3, &(0x7f0000000380), 0x1000000020000) 03:33:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x1, 0x35, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r1, 0x400, 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) r2 = memfd_create(&(0x7f0000000000)='cgroup\x00', 0x1) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0x6000, 0xf001, 0x556d, 0x93f, 0x3f}) 03:33:32 executing program 7: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a600000ffa84335910000003900090035000c00ffd1000019000500fe800000000000dc1338d54400136ef75afb83de448daa7227c43ab8220000060cec4fab91d4000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="24ecd65d0aee9415a042a2c7bdf26166d0d93e251e51e9b8a2c811b778ed345c9a8f4239245256651c74080efc06dffd31fca3c9fabe03", 0x37}, {&(0x7f00000000c0)="78b0d45732352aa28d0687483c9f9eb5ba98d3dc58c44d1cd8ebcaa2860b51a3f5c60113a25017aa2567b242cb20c76dc7283d69f856c5bc6d9e03b0991ea8dd27ac3a284d5895da00ea4fc66356358fc6d0b310c4e58e4719901d0ca188e487e1bb922a2395ce4a4cf580626a8cd60be5d6bc0b1e57ce0c5efb8115a1fd387df8f14fcb7a07dcefb1e619324fd393a9671aa6f1b6ab2c0fa4b484d2a1416f3b3a6d4cdc0123f701837b88cf9e7a4b98d0719d56474ab0ba9b46ed72ebe87f4d13bfac93fb4c0b006522e8d027763757eafaa49df0a9ed4886e39ad1444b26fc35d6b4cdf43d0d56eb9008b970", 0xed}], 0x2, 0x0) 03:33:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) getpid() 03:33:32 executing program 0: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000001200)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000001240)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000000080)=""/13, 0xd}], 0x2, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') accept$alg(r2, 0x0, 0x0) signalfd(r2, &(0x7f0000000100)={0x78}, 0x8) sendfile(r1, r2, &(0x7f0000000040), 0xd2) 03:33:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 254.558281] 9pnet: Insufficient options for proto=fd [ 254.576311] 9pnet: Insufficient options for proto=fd [ 254.669218] ISOFS: Unable to identify CD-ROM format. 03:33:32 executing program 6: r0 = socket$inet6(0xa, 0x20000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000080)='A', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="75cb035a1e9d527fe1f72b00080f688f3c522e05eb9efe58f6e8ed40a680175c2fe4cceda8b3070b6e991ace160e0290c3dec395f827e58a1eee2ce81f66726d96678f3288a7b2a2b8019ac5ad"], 0x34000) accept4(r0, &(0x7f0000000140)=@alg, &(0x7f0000000000)=0x4356654d0000001c, 0x0) 03:33:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r0, &(0x7f0000000040), 0xd2) ioctl$RTC_WIE_OFF(r0, 0x7010) r1 = gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="057463cfaf59d26f8eb1e6883b2c4ad0636b", 0x200002, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/ptype\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) r3 = getegid() fchown(r0, r2, r3) 03:33:32 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x52000, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4, 0x10001, 0x9, 0x4, 0x4, 0x0, 0x5, 0x8000, 0x5, 0xda1e, 0x4, 0x9}) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4584, 0x1100082) r2 = getpid() connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7ff, {0x22, 0x3f, 0x2524, 0x800, 0x5a6c, 0x6}, 0xf124, 0x80}, 0xe) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000100)) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x85, 0x4000) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'ip6_vti0\x00', 0xfff}) fcntl$setown(r1, 0x8, r2) ioctl$LOOP_CLR_FD(r1, 0x1277) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000001c0)=0x1, 0x2) 03:33:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) 03:33:32 executing program 7: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c6c6f7f746d6e64653030303030303030301030303030ab75d98f934f88c8303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x64000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x9, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup2(r2, r0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) vmsplice(r3, &(0x7f0000000400)=[{&(0x7f0000000240)="f20a80fa63478293d5409585308ced769af217766f6593923381b6b5fb49788fbc925c8744b08ad61d642da34978369b2607b8fb42f8353f3fb267b9e0e114b3664ba2bd701757161fddc32a4de16e22db61d45eb25f04f6fb30576a6ec23223e3511eda59d2c79709a765ae0dbab64fe4af1fa631a5fe6c6f7c9ffad8d41eacea0452f5ec4d98302258ddecf5eaa6c93da1b39d554a4e02501a7f559db6393e95a38567e41048afc40938c4647b538f6a3d168ef37a245820529cb08f8d893f26bdd380fb3f0d1d67fef9aca46e19ca73634f2eb6aad0", 0xd7}, {&(0x7f0000000340)="6346409928049ecc764e902ea799f95b6b45acfe356707b94a043a27ac61b3926085ed03364412fd21f968f08ec6889ed54ebe524fd0ca145b03d6c020b4219685dab42e0eb39ab1c33f6f0b4a657ee1f9e50ceb8b0f4843cc5741158cc91bf42a05b687d05af22e512a4eca8d442bbf", 0x70}, {&(0x7f00000000c0)="f490ebc6ea6f7169fa8b7c755297357fc062cad96071a6dbdc3ba211", 0x1c}], 0x3, 0x2) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1c) 03:33:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000200)="06a37e5aa31c2f10acb378e9f08e7eef000e078a985d8b03ca99cf4c6bc1842e2bea17f85285d79cb2d49a1d5b00f8e6b5a174bef46d77cc454199f9e43054b71de3d4ec9c24a648e0a51511ceef4fb5945756dd456a0e3ea6af8502787d35186dc5a64ebf12d768852d420cdb3071b895f0a5dd643673de193790d0bff56684cb8e38da041a35cfd2cd7779629e0c22821879fb4b6f820c0b6069862c39ab4cf14f70e1eaac5c181c30435bc6962ed5dc9a9018fb110c6bb67bd44762928f38eeefcb575ab63f5a77e9990fcaee73172b59938247b7d5a7f49415181c1f6e53fa9fbb87f66732186e7a51c6cf182a6e7b6306f55f6e3fd04ac4c94fd03294b8f7866e216b500e401e361b7a1bf8b0338bcc9120b8a0ece000521240871705a178af437b27c7d00e66a083a11bc2fb9c9bfa9d9dd9fbdeec3d992382e2661872ac76d24aa5f600710c988f8cce7dc2d801154f56a561658b2eea99ea28082d421649e859818f344792acc0db7a721cda2e9ecf61143a453aa3e349dd234e5a686e4845078af067519f509ca09746193be6518517e04bb75e619439c40c28e6dc21e12a26c0bbbc63b116797462a3227cc30ec904fbc60a90f0e1aaebd8e0cc305c50dd6d1b1ac45e67341cf13d96b2ef35dfab64ff5612798b7f8a8f879ebb31f6e5c3f09a9d2a4c30137118d87d2d519d349988831e034b62f6bcb4faa20e786653743bf6a658f5d19f8cace8974eeb5fa31b0bb2edd88b1f09a7b37d9264f88bec5126f79629a0169a818fdc048ff89e8e56f1c0d7f5e4dc9c1890a14e49f10988a15e8c1b32ad566d9839a82970180ccaba88ca6b2557f812f7d975457fc87c806ff372d571113ea7d48a78a7f72e511dd480b60c92fee161f82c9dffa048c5469622e7ebd6f70f3d01a5de1b340f09e306397402bcac93384981d1ecfd361ebb3e213b8694980477a607b45cde7a3378be7090cef963133719f2f198bc8f41695c8916d32e90bd32ed861b49986221022d41a38ef8de95f705dbe7a31b7d7e6dbaaf7f3525e44702f9ed2d94c13e496fe00f601caa35ad999a9d5284c91fa00e158334df361f7ba652834a2977ea13f76c6f4c02110f70a5e6ee3e77cf3cda2afa76c2f1485075b91972a2f0aa8f511f6f98decc3d1e352bb39eae4b57899859164d58f2ef645f2d62e8a9cbbcc555107d00cdcceb7c7120bc696c3de1689f7aec25d8d8ac438e148c13d125790b950da028935eb6726350e85ca17d486fdd9599fc48871af99e640313ef989b3c4263e3701dc5d7149132bfe30cf68ee186dc2dab307573c84522c518fe93c4fe4c6e11e383a012c3839d61ce10e29ff4c41bd13fffc4168b0fd41393640d73eb2e10cb71c35c0ed173071011d475b206aa6609b8320ae0972f32989c2200df01ce04849afa3793877980c606151370e21f7496a0ca1d805c4c270dfc4174008c2e6a13114a3f6f270125912a631759d43bf064878a116079448c972485f067051b868ffaccd46bd3cfff48a1115e22a074150f093608196d31a6448c1bdc9cf5bd32e1996b5c3e525b1ce25d8ab7442318c94b74a725c1bc1bfecca401ba28410bba869e13b164cc4d36c80aa5361d04f8e63397bebdffcc0ce5e0c5603176e7fe348659d33e6cf795b7f5a4623989a5c4e3c1708c4f732e812a6b680c7c0f9aab4064f71755cd6bdb3dfb3a5e7e5c407fbb6184b8f4b2506b5727da750810f012989c884c92c3f8ed0700b09205553931c533b35c9a541d0f74acee2c0984bbeab1a07dbaeeb773cf79b469881f37febc0c25c0218fcf97fe1f887b62f48ea35adee4266fc48193936519ff95fd0441f68bf32ae578cf2d59eeacad74fb7a7ad66932081682f0f67149687ec8a16ee573d5350e30f2b9b2d5c9ed7635d29c6c1055247026e03ec607cb449610e4fc3c04d3b51678a27cb9f8ad9f2c8602a2571a84399876b934326202ed0b1cd1f6036c063148905b02d98566a96afb50c66f23687f1164fbdb35f7c0848f10b8bb0f401481df4cc3a2cb25f89f9e701ffedeb542e38e3c77cce44e3e94d7a5eee4af1498653dd0c4995b7f6750cd5fd78af24e20e4f5e36e6615a153b3c957be78ee85ab94e510678b625cf01bf0482d42989d1436507934aee54fcf58b8e5bbea0a98175cd0f32db7fd969592b2fd4d1e836ccef0a861335253355fee995d01e953bf2c1ee4eb86509067a6f87e0c09e83252c2fcb686f34a433569008023270224e1df216512f61a202909e58a7fa7a33ce9f8703046c47a33339ccf028aa5b4bce0a6f6ef8da63c8aee14c8850a10712aa617e4ff56e8c97ddf8ad80344dfd6de487f0bc3aad73278bff92673fb84d6128afb01fe1dfc2ed1d9ce08bac81df03b853371b61a7e690ddb3b4c9f6cadae784122aded3b8a15fde707552a56b44216a801b78bb3fe33e8e31be39592ce2fef6a9a3779ef3490e6914771f6047ddb83d982b8a2b2e23b73fb821814fbcea677230c0468237c5e201a51957d29d1d2077b5e85c2a0ec623010bb376534f555964bfc0f7426c099923a91cff0315a8e9d3fce52a99d1384beab5c3964a16ef1fbeb5cb56a76ae7e3d9868568b8462431af885755951da105ab8e1582c89a8e3ecd5815ddb53ca6aea9add736eaab6a560490fb892bf155b7852bc1731f718490f9bc5cd65b30f3ad0f007145e830e5267b69a41c9782516236c8b384dffbe5aad477b8721469bcea3c12878ef14696a49e8bf0a31f1d6af049bc6443d8c64890190a9a39897594470d920d25c8468eab24cf6382690b7440eab8733dc2cf80c5d9ae19a2d44e83195ebd026006689d29bf69be3c7d4f10e164d3ab26c46caedffeb58941c9e8e1833337f1129ccb6dde68ba5ec512bc6488319b9ef069d27b0884a5fedc1396dd1b16fa493dd5419a46a2eb13adf38c01b19fa8b5f2fc7bc4ddcbe23c33617042926115e2691231a5d77a68041c5d10111da2eb4589eb9c6fae02e2ed6ee8d00c06029109a3de874b37b04325250080bc8007f2c9071bbc83a122e3ab81ac6126991d840557533e06c083cb9a9b8ec039fa176e88621676c41a52ab351c8bdc2694b8d6c0c5b7402e33b8c68e09a1861bbf7ada7b3f796b7a6534159ef50f56b0ae2a06ac9cfe2412169a78699313fd4e43385a1a6dc6df59391c931f68f0f5a342398848a78bb02d655dda6a544057661f18f114322843c9b5c97f79900c403c3e7e555f57a8a370572325d0eae9b089cf46f801e7dd67a2f1f08399227db40c42f8a6fe445bbdf3d588a01eaa1c06d55b4cc533925ab83080e05652a2a14c9a6ad616b8163ada33f265e76c67619537825a82a732160c9918084abe9654230222b2cc43281708bcd763eb4f176dbef30d11c6175cf323d0afe7814a77910a29e03924f1cc1cc496679e181e3562e4bd014ed12a4f7e325db5865f1241f676b41380acd740a83aa86392a9f0ca2a3cd1c212de699960457efb9bdea433465834b55d421155dae3c17f063faecaf6651e45c9eb89cc0e82c51bc2f75ec4c4079a4d43a990029ebbf5d492b0bfb6fb4257ea1afd1d1893715af1ed064c7ecdfd31a22190701588bee86841ba1298bd773075ead299381df1338951cd6f5a508df78751441dca3e5c02d7b16415f23df1f4e6fb6be4b103ec73dd83a252f2e89f1034085f353a0af7e1fffaae82dfe1c22e0f4e813d8c82d9aa32b7ff29365053186aca4b9533fd73eaf1d2570fd142b8ab33be51bcacfa9211418d52c752be4aca1a075af3ecae8d7a739afb3f4e0392cbb988ef17ee47d1926249da5b7fb5a5871e27314a4c711409c82d8a7b7f621784670ec626b2dd07e8ab568018e99a2632e4631c723810ab7d2f3ec0f3a4c3f2d83ca816493d026e84f462a1c14b2c2cfe2bc9df42dcfa054358d76d82dd850e01a1abdc0ba67952c6487fd7cd4b8321d710b0dbc2d468c1b513c86b0ffe04d9bcac8caccff970f3242c8dd0bf21ff6e155a8c976f876c3007de01bb508357aec13fd17ba1d49997951f6ac0dd06e7d1443e7f441370713151c1a7fdf6934a5eae29252c815d8dd4adab7f644e8f102e00ac54add8e62ff330dd5888da12e6da125f52cc33729ba075db856b898d855efba3eabc96185aee6799f19bfcd369839606df3afd5ea4ef1e6ac9ed9dd08aae0da1c0410542c88bd3f849b641bd14ed27d1a0ce6350490a3c1212ec20cfa2643a472341ee4dcb99ef4c9695a786988d3344aa7a79656be15b64a0793894aeedd30161a9e265f1a8c6230c80e7243fe93e4d0cf42eb11f47cac9a7f9af89543911925e732cb3e121c668f27091e77864e3f9ef1a652319d7bd40e26cae4656398f19feadf2aadd42723a6c2cabb5870db3df4616536e0a214bdad55070249ae1ec14d9717e40809f6c37c02a87c8594fbb5f2b8c5cb6e1dc333ed7f47cb4908c00dfc9a5320a1c763cff65920cfbf640a3eb7efdd5f6d7638c82aac7e33a90ee5173a3609661ce9e78273fab6dc77f8a45f71fcf6d9a04decbfb3c448ee57279b7ae561474f84686df09094ccd8fa2b8ad4c230dcd982c72be8be772ec92102d47f21d45f250d4340c0e7922bd63785da7f898efeee8dfdceb6c9f6df855c162973aafae6727f2d664e66fdfc74c277aa75bf079982a47940b100d58009cc9b6f7557e57309fd5291fe85413691190e89010587535f9bbc9dd1cf90b6a2c0dbb495716615275de9706ec11e60162492e76372037db05096236e4ec2d77c7d285398dbe88e34d734d7a2338582e05229c9397f0e527e7a356d7ec0f8d660aea30507c2aee50b57896effba9d7e2719e5d389d7c899eb30d40a2bad014b3fc6a1bab3082de753226ef418e4dfb4b3ad9621e32ef55453ff953ade2f80cb25598c3c8c53b233fdedb56a063e932e7c93420a2ecdae771f2dcf4325e7d47dbddbda354f1ea0be3fd8b5d401714c195d37c327caabe50b88e014a1f917a02a032c273f182a53ef849d74776dcf89c3151e957697665ad0d0c0701312ed40db041ea251c779cf5cc50a61b9c54c65f151579f188a823d1b789aa013b22d474d30b85db2fc36246b30183ab1673a2a08202b930fff3c19fd6ce6729fbb7655a7ab0501c3fd7d112addcadcf853365c341a7b110c24671dd3a02953e17121ce7d1824e343ee21b1d99091969cfda6c9174de6fde2a4f9690117a9d25e7c268482e38ab1d67273b7f347bf58f7b0ee77bda4afa1dfae146d64c8f6362ba16dece1fd62cc586f7b45d95d5cf659b7e0d7fd50b955422e45187ea21bb0e95785855f7885545006c821cf19e6919e397e07a43d22e619ed3efbff2cb6107dfeadf080c36c1dda6200b54c2772c79715f3cd7ca2fcd086b015212d90d189332b3118771b3cb9105cf9adaa54392e61a4a7b919d530a87714f756a8de8c364a783d7b2f12532c1e3a5ee26328bcdb61fb44581e85b592dc3c8a3512f92de6f07a5d19af65365407bafa228b7c994cc005b872c96a23b07682041694ce560b8ef929b76501b5eb876409db27d0f2ba5266b3575f9726aee548757410754d2f676c8d5c6bd8289b92540a0f905f001a411f9b879ba67671144976f16743dde3c64572c5f43acd0339ba96a3a23bfdcdd85e27f0cd33272b05d77ecdc45492ca7519b0b738abf4bf5c04dd2b24d52c89afa3f504ad785d58dd27cf620c00edf1bc4b3bca466adedc99211b264f219aab2962de62a42e598d00095755084cbdada5c796bef2d62e385dd963491f1a453b8f72be", 0x1000, 0xfffffffffffffff7, &(0x7f00000000c0)={0x77359400}) 03:33:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:32 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000540)=ANY=[]) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:32 executing program 5: r0 = memfd_create(&(0x7f0000000140)='em1\x00', 0x1) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x7, 0x105000) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x1a, 0x9, 0x8, "e3b19a971d31160c4d96c22eca1becc41082f78288bcb2f8749f28bd99fce3fd2ad4cfc88676f0c9f58b6f3262b796d01b55c1b7a352f1a52791edceb34cdacd", "c5eaea272f245372b9e9d3be2364060849014b30603bae116d538ff33d80aecf4674b900e9605bd7a563f43fa079a9f38ff47f6a63fcc4e0acb6887b7b0700a0", "99f813a555ea3ad09b8aa156af55eecce4176213e0f2242ca9ea5324001f1dce", [0x0, 0xfffffffffffffffe]}) 03:33:32 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14, 0x80800) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @random="8c9a8372c71a"}, 0x10) r4 = eventfd2(0x9, 0x1) sendfile(r0, r4, &(0x7f00000000c0), 0xd2) 03:33:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000080)='sched\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures}) close(r3) close(r1) 03:33:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x111000}) 03:33:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc8070031") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:32 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x101402, 0x0) r0 = creat(&(0x7f0000000040)="e91f7189591e9233614b00", 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r2, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) [ 255.091018] 9pnet: Insufficient options for proto=fd [ 255.104154] 9pnet: Insufficient options for proto=fd [ 255.196196] ISOFS: Unable to identify CD-ROM format. 03:33:33 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8014800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x578}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7470}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:33 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:33 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc8070031") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000004c0)=[{&(0x7f0000000740)="5155a3c0bc5cfed3838ecd77c28f8bf10e1a9e28a764bb8ff342666df8091b457647a6cfc23a2948ac35f1f28de40f1983b554fe2657f4f019ce96aa6bd5a43432d9063d6f44054b1bed1682abf557fbb3d82950f00cc502ced7457646dda3f105e79f3c5d438da4b61b9dbc5d39673b0447e9f161ac628801a801811f1f8e12b4f031768a88145362a1abb8ba408cf54e27cfc72709a99a65a5ae69855d2e52c2bbcc13f76993aad5d2a14b8a02834ca22d3e0e5b6e7a58dc58a387cca58ea166945cbfdaed69e1dfacf01583ffcfd3fc19e5392b57c2920bd9339c3917b8b483a3b0b1cd9c6039e9f26641a6", 0xed, 0x3ff}], 0x100010, &(0x7f00000006c0)={[{@bh='bh'}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_nolock='dioread_nolock'}, {@usrquota='usrquota'}, {@noquota='noquota'}, {@data_writeback='data=writeback'}, {@journal_checksum='journal_checksum'}]}) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0xc0f7, 0x4, 0x0, 0x0, [{r0, 0x0, 0x100000000}, {r0, 0x0, 0x8}, {r0}, {r0, 0x0, 0x5}]}) 03:33:33 executing program 6: syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x88e00, 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x94, 0x0, 0x5}}, 0x14) r1 = socket$inet6(0xa, 0x6, 0x4) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x0, 0x3, 0xffffffffffffff00, 0xfffffffffffffffb, 0x81}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1baf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000200)=""/4096) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) 03:33:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000200)="06a37e5aa31c2f10acb378e9f08e7eef000e078a985d8b03ca99cf4c6bc1842e2bea17f85285d79cb2d49a1d5b00f8e6b5a174bef46d77cc454199f9e43054b71de3d4ec9c24a648e0a51511ceef4fb5945756dd456a0e3ea6af8502787d35186dc5a64ebf12d768852d420cdb3071b895f0a5dd643673de193790d0bff56684cb8e38da041a35cfd2cd7779629e0c22821879fb4b6f820c0b6069862c39ab4cf14f70e1eaac5c181c30435bc6962ed5dc9a9018fb110c6bb67bd44762928f38eeefcb575ab63f5a77e9990fcaee73172b59938247b7d5a7f49415181c1f6e53fa9fbb87f66732186e7a51c6cf182a6e7b6306f55f6e3fd04ac4c94fd03294b8f7866e216b500e401e361b7a1bf8b0338bcc9120b8a0ece000521240871705a178af437b27c7d00e66a083a11bc2fb9c9bfa9d9dd9fbdeec3d992382e2661872ac76d24aa5f600710c988f8cce7dc2d801154f56a561658b2eea99ea28082d421649e859818f344792acc0db7a721cda2e9ecf61143a453aa3e349dd234e5a686e4845078af067519f509ca09746193be6518517e04bb75e619439c40c28e6dc21e12a26c0bbbc63b116797462a3227cc30ec904fbc60a90f0e1aaebd8e0cc305c50dd6d1b1ac45e67341cf13d96b2ef35dfab64ff5612798b7f8a8f879ebb31f6e5c3f09a9d2a4c30137118d87d2d519d349988831e034b62f6bcb4faa20e786653743bf6a658f5d19f8cace8974eeb5fa31b0bb2edd88b1f09a7b37d9264f88bec5126f79629a0169a818fdc048ff89e8e56f1c0d7f5e4dc9c1890a14e49f10988a15e8c1b32ad566d9839a82970180ccaba88ca6b2557f812f7d975457fc87c806ff372d571113ea7d48a78a7f72e511dd480b60c92fee161f82c9dffa048c5469622e7ebd6f70f3d01a5de1b340f09e306397402bcac93384981d1ecfd361ebb3e213b8694980477a607b45cde7a3378be7090cef963133719f2f198bc8f41695c8916d32e90bd32ed861b49986221022d41a38ef8de95f705dbe7a31b7d7e6dbaaf7f3525e44702f9ed2d94c13e496fe00f601caa35ad999a9d5284c91fa00e158334df361f7ba652834a2977ea13f76c6f4c02110f70a5e6ee3e77cf3cda2afa76c2f1485075b91972a2f0aa8f511f6f98decc3d1e352bb39eae4b57899859164d58f2ef645f2d62e8a9cbbcc555107d00cdcceb7c7120bc696c3de1689f7aec25d8d8ac438e148c13d125790b950da028935eb6726350e85ca17d486fdd9599fc48871af99e640313ef989b3c4263e3701dc5d7149132bfe30cf68ee186dc2dab307573c84522c518fe93c4fe4c6e11e383a012c3839d61ce10e29ff4c41bd13fffc4168b0fd41393640d73eb2e10cb71c35c0ed173071011d475b206aa6609b8320ae0972f32989c2200df01ce04849afa3793877980c606151370e21f7496a0ca1d805c4c270dfc4174008c2e6a13114a3f6f270125912a631759d43bf064878a116079448c972485f067051b868ffaccd46bd3cfff48a1115e22a074150f093608196d31a6448c1bdc9cf5bd32e1996b5c3e525b1ce25d8ab7442318c94b74a725c1bc1bfecca401ba28410bba869e13b164cc4d36c80aa5361d04f8e63397bebdffcc0ce5e0c5603176e7fe348659d33e6cf795b7f5a4623989a5c4e3c1708c4f732e812a6b680c7c0f9aab4064f71755cd6bdb3dfb3a5e7e5c407fbb6184b8f4b2506b5727da750810f012989c884c92c3f8ed0700b09205553931c533b35c9a541d0f74acee2c0984bbeab1a07dbaeeb773cf79b469881f37febc0c25c0218fcf97fe1f887b62f48ea35adee4266fc48193936519ff95fd0441f68bf32ae578cf2d59eeacad74fb7a7ad66932081682f0f67149687ec8a16ee573d5350e30f2b9b2d5c9ed7635d29c6c1055247026e03ec607cb449610e4fc3c04d3b51678a27cb9f8ad9f2c8602a2571a84399876b934326202ed0b1cd1f6036c063148905b02d98566a96afb50c66f23687f1164fbdb35f7c0848f10b8bb0f401481df4cc3a2cb25f89f9e701ffedeb542e38e3c77cce44e3e94d7a5eee4af1498653dd0c4995b7f6750cd5fd78af24e20e4f5e36e6615a153b3c957be78ee85ab94e510678b625cf01bf0482d42989d1436507934aee54fcf58b8e5bbea0a98175cd0f32db7fd969592b2fd4d1e836ccef0a861335253355fee995d01e953bf2c1ee4eb86509067a6f87e0c09e83252c2fcb686f34a433569008023270224e1df216512f61a202909e58a7fa7a33ce9f8703046c47a33339ccf028aa5b4bce0a6f6ef8da63c8aee14c8850a10712aa617e4ff56e8c97ddf8ad80344dfd6de487f0bc3aad73278bff92673fb84d6128afb01fe1dfc2ed1d9ce08bac81df03b853371b61a7e690ddb3b4c9f6cadae784122aded3b8a15fde707552a56b44216a801b78bb3fe33e8e31be39592ce2fef6a9a3779ef3490e6914771f6047ddb83d982b8a2b2e23b73fb821814fbcea677230c0468237c5e201a51957d29d1d2077b5e85c2a0ec623010bb376534f555964bfc0f7426c099923a91cff0315a8e9d3fce52a99d1384beab5c3964a16ef1fbeb5cb56a76ae7e3d9868568b8462431af885755951da105ab8e1582c89a8e3ecd5815ddb53ca6aea9add736eaab6a560490fb892bf155b7852bc1731f718490f9bc5cd65b30f3ad0f007145e830e5267b69a41c9782516236c8b384dffbe5aad477b8721469bcea3c12878ef14696a49e8bf0a31f1d6af049bc6443d8c64890190a9a39897594470d920d25c8468eab24cf6382690b7440eab8733dc2cf80c5d9ae19a2d44e83195ebd026006689d29bf69be3c7d4f10e164d3ab26c46caedffeb58941c9e8e1833337f1129ccb6dde68ba5ec512bc6488319b9ef069d27b0884a5fedc1396dd1b16fa493dd5419a46a2eb13adf38c01b19fa8b5f2fc7bc4ddcbe23c33617042926115e2691231a5d77a68041c5d10111da2eb4589eb9c6fae02e2ed6ee8d00c06029109a3de874b37b04325250080bc8007f2c9071bbc83a122e3ab81ac6126991d840557533e06c083cb9a9b8ec039fa176e88621676c41a52ab351c8bdc2694b8d6c0c5b7402e33b8c68e09a1861bbf7ada7b3f796b7a6534159ef50f56b0ae2a06ac9cfe2412169a78699313fd4e43385a1a6dc6df59391c931f68f0f5a342398848a78bb02d655dda6a544057661f18f114322843c9b5c97f79900c403c3e7e555f57a8a370572325d0eae9b089cf46f801e7dd67a2f1f08399227db40c42f8a6fe445bbdf3d588a01eaa1c06d55b4cc533925ab83080e05652a2a14c9a6ad616b8163ada33f265e76c67619537825a82a732160c9918084abe9654230222b2cc43281708bcd763eb4f176dbef30d11c6175cf323d0afe7814a77910a29e03924f1cc1cc496679e181e3562e4bd014ed12a4f7e325db5865f1241f676b41380acd740a83aa86392a9f0ca2a3cd1c212de699960457efb9bdea433465834b55d421155dae3c17f063faecaf6651e45c9eb89cc0e82c51bc2f75ec4c4079a4d43a990029ebbf5d492b0bfb6fb4257ea1afd1d1893715af1ed064c7ecdfd31a22190701588bee86841ba1298bd773075ead299381df1338951cd6f5a508df78751441dca3e5c02d7b16415f23df1f4e6fb6be4b103ec73dd83a252f2e89f1034085f353a0af7e1fffaae82dfe1c22e0f4e813d8c82d9aa32b7ff29365053186aca4b9533fd73eaf1d2570fd142b8ab33be51bcacfa9211418d52c752be4aca1a075af3ecae8d7a739afb3f4e0392cbb988ef17ee47d1926249da5b7fb5a5871e27314a4c711409c82d8a7b7f621784670ec626b2dd07e8ab568018e99a2632e4631c723810ab7d2f3ec0f3a4c3f2d83ca816493d026e84f462a1c14b2c2cfe2bc9df42dcfa054358d76d82dd850e01a1abdc0ba67952c6487fd7cd4b8321d710b0dbc2d468c1b513c86b0ffe04d9bcac8caccff970f3242c8dd0bf21ff6e155a8c976f876c3007de01bb508357aec13fd17ba1d49997951f6ac0dd06e7d1443e7f441370713151c1a7fdf6934a5eae29252c815d8dd4adab7f644e8f102e00ac54add8e62ff330dd5888da12e6da125f52cc33729ba075db856b898d855efba3eabc96185aee6799f19bfcd369839606df3afd5ea4ef1e6ac9ed9dd08aae0da1c0410542c88bd3f849b641bd14ed27d1a0ce6350490a3c1212ec20cfa2643a472341ee4dcb99ef4c9695a786988d3344aa7a79656be15b64a0793894aeedd30161a9e265f1a8c6230c80e7243fe93e4d0cf42eb11f47cac9a7f9af89543911925e732cb3e121c668f27091e77864e3f9ef1a652319d7bd40e26cae4656398f19feadf2aadd42723a6c2cabb5870db3df4616536e0a214bdad55070249ae1ec14d9717e40809f6c37c02a87c8594fbb5f2b8c5cb6e1dc333ed7f47cb4908c00dfc9a5320a1c763cff65920cfbf640a3eb7efdd5f6d7638c82aac7e33a90ee5173a3609661ce9e78273fab6dc77f8a45f71fcf6d9a04decbfb3c448ee57279b7ae561474f84686df09094ccd8fa2b8ad4c230dcd982c72be8be772ec92102d47f21d45f250d4340c0e7922bd63785da7f898efeee8dfdceb6c9f6df855c162973aafae6727f2d664e66fdfc74c277aa75bf079982a47940b100d58009cc9b6f7557e57309fd5291fe85413691190e89010587535f9bbc9dd1cf90b6a2c0dbb495716615275de9706ec11e60162492e76372037db05096236e4ec2d77c7d285398dbe88e34d734d7a2338582e05229c9397f0e527e7a356d7ec0f8d660aea30507c2aee50b57896effba9d7e2719e5d389d7c899eb30d40a2bad014b3fc6a1bab3082de753226ef418e4dfb4b3ad9621e32ef55453ff953ade2f80cb25598c3c8c53b233fdedb56a063e932e7c93420a2ecdae771f2dcf4325e7d47dbddbda354f1ea0be3fd8b5d401714c195d37c327caabe50b88e014a1f917a02a032c273f182a53ef849d74776dcf89c3151e957697665ad0d0c0701312ed40db041ea251c779cf5cc50a61b9c54c65f151579f188a823d1b789aa013b22d474d30b85db2fc36246b30183ab1673a2a08202b930fff3c19fd6ce6729fbb7655a7ab0501c3fd7d112addcadcf853365c341a7b110c24671dd3a02953e17121ce7d1824e343ee21b1d99091969cfda6c9174de6fde2a4f9690117a9d25e7c268482e38ab1d67273b7f347bf58f7b0ee77bda4afa1dfae146d64c8f6362ba16dece1fd62cc586f7b45d95d5cf659b7e0d7fd50b955422e45187ea21bb0e95785855f7885545006c821cf19e6919e397e07a43d22e619ed3efbff2cb6107dfeadf080c36c1dda6200b54c2772c79715f3cd7ca2fcd086b015212d90d189332b3118771b3cb9105cf9adaa54392e61a4a7b919d530a87714f756a8de8c364a783d7b2f12532c1e3a5ee26328bcdb61fb44581e85b592dc3c8a3512f92de6f07a5d19af65365407bafa228b7c994cc005b872c96a23b07682041694ce560b8ef929b76501b5eb876409db27d0f2ba5266b3575f9726aee548757410754d2f676c8d5c6bd8289b92540a0f905f001a411f9b879ba67671144976f16743dde3c64572c5f43acd0339ba96a3a23bfdcdd85e27f0cd33272b05d77ecdc45492ca7519b0b738abf4bf5c04dd2b24d52c89afa3f504ad785d58dd27cf620c00edf1bc4b3bca466adedc99211b264f219aab2962de62a42e598d00095755084cbdada5c796bef2d62e385dd963491f1a453b8f72be", 0x1000, 0xfffffffffffffff7, &(0x7f00000000c0)={0x77359400}) 03:33:33 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in6={{0xa, 0x6, 0x9, @mcast2, 0x81}}, 0x10001, 0x2}, 0x90) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r2, 0x1277) 03:33:33 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:33 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) socket$inet6(0xa, 0x5, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 255.726330] Unknown ioctl -2145893024 03:33:33 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace(0x11, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) 03:33:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc8070031") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 255.781677] Unknown ioctl -2145893024 03:33:33 executing program 6: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f00000000c0), 0x54deded00158a180) sendmsg(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000100)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x80, &(0x7f0000001400), 0x0, &(0x7f0000001480)}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000a00000000000000000000089500000000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x5c0, 0x1000, &(0x7f0000002800)=""/4096}, 0x48) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1d5) recvfrom$unix(r3, &(0x7f0000000180)=""/147, 0x93, 0x40002022, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4) close(r0) 03:33:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x4000000000000000) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x27, &(0x7f0000000e80), &(0x7f0000000080)=0x2) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)='vcan0\x00', 0xfffffffffffffffa) keyctl$negate(0xd, r2, 0xf6, r3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RLINK(r4, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) fcntl$setlease(r0, 0x400, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nullb0\x00', 0x800, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x4000000000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', r5}) 03:33:33 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = msgget(0x2, 0x13c) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @local}, &(0x7f0000000100)=0xc) msgrcv(r1, &(0x7f00000000c0)={0x0, ""/33}, 0x29, 0x1, 0x3800) msgget(0x1, 0x600) ioctl$KDSETMODE(r2, 0x4b3a, 0x2) keyctl$get_persistent(0x16, 0x0, r0) 03:33:33 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0xd2) 03:33:33 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) socket$inet6(0xa, 0x5, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:33 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x7fffffff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e21, @broadcast}}, 0x5, 0xe64, 0xf7fc, 0x7fff, 0x8}, &(0x7f00000002c0)=0x98) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x1, 0x0, [{}]}) 03:33:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) prlimit64(r1, 0xd, &(0x7f0000000080)={0x5, 0x80}, 0x0) 03:33:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f8571") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)="696c6c696e6f697300f8fbfa59230bdbedfebbb4fdbc09bce1bf91a6da64d9c74a2f4f5fad4caba2428bafb9be188485010ded011cc4a1d3af445b3fa1b095d963de62f99aac72c3c3d39aa87d34529457b66d2cce8e8ba200e653ba7541164a2068fe8fb10a0a", 0x67) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000240)='./file0\x00', 0x7, 0x1, &(0x7f0000001280)=[{&(0x7f0000000280)="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", 0x1000, 0x4d1}], 0x20, &(0x7f00000012c0)={[{@noenospc_debug='noenospc_debug'}]}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x2c0, 0x20000000, &(0x7f00000000c0)={0x2, 0x4084e23, @local}, 0x10) getsockopt$inet_tcp_int(r1, 0x6, 0x1a, &(0x7f0000000000), &(0x7f0000000180)=0x4) [ 256.231206] QAT: Invalid ioctl 03:33:34 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0xd2) [ 256.286672] QAT: Invalid ioctl 03:33:34 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') accept4$vsock_stream(r1, &(0x7f0000000240)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) sendfile(r0, r1, &(0x7f0000000040), 0xd2) recvfrom$inet(r1, &(0x7f0000000080)=""/174, 0xae, 0x40000040, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x7) 03:33:34 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') socket$inet6(0xa, 0x6, 0x3637) fcntl$setstatus(r0, 0x4, 0x4000) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d76943cb8fde3ffa2c580000006a192688585d56ea2fc71be2c7051fa8d763566edf42cea88a06d62777e8372a33ca50dfc2a9cc58e5a1abc2f86ef60cbd8aad8e7fef4558c54c964ec05f06fbb1fd7c4f30b265421664869f930fab2b70", @ANYRES16=r1, @ANYBLOB="0101000000000000000001000000440001000c00070000000000000000000c0006006c626c637200000008000b007369700008000800000000000800090000000000080001000a0000000800050000000000"], 0x58}}, 0x0) 03:33:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffffffffffff, 0x141003) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000180)=0x100) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r3) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0x5, 0x40000000000, 0x8000, 0x7fff, r2}, 0x13) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f8571") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:34 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) socket$inet6(0xa, 0x5, 0x0) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:34 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0xd2) 03:33:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200000000082006, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz0', "9392cdee09291692635799a5b704d860a139224ef672d920f9f85275b04ce10e7bac4ad55b75fe598cbaccb8bfe54373d2f8a6efaa44ed9608b49aa09c5f58581a9de9d2e4e73aa6345a05ae44ff25681394326706396c8a9ea77646f41fb8e14399d71d2914e63f0c212fafb1dcfa767da3f38081016ec57f"}, 0x7d) write$binfmt_aout(r1, &(0x7f0000000000), 0xff8f) 03:33:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffffffffffe) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/226, 0xe2}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 03:33:34 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:34 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/dev\x00') perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x99, 0x80000001, 0x1, 0x8, 0x0, 0x7, 0x28, 0xc, 0x1, 0x6, 0x6, 0x10001, 0xfff, 0x81, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7, 0x7, 0x3, 0xfff, 0x80000001, 0xffffffff7fffffff, 0xc0a, 0x5, 0x9, 0x80000001, 0x1ff, 0x0, 0x8, 0x17f000000000000, 0x2, 0x10, 0x4, 0x0, 0x4, 0x7, @perf_config_ext={0x6, 0x1ff}, 0x8, 0x1, 0x7fff, 0x6, 0x4, 0x7ff, 0x9}, r0, 0x7, r1, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff13, 0x3e5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x0, 0x0, 0xd5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r2, r3, &(0x7f0000000080)=0x4, 0xd6) getsockname(r3, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000340)=0x80) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000480)=ANY=[]) 03:33:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f8571") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0xd2) 03:33:34 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:34 executing program 6: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x83) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x7fffffff) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x40086602, &(0x7f0000000000)=r2) sendfile(r0, r0, &(0x7f0000000140), 0x8800000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f0000000200)='./file0\x00', r2}, 0x10) truncate(&(0x7f00000002c0)='./file0\x00', 0x0) epoll_wait(r3, &(0x7f0000000240)=[{}, {}, {}, {}], 0x4, 0xa39) unshare(0x4000000) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x2) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xf) 03:33:35 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000007c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@loopback, @in=@multicast2}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000009c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6, @in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d00)=0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000e00)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@mcast2, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000f40)=0xe8) fstat(r0, &(0x7f0000001000)) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @local}}}, 0x84) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000fe8)) r3 = syz_open_pts(r0, 0x2) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)) 03:33:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0xd2) 03:33:35 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0xa00000000000000, 0x1, 0x2, 0x1, 0x10}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x4, &(0x7f00000000c0), 0x9, r1, 0xc}) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r2, 0x1277) 03:33:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8}, 0xb) r2 = gettid() syz_open_procfs(r2, &(0x7f00000000c0)='net/hci\x00') setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0xffffffffd7cb4be5, 0x4) sendto$inet6(r1, &(0x7f0000000180)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @empty, 0x2}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000380)=""/133, 0xf2, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x70d000) 03:33:35 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:35 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e5, 0x6, 0x0, 0xffffffff8c86a9da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x87b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x23, 0x0, 0x0, 0xffffffffffffffff}, r0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f00000000c0)="6e65742f010400ef14e7353c725f6361cb5e31283341c4afd152ed11e20039bc18a2bb43b57b09236335ca33abafb0f082f0cd") sendfile(r1, r3, &(0x7f0000000040), 0xd2) 03:33:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f857150") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:35 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = semget$private(0x0, 0x5, 0x64) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000000040)=""/82) ftruncate(r0, 0x8) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xd}]}}}]}, 0x3c}}, 0x0) [ 257.275675] netlink: 'syz-executor6': attribute type 13 has an invalid length. 03:33:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0xd2) 03:33:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x7db}}, 0x18) [ 257.341115] netlink: 'syz-executor6': attribute type 13 has an invalid length. 03:33:35 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000080)=0x400000, 0xd2) 03:33:35 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000140)={0x7f, 0x3, 0x3ff, {0x77359400}, 0x200, 0x80000001}) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000100)) 03:33:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f857150") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:35 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f00000024c0)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000001180)="1f528d05af17ee", 0x7}]) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:35 executing program 6: syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f00000000c0)={0x14008, &(0x7f0000000080)}) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@random={'trusted.', 'nodev\x00'}, &(0x7f00000001c0)='AUDIT\x00', 0x6, 0x0) 03:33:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000000)='mounts\x00') setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f00000000c0), 0x4) 03:33:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000002500)='/dev/loop#\x00', 0x4, 0x1100082) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000002480)='/dev/zero\x00', 0x80000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000002980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f0000003f80)=ANY=[@ANYBLOB="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"], 0x3c8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002600)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000002700)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002740)={0x0}, &(0x7f0000002780)=0xc) sendmsg$nl_generic(r1, &(0x7f0000002800)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000027c0)={&(0x7f0000004380)={0x31c, 0x16, 0x400, 0x70bd2a, 0x25dfdbfd, {0x1}, [@typed={0x8, 0x32, @fd=r0}, @nested={0xec, 0x78, [@typed={0x8, 0x34, @uid=r2}, @typed={0x8, 0x63, @uid=r3}, @typed={0x8, 0x48, @pid=r4}, @generic="84ebcc7d623d43bf60099c70205ca26e2bd91019c7631e9cb2564c2548e5fc1886732fbd34e79c9ec5f2c3110febb273532b2661ebb286762f7217919f03e74dfb49debcac450167d4b974b7605226f1c67ff0e57efa2e8cbc9233dca8ded8a35a5265592077a9e6e01053fae4c8fa600e60b5ce2c308e0f80cd5f03e354786187a538eb2d4e9bc6c127818db9fdfc93aa294a075ea4ee45a1edd1ceaf97bb4b274878ccdec5d929f62887fa388f9b73f82cd52ff4ede7afa313bd7795bf31c05cfcd8b7a7b519b7a179f8ae94"]}, @nested={0xc, 0x48, [@typed={0x8, 0x90, @ipv4=@broadcast}]}, @typed={0x8, 0x1c, @fd=r1}, @generic="6832dfd2c25aad14b5197b3e782431ca0d9247d82b4e027b1bc0ae7e7949723b1d6c4313c2d55f04c97db0379c9fe8b75b5e84e5ab1f3ccca071eba83981ea11c9cb9e3df72e5acd9e847690744a6a06b461c3a5a668f64edf54d9f431406c43d659e7e3127989c06f9b745ca79a1eb241ae783bdbf6426f1155b2e7363926a6bb7d9c0ee1d92f426220a886b976e35cd54b42bbb165cb91d1c48ed5a9c9fe53c3fb360ef3c6b1a66ae6dc042d740360cdc6ebbc7fd0", @generic="165eb43824349f286850dac502ced319f6660c04d20a44162c395432396929658b4563ba4918b93329197dd9dcb51d939f4129f7e47bab239f30bd5613387e8630f48a11758a05ce21f5e73ef789876ab6e4f7cc65aff7f72d7081be0e90d26962491068a3b49c2b8b403f80132c515a3ece1cf75b75e6d2a926137a2000c06acb357c275534a825f754b25ef311f0a4e3c1be940dbe35cf6733aad69bd8be2d9106b16eb57b368ccda50f0e32564462e77df3fab9882434a4ddd2b090dbc6042efb7df918bb7a55b0d9524cf5bea68ead0708335b820ca3d3", @typed={0x14, 0x3b, @ipv6=@local}, @nested={0x38, 0x3d, [@generic="47f401ed3a69023b11f77fecb072f7a8d2ba9579e4d555", @typed={0x8, 0xa, @ipv4=@loopback}, @typed={0x14, 0x91, @ipv6=@remote}]}, @nested={0x24, 0x79, [@typed={0x4, 0x5d}, @typed={0x8, 0x8b, @ipv4=@multicast1}, @typed={0x14, 0x7e, @ipv6=@ipv4={[], [], @loopback}}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7, 0x4) r5 = add_key$keyring(&(0x7f0000002b00)='keyring\x00', &(0x7f0000002b40)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffb) syz_read_part_table(0x9, 0x3, &(0x7f0000003cc0)=[{&(0x7f0000003c00)="1bdb9b351eb4b14d8ff233", 0xb, 0x1}, {&(0x7f0000003c40)="355b4d146f0bb51b4cf6ea5389dcc5c1bfe70299ee2d729a76512f6cb3d5b452463e", 0x22, 0x200}, {&(0x7f0000003c80)="964b473b02e17680462cb2d80dcc0c872b9dec81e6a12570ba2b10699ddaf2af58a7f4a4751031533dcfedf3a1537e02cd54b13755ff951630aa04c2", 0x3c, 0xfffffffffffffffe}]) r6 = add_key(&(0x7f0000002b80)='rxrpc\x00', &(0x7f0000002bc0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000002c00)="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", 0x1000, 0xfffffffffffffffc) keyctl$instantiate(0xc, r5, 0x0, 0x0, r6) syz_read_part_table(0x7, 0x8, &(0x7f00000023c0)=[{&(0x7f0000000040)="43dc1eae1eb0e12be5933e6dcc9e3f568eb92c0e86e4d3f00b1c6f18fa9be12577fb99c68a2540", 0x27, 0x200}, {&(0x7f0000000080)="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", 0x1000, 0xb4c1}, {&(0x7f0000001080)="162d0654a8d812c19e8628670acf1f4747265065655967a6df53a6fc846ec540a77e831eba25e94526aeefa0da68dab06d97e21436353289ed36b4a4a74b72ba4cc6b3364dadebf9d40dfccfcd96686d6bd564ab8cc977575097e8dc3f964e0add936927eed3a50ffa401d1f5ffc9a0b4213b2f852dc09d4638cb214a077d59f247e217b5520a235bea7fc2f6920f92a897ab712ef6798bacc9add63e31c4b475266b5cd05037d2b4f9706059e9adb57b5354c", 0xb3}, {&(0x7f0000001140)="3b7aa0c0623e947d607bcc5d4da8afa9b0c0d2549a0ffe982bde5ed3c8ea243ff82e99e7183588186b78ddeaada2f4a3f4e90d932c5ccbba2ff27a874e7b6b1a36903aaf51df7218590b35f7466c539143135afae36950aa7d18586a006a651bb28598596c60596b69735e15ecf74bbf8fe93d19061f8cf42962c406cfd92f79", 0x80, 0x33}, {&(0x7f00000011c0)="65b73f6e6e6ca53c0bf1e22eb4fc38ee034d4e187ff3b76ae7de35bafddaa6bddf1acd7dd704700956fd5c13940d689867830ec5d421551646338c5f34ea279d79f6e9b1ad5081dd3ba8e19b65db2377da9e750b61d18bc7bee55f9a4df04feaa171", 0x62, 0xd163}, {&(0x7f0000001240)="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", 0x1000, 0x7}, {&(0x7f0000002240)="91f259cf73463fd04b103caecb3f617f82729cbb73bcc61d0e95f32eaf599f8f23fc349f788b08b5e59f1b78868c7a4ccbc063124eaebab678c2e800acdd54943035c6558ea4fd4db4ee4d1e06afa8a7ee29cdc3d54fae48e8082e9a86", 0x5d, 0x3b}, {&(0x7f00000022c0)="9fc3e40560883f0ed09c9223094469c9322f6fe8e3716277ed0177d75afda0fe420c0472e80a66035069b2c2cfa3a2276729c44620b975b06f3ab0863b504ffaf26e627d5b61788fb99b78fb80a56b8f6d2119201aae7d29faea261bd24cbcda49a7bd7f89c6e5c6eec3b6c64d845c18cb1453b84469c73cd947016a9861bd548aced9a956429850af775019c32f2d8b7628ac4db42a8c9cc38e9dca64cce54dd5fbbe59545a132426a52bd56b35e094f0fae831acf246ce19fbd21c0104945998af4d1d7f13b2648468213a7e8118499ed3abb747adff7188635a686bb4199c230d83", 0xe3, 0x7f}]) r7 = syz_open_dev$vcsn(&(0x7f00000024c0)='/dev/vcs#\x00', 0x1, 0x10000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000002840)={0x2, 0x3, 0x6, 0x0, 0x3}) connect$llc(r7, &(0x7f00000029c0)={0x1a, 0x7, 0x0, 0xffffffff, 0x81, 0x6, @random="7d4fdda58b51"}, 0x10) sendmsg$nl_crypto(r7, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0xc400000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)=@delrng={0x10, 0x14, 0x108, 0x70bd27, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000080}, 0x24000010) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000028c0), &(0x7f0000002900)=0x8) fstat(r1, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r8, r9) 03:33:35 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xdfbe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x200) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/18) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) 03:33:35 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) io_setup(0x1f0, &(0x7f0000000000)=0x0) listen(r0, 0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="ab", 0x1}]) io_setup(0x5, &(0x7f0000000080)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @local}, &(0x7f0000000180)=0xc) [ 257.669602] REISERFS warning (device loop6): sh-2021 reiserfs_fill_super: can not find reiserfs on loop6 03:33:35 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) io_setup(0x6, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f857150") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 257.740677] REISERFS warning (device loop6): sh-2021 reiserfs_fill_super: can not find reiserfs on loop6 03:33:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070") r1 = semget(0x0, 0x7, 0x8) semctl$IPC_RMID(r1, 0x0, 0x0) 03:33:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:35 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000200)="66b9800000c00f326635000800000f300f2325363e0f01cb66b9800000c00f326635002000000f30018c448b2e0f0171860fc72cba4200ed67f26cd0bf9f30", 0x3f}], 0x1, 0x0, &(0x7f0000000300), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xe}}, 0x20) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r4, r3}}, 0x18) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000080)) ioctl$KVM_NMI(r2, 0xae9a) connect$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x5, {0x8, 0x7fff, 0x1, 0xfffffffffffffff8, 0x3, 0xfe12}, 0x17d, 0xffffffff00000001}, 0xe) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x41}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:35 executing program 3: socketpair$inet(0x2, 0x6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) r1 = socket$inet_dccp(0x2, 0x6, 0x0) rt_sigaction(0x32, &(0x7f0000000180)={0x2, {0x8}, 0x80000000, 0x5}, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x1, 0x7, 0x1, 0x1}, 0xc) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000240)=0x4) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x2, 0x4000) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000300)=0x7, 0x4) 03:33:35 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace(0x11, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) [ 257.956500] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 257.961227] loop5: partition table partially beyond EOD, truncated [ 257.970046] loop5: p1 size 2924005075 extends beyond EOD, truncated 03:33:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:35 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f00000001c0)=0xfffffffffffffffb, 0x8f9ee74d) socketpair(0x4, 0x8000f, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:33:35 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x40002, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:36 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r1 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9a45, 0x6, 0x6, 0x9, 0x0, 0x2, 0x200, 0x8, 0x0, 0x0, 0x7, 0xff, 0x5, 0x9, 0x3, 0x9, 0x9, 0x401, 0x0, 0x2, 0x1000, 0x81c, 0x3f, 0x0, 0x2, 0xe77, 0xfff, 0x6, 0x9, 0x0, 0x1, 0x8001, 0x200, 0x8000, 0x80000001, 0xa5, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000200), 0x9}, 0xc2, 0x10000, 0x3, 0x5, 0x7, 0x4, 0xffff}, 0x0, 0x7, 0xffffffffffffff9c, 0xb) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x1, 0x5, 0x4, 0x7, 0x0, 0x100000001, 0x100, 0x2, 0x101, 0x9f, 0x1, 0x0, 0x8, 0xffff, 0x9, 0x7b2b, 0x40, 0x3, 0x7, 0x7ff, 0x100000001, 0x9fc, 0xfffffffffffffffc, 0xec, 0xaf06, 0xe4, 0x2, 0xfffffffffffffffb, 0x7, 0x4, 0x6, 0x40, 0x8, 0x9, 0x6ec83396, 0x9, 0x0, 0x27, 0x4, @perf_config_ext={0x61, 0x1}, 0xc00, 0x2, 0x7, 0x5, 0xfe4, 0x7, 0x3}, r0, 0x6, r1, 0x1) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r2, r3, &(0x7f0000000040), 0xd2) 03:33:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @remote, @local}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@multicast1, @rand_addr=0x5, r2}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @local, @dev}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 03:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000afe6bdbed0770cf084fe43b7cf984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000500)={0x9, 0x6f, 0x1}, 0x9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000002c0)={0x80000000000001dd}, 0xfffffffffffffefc) write$P9_RGETATTR(r2, &(0x7f00000003c0)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000640)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) r4 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x0, 0x0) fdatasync(r4) 03:33:36 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x1, 0x0, {0xa, 0x4e22, 0x6, @loopback, 0x1}}}, 0x32) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8000, 0x4000) ioctl$LOOP_CLR_FD(r1, 0x1277) 03:33:36 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) recvmmsg(r0, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/249, 0xf9}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000140)}], 0x3, &(0x7f00000003c0)=""/102, 0x66}, 0x5}, {{&(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000000500)=""/111, 0x6f}], 0x2, &(0x7f0000000640)=""/89, 0x59}, 0x40}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)=""/226, 0xe2}], 0x1}, 0x6}, {{&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/217, 0xd9}, {&(0x7f0000001a40)=""/166, 0xa6}, {&(0x7f0000001b00)=""/85, 0x55}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/150, 0x96}, {&(0x7f0000002c40)=""/22, 0x16}, {&(0x7f0000002c80)=""/48, 0x30}, {&(0x7f0000002cc0)=""/4096, 0x1000}], 0xa, &(0x7f0000003d80)=""/143, 0x8f, 0xfffffffffffffeff}, 0x3}, {{&(0x7f0000003e40)=@ll, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003ec0)=""/160, 0xa0}], 0x1, &(0x7f0000003fc0)=""/130, 0x82, 0xa6}, 0x3e3}, {{&(0x7f0000004080)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004100)=""/56, 0x38}], 0x1, &(0x7f0000004180)=""/188, 0xbc, 0x3}, 0xffffffff}, {{&(0x7f0000004240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000004680)=[{&(0x7f00000042c0)=""/101, 0x65}, {&(0x7f0000004340)=""/197, 0xc5}, {&(0x7f0000004440)=""/157, 0x9d}, {&(0x7f0000004500)=""/75, 0x4b}, {&(0x7f0000004580)=""/252, 0xfc}], 0x5, 0x0, 0x0, 0x4}, 0x5}, {{&(0x7f0000004700)=@sco, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004780)=""/62, 0x3e}], 0x1, &(0x7f0000004800)=""/121, 0x79, 0x2}, 0x6}], 0x8, 0x40000121, 0x0) r3 = socket$nl_xfrm(0x11, 0x3, 0x6) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r4, 0x8004552d, &(0x7f0000004a80)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000080)=0x8, 0x4) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, r2, &(0x7f0000004b00)="d4e9c47728d92d5e6e8240e72198b87fd7e985b2a5c7b74e89a4796beb7ef9596548ef39a1fdcfed9970902ab2c59e348812f6d8afb7c01f9d5c7bcc321dc0af5c1cceaec1f74ffcdcf1ea39fbea2d06c8454e9e7e8d739e00000000", 0x5c}]) 03:33:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:36 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x3, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:36 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x4, 0x10}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000003c0)=0xb6) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000440)='net/ip_mr_cache\x00', 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={r2, 0x74, &(0x7f0000000600)=[@in6={0xa, 0x4e22, 0x11e00000, @mcast2}, @in6={0xa, 0x4e20, 0x9a8, @remote, 0x6808}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0xf2e, @mcast2, 0x9}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000680)=0x10) fcntl$getownex(r0, 0x10, &(0x7f00000007c0)) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000800)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000840)) getpgid(0x0) r5 = getpgrp(0x0) r6 = syz_open_procfs(r5, &(0x7f0000000880)="736d61707300262602519a2edace3a9ee34d") setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000400), 0x4) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f00000004c0)=0x4) sendfile(r3, r6, &(0x7f0000000040), 0xd2) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000500)={r2, @in={{0x2, 0x4e23, @remote}}}, 0x84) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f00000006c0)="89bc3fbb7442a922ce1e35c4d238fa1dd3e3894c1f17933250a124025b4a46291aa7ce11b5ec249072a7a5fe2bca7fa39b629f9471ca0dbca31b4bab07380ca9498b50685d405bb5483daf5341f7070d96d0f21cd15c41ae6d9aefee37c6d915a8270e00bbd9a249ef410526bf1857c4ac0076cfa01b0248aea0abbd7c706eb89c32c75c7dad8d3f901230cda9f7ace03be9cdf8") perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x8, 0x1, 0x401, 0x800000, 0x0, 0x5, 0x80, 0x1, 0x4, 0x9, 0x195e, 0x100, 0xad, 0x80, 0x1000, 0x7, 0x4, 0xfff, 0x7, 0x8, 0x8001, 0x0, 0x9, 0x6, 0x1, 0x9, 0x1, 0x6, 0x5, 0x6, 0x10, 0x7, 0x7fff, 0x1, 0x8000, 0xfffffffffffffeff, 0x0, 0x6, 0x6, @perf_config_ext={0x4, 0xfffffffffffff733}, 0x200, 0x8, 0x8, 0x6, 0x5, 0xfffffffffffffda7, 0xffff}, r7, 0x0, r6, 0xa) 03:33:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth0\x00', {0x2, 0x4e22, @multicast1}}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/72, &(0x7f0000000100)=0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score\x00') pread64(r1, &(0x7f0000df6000), 0x0, 0x0) [ 258.610806] 9pnet_virtio: no channels available for device (null) 03:33:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x80, 0x110007e) ioctl$LOOP_CLR_FD(r0, 0x1277) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) 03:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 258.681234] 9pnet_virtio: no channels available for device (null) 03:33:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:36 executing program 7: socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0x11}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) write(r0, &(0x7f00000005c0)="7f", 0x1) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)={{0x6000, 0x0, 0x4, 0x1, 0x1000, 0x40, 0x5, 0xffffffffffffff81, 0x3, 0x9, 0x7, 0xa1e}, {0x4000, 0xd000, 0xf, 0x5, 0x2, 0x8001, 0x9, 0xfffffffffffffe01, 0x1, 0xfff, 0x7, 0xaf0}, {0x10000, 0x3000, 0xe, 0x4, 0x7, 0x3, 0x5, 0x3, 0xf74, 0x8, 0x1, 0x8001}, {0x2, 0x3000, 0xa, 0x6300933e, 0x9c8, 0x4, 0x401, 0x0, 0x0, 0x7c, 0x100, 0x4}, {0x1f000, 0xf000, 0x0, 0x2, 0x9, 0x9, 0x50, 0x8, 0x10000, 0x1, 0x338, 0x5}, {0xd000, 0x10f004, 0xf, 0x3, 0x20, 0x5, 0xe62e, 0x5, 0x9, 0x5, 0x6, 0x40}, {0xd000, 0x106000, 0xd, 0x200, 0x3, 0x3d, 0x7, 0xfffffffffffffb37, 0x1, 0x54, 0x5, 0x9}, {0x2, 0x1, 0xd, 0x9, 0x38df, 0xc57, 0x100000000, 0x100000001, 0x7fffffff, 0x5, 0x3, 0x7d7}, {0x7001, 0x7004}, {0x6000, 0x2000}, 0x20000000, 0x0, 0x4, 0x2000, 0xe, 0x8000, 0x1f000, [0x0, 0x0, 0x1, 0x100]}) close(r1) 03:33:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r0, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote, @rand_addr, @dev}, 0x6) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x8400) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e23, 0x8, @mcast1, 0x80000001}}}, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) close(r0) socket$inet6(0xa, 0x1000000000002, 0x0) getdents(r1, &(0x7f0000002040)=""/4096, 0x1000) dup3(r0, r1, 0x0) 03:33:36 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:36 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) signalfd(r0, &(0x7f00000000c0)={0x8}, 0x8) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) 03:33:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0'}, 0xb) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)=""/4096, 0x1000) 03:33:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7f, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x400000) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)) ioctl$KDMKTONE(r1, 0x4b30, 0x8) connect$vsock_dgram(r1, &(0x7f0000000340)={0x28, 0x0, 0x2711}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0x6}}, 0x1, 0xffff, 0xffff, 0x1, 0x8}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0xec, "e79715579a3ea207010f60ea5d07d5e1fd772d1dc3174fe436dfca7eb2e53af5a499d53d75108f99277aeb13ecc7dd52475e1f96620efcd48065ad1b5e5c962317438b863f874bbecf5b73126bd4bcf013ff5052a97f534837ef47c44c0160e88f55f95f1446a42cd872b2036d2acbfe222e794d62b0c6bd691fd3a4f6194cb4352c63745aef1c3effb0955c492ba567c85a3c5bd0dd1513417dd452cb004ea81f8822d20ea8e215e55bc909f9cc88f91292404f7ed5c6002e2a97b609024e787612376c7187f4892616dde8d7267b7587e708121034f67f87185bff0b97fd462b5c9e6dcd1b8f1b42024350"}, &(0x7f00000002c0)=0xf4) 03:33:36 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:36 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="b103a0a12627f8f06397a29755652fa50ae6d58000c928c7870dc93d964532203e550027e1228a7b7a5e8a675e545f29066443ec18e9f9692e96b42df3cc7bb851fee26244924499a41cd63fe13c78b43ab41bc0c8829f103b5dc412b3e318d76919091d39a7edb2838e7b683e82dfdbaca5", 0x72}], 0x1) getpeername$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x1c) signalfd(r0, &(0x7f00000002c0)={0x7}, 0x8) sendfile(r0, r1, &(0x7f0000000040), 0xd2) fremovexattr(r1, &(0x7f0000000200)=@known='security.ima\x00') sysinfo(&(0x7f0000000300)=""/79) 03:33:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:36 executing program 7: r0 = socket$inet6(0xa, 0x1001000000002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket(0x2, 0x2, 0x0) shutdown(r1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000000eff4)) epoll_wait(r2, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000040)=""/99, 0x63}, {&(0x7f00000000c0)=""/137, 0x89}], 0x3) shutdown(r1, 0x1) 03:33:36 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x22102, 0x0) ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000200)="add25efb971b7c") r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0xfffffffffffffe8f) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3, 0x16, r1}, 0x10) sendfile(r1, r2, &(0x7f0000002000), 0x13000) 03:33:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000100)={0x10001, 0xad, 0x2, 'queue1\x00', 0xffffffffffffff80}) ioctl$KVM_X86_SET_MCE(r2, 0x8004ae98, &(0x7f00000000c0)) 03:33:36 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xffffffffffffffe0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x1, 0x3, 0x200, 0x2, 0x9}, 0x14) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r2, 0x1277) 03:33:37 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:37 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:37 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) syncfs(r0) rt_sigtimedwait(&(0x7f0000000040)={0x48}, &(0x7f0000000380), &(0x7f0000000400)={r1, r2+10000000}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x24f}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") 03:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)="ad423dc200c7ec6081259bbb7989906d88216ff66ae205c6dbf23174075c710ac9066e2634601203d9422efc", 0x2c, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r1, &(0x7f0000000100)="f131a48de9da7f76ac2c420b207acb5d91679dec73bb1728caf1038fc5bb34a3f22e87f496bca40870f3934134488e405124bfdb8b434957d107bea9e5411bf75cb9a5f127b13827a568b0219253a4e6d54a48ff711c10b2b6276db1c79df401c05ff9b1ecef7a566647d353578e621d624038d74d621a1af4ead017ee3b083bddf83d8ef65d8dbe17f0de7ccec5951ce50686c2639452fc464569dd3afebd43d18aca722f50f700dc99d3f59abfc6b4d09c46842deafc5b0215089340111b5351db474b88c18613508ca6f210acfe8c562976064b76c59c1bb4036d89b4171fbf78f50a2399747ff158530f1f6d5b659a04", 0xf2, r2) ioctl$LOOP_CLR_FD(r0, 0x1277) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x841, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000340)=&(0x7f0000000300)) init_module(&(0x7f0000000380)='\x00', 0x1, &(0x7f00000003c0)='user\x00') ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x37, 0x2, 0x0, 0xf, 0x2, 0x10001, 0x4, 0x76, 0x1}}) 03:33:37 executing program 7: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x40003d, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x400000000000007, &(0x7f0000000000)) 03:33:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6c00) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x1, 0x0, 0x10000101) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 03:33:37 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:37 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x3247144ddae797ab, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000080)={0x84, 0x9, 0x24, 0x80000000}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) fallocate(r1, 0x0, 0x1000, 0x2) ioctl$LOOP_CLR_FD(r1, 0x1277) 03:33:37 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x100) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r1, r2, &(0x7f0000000040), 0xd2) 03:33:37 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) syz_open_dev$sndseq(&(0x7f0000000400)='/dev/snd/seq\x00', 0x0, 0x881) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000140)="2bdd37bab5723e11e1c02ae1b22efe69a26ed188e6169d56ed8a56503316b4ee139e48ad1cf152fb468d9f9359144cdcf09a0e6266a0dabe81b288768be49db9c678cfbf551117119410db602be918e4316748111b8b3534c93d033216ef37455ccaa297065ce4db89949e8900d9c8eb402ac9f1b2da2f1d230fc3dee0ab4300f48ced29af8900a3bd77393fcbd8d346cb7356f78b6673313d96701b32bb3db595c1ec5ee6e01e2f239dd86038739043ba0a1fba36ac83") ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x9, 0x0, 0x10f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000200)="55d297580b87c25b5c1ddf59c74233ac42f2754c0d29230a1759faf0bca904c46c15169dfb0536038e96d13eec79446a2320705ffcf595f1b502a8d0d06f7e93f6350d633d8b7f5184df07e597aa231148cf5fc7d678e2eee8dffab7c09b3e71abcb0ea3aa385808237428ac29147ec5f5390239f770d25f1a31a89465ba5f65984b1a5bda675eaaa763fe60c8d550ec9bf6b6eff273dc701d6a4c435c22d9e1ee3a354a1587ee9d83eeeba5ae3ad253c0e6c88114546e5ae3ccce98") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x4000000011) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x8, 0x100, 0x5, 0x5, 0x80, 0x23d6}, 0xcb5}, 0xa) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f00000002c0)=""/95, &(0x7f0000000340)=0x5f) 03:33:37 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:37 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/igmp\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) 03:33:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x216f, 0x1100082) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x4, 0x2}) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xbe4, 0x0) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x800) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 259.909991] Falling back ldisc for ptm0. 03:33:37 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0xd2) [ 259.966762] Falling back ldisc for ptm1. 03:33:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="120900efe2b7ce2a94f1bc7127a6cf215743d168f607a20997629a6b0236392da2e537664fe22cc72d21d5d9f612168dad8b1412626abca2be20e22dc3e5eb51e256a570ef658730f318900607570d4adb05dfe79f37ca5f3a17acadb31007ce8190f2a2dbb5780164b9ec019f2eeba1723962cc11cad81388b051ad263897e7044ce11b8632fa1f429304cececd1cc849e29282ccaf17dabccb2298e52d1677931bcc21fb9ae0765437079e3f2b04f8e29ef35b1919"], 0x18) r1 = syz_open_pts(r0, 0xfffffffffffffffc) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000140)={0x7f}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000180)="cc5cc0143396835a4145d2f778b155e41d66ca73054216b82c9371535ff6643ac25a6bcf7908d6142a3a09dd11241704dccc7be4d0aae1d62e34505af9b4d20c6ffb5bc1fea44b859f355fcd6ebc8664eb68e540918e32111e8988df1eb4d306e731acc5d7691df1dc7edeeef3335afa78c76b448b6960ca76023ccc9c0796013619e16079219660305ff4f12e3539b0982f717477f36d0e3df7cfecd0a4bab55be24798246144eb44c536067dd17c25bcb9fd5e45943845199c30ce961de25e804d") mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) 03:33:38 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:38 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x7}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r3, &(0x7f0000000040), 0xd2) 03:33:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x105882, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) membarrier(0x2, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0xd2) 03:33:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$rds(0x2, 0x5, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1, &(0x7f0000000180)={'trans=unix,', {[{@cachetag={'cachetag', 0x3d, '*/md5sum'}}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@cache_fscache='cache=fscache'}, {@access_client='access=client'}]}}) sendmsg$rds(r1, &(0x7f0000002fc8)={&(0x7f0000002000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002000)=""/181, 0xb5}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/70, 0x46}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000300)=""/135, 0x87}, {&(0x7f00000003c0)=""/107, 0x6b}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000600)=""/173, 0xad}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001740)=""/220, 0xdc, 0x101}, 0x690}, {{&(0x7f0000001840)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000018c0)=""/180, 0xb4}], 0x1, &(0x7f0000001980)=""/30, 0x1e, 0x1}, 0x6}, {{&(0x7f00000019c0)=@nl=@unspec, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001a40)=""/157, 0x9d}, {&(0x7f0000001b00)=""/110, 0x6e}, {&(0x7f0000001b80)=""/188, 0xbc}, {&(0x7f0000001c40)=""/255, 0xff}, {&(0x7f0000001d40)=""/223, 0xdf}, {&(0x7f0000001e40)=""/229, 0xe5}], 0x6, 0x0, 0x0, 0x8}, 0x7}, {{&(0x7f00000020c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002140)=""/67, 0x43}, {&(0x7f00000021c0)=""/94, 0x5e}, {&(0x7f0000002240)=""/105, 0x69}, {&(0x7f0000001fc0)=""/31, 0x1f}, {&(0x7f00000022c0)=""/199, 0xc7}, {&(0x7f00000023c0)=""/194, 0xc2}], 0x6, &(0x7f0000002540)=""/115, 0x73, 0x7f}, 0xffffffffcc022d94}], 0x4, 0x40000021, &(0x7f00000026c0)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000002700)={'TPROXY\x00'}, &(0x7f0000002740)=0x1e) setsockopt$RDS_RECVERR(r1, 0x84, 0x6, &(0x7f0000000000), 0x4) 03:33:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x2) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x9, 0x100) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000780)) write$P9_RWALK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="bb"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000004000/0x4000)=nil, 0x4002, 0x0, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/222, 0xde}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f0000000600)=""/221, 0xdd}], 0x7) 03:33:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0xd2) 03:33:38 executing program 7: r0 = socket$kcm(0xa, 0x40122000000003, 0x11) sendmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x2, 0x4, 0x4, 0x1}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="18d0a67a2e6904d810e7ec8de69fefc0675d1d49322382945c64c3d1d699c58f0252eea099797a106cd5abacf6d3ee7ec3a4ee5cf12f1680ac1cdabeb3cb676a4a5939014a9a0caa37d12f71f392732708e2c1ed311c798c1183d6d2ef0f4819ad2c2846b209d02546de561d59098b66019051c3eb", 0x75}, {&(0x7f00000001c0)="bde88585cfcf4855bbe82f2467af48861ca7f97337a74f62a455dc25494cb0b8f424496bc256a336b9874644d4f6c88628f0215183ff7b1463c20c3ae9a36ffebdb8ab65e6096324c90cd0ee23f370194bd28b1123ed5088e5f5309d1f18ff590cf8db01fb710c1a0263795642c57982209e613c4ebbb167a608b2", 0x7b}], 0x2, &(0x7f0000000800)=[{0x40, 0x107, 0xfffffffffffff381, "1f6827230b468ecd92a1ac4b2bd649309b6b5d9e3d88a9165d025e925dcfa555ed3502c83d4ab7470b"}, {0xa0, 0x11f, 0xffffffff, "a80b3c6726c4dc401f2a884df8de2c693bd21590c8b6e1bbd46d4dd146d7dab666d84374a0ee350396c7272f90182695393dabb2073a905aeccfd2eeb61098c1acc3caf9f0ee31836953f2bbd2cb32618daeb6e78d8547693b135cfb9623767b04294a2b181d5740df354e50e7dfc5bba52422b501919acff526a4efbfc0d8259d651a02475de14fcdee713dccda"}, {0x58, 0x13f, 0x0, "62491e2cef0e4c23c66c85d527b63e8511f0be9fee14db34b4c61cbfd28a2fe117b6913d5a495f48a6e977fd14f6d7843c3f91afecd7b43dc3f82aa084e1ed3f210eba1f763b"}, {0xe8, 0x1, 0x3ff, "9ed991e9d2b0ed29898bb1bb829a4247ecae2009f212d12ad7a848a7f1f1404c3dd483dbb497834da878cb3b9ecda6ac906e9d65678aa9995d5ce93d7225e12dc3679d05c803dbfe0c7e35ba49bb8bf4dbf86bd3023bb4592831f46649e35b8bbc44b780b149bc94dc8e75996a7268efa5f11559162132e6bf48b4d62006336852e86e969d7133fadf4472fbafda616ab598abb56d3c622dbae181fef7c9359d16f57fa7f08103d7afa43a82692f26526051c390ce471702054d3c01cba8fd40d581c67c52b2a2ffebb5d285dfaa63ce7db3154325cd"}, {0x1010, 0x114, 0x1f, "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"}, {0x28, 0x13f, 0x9, "c170e282c42f6c36c3dcf987f87c0dacc8"}, {0x98, 0x0, 0xffffffffffffff54, "0dd83ccba416d1a625eb0e97361fc3e0408f4d723067085fbe4cbc88014619691e76910b87a09c9dd3769efb384e1b7e7475c7a35106691220ef4914a20353fd54abd4b7646891b453743c243c1c59e125279c3af3047da315155726593c35487317ebfb45021890b79e16d671744955438fcedab6c1e01fa9c8e993420bfe9c84"}, {0xe0, 0x108, 0x0, "2e1af56269703c8fdbb2f6b31051ae6a2651c529ad441e5888b622084c266d15bde92cda3af276269f19c1b9bd42167ac3dd2b283a7fc905a0323c95122bc91bc36412ffe30c560a18f1cf06fdb661631b59339db436cde0e3bbe79d7aa4c5fa8e26fcdb227aabebdafa629d2a79baa2462b3c71c8cf3ec42806ce5be2a8b0092c5dd15f38bdfaffe71d21a6ab26d4f9f2e4c18fb54510a53eef626f107d52a1705f06f50ca8d80e8d5a1969184214f764e4190111bc51cb76cd97db3a12e971fae7bb41b56689444cf5"}, {0x38, 0x1, 0x6, "4690333ecd179e26278c05232b9a53acccf83b1fb594c0d4ccf9e21b2836a37c50656250"}], 0x1408, 0x40}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000780)="f4001100002b2c25e994efd18498d6623abaa68754a30000000002000000000000000000000000000600000000000000c00195c1e2d4f32ebd5a2e372402f1c8d0bed8285538dd308252644135333a847bbaeb4e", 0x54}], 0x1}, 0x0) 03:33:38 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x2100) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2014}) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r2, 0x1277) 03:33:38 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000002c0)={0x4, 0xa2, &(0x7f0000000200)="ab5fc1e50e9e9d8b5b5eeab1bd6655e60b176e502ebdf836b3e91e69d56fbc8620c8ca8c0b37cfdf8ab97ff18d261399dc29173c8ab5a3a556446d8ac942b7ee10decc32643df60a9baedbe8d0978f8faabc04e40c4654fc713576e81c55f67c1a7e58f495f7039c33d82794288f91e5e5e6503515f32d43df97d3df6b4cc5a78a3f5dd2982c064eb501e92eee0903457e052b2e1d7a364fcac2881ed208ac74a277"}) fchdir(r2) fdatasync(r2) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000080)={0x9a, "d47aaab66290a4de47a3faf55df770371e38fa8ecf1eab81d13bc7e3bcb21e0489d848f41d545b3dd44739e30c0ae3f47a8566f2911208ff7d7ff793f056f01bec0ba205f6d2424224efcaf073769b2f20ab8aa53d49b43382d560b448a196c610d1a6f2011fa76ca5f4e831e4e50fc5e7b05c7c58ce2d4bf978959097f2d49ce55f63a398a80b866cf89c57b9814abf8f3630583dfb0ebb5f85"}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 03:33:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:38 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r1 = epoll_create1(0x20000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x800020000010}) 03:33:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0xd2) 03:33:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="b9800000c00f3235002000000f30b8a4b100000f23c00f21f835010004000f23f8660f383bd0660f3832ddda32650f38c9120f01d1c4e121eb672e66b824010f00d866ba400066ed", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000001e00fb034d564b000000f801"]) ioctl$KVM_SET_MSRS(r3, 0xae9a, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 03:33:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x80000003, 0x1900086) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0xd2) 03:33:38 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000080), 0xd2) 03:33:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/llc\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0x6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x2, 0x2, [0x4, 0x3]}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240)={0x40}, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x58) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 03:33:39 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-avx2)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = dup(r1) openat$random(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x4000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev}, &(0x7f0000000100)=0xc) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, r3, 0x3}, 0xc) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), 0x4) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="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", 0x100) 03:33:39 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040), 0xd2) 03:33:39 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r2, &(0x7f0000000040)=0x2f, 0xd3) 03:33:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x4) ioctl$KDGKBLED(r1, 0xc074510c, &(0x7f0000a07fff)) fcntl$notify(r1, 0x402, 0xc) 03:33:39 executing program 7: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) fcntl$setstatus(r0, 0x4, 0x40000) r1 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x4, 0x2, 0x1, 0x3, 0x5, 0x7, 0x3, 0xcdf5, 0x9b, 0x5, 0x5, 0x1ff}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517bd0f805ae208258dba7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b7605afb988de9bba6df5fdc54d81bf6ba5629eef628582fba5bf4af44acfe05900", "ee42e3ef1d1772a9432c220303b70b708ad791137e2982fcce5d747a3131995a"}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000080)) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000240)) 03:33:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000), 0x0, 0x1f6) 03:33:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bdffa542e0062863ff046cad9b807e262966b2a33a69c70ee080ab00000008000981ddf0dc6d1d000000cf8eead80000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) mlockall(0x1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r2, 0x1277) 03:33:39 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x100000001, 0x8}, &(0x7f0000000200)=0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:39 executing program 7: r0 = socket$inet(0x2b, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000480)=""/47, &(0x7f00000004c0)=0x2f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 03:33:39 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0x0) 03:33:39 executing program 3: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0xff, 0x0, 0x0, 0x400}, 0x20) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) 03:33:39 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x80040, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1e4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x7}, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @rand_addr=0xef}, 0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/192, &(0x7f0000000100)=0xc0) sendto$inet(r4, &(0x7f0000000280), 0x314, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) shutdown(r4, 0x1) dup2(r3, r4) 03:33:39 executing program 7: r0 = socket$inet(0x2, 0x806, 0x3fe0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl(r1, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r2 = socket$inet(0x10, 0x3, 0xc) r3 = getpgrp(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000100)=r3) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x50000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f0000000240)={0x0, 0x0, 0x200, &(0x7f0000000200)=0x40}) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f00000001c0)) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4b}], 0xffffdc3, 0x0, 0x311}, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0xff, @rand_addr=0x81, 0x4e24, 0x2, 'sh\x00', 0x10, 0xff, 0xc}, 0x2c) 03:33:39 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') r2 = request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='.nodevself\x00', 0xfffffffffffffffe) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x8) keyctl$clear(0x7, r2) syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x3, 0x80000) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000002c0)) sendfile(r0, r1, &(0x7f0000000040), 0xd2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000240)=0x5, 0x4) 03:33:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000), 0x0, 0x1f6) 03:33:39 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:39 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d000100000dc2fd0000000000000b07", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) 03:33:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0x0) 03:33:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r0, &(0x7f0000000180), 0x10) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @dev}}) seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140)=0x3f, 0x4) 03:33:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x100, 0x279d}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000002800)=0xc0) recvmsg(r0, &(0x7f00000025c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/219, 0xdb}, {&(0x7f00000012c0)=""/149, 0x95}, {&(0x7f0000001380)=""/186, 0xba}, {&(0x7f0000001440)=""/196, 0xc4}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6, &(0x7f0000002540)=""/106, 0x6a, 0x7}, 0x100) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002640)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000027c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002780)={&(0x7f0000002680)={0xdc, r3, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xffffffffffffffd6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008000) 03:33:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0x0) 03:33:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000), 0x0, 0x1f6) 03:33:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x9) 03:33:39 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:39 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x800, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2(&(0x7f0000000040), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffa3, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={r2, r3, r4}, 0xc) shutdown(r1, 0x0) recvfrom$inet(r1, &(0x7f0000000200)=""/179, 0xb3, 0x40000003, &(0x7f00000002c0)={0x2, 0x0, @rand_addr}, 0x70c000) 03:33:39 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000000c0)=""/144) bind$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x7, 0x0, 0x1}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000003c0)=0x7, 0x4) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000300)='/dev/ppp\x00', 0x9, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) [ 262.276433] Unknown ioctl -2143271643 [ 262.319962] Unknown ioctl 30473 03:33:40 executing program 1 (fault-call:2 fault-nth:0): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:40 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x11, 0x1, "bff4448f53a8c44172aaeadf82f5d74542314aebba64d226923c5b7b670e674fb1ed07149f365b1fc39092326456a9dd5d9f9de5ff55522a14f8fb5f25abc14d", "da13c4b7bc549f5bb04371de856496f40f716e24c8f3e85b1035743501c899fa", [0xb177, 0x3b3]}) [ 262.371917] Unknown ioctl -1073449922 03:33:40 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 262.432196] Unknown ioctl -2143271643 03:33:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 03:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 262.457456] Unknown ioctl 30473 [ 262.466687] Unknown ioctl -1073449922 [ 262.483368] FAULT_INJECTION: forcing a failure. [ 262.483368] name failslab, interval 1, probability 0, space 0, times 0 [ 262.494725] CPU: 1 PID: 16526 Comm: syz-executor1 Not tainted 4.18.0+ #190 03:33:40 executing program 6: r0 = socket(0x400000000010, 0x3, 0x80000002) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x4000002000000802, 0x0) r2 = getegid() fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x2090, {0x98, 0x2, 0x6}, 0x0, r3, r2, 0x2, 0x4, 0xffffffff, 0x3, 0x2, 0xffff, 0x13, 0x800, 0x800, 0xb982, 0x80000000, 0x7fffffff, 0x1, 0x4, 0x7c04}}, 0xa0) setregid(0xee00, r2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) poll(&(0x7f0000000000)=[{r1, 0x1000}], 0x1, 0x3) close(r1) [ 262.501771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.511153] Call Trace: [ 262.513775] dump_stack+0x1c9/0x2b4 [ 262.517441] ? dump_stack_print_info.cold.2+0x52/0x52 [ 262.522671] ? perf_trace_lock+0x49d/0x920 [ 262.526952] should_fail.cold.4+0xa/0x11 [ 262.531034] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 262.536165] ? zap_class+0x740/0x740 [ 262.539916] ? find_held_lock+0x36/0x1c0 [ 262.544068] ? check_same_owner+0x340/0x340 [ 262.548432] ? rcu_note_context_switch+0x730/0x730 [ 262.553413] __should_failslab+0x124/0x180 [ 262.557686] should_failslab+0x9/0x14 [ 262.561521] kmem_cache_alloc_trace+0x2cb/0x780 [ 262.566237] ? rcu_is_watching+0x8c/0x150 [ 262.570402] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 262.575087] alloc_pipe_info+0x175/0x5a0 [ 262.579199] ? pipe_read+0x940/0x940 [ 262.582961] ? ksys_dup3+0x690/0x690 [ 262.586704] ? perf_trace_lock+0x49d/0x920 [ 262.590959] ? find_held_lock+0x36/0x1c0 [ 262.595062] splice_direct_to_actor+0x6fc/0x8f0 [ 262.599763] ? fsnotify+0xbb4/0x14e0 [ 262.603520] ? pipe_to_sendpage+0x400/0x400 [ 262.607878] ? do_splice_to+0x190/0x190 [ 262.611898] ? rw_verify_area+0x118/0x360 [ 262.616091] do_splice_direct+0x2d4/0x420 [ 262.620289] ? splice_direct_to_actor+0x8f0/0x8f0 [ 262.625194] ? rw_verify_area+0x118/0x360 [ 262.629397] do_sendfile+0x623/0xe20 [ 262.633197] ? do_compat_pwritev64+0x1c0/0x1c0 [ 262.637861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.643434] ? _copy_from_user+0xdf/0x150 [ 262.647642] __x64_sys_sendfile64+0x15d/0x250 [ 262.652191] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 262.656812] ? do_syscall_64+0x9a/0x820 [ 262.660826] do_syscall_64+0x1b9/0x820 [ 262.664768] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.669731] ? syscall_return_slowpath+0x31d/0x5e0 [ 262.674689] ? __switch_to_asm+0x34/0x70 [ 262.678778] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 262.684182] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.689059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.694277] RIP: 0033:0x457089 [ 262.697505] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.716436] RSP: 002b:00007fc4822f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.724180] RAX: ffffffffffffffda RBX: 00007fc4822f76d4 RCX: 0000000000457089 [ 262.731470] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 262.738760] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 262.746059] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 03:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 262.753353] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000000 03:33:40 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$inet6(r0, &(0x7f0000000080), &(0x7f0000000140)=0x1c) r1 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x401, 0x400) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcs\x00', 0xfffff7ffffeffffd, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x64, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8845}, 0x4010) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000500)=0x800) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/rfcomm\x00') sendfile(r0, r6, &(0x7f0000000040), 0xd2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000340)=0x4) 03:33:40 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r7 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) r8 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x80000001) keyctl$get_persistent(0x16, r6, r8) write$P9_RREMOVE(r1, &(0x7f0000000480)={0x7, 0x7b, 0x2}, 0x7) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000580), &(0x7f0000000040)=0x60) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:40 executing program 5: rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:40 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:40 executing program 1 (fault-call:2 fault-nth:1): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:40 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xb010, &(0x7f0000000280)={'trans=unix,', {[{@cache_mmap='cache=mmap'}, {@cache_fscache='cache=fscache'}, {@cache_none='cache=none'}, {@cachetag={'cachetag', 0x3d, "98707070306367726f7570766d6e657430"}}, {@noextend='noextend'}, {@nodevmap='nodevmap'}, {@access_uid={'access', 0x3d, r2}}, {@fscache='fscache'}]}}) 03:33:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 03:33:40 executing program 7: r0 = socket(0x10, 0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0x129, &(0x7f0000000040)={&(0x7f0000000240)=@bridge_delneigh={0x28, 0x1d, 0x5, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xb}, [@NDA_DST_MAC={0xc, 0x1, @broadcast}]}, 0x28}}, 0x0) [ 263.073999] FAULT_INJECTION: forcing a failure. [ 263.073999] name failslab, interval 1, probability 0, space 0, times 0 [ 263.085417] CPU: 1 PID: 16568 Comm: syz-executor1 Not tainted 4.18.0+ #190 [ 263.092457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.101836] Call Trace: [ 263.104462] dump_stack+0x1c9/0x2b4 [ 263.108149] ? dump_stack_print_info.cold.2+0x52/0x52 [ 263.113380] ? perf_trace_lock+0x49d/0x920 [ 263.117671] should_fail.cold.4+0xa/0x11 [ 263.121770] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 263.126921] ? kasan_kmalloc+0xc4/0xe0 [ 263.130839] ? kmem_cache_alloc_trace+0x152/0x780 [ 263.135709] ? alloc_pipe_info+0x175/0x5a0 [ 263.139970] ? splice_direct_to_actor+0x6fc/0x8f0 [ 263.144843] ? do_sendfile+0x623/0xe20 [ 263.148763] ? __x64_sys_sendfile64+0x15d/0x250 [ 263.153468] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.158883] ? find_held_lock+0x36/0x1c0 [ 263.163030] ? check_same_owner+0x340/0x340 [ 263.167384] ? rcu_is_watching+0x8c/0x150 [ 263.171594] ? rcu_note_context_switch+0x730/0x730 [ 263.176583] __should_failslab+0x124/0x180 [ 263.180871] should_failslab+0x9/0x14 [ 263.184712] __kmalloc+0x2c8/0x760 [ 263.188283] ? kmem_cache_alloc_trace+0x616/0x780 [ 263.193167] ? rcu_is_watching+0x8c/0x150 [ 263.197352] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 263.202048] ? alloc_pipe_info+0x2a8/0x5a0 [ 263.206326] alloc_pipe_info+0x2a8/0x5a0 [ 263.210430] ? pipe_read+0x940/0x940 [ 263.214191] ? ksys_dup3+0x690/0x690 [ 263.217945] ? perf_trace_lock+0x49d/0x920 [ 263.222208] ? find_held_lock+0x36/0x1c0 [ 263.226303] splice_direct_to_actor+0x6fc/0x8f0 [ 263.230997] ? fsnotify+0xbb4/0x14e0 [ 263.234949] ? pipe_to_sendpage+0x400/0x400 [ 263.239315] ? do_splice_to+0x190/0x190 [ 263.243334] ? rw_verify_area+0x118/0x360 [ 263.247502] do_splice_direct+0x2d4/0x420 [ 263.251856] ? splice_direct_to_actor+0x8f0/0x8f0 [ 263.256751] ? rw_verify_area+0x118/0x360 [ 263.260931] do_sendfile+0x623/0xe20 [ 263.264695] ? do_compat_pwritev64+0x1c0/0x1c0 [ 263.269323] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 263.274886] ? _copy_from_user+0xdf/0x150 [ 263.279045] __x64_sys_sendfile64+0x15d/0x250 [ 263.283561] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 263.288192] ? do_syscall_64+0x9a/0x820 [ 263.292553] do_syscall_64+0x1b9/0x820 [ 263.296480] ? finish_task_switch+0x1d3/0x870 [ 263.301001] ? syscall_return_slowpath+0x5e0/0x5e0 [ 263.305963] ? syscall_return_slowpath+0x31d/0x5e0 [ 263.310926] ? __switch_to_asm+0x34/0x70 [ 263.315012] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 263.320414] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.325295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.330970] RIP: 0033:0x457089 [ 263.334190] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.353132] RSP: 002b:00007fc4822f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 263.360883] RAX: ffffffffffffffda RBX: 00007fc4822f76d4 RCX: 0000000000457089 [ 263.368172] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 263.375465] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 263.382756] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 263.390046] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000001 03:33:41 executing program 2 (fault-call:9 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@newspdinfo={0x44, 0x24, 0x21c, 0x70bd2c, 0x25dfdbfd, 0x0, [@policy_type={0xc, 0x10, {0x1}}, @ipv4_hthresh={0x8, 0x3, {0x1d, 0x17}}, @policy_type={0xc, 0x10, {0x1}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd25, 0x100}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) prctl$setfpexc(0xc, 0x100000) 03:33:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = msgget(0x3, 0x420) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r4 = getgid() r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x400000, 0x0) r6 = getuid() fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) r9 = gettid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0x5, r3, r4, r6, r7, 0x4, 0x7fff}, 0x2, 0x5, 0x4, 0xffffffff, 0x6, 0x44, r8, r9}) ioctl(r1, 0x100008913, &(0x7f0000000080)="025cc80700145f8f764070") sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="400100001a002100000000000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, r3) 03:33:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6, 0x8000) ioctl$LOOP_CLR_FD(r0, 0x1277) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x7}, 0x8) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x101, &(0x7f0000000080)=0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xc2800, 0x0) 03:33:41 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r7 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) r8 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x80000001) keyctl$get_persistent(0x16, r6, r8) write$P9_RREMOVE(r1, &(0x7f0000000480)={0x7, 0x7b, 0x2}, 0x7) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000580), &(0x7f0000000040)=0x60) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:41 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x0, 0x4, 0x9}, 0x2c) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff}, 0x10) 03:33:41 executing program 1 (fault-call:2 fault-nth:2): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_tables_matches\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x0) setfsgid(0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000200)=0x400, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000240)="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") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='./file0\x00') sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4048044, &(0x7f0000000100)={0xa, 0x0, 0x3, @local}, 0x1c) getrandom(&(0x7f0000001240)=""/184, 0xfffffffffffffe1d, 0x2) r3 = syz_open_dev$audion(&(0x7f0000001380)='/dev/audio#\x00', 0x7f, 0x8000) alarm(0xf5c) r4 = semget(0xffffffffffffffff, 0x3, 0x140) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000001300)=[0x1, 0x1]) prctl$setfpexc(0xc, 0x100000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001540)={0x0, 0x50, &(0x7f00000016c0)=[@in={0x2, 0x4e22}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23, @broadcast}]}, &(0x7f0000001780)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000017c0)={r5, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000001880)=0x84) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001340)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000013c0)={0x3, 0x100000000, 0xd3, 'queue0\x00', 0x100000001}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b40)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000001c40)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xd, 0x9, &(0x7f00000018c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x0, 0x0, 0x9, 0x4, 0x0, 0xfffffffffffffffe, 0x1}, @call={0x85, 0x0, 0x0, 0xf}, @jmp={0x5, 0x3, 0x6, 0x0, 0x7, 0x8, 0xffffffffffffffff}]}, &(0x7f0000001940)='syzkaller\x00', 0x4, 0x3f, &(0x7f0000001980)=""/63, 0x41000, 0x1, [], r6, 0x6}, 0x48) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000001600)=""/164, &(0x7f0000001200)=0xa4) preadv(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x79, 0x0) ioctl$LOOP_CLR_FD(r0, 0x1277) setsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000080)=0xe400000000000000, 0x4) [ 263.547553] FAULT_INJECTION: forcing a failure. [ 263.547553] name failslab, interval 1, probability 0, space 0, times 0 [ 263.559103] CPU: 0 PID: 16600 Comm: syz-executor2 Not tainted 4.18.0+ #190 [ 263.566126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.575484] Call Trace: [ 263.578079] dump_stack+0x1c9/0x2b4 [ 263.581726] ? dump_stack_print_info.cold.2+0x52/0x52 [ 263.586936] ? lock_acquire+0x1e4/0x540 [ 263.590935] should_fail.cold.4+0xa/0x11 [ 263.594998] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 263.600101] ? rcu_note_context_switch+0x730/0x730 [ 263.605035] ? kasan_check_write+0x14/0x20 [ 263.609260] ? graph_lock+0x170/0x170 [ 263.613055] ? seq_read+0xdd/0x1540 [ 263.616694] ? find_held_lock+0x36/0x1c0 [ 263.620749] ? __lock_is_held+0xb5/0x140 [ 263.624830] ? check_same_owner+0x340/0x340 [ 263.629141] ? trace_hardirqs_on+0x10/0x10 [ 263.633377] ? rcu_note_context_switch+0x730/0x730 [ 263.638301] __should_failslab+0x124/0x180 [ 263.642526] should_failslab+0x9/0x14 [ 263.646369] kmem_cache_alloc_node_trace+0x26f/0x770 [ 263.651462] ? trace_hardirqs_on+0x10/0x10 [ 263.655691] __kmalloc_node+0x33/0x70 [ 263.659481] kvmalloc_node+0x65/0xf0 [ 263.663188] traverse+0x4f8/0xaa0 [ 263.666640] ? graph_lock+0x170/0x170 [ 263.670440] ? seq_open+0x1c0/0x1c0 [ 263.674060] seq_read+0xf28/0x1540 [ 263.677605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 263.683150] ? seq_file_path+0x30/0x30 [ 263.687028] ? check_same_owner+0x340/0x340 [ 263.691343] ? fsnotify_first_mark+0x350/0x350 [ 263.695911] ? __fsnotify_parent+0xcc/0x420 [ 263.700234] ? seq_file_path+0x30/0x30 [ 263.704131] proc_reg_read+0x2a3/0x3d0 [ 263.708011] ? proc_reg_unlocked_ioctl+0x3c0/0x3c0 [ 263.712935] ? security_file_permission+0x1be/0x240 [ 263.717949] ? security_file_permission+0x1c6/0x240 [ 263.722972] ? rw_verify_area+0x118/0x360 [ 263.727107] do_iter_read+0x4a3/0x660 [ 263.730900] vfs_readv+0x175/0x1c0 [ 263.734429] ? compat_rw_copy_check_uvector+0x440/0x440 [ 263.739800] ? fget_raw+0x20/0x20 [ 263.743258] ? __sb_end_write+0xac/0xe0 [ 263.747239] do_preadv+0x1cc/0x280 [ 263.750784] ? do_readv+0x310/0x310 [ 263.754410] ? __ia32_sys_read+0xb0/0xb0 [ 263.758472] ? syscall_slow_exit_work+0x500/0x500 [ 263.763311] __x64_sys_preadv+0x9a/0xf0 [ 263.767292] do_syscall_64+0x1b9/0x820 [ 263.771175] ? finish_task_switch+0x1d3/0x870 [ 263.775668] ? syscall_return_slowpath+0x5e0/0x5e0 [ 263.780593] ? syscall_return_slowpath+0x31d/0x5e0 [ 263.785514] ? __switch_to_asm+0x34/0x70 [ 263.789558] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 263.794945] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 263.799790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 263.805000] RIP: 0033:0x457089 [ 263.808181] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 263.827106] RSP: 002b:00007f1425897c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 263.834820] RAX: ffffffffffffffda RBX: 00007f14258986d4 RCX: 0000000000457089 03:33:41 executing program 2 (fault-call:9 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 263.842089] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000006 [ 263.849347] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 263.856601] R10: 00000000000001f6 R11: 0000000000000246 R12: 0000000000000007 [ 263.863859] R13: 00000000004d3458 R14: 00000000004c8321 R15: 0000000000000000 03:33:41 executing program 7: socket$alg(0x26, 0x5, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x81}, &(0x7f00000000c0)=0x14) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000040)={0x5, 0x5, 0x7fffffff, 0x8, 0xdf}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$session_to_parent(0x12) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0xe70b, 0x10000, 0x7, 'queue0\x00', 0x40}) getitimer(0x3, &(0x7f0000001600)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)="2e2f6367726f75702e6e65742f2e797a3102", 0x1ff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c8662613fc34cf6d89a0a61e4f4c1ca52669755af208a8088eca9d41e48c2527a8fd2f7b44eeab0028759cbbdce08bed21f98d3bce31bc449faba1e85ab6c0f350a919bcadb20a8246e5d1ca86ee04313988f958ce66f2683c451f7475cb64d6095a88044c1d38a3a9a5d193b327c1d348cc656984b9615af962c3543df3ad4e83b559279f46f60c0f5e5a72462c7fc119f15d81d20c76f896b0114e4af3a9539715fc8617fde811a12904b2479675ecbb138fa6a3191aa1a02ecf4639d13188f39d107b933dee93e7393b8f30b90d47e35ee330becf2d9da1f66a4eed56c52fd394343b61bd8d2c17b2ee23b76875419f82301d4fce6e911139634144d89aa1a8f52d4fd8848d9dad0b0d95dd3fa3d012601804dc8be2362dd548c91877afe433509b54c30d15a05ac4f8a06cc1ddd9aff892033c9ce34bff68f9b3613c85a9e0073fc115e989ae9ea"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x40840) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x56, 0x7, 0x6, 0x5, 0x0, 0x1, 0x800, 0x1, 0x10000, 0x1c6, 0x40c, 0x9, 0x80, 0x10001, 0x4, 0x2, 0x9, 0x7, 0x40, 0x3, 0x4, 0x4, 0x93, 0x1, 0xff, 0xff, 0x200, 0x4, 0x0, 0x100000000, 0x632d, 0xffffffffffffffff, 0x2, 0x10001, 0x1, 0x1, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x0, 0x5, 0x5, 0x3, 0x9659, 0x5be7}, r2, 0x4, 0xffffffffffffffff, 0x9) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0x20}, 0xfffffffffffffe0c) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000240)) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e20, 0x8000, @ipv4={[], [], @broadcast}, 0x4}, 0x1c) syz_emit_ethernet(0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)={0x0, 0x4, [0xa2f, 0xbc, 0x2e, 0xe5c]}) modify_ldt$write(0x1, &(0x7f0000000480), 0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r1, 0x9}, &(0x7f0000001640)=0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4000, 0x0) modify_ldt$read(0x0, &(0x7f0000000100)=""/219, 0xc1) 03:33:41 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x200) getsockname$netlink(r0, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000002740)=ANY=[@ANYBLOB="7f"], 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5aa3}, @IPVS_CMD_ATTR_SERVICE={0x7c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x3c}}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff00000000}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x800) fallocate(r1, 0x0, 0x0, 0x4003ff) fallocate(r1, 0x3, 0x7fff, 0x8001) fallocate(r1, 0x10, 0x0, 0xfff9) splice(r1, &(0x7f0000000000), r1, &(0x7f0000000040), 0x1ff, 0x2) [ 264.100963] FAULT_INJECTION: forcing a failure. [ 264.100963] name failslab, interval 1, probability 0, space 0, times 0 [ 264.112430] CPU: 1 PID: 16625 Comm: syz-executor1 Not tainted 4.18.0+ #190 [ 264.119474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.128847] Call Trace: [ 264.131479] dump_stack+0x1c9/0x2b4 [ 264.135157] ? dump_stack_print_info.cold.2+0x52/0x52 [ 264.140390] ? perf_trace_lock+0x49d/0x920 [ 264.144675] should_fail.cold.4+0xa/0x11 [ 264.148779] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 264.153903] ? perf_trace_run_bpf_submit+0x269/0x3b0 [ 264.159019] ? perf_trace_run_bpf_submit+0x270/0x3b0 [ 264.164164] ? find_held_lock+0x36/0x1c0 [ 264.168295] ? check_same_owner+0x340/0x340 [ 264.172644] ? rcu_note_context_switch+0x730/0x730 [ 264.177605] __should_failslab+0x124/0x180 [ 264.181863] should_failslab+0x9/0x14 [ 264.185688] kmem_cache_alloc_node_trace+0x26f/0x770 [ 264.190834] __kmalloc_node+0x33/0x70 [ 264.194658] kvmalloc_node+0x65/0xf0 [ 264.198377] iov_iter_get_pages_alloc+0x7da/0x1530 [ 264.203364] ? iov_iter_fault_in_readable+0x460/0x460 [ 264.208602] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 264.213296] ? is_bpf_text_address+0xd7/0x170 [ 264.217807] ? kernel_text_address+0x79/0xf0 [ 264.222233] ? __kernel_text_address+0xd/0x40 [ 264.226731] ? unwind_get_return_address+0x61/0xa0 [ 264.231673] ? __save_stack_trace+0x8d/0xf0 [ 264.236039] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 264.241066] ? iov_iter_pipe+0xc2/0x2f0 [ 264.245059] default_file_splice_read+0x1da/0xb10 [ 264.249916] ? do_splice_direct+0x2d4/0x420 [ 264.254248] ? do_sendfile+0x623/0xe20 [ 264.258157] ? __x64_sys_sendfile64+0x15d/0x250 [ 264.262840] ? do_syscall_64+0x1b9/0x820 [ 264.266928] ? iter_file_splice_write+0x1010/0x1010 [ 264.271953] ? rcu_is_watching+0x8c/0x150 [ 264.276149] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 264.280820] ? __lockdep_init_map+0x105/0x590 [ 264.285314] ? lockdep_init_map+0x9/0x10 [ 264.289373] ? __mutex_init+0x1f7/0x290 [ 264.293353] ? rcu_pm_notify+0xc0/0xc0 [ 264.297290] ? __ia32_sys_membarrier+0x150/0x150 [ 264.302057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.307596] ? fsnotify+0xbb4/0x14e0 [ 264.311331] ? init_wait_entry+0x1c0/0x1c0 [ 264.315579] ? fsnotify_first_mark+0x350/0x350 [ 264.320158] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 264.324836] ? fsnotify+0x14e0/0x14e0 [ 264.328676] ? security_file_permission+0x1c6/0x240 [ 264.333738] ? rw_verify_area+0x118/0x360 [ 264.337891] ? iter_file_splice_write+0x1010/0x1010 [ 264.342907] do_splice_to+0x12e/0x190 [ 264.346744] splice_direct_to_actor+0x270/0x8f0 [ 264.351441] ? pipe_to_sendpage+0x400/0x400 [ 264.355774] ? do_splice_to+0x190/0x190 [ 264.359787] ? rw_verify_area+0x118/0x360 [ 264.363954] do_splice_direct+0x2d4/0x420 [ 264.368124] ? splice_direct_to_actor+0x8f0/0x8f0 [ 264.372995] ? rw_verify_area+0x118/0x360 [ 264.377161] do_sendfile+0x623/0xe20 [ 264.380899] ? do_compat_pwritev64+0x1c0/0x1c0 [ 264.385505] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 264.391043] ? _copy_from_user+0xdf/0x150 [ 264.395200] __x64_sys_sendfile64+0x15d/0x250 [ 264.399714] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 264.404316] ? do_syscall_64+0x9a/0x820 [ 264.408307] do_syscall_64+0x1b9/0x820 [ 264.412200] ? finish_task_switch+0x1d3/0x870 [ 264.416729] ? syscall_return_slowpath+0x5e0/0x5e0 [ 264.421691] ? syscall_return_slowpath+0x31d/0x5e0 [ 264.426652] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 264.432030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.436878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 264.442074] RIP: 0033:0x457089 [ 264.445273] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.464183] RSP: 002b:00007fc4822f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 264.471893] RAX: ffffffffffffffda RBX: 00007fc4822f76d4 RCX: 0000000000457089 [ 264.479161] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 264.487995] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 264.495279] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 03:33:42 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:42 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r7 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) r8 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x80000001) keyctl$get_persistent(0x16, r6, r8) write$P9_RREMOVE(r1, &(0x7f0000000480)={0x7, 0x7b, 0x2}, 0x7) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000580), &(0x7f0000000040)=0x60) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:42 executing program 1 (fault-call:2 fault-nth:3): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) [ 264.502544] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000002 03:33:42 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) fcntl$setsig(r1, 0xa, 0x21) ioctl$LOOP_CLR_FD(r1, 0x1277) 03:33:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:42 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000800)="be96052c5581845f399866c0e3958c9f52c2df6c306bb411b49c7b6136cf74f1a15dbc37f224a21029dd34240d13493e02dbc87a2bcc87ea073b581b8c7249b74ee1e57067677ee8c74201d888208021d69350010ea50758f6a0491b9abbe96d53b771b772f6d82610014b2f5c56250a5b6e3f8d0c6123f72e4fdb2fe089b23515d48f2e3eb802187f4f7348f2366b9b48fae8e814ebe4fab85072a5fae97789a4c443b8b6c2d791e530a1b7e1fee381fb3bb9c9d523d7e6d1a3a13577e63c52be3d05313b71d71e9e5f6a17de9746e1e0bcd7f1fe6d0f6335ac8db304d05a57ec8f355263ed553a4acce31430c3e3f11dfbdf15aa37e24feea178ba84109ab2c1866d64cbdd81fff01f39c09c744deb32000b2a8aaf841c161e4e7989053f8ffa757c1f4577edefad2f4abb8efcf7aa7f85395e82e785e4cbbba519a79d73e9c67e275d7ba8af0c195cbd68b310d7e1") sendfile(r0, r2, &(0x7f0000000040), 0xd2) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x600000000000, 0xb488a52ad07c1d8f) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x8, 0x101000) r4 = memfd_create(&(0x7f00000000c0)='net/ip_mr_cache\x00', 0x2) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000300)) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000380)={0x7, {{0x2, 0x4e24}}}, 0x88) ioctl$fiemap(r4, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="ff070000000000000100000000000000000700000000000000ff0f000000000000020000000000000000000000000000000000000000000000801000000000000000000000000000000600000000000000ed00000000000000060000000000000000000000000000000000000000000000020000000000000000000000000000000800000000000000000000000000000008000000000000000000000000000000000000000000000000010000000000000000000000000000610b0000000000000010000000000000018000000000000000000000000000000000000000000000000c0000000000000000000000000000e9000000000000000104000000000000070000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000ffffffff00000000001000000000000000000000000000000000000000000000800200000000000000000000000000000000000000000000010000000100000000000000010000000000000000000000000000000000000000200000000000000000000000000000080000000000000004000000000000000400000000000000000000000000000000000000000000008a110000000000000000000000000000"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x8600, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in6}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000340)=0x363) [ 264.789907] FAULT_INJECTION: forcing a failure. [ 264.789907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.801836] CPU: 1 PID: 16654 Comm: syz-executor1 Not tainted 4.18.0+ #190 [ 264.809329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.818697] Call Trace: [ 264.821303] dump_stack+0x1c9/0x2b4 [ 264.824951] ? dump_stack_print_info.cold.2+0x52/0x52 [ 264.830186] should_fail.cold.4+0xa/0x11 [ 264.834311] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 264.839439] ? graph_lock+0x170/0x170 [ 264.843288] ? rcu_is_watching+0x8c/0x150 [ 264.847438] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 264.852122] ? find_held_lock+0x36/0x1c0 [ 264.856236] ? check_same_owner+0x340/0x340 [ 264.860666] ? rcu_note_context_switch+0x730/0x730 [ 264.865616] __alloc_pages_nodemask+0x36e/0xdb0 [ 264.870294] ? default_file_splice_read+0x1da/0xb10 [ 264.875320] ? do_splice_to+0x12e/0x190 [ 264.879304] ? splice_direct_to_actor+0x270/0x8f0 [ 264.884157] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 264.889216] ? rcu_pm_notify+0xc0/0xc0 [ 264.893164] ? __kmalloc_node+0x33/0x70 [ 264.897167] ? __kmalloc_node+0x33/0x70 [ 264.901170] ? rcu_read_lock_sched_held+0x108/0x120 [ 264.906207] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 264.911779] alloc_pages_current+0x10c/0x210 [ 264.916221] push_pipe+0x400/0x7a0 [ 264.919776] ? __kmalloc_node+0x47/0x70 [ 264.923795] iov_iter_get_pages_alloc+0x866/0x1530 [ 264.928752] ? iov_iter_fault_in_readable+0x460/0x460 [ 264.934026] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 264.938740] ? is_bpf_text_address+0xd7/0x170 [ 264.943249] ? kernel_text_address+0x79/0xf0 [ 264.947675] ? __kernel_text_address+0xd/0x40 [ 264.952369] ? unwind_get_return_address+0x61/0xa0 [ 264.957313] ? __save_stack_trace+0x8d/0xf0 [ 264.961665] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 264.966676] ? iov_iter_pipe+0xc2/0x2f0 [ 264.970649] default_file_splice_read+0x1da/0xb10 [ 264.975486] ? do_splice_direct+0x2d4/0x420 [ 264.979811] ? do_sendfile+0x623/0xe20 [ 264.983719] ? __x64_sys_sendfile64+0x15d/0x250 [ 264.988384] ? do_syscall_64+0x1b9/0x820 [ 264.992459] ? iter_file_splice_write+0x1010/0x1010 [ 264.997580] ? rcu_is_watching+0x8c/0x150 [ 265.001742] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 265.006428] ? __lockdep_init_map+0x105/0x590 [ 265.010936] ? lockdep_init_map+0x9/0x10 [ 265.015004] ? __mutex_init+0x1f7/0x290 [ 265.018971] ? rcu_pm_notify+0xc0/0xc0 [ 265.022855] ? __ia32_sys_membarrier+0x150/0x150 [ 265.027610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.033156] ? fsnotify+0xbb4/0x14e0 [ 265.036877] ? init_wait_entry+0x1c0/0x1c0 [ 265.041151] ? fsnotify_first_mark+0x350/0x350 [ 265.045752] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 265.050436] ? fsnotify+0x14e0/0x14e0 [ 265.054249] ? security_file_permission+0x1c6/0x240 [ 265.059281] ? rw_verify_area+0x118/0x360 [ 265.063437] ? iter_file_splice_write+0x1010/0x1010 [ 265.068447] do_splice_to+0x12e/0x190 [ 265.072250] splice_direct_to_actor+0x270/0x8f0 [ 265.076919] ? pipe_to_sendpage+0x400/0x400 [ 265.081236] ? do_splice_to+0x190/0x190 [ 265.085208] ? rw_verify_area+0x118/0x360 [ 265.089354] do_splice_direct+0x2d4/0x420 [ 265.093520] ? splice_direct_to_actor+0x8f0/0x8f0 [ 265.098381] ? rw_verify_area+0x118/0x360 [ 265.102526] do_sendfile+0x623/0xe20 [ 265.106264] ? do_compat_pwritev64+0x1c0/0x1c0 [ 265.110896] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.116647] ? _copy_from_user+0xdf/0x150 [ 265.120819] __x64_sys_sendfile64+0x15d/0x250 [ 265.125345] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 265.130168] ? do_syscall_64+0x9a/0x820 [ 265.134180] do_syscall_64+0x1b9/0x820 [ 265.138114] ? syscall_return_slowpath+0x5e0/0x5e0 [ 265.143045] ? syscall_return_slowpath+0x31d/0x5e0 [ 265.147972] ? __switch_to_asm+0x34/0x70 [ 265.152039] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 265.157400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.162241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.167436] RIP: 0033:0x457089 [ 265.170638] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:43 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r7 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) r8 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x80000001) keyctl$get_persistent(0x16, r6, r8) write$P9_RREMOVE(r1, &(0x7f0000000480)={0x7, 0x7b, 0x2}, 0x7) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000580), &(0x7f0000000040)=0x60) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 265.189553] RSP: 002b:00007fc4822f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 265.197277] RAX: ffffffffffffffda RBX: 00007fc4822f76d4 RCX: 0000000000457089 [ 265.204585] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 265.211864] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 265.219146] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 265.226422] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000003 03:33:43 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:43 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x1) 03:33:43 executing program 1 (fault-call:2 fault-nth:4): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:43 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r2, r1, 0x400) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000001980)=""/4096) r4 = accept4$nfc_llcp(0xffffffffffffff9c, 0x0, &(0x7f0000000640), 0x800) fcntl$setpipe(r4, 0x407, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x8b93, &(0x7f0000000080)={'tunl0\x00', @ifru_data=&(0x7f0000000040)="615b5d78f7764d4c09fedf2a53ac6312f89297c92dc0fd0ec831b10532efde46"}) r7 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x7, 0x0) setresgid(r1, r1, r1) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r5) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r8, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCGLCKTRMIOS(r9, 0x5412, &(0x7f0000000000)={0x3}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x0, 0x400}, &(0x7f00000002c0)=0x18) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/audio\x00', 0x101880, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r10, 0x1000}, 0x8) io_setup(0x8, &(0x7f0000000040)) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x10002, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r12, 0x10e, 0x5, &(0x7f0000000440)=0x7, 0x4) r13 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r13, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$UI_END_FF_ERASE(r13, 0x400c55cb, &(0x7f0000000280)={0x4, 0x8, 0x401}) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x32, 0x880) dup3(r5, r5, 0x0) eventfd(0x8) 03:33:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80000000, 0x2) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffffe, 0x2800) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/76) 03:33:43 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000) r2 = syz_open_procfs(r0, &(0x7f0000000080)='ns\x00') ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)={0x8000, 0x7f, 0x4, 0x0, 0x0, [{r1, 0x0, 0x900000000000000}, {r2, 0x0, 0x6}, {r2, 0x0, 0x7}, {r2, 0x0, 0x7}]}) sendfile(r1, r2, &(0x7f0000000040), 0xd2) [ 265.558733] FAULT_INJECTION: forcing a failure. [ 265.558733] name failslab, interval 1, probability 0, space 0, times 0 [ 265.570120] CPU: 1 PID: 16682 Comm: syz-executor1 Not tainted 4.18.0+ #190 [ 265.577156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.586508] Call Trace: [ 265.589107] dump_stack+0x1c9/0x2b4 [ 265.592739] ? dump_stack_print_info.cold.2+0x52/0x52 [ 265.597936] ? perf_trace_lock+0x49d/0x920 [ 265.602174] should_fail.cold.4+0xa/0x11 [ 265.606236] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.611345] ? graph_lock+0x170/0x170 [ 265.615153] ? graph_lock+0x170/0x170 [ 265.618949] ? rcu_is_watching+0x8c/0x150 [ 265.623102] ? find_held_lock+0x36/0x1c0 [ 265.627172] ? __lock_is_held+0xb5/0x140 [ 265.631246] ? check_same_owner+0x340/0x340 [ 265.635569] ? rcu_note_context_switch+0x730/0x730 [ 265.640510] __should_failslab+0x124/0x180 [ 265.644744] should_failslab+0x9/0x14 [ 265.648555] kmem_cache_alloc_node_trace+0x26f/0x770 [ 265.653660] ? default_file_splice_read+0x1da/0xb10 [ 265.658669] ? do_splice_to+0x12e/0x190 [ 265.662643] ? splice_direct_to_actor+0x270/0x8f0 [ 265.667497] __kmalloc_node+0x33/0x70 [ 265.671343] kvmalloc_node+0x65/0xf0 [ 265.675057] seq_read+0xa47/0x1540 [ 265.678618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.684180] ? _copy_from_user+0xdf/0x150 [ 265.688325] ? seq_file_path+0x30/0x30 [ 265.692213] ? security_file_permission+0x1be/0x240 [ 265.697222] ? security_file_permission+0x1c6/0x240 [ 265.702249] ? rw_verify_area+0x118/0x360 [ 265.706395] do_iter_read+0x4a3/0x660 [ 265.710208] vfs_readv+0x175/0x1c0 [ 265.713747] ? compat_rw_copy_check_uvector+0x440/0x440 [ 265.719124] ? __kernel_text_address+0xd/0x40 [ 265.723618] ? unwind_get_return_address+0x61/0xa0 [ 265.728544] ? __save_stack_trace+0x8d/0xf0 [ 265.732872] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 265.737886] default_file_splice_read+0x526/0xb10 [ 265.742721] ? do_splice_direct+0x2d4/0x420 [ 265.747032] ? do_sendfile+0x623/0xe20 [ 265.750911] ? __x64_sys_sendfile64+0x15d/0x250 [ 265.755571] ? do_syscall_64+0x1b9/0x820 [ 265.759646] ? iter_file_splice_write+0x1010/0x1010 [ 265.764665] ? rcu_is_watching+0x8c/0x150 [ 265.768813] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 265.773497] ? lockdep_init_map+0x9/0x10 [ 265.777591] ? __mutex_init+0x1f7/0x290 [ 265.781556] ? rcu_pm_notify+0xc0/0xc0 [ 265.785445] ? __ia32_sys_membarrier+0x150/0x150 [ 265.790196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.795724] ? fsnotify+0xbb4/0x14e0 [ 265.799440] ? fsnotify_first_mark+0x350/0x350 [ 265.804014] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 265.808675] ? fsnotify+0x14e0/0x14e0 [ 265.812484] ? security_file_permission+0x1c6/0x240 [ 265.817497] ? rw_verify_area+0x118/0x360 [ 265.821648] ? iter_file_splice_write+0x1010/0x1010 [ 265.826665] do_splice_to+0x12e/0x190 [ 265.830464] splice_direct_to_actor+0x270/0x8f0 [ 265.835145] ? pipe_to_sendpage+0x400/0x400 [ 265.839462] ? do_splice_to+0x190/0x190 [ 265.843433] ? rw_verify_area+0x118/0x360 [ 265.847583] do_splice_direct+0x2d4/0x420 [ 265.851733] ? splice_direct_to_actor+0x8f0/0x8f0 [ 265.856585] ? rw_verify_area+0x118/0x360 [ 265.860733] do_sendfile+0x623/0xe20 [ 265.864454] ? do_compat_pwritev64+0x1c0/0x1c0 [ 265.869065] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.874598] ? _copy_from_user+0xdf/0x150 [ 265.878745] __x64_sys_sendfile64+0x15d/0x250 [ 265.883242] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 265.887822] ? do_syscall_64+0x9a/0x820 [ 265.891813] do_syscall_64+0x1b9/0x820 [ 265.895701] ? syscall_return_slowpath+0x5e0/0x5e0 [ 265.900635] ? syscall_return_slowpath+0x31d/0x5e0 [ 265.905571] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 265.910940] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.915801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.920989] RIP: 0033:0x457089 [ 265.924175] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.943072] RSP: 002b:00007fc4822f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 265.950788] RAX: ffffffffffffffda RBX: 00007fc4822f76d4 RCX: 0000000000457089 03:33:43 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 265.958060] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 265.965317] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 265.972607] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 265.979871] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000004 03:33:43 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x9, 0x3, 0xe64}, 0x14) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f00000000c0), 0x69b) 03:33:43 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r7 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) r8 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x80000001) keyctl$get_persistent(0x16, r6, r8) write$P9_RREMOVE(r1, &(0x7f0000000480)={0x7, 0x7b, 0x2}, 0x7) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0x7ffff000}], 0x1, 0x1f6) 03:33:44 executing program 7: mprotect(&(0x7f0000dfd000/0x200000)=nil, 0x200000, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x1a1, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) 03:33:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000001080)='/dev/loop#\x00', 0xffffffffffffffff, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = dup(r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/4096) ioctl$LOOP_CLR_FD(r0, 0x1277) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001040)={r1}) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffff, 0xa, &(0x7f00000016c0)=[{&(0x7f0000000200)="2fc4ed425460fdf494e4c5643ec16d045eaa24df885876779b87b8a8413586ab9c71c1be0fdbad469b5a1ccc908571f32617fa51388b8410c1be90570249cff86bee08ca8890a0a87cb7112ef3c36b3921f86876d912449bc7bb4328fb4fa974215402aa9cec9b11cdd6fefdd5", 0x6d, 0x200}, {&(0x7f0000000100)="18544b46e83d620eafca13fd8110a2388b0c4ab4b3861a0be2e04559c57b835380a6", 0x22, 0x5}, {&(0x7f0000000280)="eb702ceac3a1284257cbc64f1be78c037fa374c916a53576add68dc03561251ae42d0604ba1f195bcd06dae824e7c2da7193af5cf49c03be9582b88d1ec1573c145b627f495676a046a61e0f8d4eb4d1bba4befcab100394e1816075def739fc91a36a21a62c82d25387f7c2a689cf10", 0x70, 0x9}, {&(0x7f0000000300)="a8ebb8ce808590b3e832d53001d7c8a5f8ae423fda3f9c525135e6aa3d4192b9c5098dc40fa717ec43d66db669464ee20ba93873be0ed5bfa515e17c9d3b2fbc3069fa3dff8a153a2d815085a1743b029890d5051d4756a0bc46f2db4354", 0x5e, 0x100000000}, {&(0x7f0000000380)="2b34c61da8d166050bac17d1b98c54c7b99474e5e52e7ecffe4643e40d14499785e9d26aa4a6b8ea0a5b0da8b4ae56a7fca49a19195aac61d672ff7849f7a05352297636db451ed62d9a77d722b0f31e52a2a51001ec279b6636a138cbf9764b1f334dc56202d8", 0x67, 0x20}, {&(0x7f0000000400)="43f2c9bf8670cc397b7a5bf43d7d34eaedd9f75b9b1f2868cc004ed95cf179615a4659b5821976a2aa3303b158d3ca6dce7938b89473793640618ef343aac673e666", 0x42, 0x9}, {&(0x7f0000000480)="305df32739e1c804c0068e3c2381289442c2bb02d47e955cf524ab9db85ad4eca12971239a207ed3e6fc97ef068d4eac612871109166efd1e4507978efef55e44c981a8af0074ca1a400ffe1f2cc9e77b515eab8d7d11e274284f7c44b8e9cf77eff5ce5a356ca4d13571197beb4de9a6cd8c9cfd385b59001a8b3dc96d5ddc8b152813420ec4f7611ea249feac38e7b0064800eeb135ac577524fff7987a9e72be335bd902b6ef6dc5bb5b055db", 0xae, 0x4}, {&(0x7f0000000540)="2c4516ae29d2393f2fa6a75b9eff243327f2abe4f7e23139aaf69cb6fc1ca39d4b09438306d466fbda3e94f17f7136c586327f3996bb6c7499b0207a5dca4c5e7e5fadb291b53b12292822d52bdc644d88c6625492a7beb638de1d70f886d3946ee0ffd7910fba5ff7c83f243f53", 0x6e, 0x4}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="07b918627c39aaed9484930b633c78faab12f0dc4d9979b34d44f8172f36e62f0e2ae63a88c4b6df0b0a3d7aa89b798fe2b5824bbb7f11a0d33ae1d518c4b0517fe3765bbfa9592c1a2fdd1bb1dfa06f2bb45ba9fbc81d7644c55c5c1012a781e7fbdf3ebab898f719b1f940f5119e976308d9a1462452fbd16d2ff8944f098296234122c441623d7d32fa29906e99497fc8de3c2d2623d4685f8015fd3d1ba371215a4c44ca4f90f125351c1c888c933de87500ecea7209fa97d5550703e07e04374cdaf50399444c9524787e70a9b10b1dee9f982adfb30d01f2f9", 0xdc, 0x7f}], 0x1002010, &(0x7f00000017c0)={[{@allocsize={'allocsize', 0x3d, [0x0, 0x6b, 0x33]}}, {@swidth={'swidth', 0x3d, 0x40}}, {@norecovery='norecovery'}, {@biosize={'biosize', 0x3d, 0xfffffffffffffffe}}, {@swidth={'swidth', 0x3d, 0x2}}, {@largeio='largeio'}]}) sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:44 executing program 1 (fault-call:2 fault-nth:5): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:44 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket(0x2000000001, 0x2, 0x0) readv(r0, &(0x7f000058c000)=[{&(0x7f0000422f69)=""/151, 0x97}], 0x10000000000001f4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) tkill(r1, 0x1000000000014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xfffffffffffff001}, &(0x7f0000000200)=0x8) waitid(0x1, r1, &(0x7f0000000340), 0xc000000a, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r5, 0x1}, &(0x7f00000002c0)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000e00000), 0x4) listen(0xffffffffffffffff, 0x0) 03:33:44 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0x20000369}], 0x1, 0x1f6) 03:33:44 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r7 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r7, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) r8 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x80000001) keyctl$get_persistent(0x16, r6, r8) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 03:33:44 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:44 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x23, 0x100000000000aff, 0x0, 0x0, {0x12}}, 0x14}}, 0x0) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0x4) 03:33:44 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc8070031") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x5, 0x1f6) 03:33:44 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x7, 0x1) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000001c0)={0x3, 0xfffffffffffff001}) clone(0x80000100, &(0x7f0000000040)="b70727df3b176ca944b8b1f3f91852126ff24119c6c1b372d18ae678896899153f3f1d1a6ab722e6160532f22631ac199216bfd7b7c8e224d3c9502a4b81b0172bddd0b743267a752fefb1fe221473ce281f14d10796262a9a06c6af596ac344761ec663d0095b2abce57f59c6efc64cc84cfc7e1807fe5a16033eb585cee13555523be2356e558b91e1431235f167a3ef552e1cf8f9580c14e7c56347973b669ef819b0b04f61f6fb624d55af87732316f4dd9506bdc57d289053265ec93b4ec17fdb6462b93cb3ee6d598a1d934eea7d6122489864a2efca22d391893270cc11839218cf24346c18b3880dda", &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280)="f7626b7ea6ef601a65fc2fcdf17d3e868aa61a80aedb125ca21179e49c137ef559a52756305f49c61a9bd24d42d31945836041bc1bdf339662bf7567a9a9fc392e9f76bfbc40074101eebf64943c050517d2eff93445254b2fd750beb4") memfd_create(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2) sendfile(r0, r0, 0x0, 0x2) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x7fffc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340), 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000500)={0xe, 0x9}, 0xc) 03:33:44 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r6 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000004c0)=0x80000001) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000100)) ioctl$LOOP_CLR_FD(r0, 0x1277) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x399f1336, r1}, &(0x7f00000000c0)={0x9, 0x404, 0x8, 0x0, 0x41, 0x7fffffff}) 03:33:44 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:44 executing program 7: r0 = shmget(0x0, 0x3000, 0x105, &(0x7f0000ffb000/0x3000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) r2 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) getgroups(0x7, &(0x7f0000000140)=[0x0, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x0, 0xee00]) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000400)=0x0) r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000440)={{0x8, r1, r2, r3, r4}, 0x7ff, 0x5, 0x3, 0x7, r5, r6, 0x4}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r7, 0x1000000000016) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x2, 0x3}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r2, 0x9, 0xa0, "48874844b1e17f3dad76ef1906e11f4de1adb2b64fbebecd9e2ad1f492307afadef0fa3782177a8a287b8f849b055aa16173bee251bc42bc79c012282dcb79ea2379db8c23858887cc5ecced7d4237ec68826cc5178f4e18abd82d9e77e83047ce940372ae6f977855b8fa67e35f27bebe05f396429f7485f340de85bae0060923fd398da7aacf7444e87c02e16d7319fefc6793d814b673d9bdd2e938d90cb1"}, 0xa8) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x20, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x4, 0x9}]}, 0x20}}, 0x0) 03:33:44 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x8, 0x1f6) 03:33:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) syz_open_pts(r1, 0x101000) 03:33:44 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xa000000, 0xd2) 03:33:44 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r6 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)='/dev/cuse\x00', 0xfffffffffffffffd) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:44 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x3, 0xffffffffffffffd6, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:44 executing program 3: r0 = socket$inet6(0xa, 0x805, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x10000001, r1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local, 0x0, 0x32}, 0x0, @in6=@local}}, 0xe8) close(r0) 03:33:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x3, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:45 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x600, 0xd2) 03:33:45 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:45 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x900) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:45 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x63, 0x1f6) 03:33:45 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r6 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") delete_module(&(0x7f0000000600)='self%*]\x00', 0x0) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:45 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x12}]}}}]}, 0x3c}}, 0x0) 03:33:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) prctl$setfpexc(0xc, 0x3) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:45 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x2, 0xd2) 03:33:45 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={0x0, 0x800}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e20, 0x5, @remote, 0x800000000}}, 0x2, 0x8}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x1}}, 0x400, 0x7fff}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000003c0)={0x0, 0x4}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e21, 0x7f, @dev={0xfe, 0x80, [], 0x17}, 0x20}}, [0x1000006, 0xd1, 0x4, 0x8, 0x3, 0x9, 0x200000001, 0x8, 0xe8, 0x1, 0x1, 0x6a76, 0x50, 0x80, 0x2]}, &(0x7f0000000080)=0x100) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r4, 0x8000}, 0x8) 03:33:45 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:45 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf76, 0x1f6) 03:33:45 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) r6 = socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:45 executing program 3: timer_create(0x3fffffffc, &(0x7f0000000180)={0x0, 0x3b, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000300)}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000001000)={{0x0, 0x1c9c380}, {0x77359400}}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x281, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, r0+10000000}}, &(0x7f0000000100)) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x4000) fallocate(r2, 0x2, 0x0, 0x80000001) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xa8a5, 0x1, 0x7}, &(0x7f0000000200)=0x10) write$binfmt_elf64(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x1f, 0x6, 0x7f, 0x3, 0x3, 0x1, 0x3e0, 0x40, 0xe, 0xfffffffffffffffd, 0x6, 0x38, 0x1, 0x7, 0xffff, 0x7}, [{0x60000006, 0x6, 0xd69f, 0x3, 0xfa26, 0xfffffffffffffffe, 0x4, 0x9}, {0x3, 0x11fc00000000, 0x0, 0x7, 0xc7e, 0x433a, 0x200, 0xffffffffffff70e6}], "238195b6d2185a144e0701d7c5c9d5eebe4c38faf5dfc7279f1fc5b6163a6d837b97da8954782f9eb56ed18f9e3c087646480fd4d777ccf9d4fa6c620e7e58b73d0369f5b9fbf051b218bc27e057f27ec710aa7811bb78899f9364a57a643e84a88d8af87f590b1b18c99f09975723addb6ed50e977a8fe8514ab1a17280265b6e954266a5454b0b"}, 0x138) syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x5, 0x200000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r3, 0xdff5}, &(0x7f0000000280)=0x8) 03:33:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:45 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x3, 0xd2) 03:33:45 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:45 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x81, 0x4, 0x9, 0xecc, 0x3}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x6}, 0x8) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000300)=0x100000000, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) syz_open_procfs(r4, &(0x7f0000000380)='net/dev_mcast\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfffffffffffff000, 0x1f6) 03:33:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0xf01, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4008000) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x1b, &(0x7f0000000280), 0x8) 03:33:45 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:45 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000500)) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) io_setup(0xfff, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) io_getevents(r1, 0x800, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000140)={r2, r3+30000000}) 03:33:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffff8000, 0xd2) 03:33:46 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_cache\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:46 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000f00)="716588dc9c0915b56370365f7463961591626d6501") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0x0, 0x0, 0x230, 0x230, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x4, 0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@empty, @local, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'team0\x00', 'team_slave_0\x00', {}, {0x960de5d341ca7c73}, 0xff, 0xb405, 0x4, 0x51}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x8, 0x8, 0x6}, {0x40, 0x800, 0x9}}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x3, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000f40)=@nl, 0xfda2, &(0x7f0000000540), 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000e00)={0x0, 0x1c, &(0x7f0000000dc0)=[@in6={0xa, 0x4e20, 0x7ff, @mcast1, 0x2}]}, &(0x7f0000000e40)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000e80)={0xfffffffffffffff9, 0x5, 0x8, 0xbb, 0x1, 0xa457, 0x9, 0x4, r3}, 0x20) sendmsg(r2, &(0x7f0000000d00)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast1}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000180)="864fc06047aa8621aa421d35acde9cdbd5e4a4eeb76e31", 0x17}, {&(0x7f0000000700)="17a8373ba502948094b606733556323bfde60c9c9f70b0622fe158b203bcdd2831f335a464c732aba22afd8a48ad6458a8d8c4e7b33e22198d0a3dd8b0f602d0db12b703654b8bd87f127940ee87ef58d412f18c1225fb5a564042eba0b7cf1aee69959a1be58681d1e35b1db0cabc26bfd8dec9ca0a7288358787b4276b32a850096bf8c468f13cc97eeff4b71bf64f", 0x90}, {&(0x7f00000007c0)="e2cf3a64bc76b0be269f065efb37e42c77798ad6c0b12eccc80ef70043aef74ba12f99386fe33b0c80b6595bb7468afb908a922c904594c7dfe496d756d4b19dd46d35eea74808c5f3662490538c9f1333a69d78c44e00623d38e9d48e2fe9c01e63c554c83050eecaf89ecd34fd18172bcc266d842c1f96466038948ca0255a0fdc80f10e1c78c6a318ea74269dedf0e8a8cef2", 0x94}, {&(0x7f00000001c0)="cad6c1665e3034f8098768b30ba4e3af8c22ffef7c5d49126dc258c040d475984434ea8cf163c5ab4531936ecef4", 0x2e}, {&(0x7f0000000880)="0e1b7d85fcb97059821e65f6e20ae8894d07e6fcf2d00f50b29a025b4ee3706f657ecde1adb12a00272777986b4f62b59a5120f1cc43e82a92bd959a751d5072fc91cd7caa9820b0e8368d65b86989c5c93eac8ba3fcde19e863b996335a05790178c9190430e5fd3011292c5057cdf2b6be2fbebd04d34a8df3d8bb4290220b6ba2456e52c2b056ffaebfde155d976496e3027c749c28470a24be423faf88cb60f81ed0f81c33ff47c4e12634f3210222680c1d399e0f20b8cc338b639706dfa9f5aec500cf41c17fd9930d3116e117e8fe9340ecaf048f5882d2e9e47e5fe3c6885b5770e68c6a1ded", 0xea}, {&(0x7f0000000980)="5f232b326fed69a9759d088b2fa36e365d1ca9593d32ec59be23f3dd547c6c3871637536a1148eb3db2ef46e408fba0566936d176ba6b9eab8d0f94044e83f6723808f139a6208168e1209d3d9ec0f2ad78e69f0c0d729d0e8ce13c33c4ac0fae601f5cf8476d2bc039af0f4c2dac2a08bb3c4e0050c294c427217cd837efed57cb9dbd65c5c9679e3c156a4d50fdbf437c3df02793d73572af0ad2353f9ec9c2433cdeb8a5b96fc8948110aeae17ef943", 0xb1}, {&(0x7f0000000a40)="4822bc8309db6fd40c74829d4819ff60b797290615d03cca2a4ae9f37b5ea3d65c0fa21f6679f0e4991b4856c6b7f3dd9ba789d9459d56a3f35f5347c9fbd95eeadcdb65b7d03f3ca4a28b296f62a8cd5f4503c0452bff16752b3c50b90528547c213ae50876aa9a21a35b6f95a3e149c9ef839324ed4ac419376459ec297f7fedfc442c782802cbe25e283789f74cc137ee2d0c171bedc902c8ac9b4b0c07301b3599518473d825779531ac50ff4c27ad24ab641b33ae7a59f4cfb88eef88eb04eb02fbce7574f3731227d1a5aa733d11e7ec", 0xd3}, {&(0x7f0000000200)="1c51c3ca6885d94cb8ec2940552a3d442a0ec17ecb4da7464399787a", 0x1c}, {&(0x7f0000000b40)="2f3f9a121a3fe0e89462ba74a6c97c58d74194a9f9fa4178473663cc969d86cf482605b989bc702d19d1a31e78613061420b46b539fa3c731543d22c968c1b3f61dc6a4c3a718df4049956d9ff493decf72b074dada2a11e325c26923df5cddf58d954f98746c861ce681eea742d5864d3b9615ffe5e390d6284ac262b77e52e581ea686ca53edd7e6d22daac1f3bf9e4993f32f0c44f3cb718b", 0x9a}, {&(0x7f0000000c00)="9668eb908419272d912464", 0xb}], 0xa, &(0x7f00000053c0)=ANY=[@ANYBLOB="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"], 0x22f0, 0x1}, 0x24008041) write$P9_RFLUSH(r0, &(0x7f0000000d80)={0x7, 0x6d, 0x2}, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000d40)={0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 03:33:46 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r2, 0x1277) 03:33:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfffff000, 0x1f6) 03:33:46 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) socket$inet6(0xa, 0x1000000000002, 0x7) flistxattr(r2, &(0x7f00000003c0)=""/105, 0x69) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:46 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x600000000000000, 0xd2) 03:33:46 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="00000000fe000000aec026e0c8e2accef5e28ff2807711f23a8d9d7ca4bc2eaff5e052981e41fd9eab8539a686fafe9cc7c7dfddb77b087e69a59933a33c08ef8a71e486aa1dccf1f5849e7cc6242c942c6bb64fc86c9a738b2a2ff910bd5ba17d4813a1b56efdfc8a543556225b460feb802893be2f53d25c14354734bb21dc536bad3e4d586cfc97a46f7352f6c4739b98aaf1e7b05234978a81d796f7ce3e3084b4afee9219f3b6c1379c6332cb127cef24e2345b810c504e42160e28a846ec9b2100a6a06b68ba7132d7ab450000587e954a81790c81c48431276b53e7a7f6d72aff1bd15a8f59ea67ac53f3") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x20, 0x0, "d5301243db1207051c1ce65841514503d7a38d68d4eda60b6d1f3c8f9466c8e931500b48d77a28c8145bb4b051166dbf92de3e2f8bc3a0111da0d797a45c0f67", "bde62f6e50d89bd9bdf5ff5dc79856059cd2dec51d3effa1cae4dc23417669435129a27a999a4dbf9e016cd5041d069ee23c1baa524b866dea660b87e9ebf550", "c9c9ffb509852620bb7b0371f285f07121ea9bb79e87fd2690718011a390f190"}) 03:33:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x7, 0x3, 0x8000}, 0x4) connect$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x7, 0x8, 0xf, "698e0d5bc1082c9f2eeff0729489f4fde72e211fe571e66ee4b9776a4e46616c943230c90bc8f099ed9d8a4d104df130ce80a3e6b906d32c959a4129500826", 0x25}, 0x60) 03:33:46 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f857150") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r3 = socket(0xe, 0x4, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000040)={'bond0\x00', 0x81}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x3, 0x4, 0xf7, 0x7, 0xffffffffffffffc1}) 03:33:46 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x600, 0x1f6) 03:33:46 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) socket$inet6(0xa, 0x1000000000002, 0x7) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffff7f00000000, 0xd2) 03:33:46 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x8000000004e23, 0x0, @loopback}, 0x1c) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) listen(r0, 0xffffffffffffff7e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="90", 0x1}], 0x1, &(0x7f0000000940)}}, {{&(0x7f0000000a00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e40)="02", 0x1}], 0x1, &(0x7f0000001f00)}}], 0x2, 0x0) 03:33:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) 03:33:46 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xa, 0xd2) 03:33:46 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf57, 0x1f6) 03:33:46 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000800)={@local, @empty, @empty, 0x3, 0x80000000, 0x4, 0x100, 0x93, 0x80010, r5}) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xd3, 0x200000) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000240)) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000002c0)={0x41, 0x3, 0x0, {0x0, 0x20, 0x0, '/trustedselinux\'wlan1^-mime_type'}}, 0x41) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffff, 0x81) accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80000) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000180)={[{0xffffffff00000000, 0x3f, 0x1ff, 0x7, 0x600d, 0x9, 0x5, 0xc0d, 0x7fffffff, 0x6, 0xfffffffffffffff7, 0x4, 0x8000}, {0x800, 0x5065, 0x0, 0x3, 0x2, 0x81, 0xe2, 0x0, 0xffffffff80000000, 0x47, 0x7, 0x6, 0xfffffffffffffffd}, {0x7, 0x7, 0x4, 0x0, 0xfffffffffffffffb, 0x1ff, 0x401, 0xdb3c, 0x81, 0x7, 0x9, 0x8, 0x5}], 0x8}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x129b, 0x0, 0x100000001, 0x7f}, &(0x7f0000000380)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000400)={r5, 0x400}, 0x8) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000ec0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000003c0)=0x4ffd) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:33:46 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x200000000000000, 0xd2) 03:33:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100085) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0xffffffffffffffe6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000080)="009832e5440da8f7f4a702a22e3f3381c3c5ebf117a285740500d2946e63a10c1d0bf9f4c6d16e2a7aa3803d6e36a63a00000000000000000000", 0x221) 03:33:47 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:47 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@remote, @in6}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000007c0)=0xe8) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x2, 0x1f6) 03:33:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x1000000000000000, 0xd2) 03:33:47 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) set_robust_list(&(0x7f0000000040)={0x0, 0x2}, 0x18) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000015c0)={{0x3}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000340)=""/4096) r2 = getegid() r3 = getegid() r4 = getgid() getgroups(0x3, &(0x7f0000000000)=[r2, r3, r4]) 03:33:47 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x39, &(0x7f0000000200)={@mcast1={0xff, 0xc}}, 0x20) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:47 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf55, 0x1f6) 03:33:47 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:47 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x6c, &(0x7f0000000080)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x1a6, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e23, @rand_addr=0x35e7}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2, 0x4, 0x30, 0xb770, 0x9}, &(0x7f00000001c0)=0x18) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e1e, 0x0, @loopback}, 0x1c) 03:33:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) 03:33:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x80ffff, 0xd2) 03:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf70, 0x1f6) 03:33:47 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4d213ab0681cc366ad675ecf100000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xb8}}, 0x0) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:47 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:33:47 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:47 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xa3, 0x802) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x2286, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) getresgid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000c00)) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000bc0)={0x30, 0x5, 0x0, {0x0, 0x6, 0x3}}, 0x30) geteuid() [ 270.066336] 9pnet: Insufficient options for proto=fd 03:33:47 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x4, 0x1100082) getsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:47 executing program 0: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f0000000400)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981aeb150d176"}}, 0x48}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10000) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000100)={0x1, 0x2001, 0x7, 0x7, 0x7fffffff}) r3 = semget(0x0, 0x1, 0x401) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000001c0)) semtimedop(r3, &(0x7f0000000080)=[{0x4, 0x8, 0x1000}, {0x2, 0x218b}, {0x0, 0x9}, {0x1, 0x1, 0x800}, {0xfad90667e0467597, 0x6f, 0x800}, {0x0, 0x9, 0x1000}], 0x6, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000004940)=[{{&(0x7f00000007c0)=@nl=@proc, 0x80, &(0x7f0000000600)}}, {{&(0x7f0000003080)=@sco, 0x80, &(0x7f00000042c0), 0x0, &(0x7f0000004300)=""/183, 0xb7}}], 0x2, 0x40010102, &(0x7f0000004a00)={0x0, 0x989680}) 03:33:47 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0x0) 03:33:47 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x5, 0xd2) 03:33:47 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:47 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) r1 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0xfffffffffffffffd, 0x3}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x400, 0x8, 0x4, 0xff, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xc, 0x7, 0x8, 0x5, 0x0, 0x1}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0/file0\x00', r3}, 0x2e) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r5, 0x7f}}, 0x10) 03:33:47 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf52, 0x1f6) 03:33:48 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x121000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000001c0)={[0x1, 0x5fff, 0x2007], 0x6f, 0x0, 0x1f}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r1, 0x1277) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x7, 0x9, 0xcbb2, 0x8}, 0x6) 03:33:48 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x10001, 0x80000) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/13) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1ff, 0x40) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xa) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/143) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000540)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r8 = getegid() sendmmsg$unix(r1, &(0x7f0000000680)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)='o', 0x1}, {&(0x7f0000000240)="a3de45affe78ae07e957dd9179013d16700de1020c03c039cb88569578d1d4f244ed3b23b680149fc573e25833167a3c66591f707c8f03c66257233bed972a1c3d3da2cede9efe19378276e525376231e8925a03a74f0b992bdf9c140de6d7700795dac2d98b0031a6c1078c31f1bbbc9833d4c8755d8cbc13357def2d8d60af59fd8e737b2745c2e2f49f078ede05527dd721588af67470843412196d68ad54a01e3167d28923eb3abacdf077391c4b9ed1f3d8b300bb956b1a65266674a9d9", 0xc0}], 0x2, &(0x7f0000000600)=[@cred={0x20, 0x1, 0x2, r2, r3, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}], 0x60, 0x4}], 0x1, 0x20008040) r9 = socket$inet6(0xa, 0x0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000700)={{0x9, 0x0, 0xffffffffffffc222, 0xffffffff00000001, 'syz1\x00', 0x7fffffff}, 0x4, 0x10, 0x5ac, r6, 0x4, 0x6, 'syz0\x00', &(0x7f00000006c0)=['eth1\x00', '/dev/input/event#\x00', '/dev/input/event#\x00', '/dev/adsp#\x00'], 0x34, [], [0x1, 0xfffffffffffffff8, 0x8001, 0xb1c9]}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb4, r10, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x97}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x4001) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000a00)=0x3, 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000a40), 0x4) setsockopt$inet6_tcp_int(r9, 0x6, 0x0, &(0x7f0000000a80), 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000ac0)={0x0, 0x9f, "fd432f8a4ef67329921aacb78fd205fc76af95765257eb11e543e5bf14e045e798ddd25eecf90c435087477979ea24ae16024f271b9f7c927d024f2a78ee0f0325f99ff03635842147ee35e43669c42a0b2f3a7c0d6f5c32a5eea69fc783e03af42873da455abee9851194c26ce7cc6baf55ad2e22faf8438b090d978fd2034b2d5f62c0617234d4cd3674d19885aea02dc28052160756ca93854a6ca53043"}, &(0x7f0000000b80)=0xa7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000bc0)={r11, @in={{0x2, 0x4e20, @local}}, 0x6, 0x461, 0x7, 0x4, 0x8}, 0x98) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000001cc0)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x1, &(0x7f0000000c80)=[{}], &(0x7f0000000cc0)=""/4096}, &(0x7f0000001d40)=0x78) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001dc0)={{0x9, 0x5, 0x3f, 0x6, 'syz0\x00', 0x9}, 0x4, 0x30, 0x1, r4, 0x0, 0x0, 'syz1\x00', &(0x7f0000001d80), 0x0, [], [0x0, 0x8, 0x78ba, 0x7fffffff]}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000001f00)=0x80, 0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001f40)={r11, 0x62, 0x9}, 0x8) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000001f80)) fanotify_init(0x20, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001fc0)='/dev/net/tun\x00', 0x2400, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000002000)={r11, @in6={{0xa, 0x4e24, 0x7, @local, 0x6}}, 0x80, 0x0, 0x400, 0x7, 0x1637551d1f968d11}, 0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000020c0)={0x3, 0xc, 0x5, 0x2, r11}, &(0x7f0000002100)=0x10) 03:33:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x10, 0xd2) [ 270.379899] 9pnet: Insufficient options for proto=fd 03:33:48 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:48 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:48 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0x0) 03:33:48 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x200000003e5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) rt_sigaction(0x400200000000007, &(0x7f00000002c0)={0x4004f2, {0xffffffbfffbff270}}, &(0x7f0000000240), 0x8, &(0x7f0000000100)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x161000, 0x0) dup3(r0, r0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) signalfd(r1, &(0x7f0000000040)={0x8}, 0x8) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)="429a09262e5bc96900") 03:33:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf72, 0x1f6) 03:33:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/bnep\x00') write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYRES16=r1], 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$getsig(0x4202, r2, 0x3, &(0x7f0000000140)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) bind$bt_rfcomm(r3, &(0x7f00000004c0)={0x1f, {0x8a, 0x800, 0x329, 0x1, 0xf6b, 0x642}, 0x6}, 0x6) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000600)={0x10, 0x30, 0xfa00, {&(0x7f00000005c0)={0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, [], 0xc}, 0x4c0000000000000}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000640)={0x11, 0x10, 0xfa00, {&(0x7f0000000580), r4}}, 0x18) recvmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/255, 0xfffffffffffffeb9}], 0x1, &(0x7f0000000400)=""/34, 0x22, 0x6e3}, 0x140) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000680)={{0xa, 0x4e22, 0xffffffffffffff14, @loopback, 0x2}, {0xa, 0x4e24, 0x6, @local, 0x1}, 0x6, [0x3, 0x2, 0xfff, 0x400, 0x3f, 0x81, 0x3, 0x4]}, 0x5c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x3cc, 0xccc0000}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000540)={r5, 0x100000001, 0x800000000000000c}, 0x361) [ 270.701419] 9pnet: Insufficient options for proto=fd 03:33:48 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0x0) 03:33:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000013e95)=0x5, 0xfffffffffffffecd) ioctl$sock_SIOCETHTOOL(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures}) close(r2) close(r1) 03:33:48 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xa00000000000000, 0xd2) 03:33:48 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") socket$inet6(0xa, 0x2, 0x0) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfaf, 0x1f6) 03:33:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700435f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140), 0x6e) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x5, 0x1}) 03:33:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:48 executing program 7 (fault-call:2 fault-nth:0): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:48 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x10000000000000, 0xd2) [ 270.986026] 9pnet: Insufficient options for proto=fd 03:33:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0xf468, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fdatasync(r1) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x3d5) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) dup2(0xffffffffffffffff, 0xffffffffffffffff) 03:33:48 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:48 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x40000) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:48 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:48 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = getpid() openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x20000, 0x0) sched_setattr(r1, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) ustat(0xfffffffffffffffa, &(0x7f0000000300)) read(r2, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000240)={0xbf}) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x30) ppoll(&(0x7f0000000000)=[{r2, 0x4000}, {r2, 0x22}, {r2, 0xa002}, {r2, 0x8000}, {r2, 0x40}, {r2, 0x1}, {r2, 0xa048}, {r2, 0x2200}, {r2, 0x40}], 0x9, &(0x7f0000000080), &(0x7f0000000100)={0x9}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r3 = socket(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) accept$alg(r0, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x15, &(0x7f0000000300), 0x4) creat(&(0x7f00000001c0)='./file0\x00', 0x42) 03:33:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf74, 0x1f6) [ 271.185944] FAULT_INJECTION: forcing a failure. [ 271.185944] name failslab, interval 1, probability 0, space 0, times 0 [ 271.197330] CPU: 0 PID: 17240 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 271.204361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.213712] Call Trace: [ 271.216317] dump_stack+0x1c9/0x2b4 [ 271.219969] ? dump_stack_print_info.cold.2+0x52/0x52 [ 271.225160] ? perf_trace_lock+0x49d/0x920 [ 271.229399] should_fail.cold.4+0xa/0x11 [ 271.233462] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.238591] ? zap_class+0x740/0x740 [ 271.242340] ? find_held_lock+0x36/0x1c0 [ 271.246432] ? check_same_owner+0x340/0x340 [ 271.250758] ? rcu_note_context_switch+0x730/0x730 [ 271.255711] __should_failslab+0x124/0x180 [ 271.259980] should_failslab+0x9/0x14 [ 271.263807] kmem_cache_alloc_trace+0x2cb/0x780 [ 271.268486] ? rcu_is_watching+0x8c/0x150 [ 271.272657] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 271.277350] alloc_pipe_info+0x175/0x5a0 [ 271.281431] ? pipe_read+0x940/0x940 [ 271.285157] ? ksys_dup3+0x690/0x690 [ 271.288883] ? perf_trace_lock+0x49d/0x920 [ 271.293141] ? find_held_lock+0x36/0x1c0 [ 271.297213] splice_direct_to_actor+0x6fc/0x8f0 [ 271.301889] ? fsnotify+0xbb4/0x14e0 [ 271.305652] ? pipe_to_sendpage+0x400/0x400 [ 271.309996] ? do_splice_to+0x190/0x190 [ 271.313978] ? rw_verify_area+0x118/0x360 [ 271.318132] do_splice_direct+0x2d4/0x420 [ 271.322316] ? splice_direct_to_actor+0x8f0/0x8f0 [ 271.327199] ? rw_verify_area+0x118/0x360 [ 271.331354] do_sendfile+0x623/0xe20 [ 271.335089] ? do_compat_pwritev64+0x1c0/0x1c0 [ 271.339694] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.345253] ? _copy_from_user+0xdf/0x150 [ 271.349422] __x64_sys_sendfile64+0x15d/0x250 [ 271.353950] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 271.358538] ? do_syscall_64+0x9a/0x820 [ 271.362539] do_syscall_64+0x1b9/0x820 [ 271.366553] ? syscall_return_slowpath+0x5e0/0x5e0 [ 271.371503] ? syscall_return_slowpath+0x31d/0x5e0 [ 271.376458] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 271.381857] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.386724] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.391917] RIP: 0033:0x457089 [ 271.395128] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.414074] RSP: 002b:00007f9657ba0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 271.421808] RAX: ffffffffffffffda RBX: 00007f9657ba16d4 RCX: 0000000000457089 [ 271.429104] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 271.436465] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.443739] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 271.451185] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000000 03:33:49 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x3000000, 0xd2) 03:33:49 executing program 7 (fault-call:2 fault-nth:1): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf97, 0x1f6) 03:33:49 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = accept(0xffffffffffffff9c, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}}, &(0x7f0000000440)=0x80) getsockopt$inet_buf(r1, 0x0, 0x24, &(0x7f0000000480)=""/44, &(0x7f00000004c0)=0x2c) r3 = dup(r0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000300)=""/146) r4 = getegid() mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1000000, &(0x7f0000000980)=ANY=[@ANYRESHEX=r2, @ANYRES64, @ANYRES64=r0, @ANYBLOB="e018466f6c0331f37c429ddcfece029e393ba10f991431f6167c8c3d414e55f24b302a5b9c56f1f74874481324492eb6883b2365129a7178", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRESDEC=r4, @ANYRESDEC=r3], @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYBLOB="77a39236e8ab87ce7699a13ccabf13105ef6b7a5c7910ee749bccebf56a3dfc945b8de6db84dccb138ffb32417e442e4f7456fcdabffb90438ab413da1c937f0c325fa80cb3e0a0e26b8b67a87d09bbfccb7447c5b1ae0ced3e5ccc768f1441dbdb249d780ff8a2fe1fb5f9065b76f1c6d56fe2cd9b62fc4b4ee7d60991bd2063f4e73f08f6012bc7e17b55fc950649493e1b5ad8c7b270d508f31c4ec", @ANYBLOB="0d8c7bf7773eec4cef9f1281f3e9b83ce3cfd20889a98ca1446d6ecac0f45105fc65549a14f2d8fe4398ae48d0425dab6f9465d087796edd1af767de57e72f4c", @ANYPTR64], @ANYRESDEC=r3, @ANYRES32=r4]) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x323200, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000240)=""/191) 03:33:49 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 271.664884] 9pnet: Insufficient options for proto=fd 03:33:49 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 271.752148] FAULT_INJECTION: forcing a failure. [ 271.752148] name failslab, interval 1, probability 0, space 0, times 0 [ 271.763843] CPU: 1 PID: 17273 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 271.770912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.780686] Call Trace: [ 271.783320] dump_stack+0x1c9/0x2b4 [ 271.786993] ? dump_stack_print_info.cold.2+0x52/0x52 [ 271.792395] ? perf_trace_lock+0xde/0x920 [ 271.796625] should_fail.cold.4+0xa/0x11 [ 271.800737] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.805873] ? save_stack+0x43/0xd0 [ 271.809516] ? kasan_kmalloc+0xc4/0xe0 [ 271.813653] ? kmem_cache_alloc_trace+0x152/0x780 [ 271.818534] ? alloc_pipe_info+0x175/0x5a0 [ 271.822892] ? splice_direct_to_actor+0x6fc/0x8f0 [ 271.827862] ? do_sendfile+0x623/0xe20 [ 271.831789] ? __x64_sys_sendfile64+0x15d/0x250 [ 271.836673] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.842226] ? find_held_lock+0x36/0x1c0 [ 271.846406] ? check_same_owner+0x340/0x340 [ 271.850754] ? rcu_is_watching+0x8c/0x150 [ 271.854956] ? rcu_note_context_switch+0x730/0x730 [ 271.859932] __should_failslab+0x124/0x180 [ 271.864199] should_failslab+0x9/0x14 [ 271.868023] __kmalloc+0x2c8/0x760 [ 271.871695] ? kmem_cache_alloc_trace+0x616/0x780 [ 271.876548] ? rcu_is_watching+0x8c/0x150 [ 271.880721] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 271.885502] ? alloc_pipe_info+0x2a8/0x5a0 [ 271.889876] alloc_pipe_info+0x2a8/0x5a0 [ 271.893985] ? pipe_read+0x940/0x940 [ 271.897733] ? ksys_dup3+0x690/0x690 [ 271.901625] ? perf_trace_lock+0xde/0x920 [ 271.905952] ? find_held_lock+0x36/0x1c0 [ 271.910075] splice_direct_to_actor+0x6fc/0x8f0 [ 271.914786] ? fsnotify+0xbb4/0x14e0 [ 271.918549] ? pipe_to_sendpage+0x400/0x400 [ 271.922960] ? do_splice_to+0x190/0x190 [ 271.927056] ? rw_verify_area+0x118/0x360 [ 271.931245] do_splice_direct+0x2d4/0x420 [ 271.935446] ? splice_direct_to_actor+0x8f0/0x8f0 [ 271.940343] ? rw_verify_area+0x118/0x360 [ 271.944532] do_sendfile+0x623/0xe20 [ 271.948514] ? do_compat_pwritev64+0x1c0/0x1c0 [ 271.953146] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 271.958712] ? _copy_from_user+0xdf/0x150 [ 271.963025] __x64_sys_sendfile64+0x15d/0x250 [ 271.967535] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 271.972154] ? do_syscall_64+0x9a/0x820 [ 271.976188] do_syscall_64+0x1b9/0x820 [ 271.980142] ? syscall_return_slowpath+0x5e0/0x5e0 [ 271.985109] ? syscall_return_slowpath+0x31d/0x5e0 [ 271.990079] ? __switch_to_asm+0x34/0x70 [ 271.994170] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 271.999559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.004647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.009877] RIP: 0033:0x457089 [ 272.013110] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.032049] RSP: 002b:00007f9657ba0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.039781] RAX: ffffffffffffffda RBX: 00007f9657ba16d4 RCX: 0000000000457089 [ 272.047156] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 272.054630] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 272.062276] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 272.069670] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000001 03:33:49 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x300, 0xd2) 03:33:50 executing program 7 (fault-call:2 fault-nth:2): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) [ 272.200932] 9pnet: Insufficient options for proto=fd 03:33:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x6) shutdown(r0, 0x1) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x2, &(0x7f0000000140)) 03:33:50 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 272.469488] FAULT_INJECTION: forcing a failure. [ 272.469488] name failslab, interval 1, probability 0, space 0, times 0 [ 272.480975] CPU: 1 PID: 17308 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 272.488018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.497394] Call Trace: [ 272.500019] dump_stack+0x1c9/0x2b4 [ 272.503689] ? dump_stack_print_info.cold.2+0x52/0x52 [ 272.508920] ? print_usage_bug+0xc0/0xc0 [ 272.513027] ? perf_trace_lock+0xde/0x920 [ 272.517216] should_fail.cold.4+0xa/0x11 [ 272.521316] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 272.526443] ? __lock_acquire+0x7fc/0x5020 [ 272.530864] ? trace_hardirqs_on+0x10/0x10 [ 272.535148] ? find_held_lock+0x36/0x1c0 [ 272.539259] ? check_same_owner+0x340/0x340 [ 272.543660] ? zap_class+0x740/0x740 [ 272.547464] ? rcu_note_context_switch+0x730/0x730 [ 272.552419] __should_failslab+0x124/0x180 [ 272.556679] should_failslab+0x9/0x14 [ 272.560643] kmem_cache_alloc_node_trace+0x26f/0x770 [ 272.565910] __kmalloc_node+0x33/0x70 [ 272.569738] kvmalloc_node+0x65/0xf0 [ 272.573494] iov_iter_get_pages_alloc+0x7da/0x1530 [ 272.578454] ? iov_iter_fault_in_readable+0x460/0x460 [ 272.583653] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 272.588355] ? is_bpf_text_address+0xd7/0x170 [ 272.592888] ? kernel_text_address+0x79/0xf0 [ 272.597332] ? __kernel_text_address+0xd/0x40 [ 272.601867] ? unwind_get_return_address+0x61/0xa0 [ 272.606959] ? __save_stack_trace+0x8d/0xf0 [ 272.611351] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 272.616408] ? iov_iter_pipe+0xc2/0x2f0 [ 272.620424] default_file_splice_read+0x1da/0xb10 [ 272.625299] ? do_splice_direct+0x2d4/0x420 [ 272.629648] ? do_sendfile+0x623/0xe20 [ 272.633660] ? __x64_sys_sendfile64+0x15d/0x250 [ 272.638436] ? do_syscall_64+0x1b9/0x820 [ 272.642697] ? iter_file_splice_write+0x1010/0x1010 [ 272.647754] ? rcu_is_watching+0x8c/0x150 [ 272.651930] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 272.656658] ? __lockdep_init_map+0x105/0x590 [ 272.661194] ? lockdep_init_map+0x9/0x10 [ 272.665305] ? __mutex_init+0x1f7/0x290 03:33:50 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000140)=""/108, 0xfffffffffffffffb}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7}, 0x7) mkdir(&(0x7f0000000440)='./file0\x00', 0x20) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r3, 0x1277) r4 = semget$private(0x0, 0x6, 0x400) semctl$SEM_INFO(r4, 0x7, 0x13, &(0x7f00000004c0)=""/205) 03:33:50 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x10000000, 0x1f6) 03:33:50 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4, 0xd2) [ 272.669313] ? rcu_pm_notify+0xc0/0xc0 [ 272.673239] ? __ia32_sys_membarrier+0x150/0x150 [ 272.678031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.683621] ? fsnotify+0xbb4/0x14e0 [ 272.687525] ? init_wait_entry+0x1c0/0x1c0 [ 272.691776] ? fsnotify_first_mark+0x350/0x350 [ 272.696386] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 272.701083] ? fsnotify+0x14e0/0x14e0 [ 272.704929] ? security_file_permission+0x1c6/0x240 [ 272.709978] ? rw_verify_area+0x118/0x360 [ 272.714162] ? iter_file_splice_write+0x1010/0x1010 03:33:50 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x0) shutdown(r0, 0xfffffffffffffffd) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400000, 0x0) accept$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r3 = dup3(r1, r0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x28}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x10b100, 0x0) [ 272.719207] do_splice_to+0x12e/0x190 [ 272.723045] splice_direct_to_actor+0x270/0x8f0 [ 272.727757] ? pipe_to_sendpage+0x400/0x400 [ 272.732132] ? do_splice_to+0x190/0x190 [ 272.736298] ? rw_verify_area+0x118/0x360 [ 272.740494] do_splice_direct+0x2d4/0x420 [ 272.744680] ? splice_direct_to_actor+0x8f0/0x8f0 [ 272.749829] ? rw_verify_area+0x118/0x360 [ 272.754013] do_sendfile+0x623/0xe20 [ 272.757782] ? do_compat_pwritev64+0x1c0/0x1c0 [ 272.762414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 03:33:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf50, 0x1f6) [ 272.768180] ? _copy_from_user+0xdf/0x150 [ 272.772368] __x64_sys_sendfile64+0x15d/0x250 [ 272.776908] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 272.781524] ? do_syscall_64+0x9a/0x820 [ 272.785538] do_syscall_64+0x1b9/0x820 [ 272.789489] ? finish_task_switch+0x1d3/0x870 [ 272.794022] ? syscall_return_slowpath+0x5e0/0x5e0 [ 272.798985] ? syscall_return_slowpath+0x31d/0x5e0 [ 272.803945] ? __switch_to_asm+0x34/0x70 [ 272.808564] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 272.814433] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.819286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.824493] RIP: 0033:0x457089 [ 272.827726] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.846669] RSP: 002b:00007f9657ba0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.854618] RAX: ffffffffffffffda RBX: 00007f9657ba16d4 RCX: 0000000000457089 [ 272.862032] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 272.869334] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 272.876759] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 272.884165] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000002 03:33:50 executing program 7 (fault-call:2 fault-nth:3): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:50 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:50 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:50 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000040)=0x4000) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7b90, 0x80000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/199) 03:33:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf6e, 0x1f6) 03:33:50 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x1000000, 0xd2) 03:33:50 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000680)='/dev/dmmidi#\x00', 0x7, 0x8005) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000005c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3400f}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000ffffffffffffff7f91f6e4f9f9512e1d779b0000000000feffff01001a010000400300000000000000000000000001"], 0x2c}}, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c0012000001000000000000652139c9dfcd37205e46b2170cf0cab30fd4264039d3dd07adc76662a982cb7d2a7a2744ec0e0276d69808377c96694fbb0296c0257f812e32cf028602c359b00db9a327e1dab91b1d33228689e55331f05b8275251a9db6be1e2683454c81ced35fd41f3d21496f778d6dcb21b6d4c13fed5dc9d120c5801b262f9fb414486fd309db0aa18f2d2610f70702fd808cd865dcb3b01b07cdabab9afbcc360ee7085beca1be186afcbf2e6f69b2fac4dfa2978598034a859ba9f298a9358e342f8c4907f939acaa7182c50662c0e859c6ccf27ac8e9699f3023abe69a7a2de63fdb7136a6e3c226948a2735bf89b771a5889e40d0a3df72d051e56da49351c20cbd05d5d5e12072ba707593e17c83d301cd233c52442fc7a2efe5809c3f79d129d8c43caab0399f43e6f652de74b52be76cc190754d5e27e3a441dffc0b1f9abcdd12935587091b36123fcbb2354379aaab82a73f34af2c4275bb588b7690859f05c04f1fbf7630e3cbef7c2fb0637cee0779e282f2058055a8271184a1507f4a6e895f07c4632a90374fee7c0f9343f7a054e2241b2d4db2455ec060f7ad19e518808ba0110d7feb1a5966faf8626931fd446dbe62ffc129fac5cb565be37f9cb45917db927dfeaa3f8ae09c4cfd29bb29e6394a80d75faaa0b10710347ca904180d3da4523c115fe501e243a6a72919cae7f95a03c24ae2e7ccb2fee452025ead9f02b700003a6be3dee412c288200ae481f58827b7cd3f5bb4dc91770d1bb4f341fba2c79989c541d02f999ea1d8e521abfc4c2f0a4b66eee9e75ca71f36741db1bb711546a1b63203774f1ce36dd23482ce3ea9c79552cc6ce92cc5cf18a08b7b6dbbfb2b2d2078fdbc04b9b424b49f6135743ecc423212f2ae5eea78579fb9e84ff6315283d4df367916e3c3cf5233b534140a50fdd70d2c1b10c94b0193cbd8e251f5193232b494e19092a0"], 0x378}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000580)='dns_resolver\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000640)='\x00', r3) [ 273.125917] FAULT_INJECTION: forcing a failure. [ 273.125917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.138217] CPU: 0 PID: 17337 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 273.145276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.154661] Call Trace: [ 273.157295] dump_stack+0x1c9/0x2b4 [ 273.160975] ? dump_stack_print_info.cold.2+0x52/0x52 [ 273.166235] should_fail.cold.4+0xa/0x11 [ 273.170469] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 273.175677] ? graph_lock+0x170/0x170 [ 273.179674] ? rcu_is_watching+0x8c/0x150 [ 273.183856] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 273.188616] ? find_held_lock+0x36/0x1c0 [ 273.192745] ? check_same_owner+0x340/0x340 [ 273.197192] ? rcu_note_context_switch+0x730/0x730 [ 273.202162] __alloc_pages_nodemask+0x36e/0xdb0 [ 273.206863] ? default_file_splice_read+0x1da/0xb10 [ 273.212036] ? do_splice_to+0x12e/0x190 [ 273.216040] ? splice_direct_to_actor+0x270/0x8f0 [ 273.220923] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 273.225971] ? rcu_pm_notify+0xc0/0xc0 [ 273.229908] ? __kmalloc_node+0x33/0x70 [ 273.233982] ? __kmalloc_node+0x33/0x70 [ 273.237975] ? rcu_read_lock_sched_held+0x108/0x120 [ 273.243029] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 273.248630] alloc_pages_current+0x10c/0x210 [ 273.253063] push_pipe+0x400/0x7a0 [ 273.256649] ? __kmalloc_node+0x47/0x70 [ 273.260667] iov_iter_get_pages_alloc+0x866/0x1530 [ 273.265657] ? iov_iter_fault_in_readable+0x460/0x460 [ 273.270869] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 273.275623] ? is_bpf_text_address+0xd7/0x170 [ 273.280178] ? kernel_text_address+0x79/0xf0 [ 273.284646] ? __kernel_text_address+0xd/0x40 [ 273.289155] ? unwind_get_return_address+0x61/0xa0 [ 273.294100] ? __save_stack_trace+0x8d/0xf0 [ 273.298484] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 273.303511] ? iov_iter_pipe+0xc2/0x2f0 [ 273.307498] default_file_splice_read+0x1da/0xb10 [ 273.312347] ? do_splice_direct+0x2d4/0x420 [ 273.316679] ? do_sendfile+0x623/0xe20 [ 273.320621] ? __x64_sys_sendfile64+0x15d/0x250 03:33:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000002c0)="b7", 0x1, 0x8000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="cb", 0x1, 0x8040, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") connect(r0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) close(r0) [ 273.325307] ? do_syscall_64+0x1b9/0x820 [ 273.329413] ? iter_file_splice_write+0x1010/0x1010 [ 273.334459] ? rcu_is_watching+0x8c/0x150 [ 273.338657] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 273.343338] ? __lockdep_init_map+0x105/0x590 [ 273.347863] ? lockdep_init_map+0x9/0x10 [ 273.351944] ? __mutex_init+0x1f7/0x290 [ 273.355938] ? rcu_pm_notify+0xc0/0xc0 [ 273.359868] ? __ia32_sys_membarrier+0x150/0x150 [ 273.364677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 273.370251] ? fsnotify+0xbb4/0x14e0 [ 273.374012] ? init_wait_entry+0x1c0/0x1c0 [ 273.378271] ? fsnotify_first_mark+0x350/0x350 [ 273.382952] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 273.387742] ? fsnotify+0x14e0/0x14e0 [ 273.391575] ? security_file_permission+0x1c6/0x240 [ 273.396808] ? rw_verify_area+0x118/0x360 [ 273.400983] ? iter_file_splice_write+0x1010/0x1010 [ 273.406096] do_splice_to+0x12e/0x190 [ 273.409909] splice_direct_to_actor+0x270/0x8f0 [ 273.414643] ? pipe_to_sendpage+0x400/0x400 [ 273.419091] ? do_splice_to+0x190/0x190 [ 273.423078] ? rw_verify_area+0x118/0x360 [ 273.427541] do_splice_direct+0x2d4/0x420 [ 273.431879] ? splice_direct_to_actor+0x8f0/0x8f0 [ 273.436835] ? rw_verify_area+0x118/0x360 [ 273.441092] do_sendfile+0x623/0xe20 [ 273.444851] ? do_compat_pwritev64+0x1c0/0x1c0 [ 273.449464] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 273.455026] ? _copy_from_user+0xdf/0x150 [ 273.459284] __x64_sys_sendfile64+0x15d/0x250 [ 273.463825] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 273.468437] ? do_syscall_64+0x9a/0x820 [ 273.472429] do_syscall_64+0x1b9/0x820 [ 273.476399] ? syscall_return_slowpath+0x5e0/0x5e0 [ 273.481411] ? syscall_return_slowpath+0x31d/0x5e0 [ 273.486371] ? __switch_to_asm+0x34/0x70 [ 273.490625] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 273.496016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 273.500877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 273.506092] RIP: 0033:0x457089 [ 273.509463] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 273.528468] RSP: 002b:00007f9657ba0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 273.536496] RAX: ffffffffffffffda RBX: 00007f9657ba16d4 RCX: 0000000000457089 [ 273.543796] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 273.551088] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 273.558363] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 273.565663] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000003 03:33:51 executing program 7 (fault-call:2 fault-nth:4): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:51 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf61, 0x1f6) 03:33:51 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x566, 0x1100082) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x181801, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000001c0)={{0x100, 0x2}, 'port1\x00', 0x12, 0x40019, 0x40, 0xcb, 0x2a07, 0x5f7, 0x2, 0x0, 0x1, 0x100}) ioctl$LOOP_CLR_FD(r0, 0x1277) mount$9p_virtio(&(0x7f0000000040)='/dev/loop#\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x440, &(0x7f0000000100)={'trans=virtio,', {[{@access_client='access=client'}, {@noextend='noextend'}, {@fscache='fscache'}, {@afid={'afid', 0x3d, 0x4}}, {@cache_none='cache=none'}, {@cache_mmap='cache=mmap'}]}}) 03:33:51 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:51 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x2000000, 0xd2) 03:33:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) listen(r0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000300)=@req={0xfff, 0x0, 0x0, 0x7}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x4080) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000100)={0x6, 0x6, 0x40, 0xffffffffffffff81, 0x480, 0x7}) accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x0) 03:33:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000100)) ioctl(r0, 0x1, &(0x7f0000000200)="0042f6c4") ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2, 0x0) [ 273.961762] FAULT_INJECTION: forcing a failure. [ 273.961762] name failslab, interval 1, probability 0, space 0, times 0 [ 273.973337] CPU: 0 PID: 17374 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 273.980393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 273.989787] Call Trace: [ 273.992425] dump_stack+0x1c9/0x2b4 [ 273.996109] ? dump_stack_print_info.cold.2+0x52/0x52 [ 274.001353] ? perf_trace_lock+0x49d/0x920 [ 274.005690] should_fail.cold.4+0xa/0x11 [ 274.010024] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 274.015275] ? rcu_note_context_switch+0x730/0x730 [ 274.020326] ? kasan_check_write+0x14/0x20 [ 274.024644] ? graph_lock+0x170/0x170 [ 274.028465] ? seq_read+0xdd/0x1540 [ 274.032481] ? find_held_lock+0x36/0x1c0 [ 274.036627] ? __lock_is_held+0xb5/0x140 [ 274.040743] ? check_same_owner+0x340/0x340 [ 274.045228] ? find_held_lock+0x36/0x1c0 [ 274.049459] ? rcu_note_context_switch+0x730/0x730 [ 274.054498] __should_failslab+0x124/0x180 [ 274.058860] should_failslab+0x9/0x14 [ 274.062710] kmem_cache_alloc_node_trace+0x26f/0x770 [ 274.067866] ? kasan_check_read+0x11/0x20 [ 274.072032] ? rcu_is_watching+0x8c/0x150 [ 274.076205] __kmalloc_node+0x33/0x70 [ 274.080028] kvmalloc_node+0x65/0xf0 [ 274.083770] traverse+0x4f8/0xaa0 [ 274.087252] ? do_splice_to+0x12e/0x190 [ 274.091245] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 274.096283] ? seq_open+0x1c0/0x1c0 [ 274.099929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.105512] seq_read+0xf28/0x1540 [ 274.109133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 274.114704] ? _copy_from_user+0xdf/0x150 [ 274.118936] ? seq_file_path+0x30/0x30 [ 274.122864] ? security_file_permission+0x1be/0x240 [ 274.127906] ? security_file_permission+0x1c6/0x240 [ 274.133042] ? rw_verify_area+0x118/0x360 [ 274.137223] do_iter_read+0x4a3/0x660 [ 274.141066] vfs_readv+0x175/0x1c0 [ 274.144649] ? compat_rw_copy_check_uvector+0x440/0x440 [ 274.150032] ? __kernel_text_address+0xd/0x40 [ 274.154553] ? unwind_get_return_address+0x61/0xa0 [ 274.159494] ? __save_stack_trace+0x8d/0xf0 [ 274.163970] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 274.169000] default_file_splice_read+0x526/0xb10 [ 274.173863] ? do_splice_direct+0x2d4/0x420 [ 274.178320] ? do_sendfile+0x623/0xe20 [ 274.182231] ? __x64_sys_sendfile64+0x15d/0x250 [ 274.186911] ? do_syscall_64+0x1b9/0x820 [ 274.190992] ? iter_file_splice_write+0x1010/0x1010 [ 274.196093] ? rcu_is_watching+0x8c/0x150 [ 274.200267] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 274.205087] ? lockdep_init_map+0x9/0x10 [ 274.209178] ? __mutex_init+0x1f7/0x290 [ 274.213326] ? rcu_pm_notify+0xc0/0xc0 [ 274.217242] ? __ia32_sys_membarrier+0x150/0x150 [ 274.222016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.227675] ? fsnotify+0xbb4/0x14e0 [ 274.231439] ? fsnotify_first_mark+0x350/0x350 [ 274.236051] ? fsnotify+0x14e0/0x14e0 [ 274.239917] ? security_file_permission+0x1c6/0x240 [ 274.244966] ? rw_verify_area+0x118/0x360 [ 274.249142] ? iter_file_splice_write+0x1010/0x1010 [ 274.254253] do_splice_to+0x12e/0x190 [ 274.258192] splice_direct_to_actor+0x270/0x8f0 [ 274.262884] ? pipe_to_sendpage+0x400/0x400 [ 274.267224] ? do_splice_to+0x190/0x190 [ 274.271286] ? rw_verify_area+0x118/0x360 [ 274.275447] do_splice_direct+0x2d4/0x420 [ 274.279758] ? splice_direct_to_actor+0x8f0/0x8f0 [ 274.284665] ? rw_verify_area+0x118/0x360 [ 274.288846] do_sendfile+0x623/0xe20 [ 274.292618] ? do_compat_pwritev64+0x1c0/0x1c0 [ 274.297232] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 274.302793] ? _copy_from_user+0xdf/0x150 [ 274.306974] __x64_sys_sendfile64+0x15d/0x250 [ 274.311492] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 274.316214] ? do_syscall_64+0x9a/0x820 [ 274.320298] do_syscall_64+0x1b9/0x820 [ 274.324208] ? finish_task_switch+0x1d3/0x870 [ 274.328889] ? syscall_return_slowpath+0x5e0/0x5e0 [ 274.333865] ? syscall_return_slowpath+0x31d/0x5e0 [ 274.338830] ? __switch_to_asm+0x34/0x70 [ 274.342951] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 274.348416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.353272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 274.358482] RIP: 0033:0x457089 [ 274.361686] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 274.380852] RSP: 002b:00007f9657ba0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.388629] RAX: ffffffffffffffda RBX: 00007f9657ba16d4 RCX: 0000000000457089 [ 274.395932] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 274.403351] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:33:52 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:52 executing program 7 (fault-call:2 fault-nth:5): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) [ 274.410656] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 274.417932] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000004 03:33:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x9, 0x1f6) 03:33:52 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2080, 0x0) fchmod(r0, 0x82) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r1, 0x1277) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1ff, 0x200000) write$P9_RLINK(r2, &(0x7f0000000140)={0x7, 0x47, 0x2}, 0x7) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) 03:33:52 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x6000000, 0xd2) 03:33:52 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:52 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000200), 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)="6173796d6d65747269630000f623c165dbdd5da4e516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a0af0a703d63e19620fd165b5d862cf735059c401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf69038c96c9d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bb566c069d5baa64e30af6d878c", &(0x7f0000000000), &(0x7f0000000040)="3080", 0x2, r0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x181000) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) [ 274.671199] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 3304473088 > max in inode 16528 [ 274.683202] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 3304473088 > max in inode 16528 03:33:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") syz_emit_ethernet(0x66, &(0x7f0000000040)={@broadcast, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0xffffff88, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @dev}}}}}}}}, &(0x7f00000016c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0xff, 0x6, 0x401, 0xf23, 0x1ff, 0xfdb}) [ 274.742139] FAULT_INJECTION: forcing a failure. [ 274.742139] name failslab, interval 1, probability 0, space 0, times 0 [ 274.753500] CPU: 0 PID: 17406 Comm: syz-executor7 Not tainted 4.18.0+ #190 [ 274.760551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.770153] Call Trace: [ 274.772791] dump_stack+0x1c9/0x2b4 [ 274.776478] ? dump_stack_print_info.cold.2+0x52/0x52 [ 274.781720] ? perf_trace_lock+0x49d/0x920 [ 274.786019] should_fail.cold.4+0xa/0x11 03:33:52 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 274.790138] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 274.795287] ? rcu_note_context_switch+0x730/0x730 [ 274.800286] ? kasan_check_write+0x14/0x20 [ 274.804579] ? graph_lock+0x170/0x170 [ 274.808920] ? seq_read+0xdd/0x1540 [ 274.812662] ? find_held_lock+0x36/0x1c0 [ 274.816792] ? __lock_is_held+0xb5/0x140 [ 274.820933] ? check_same_owner+0x340/0x340 [ 274.825445] ? find_held_lock+0x36/0x1c0 [ 274.829684] ? rcu_note_context_switch+0x730/0x730 [ 274.834677] __should_failslab+0x124/0x180 [ 274.838949] should_failslab+0x9/0x14 [ 274.842950] kmem_cache_alloc_node_trace+0x26f/0x770 [ 274.848230] ? kasan_check_read+0x11/0x20 [ 274.852404] ? rcu_is_watching+0x8c/0x150 [ 274.856621] __kmalloc_node+0x33/0x70 [ 274.860445] kvmalloc_node+0x65/0xf0 [ 274.864179] traverse+0x4f8/0xaa0 [ 274.867658] ? do_splice_to+0x12e/0x190 [ 274.871669] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 274.877022] ? seq_open+0x1c0/0x1c0 [ 274.880834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 274.886445] seq_read+0xf28/0x1540 [ 274.890067] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 274.895824] ? _copy_from_user+0xdf/0x150 [ 274.900004] ? seq_file_path+0x30/0x30 [ 274.903932] ? security_file_permission+0x1be/0x240 [ 274.908982] ? security_file_permission+0x1c6/0x240 [ 274.914496] ? rw_verify_area+0x118/0x360 [ 274.918749] do_iter_read+0x4a3/0x660 [ 274.922617] vfs_readv+0x175/0x1c0 [ 274.926195] ? compat_rw_copy_check_uvector+0x440/0x440 [ 274.931581] ? __kernel_text_address+0xd/0x40 [ 274.936137] ? unwind_get_return_address+0x61/0xa0 [ 274.941182] ? __save_stack_trace+0x8d/0xf0 [ 274.945554] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 274.950665] default_file_splice_read+0x526/0xb10 [ 274.955519] ? do_splice_direct+0x2d4/0x420 [ 274.959962] ? do_sendfile+0x623/0xe20 [ 274.963870] ? __x64_sys_sendfile64+0x15d/0x250 [ 274.968577] ? do_syscall_64+0x1b9/0x820 [ 274.972819] ? iter_file_splice_write+0x1010/0x1010 [ 274.978000] ? rcu_is_watching+0x8c/0x150 [ 274.982196] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 274.986918] ? lockdep_init_map+0x9/0x10 [ 274.991003] ? __mutex_init+0x1f7/0x290 [ 274.995081] ? rcu_pm_notify+0xc0/0xc0 [ 274.998980] ? __ia32_sys_membarrier+0x150/0x150 [ 275.003748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 275.009308] ? fsnotify+0xbb4/0x14e0 [ 275.013042] ? fsnotify_first_mark+0x350/0x350 [ 275.017663] ? fsnotify+0x14e0/0x14e0 [ 275.021613] ? security_file_permission+0x1c6/0x240 [ 275.026869] ? rw_verify_area+0x118/0x360 [ 275.031043] ? iter_file_splice_write+0x1010/0x1010 [ 275.036070] do_splice_to+0x12e/0x190 [ 275.039902] splice_direct_to_actor+0x270/0x8f0 [ 275.044632] ? pipe_to_sendpage+0x400/0x400 [ 275.048975] ? do_splice_to+0x190/0x190 [ 275.053124] ? rw_verify_area+0x118/0x360 [ 275.057426] do_splice_direct+0x2d4/0x420 [ 275.061737] ? splice_direct_to_actor+0x8f0/0x8f0 [ 275.066690] ? rw_verify_area+0x118/0x360 [ 275.070877] do_sendfile+0x623/0xe20 [ 275.074646] ? do_compat_pwritev64+0x1c0/0x1c0 [ 275.079262] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 275.084946] ? _copy_from_user+0xdf/0x150 [ 275.089123] __x64_sys_sendfile64+0x15d/0x250 [ 275.093744] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 275.098363] ? do_syscall_64+0x9a/0x820 [ 275.102359] do_syscall_64+0x1b9/0x820 [ 275.106257] ? finish_task_switch+0x1d3/0x870 [ 275.110867] ? syscall_return_slowpath+0x5e0/0x5e0 [ 275.115841] ? syscall_return_slowpath+0x31d/0x5e0 [ 275.120817] ? __switch_to_asm+0x34/0x70 [ 275.124921] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 275.130322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.135181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.140391] RIP: 0033:0x457089 [ 275.143705] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.162656] RSP: 002b:00007f9657ba0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 275.170482] RAX: ffffffffffffffda RBX: 00007f9657ba16d4 RCX: 0000000000457089 [ 275.177761] RDX: 0000000020000040 RSI: 0000000000000004 RDI: 0000000000000003 [ 275.185055] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:33:53 executing program 7 (fault-call:2 fault-nth:6): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) [ 275.192334] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000005 [ 275.199644] R13: 00000000004d3cb0 R14: 00000000004c8769 R15: 0000000000000005 03:33:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffb, 0x8200) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:53 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x10000000, 0xd2) 03:33:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x10, 0x1f6) 03:33:53 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:53 executing program 3: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x108) 03:33:53 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/ppp\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000c00)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000c40)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000b80)=0x3ff, r1, 0x0, 0x0, 0x1}}, 0x20) socketpair$inet6(0xa, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xa98) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="45964a5c4f0f00fe000030492a768b88b40eda954797623745e004"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x5, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f0000000200)='GPL\x00', 0x80000001, 0x249, &(0x7f0000000300)=""/187, 0x0, 0x0, [], 0x0, 0xa}, 0x48) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x7) ioctl$KDSETMODE(r3, 0x4004556b, 0x0) 03:33:53 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) 03:33:53 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:33:53 executing program 3: keyctl$search(0xc, 0x0, &(0x7f0000000140)='id_legacy\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, 0x0) r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/157) 03:33:53 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x700, 0xd2) 03:33:53 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xa, 0x1f6) 03:33:53 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:53 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x10000000, 0xd2) 03:33:53 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x2) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) clock_nanosleep(0x7, 0x1, &(0x7f0000000000), &(0x7f0000000040)) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x1277) 03:33:53 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7, 0xd2) 03:33:53 executing program 3: unshare(0x8000400) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) socketpair(0x2, 0x1, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$netlink(r0, &(0x7f0000000200), &(0x7f0000000240)=0xc) 03:33:53 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf59, 0x1f6) 03:33:53 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x22001) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'rose0\x00', r2}) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000140)=@dstopts={0x87}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x200000000000004a, &(0x7f0000000140)}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 03:33:53 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000002, 0xd2) [ 276.155418] 9pnet: Insufficient options for proto=fd 03:33:54 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:54 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x300000000000000, 0xd2) 03:33:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x4, 0x408800) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x9, 0x100) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf7f, 0x1f6) 03:33:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8006) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x3, 0x1, 0x101}) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0xf96d) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) fallocate(r1, 0x3, 0x7ffe, 0x8001) fallocate(r1, 0x3, 0x5e89, 0xfff9) 03:33:54 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:54 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000003, 0xd2) [ 276.433340] 9pnet: Insufficient options for proto=fd 03:33:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x5, 0x20004) ioctl$LOOP_CLR_FD(r0, 0x1277) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'rdma'}, {0x2d, 'io'}, {0x2d, 'cpu'}, {0x2d, 'io'}, {0x2f, 'pids'}]}, 0x19) 03:33:54 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x5000000, 0xd2) 03:33:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf9a, 0x1f6) 03:33:54 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x17c}], 0x1, &(0x7f0000001240)}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d8020000fffffffff0000000f0000000d8010000ffffffffffffffffc8020000c8020000c8020000ffffffff04000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000007f00000100000000000000007665746830000000000000000000000067726530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000007f000001ffffffff00000000000000006c6f0000000000000000000000000000626f6e64300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x338) r1 = socket(0x0, 0x80000, 0xa1) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'bond0\x00'}}) 03:33:54 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000180)={0x8001}, 0x8) r1 = timerfd_create(0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{}, {0x0, 0x5}}, &(0x7f0000002000)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/8, 0x8}, {&(0x7f0000000080)=""/5, 0x5}], 0x2) 03:33:54 executing program 6: io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(0x0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)}]) 03:33:54 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000005, 0xd2) 03:33:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_CLR_FD(r0, 0x1277) [ 276.708465] 9pnet: Insufficient options for proto=fd 03:33:54 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0xd2) 03:33:54 executing program 0: r0 = open(&(0x7f0000000240)='./file0\x00', 0x200080, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x4cf8, 0x100, 0x24c, 0x223d, 0x4}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x6c83}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x800, @empty, 0x3}, @in6={0xa, 0x4e20, 0x81, @mcast2, 0x6}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x80000001}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @remote}], 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000004c0)={@loopback, 0x800, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x6, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=@random={'security.', "c600"}, &(0x7f00000002c0)="936c6f00", 0x4, 0x1) 03:33:54 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xe0, 0x12000) getsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r2 = socket(0xa, 0x805, 0x0) getsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0xffffffffffffffd1) connect$netlink(r2, &(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000ac0)={0x14, 0x27, 0xffffffffffffffff, 0x0, 0x0, {0x10}}, 0x32a}}, 0x0) 03:33:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfac, 0x1f6) 03:33:54 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:54 executing program 6: io_setup(0x0, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:54 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000300, 0xd2) 03:33:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f00000000c0)=0x1c) 03:33:54 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x500, 0xd2) 03:33:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10, 0x0, 0x0, 0x800000000000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f40aa2867d5e070d279d8f62554d87bd883c341bf83225c087f323ac0e5f146840824ab51be884ba4f2d900fb7fe0bab315d339918d14bd7b64113739f2ea9cbc6a9b55da9359e621cc40aefecb41cce2155359e87e1aeb1029bf79c268b7dde94d70f8dfc13b10bbaa"], 0xffffffffffffff6a}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x80, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 277.025870] 9pnet: Insufficient options for proto=fd 03:33:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf8e, 0x1f6) 03:33:54 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200000000002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000000c0)=0x1000, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x3) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x8000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 03:33:54 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:54 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:55 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000600, 0xd2) 03:33:55 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xa00, 0xd2) 03:33:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7ffc, 0x1100082) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080)) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:55 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r0, 0x894c, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000)=0x20, 0x4) [ 277.341313] 9pnet: Insufficient options for proto=fd 03:33:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x4255b) r1 = getpgid(0x0) r2 = getpgrp(0xffffffffffffffff) tgkill(r1, r2, 0x2d) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x20800, 0x0) 03:33:55 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf000, 0x1f6) 03:33:55 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:55 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x6, 0xd2) 03:33:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:55 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000500, 0xd2) 03:33:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x8004552d, &(0x7f0000000040)) [ 277.706280] 9pnet: Insufficient options for proto=fd 03:33:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x40000000000000, 0x1100082) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x210000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r2, 0xe}, 0x8) ioctl$LOOP_CLR_FD(r0, 0x1277) 03:33:55 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x5e, 0xd2) 03:33:55 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0xa00, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:55 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x10001, 0x100000001, 0x3, 0x51c7360f, 0x3, 0x3, 0xdbe, 0x363, 0x38, 0x200, 0x4, 0x202d, 0x20, 0x1, 0x6, 0xfffffffffffffffa, 0x3}, [{0x2, 0x6, 0x2, 0x2, 0x0, 0x2d, 0x1, 0x1}], "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", [[], [], [], []]}, 0x1458) r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x2, 0x100) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0x2, 0x20, 0x40, 0x3, 0x3, 0x7ff, 0x6}) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 03:33:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfd5, 0x1f6) 03:33:55 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x500000000000000, 0xd2) 03:33:55 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}]}}) [ 277.786184] XFS (loop3): Invalid superblock magic number 03:33:55 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000640)}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x7f}, 0x4) write$binfmt_elf64(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x78) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x40, 0x204000) ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000080)={0x10001, 0x6000}) [ 277.853059] XFS (loop3): Invalid superblock magic number 03:33:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') getdents(r1, &(0x7f0000000080)=""/16, 0x10) 03:33:55 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0xd2) 03:33:55 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x59804, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020200000000000000000b3000000000000b300faffffffffffffff000000000000000000000000000000000000000000000001000001010000010008f2683983", 0x82, 0x8000}], 0x0, &(0x7f0000011100)) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x401, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)) 03:33:55 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:55 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffffff00000000, 0xd2) 03:33:55 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}]}}) 03:33:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfda, 0x1f6) 03:33:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)='bpf\x00', 0x100000, &(0x7f0000000480)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x2001001, &(0x7f0000001900)=ANY=[]) mount$bpf(0x20000000, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001a00)='bpf\x00', 0x2001001, &(0x7f0000000580)=ANY=[]) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f00000000c0)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='bpf\x00', 0x0, &(0x7f0000000b00)=ANY=[]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[]) mount$bpf(0x20000000, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="d604e4bfd7f9b10a57200f208f552e90555b78c1e1c3767b9e909b0e3c29f83b6041f611d2af7789d84293b906c10c2e5ea79ea2ac89"]) r0 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @broadcast}, 0x1}, @in={0x2, 0x4e24, @remote}], 0x3c) mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x5890, &(0x7f0000000480)) 03:33:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CLR_FD(r0, 0x1277) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x400) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x80000000000002}, 0x354) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1}, 0x8) 03:33:56 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000006, 0xd2) 03:33:56 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x700000000000000, 0xd2) 03:33:56 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:56 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@version_L='version=9p2000.L'}]}}) 03:33:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfa3, 0x1f6) 03:33:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7, 0x7ff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x20000000000000}, 0x2c) [ 278.472915] ISOFS: Bad logical zone size 33593 03:33:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffbbfffffff, 0x6, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f00000002c0)="9b247f9c1793", &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000480)}) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="70b97e2951ca54c1ec2a36939393887f90ac57f3332f96b28d97983970598750eae19955769652bff757b12de289b8f3e1d43b59bf", @ANYRES64=r0], 0x59) read(r0, &(0x7f0000000380)=""/42, 0xf0) [ 278.581515] ISOFS: Bad logical zone size 33593 03:33:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000002f000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000000)="0f060f3802690066b825018ec0b9800000c00f3235010000000f300f01c8660f38813d000000000f21e2b9430900000f320fc76a5cc744240000100000c74424020c000000c7442406000000000f011c24", 0x51}], 0x1, 0x20, &(0x7f00000002c0), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000200)={0x6, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) semget$private(0x0, 0x5, 0x10) 03:33:56 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000007, 0xd2) 03:33:56 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x80ffff00000000, 0xd2) 03:33:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) syncfs(r1) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x4) 03:33:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$packet(0x11, 0x3, 0x300) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x8100, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000003c0)) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0xa, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x7, &(0x7f0000000280)={0x0, 0x11, 0x1, @thr={&(0x7f0000000180)="b2a49304e2cc64a7f7e7d11ae798ea7894728d0e28768368006d392e6ba234f7cf78e423b6df643c49c3456699c6696d6fd82ccf8ec64ee683cf7b76fb44c042e74940d5deb3ea61038f2ffb6d7f281d3aebcff964d25e6d1c4e9e177b19a479372a4e8815da3687c96bec6b03375366c72472c630b6400a104a2f744d6233b4", &(0x7f0000000200)="9174cdd706a8e5785f2e65788418d4c2d00759db3776578b84e569a4c47a836482aebc65c35301a3be1d08bd1e765c471105b627a434f107d05ca3b22dbf856d49017eaaef46ebb6b657a535a98fa7242fb527fbd12d3854dbed7c4764e962fb8522a619523e56cd5f724d2b7a1c94c4b683b9246d9a556bd2f73d2171"}}, &(0x7f00000002c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xeca7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r4, 0x400}, &(0x7f0000000140)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 03:33:56 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:56 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@access_user='access=user'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf85, 0x1f6) 03:33:56 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000004, 0xd2) 03:33:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000240)={0x100000000, 0x81, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)) r1 = gettid() r2 = openat$dsp(0xffffffffffffff9c, &(0x7f000000b540)='/dev/dsp\x00', 0x400000002, 0x0) write$binfmt_elf32(r2, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0xfffffff7) r3 = getpid() sched_setattr(r3, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) fcntl$setstatus(r2, 0x4, 0x800) ioctl$int_in(r2, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18}, 0x18) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ftruncate(r0, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:33:56 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000000000000, 0xd2) 03:33:56 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000010, 0xd2) 03:33:57 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:57 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xf5d, 0x1f6) 03:33:57 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x400000000000000, 0xd2) 03:33:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f00000000c0)=@fragment={0x3c, 0x0, 0x7ff, 0x8, 0x0, 0x7, 0x65}, 0x8) io_setup(0x8, &(0x7f0000000100)=0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000200)=0x678, &(0x7f0000000240)=0x4) io_getevents(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000001c0)) close(r1) socket$inet(0x2, 0x8000a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r3, 0x335, &(0x7f0000000600)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2) 03:33:57 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x1, 0x8c}}, 0x28) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x800, 0x0) accept4$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c, 0x80800) r3 = dup(r0) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000080)={0x5, 0x241, 0x7ff, 0x8, 0x7f}) 03:33:57 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x700d200, 0xd2) 03:33:57 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0xffffff7f, 0xd2) 03:33:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="5e12000100000000ff010000000000000000000000000001ff0100000000ecffffff000000000001000000000000000000070000000000000002000000000000000000000000000100000000000000000007000000000000fff50000000000000000000000000001ff010000000000001e00000000000001ff090000000000000000000000000001ff0100000000000000000000000000012fdfd801eee5a6c92bc740f1bd580d22d72719be30f04eab578f"], 0x98) ioctl(r1, 0x8, &(0x7f0000000040)="4232559f5d63c694d10db791b90afb0663d6187dfab0f760657175223965dbc5e95e96a6953d71c32e9ff549ce2dc9bfbbafa7357dcb17792992bfe07fe318d00d3d2a233ee3e2dfd5c462e463e79822e43515b91213c09586f0fa082bb9a5869a422e632fe7eb986e82d0ef7a90b6b73d1e7368daeda889b11f8b2ea460eb245d0bbd9bef0c7069e9ee0d83bf6c0f7ac7a13a37cef0d1") bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)}, 0x10) 03:33:57 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:57 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0xfb4, 0x1f6) 03:33:57 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x70000d2, 0xd2) 03:33:57 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:57 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x4000000, 0xd2) 03:33:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff7fffffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000008bc0)=[{{&(0x7f0000004600)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005700)="f5a7a7d6", 0x4}], 0x1}}], 0x1, 0x0) 03:33:57 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:57 executing program 5: ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:33:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x91) 03:33:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14, 0x13, 0x1, {0x80, 0x1}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c, 0x0, 0xc0010015, 0x80ffff]}) 03:33:57 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0x7ffff000) 03:33:57 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x700000a, 0xd2) 03:33:57 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 280.140183] hfsplus: invalid session number or type of track [ 280.146264] hfsplus: unable to find HFS+ superblock 03:33:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x142) 03:33:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000002) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x40) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000140)={0x3, 0x3f}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) [ 280.202690] kvm [17967]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x80feb7 03:33:58 executing program 4 (fault-call:7 fault-nth:0): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:58 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f00000000c0)='ubifs\x00', 0x1003, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) [ 280.262655] kvm [17967]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x80feb7 03:33:58 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000700, 0xd2) 03:33:58 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xffff8801d8ecd0d2) 03:33:58 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) lseek(r0, 0x0, 0x3) setsockopt(r0, 0x2000000000010d, 0x4000800000000b, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x40880, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40200, 0x0) getsockname$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8) r3 = fcntl$getown(r1, 0x9) fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x9, r3}) [ 280.408241] FAULT_INJECTION: forcing a failure. [ 280.408241] name failslab, interval 1, probability 0, space 0, times 0 [ 280.419681] CPU: 1 PID: 17990 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 280.426855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.436329] Call Trace: [ 280.438980] dump_stack+0x1c9/0x2b4 [ 280.442663] ? dump_stack_print_info.cold.2+0x52/0x52 [ 280.448046] should_fail.cold.4+0xa/0x11 [ 280.452400] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:33:58 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 280.457569] ? lock_downgrade+0x8f0/0x8f0 [ 280.461802] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.467392] ? proc_fail_nth_write+0x9e/0x210 [ 280.471945] ? find_held_lock+0x36/0x1c0 [ 280.476066] ? check_same_owner+0x340/0x340 [ 280.480496] ? __lock_is_held+0xb5/0x140 [ 280.484633] ? rcu_note_context_switch+0x730/0x730 [ 280.489622] __should_failslab+0x124/0x180 [ 280.494054] should_failslab+0x9/0x14 [ 280.497883] __kmalloc_track_caller+0x2c4/0x760 [ 280.502586] ? strncpy_from_user+0x510/0x510 [ 280.507069] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.512798] ? strndup_user+0x77/0xd0 [ 280.516673] memdup_user+0x2c/0xa0 [ 280.520379] strndup_user+0x77/0xd0 [ 280.524067] ksys_mount+0x3c/0x140 [ 280.527680] __x64_sys_mount+0xbe/0x150 [ 280.531692] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 280.536758] do_syscall_64+0x1b9/0x820 [ 280.540681] ? finish_task_switch+0x1d3/0x870 [ 280.545355] ? syscall_return_slowpath+0x5e0/0x5e0 [ 280.550310] ? syscall_return_slowpath+0x31d/0x5e0 [ 280.555423] ? __switch_to_asm+0x34/0x70 [ 280.559510] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 280.564904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.569888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.575095] RIP: 0033:0x457089 [ 280.578315] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.597238] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:33:58 executing program 4 (fault-call:7 fault-nth:1): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 280.605047] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 280.612348] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 280.619663] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 280.627557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 280.634912] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000000 03:33:58 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000a00, 0xd2) 03:33:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1e2) 03:33:58 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 280.871283] FAULT_INJECTION: forcing a failure. [ 280.871283] name failslab, interval 1, probability 0, space 0, times 0 [ 280.885171] CPU: 0 PID: 18020 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 280.892232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.901634] Call Trace: [ 280.905244] dump_stack+0x1c9/0x2b4 [ 280.908902] ? dump_stack_print_info.cold.2+0x52/0x52 [ 280.915016] ? __kernel_text_address+0xd/0x40 [ 280.919536] ? unwind_get_return_address+0x61/0xa0 [ 280.924495] should_fail.cold.4+0xa/0x11 [ 280.928583] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 280.933784] ? save_stack+0xa9/0xd0 [ 280.937438] ? kasan_kmalloc+0xc4/0xe0 [ 280.941352] ? __kmalloc_track_caller+0x14a/0x760 [ 280.946213] ? memdup_user+0x2c/0xa0 [ 280.949945] ? strndup_user+0x77/0xd0 [ 280.953774] ? graph_lock+0x170/0x170 [ 280.957634] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.963331] ? proc_fail_nth_write+0x9e/0x210 [ 280.968031] ? find_held_lock+0x36/0x1c0 [ 280.972209] ? check_same_owner+0x340/0x340 [ 280.976562] ? lock_release+0xa30/0xa30 [ 280.980620] ? check_same_owner+0x340/0x340 [ 280.985059] ? rcu_note_context_switch+0x730/0x730 [ 280.990025] ? __check_object_size+0x9d/0x5f2 [ 280.994549] __should_failslab+0x124/0x180 [ 280.998814] should_failslab+0x9/0x14 [ 281.002677] kmem_cache_alloc_trace+0x2cb/0x780 [ 281.007496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.013065] ? _copy_from_user+0xdf/0x150 [ 281.017463] copy_mount_options+0x5f/0x380 [ 281.021954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.027747] ksys_mount+0xd0/0x140 [ 281.031560] __x64_sys_mount+0xbe/0x150 [ 281.035623] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 281.040698] do_syscall_64+0x1b9/0x820 [ 281.044653] ? syscall_return_slowpath+0x5e0/0x5e0 [ 281.049844] ? syscall_return_slowpath+0x31d/0x5e0 [ 281.054894] ? __switch_to_asm+0x34/0x70 [ 281.059070] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 281.064577] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.069484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.074692] RIP: 0033:0x457089 [ 281.077998] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.097449] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.105270] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 281.112664] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:33:58 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) mmap$xdp(&(0x7f000099c000/0x3000)=nil, 0x3000, 0x0, 0x8010, r1, 0x180000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) r5 = shmget$private(0x0, 0x2000, 0x60, &(0x7f00007bc000/0x2000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000340)=""/199) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="6fcd2d0a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x24) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) tee(r3, r1, 0x8, 0x0) 03:33:58 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0xe1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000afffe160d9c286eaa45e83d9a5f7f0020001b403417d88", @ANYRES32=r3, @ANYBLOB="08000100ac141400"], 0x20}}, 0x0) 03:33:58 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0x5e) 03:33:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)="2e2f6367726f7570000af4768ea2f63959c67dd2981fb7bb04e1768eed1bf56d68ef51981e32571fda5cc7b02e05535c52f4476ab1747dbf8aea298514faca81fa533d463b3b4870495e75a8a605fa00997204f15bcf493962fb5ff6fbfda1a7d6467957c2401a74fb42938e0570a800ac507c04e03df2a29d27bf2d93ddf47ca4f46d6da51a581fea5d73656475a85cc3cff74ad289df861a2b47a26add859b959092d6df3e493b3c4f9d459052f7a4c256017bc4adb7e5d9fd51202a7a724a9bb32ae50f19eeb9b5df7c05ba23264d490c81830a2d58ba81d68a3100b06717f52f", 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)}}, 0x38) 03:33:58 executing program 4 (fault-call:7 fault-nth:2): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 281.119951] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 281.127405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 281.134698] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000001 03:33:59 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0x7ffff000) [ 281.443472] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 281.478875] FAULT_INJECTION: forcing a failure. [ 281.478875] name failslab, interval 1, probability 0, space 0, times 0 [ 281.490208] CPU: 0 PID: 18046 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 281.497254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.506654] Call Trace: [ 281.509278] dump_stack+0x1c9/0x2b4 [ 281.512953] ? dump_stack_print_info.cold.2+0x52/0x52 [ 281.518192] should_fail.cold.4+0xa/0x11 [ 281.522291] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 281.527432] ? lock_downgrade+0x8f0/0x8f0 [ 281.531626] ? kasan_check_read+0x11/0x20 [ 281.535817] ? rcu_is_watching+0x8c/0x150 03:33:59 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000000c0)) r2 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) sendfile(r0, r1, &(0x7f0000000040), 0xd2) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x8, 0x40000) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080)) 03:33:59 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x0, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:33:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x5c, 0x8, 0x9, 0x7, 0x9, 0x6e}, 0xffffffff}, 0xa) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bridge_slave_0\x00', {0x2, 0x4e20, @broadcast}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:33:59 executing program 3: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x160fc, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00000003c0)={0x9f92, 0x1, 0x1, 0x0, 0x0, [], [], [], 0xfffffffffffffff9, 0x10000000000005}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) ioctl$VHOST_SET_VRING_KICK(r3, 0x800448d2, &(0x7f0000000040)) [ 281.540036] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 281.544720] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 281.549409] ? find_held_lock+0x36/0x1c0 [ 281.553518] ? check_same_owner+0x340/0x340 [ 281.557864] ? rcu_note_context_switch+0x730/0x730 [ 281.562810] ? save_stack+0xa9/0xd0 [ 281.566462] __should_failslab+0x124/0x180 [ 281.570720] should_failslab+0x9/0x14 [ 281.574533] kmem_cache_alloc+0x2af/0x760 [ 281.578702] getname_flags+0xd0/0x5a0 [ 281.582541] user_path_at_empty+0x2d/0x50 [ 281.586715] do_mount+0x17a/0x30e0 [ 281.590249] ? retint_kernel+0x10/0x10 [ 281.594135] ? copy_mount_string+0x40/0x40 [ 281.598388] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 281.603176] ? retint_kernel+0x10/0x10 [ 281.607092] ? copy_mount_options+0x1e3/0x380 [ 281.611598] ? write_comp_data+0x22/0x70 [ 281.615661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.621195] ? copy_mount_options+0x285/0x380 [ 281.625692] ksys_mount+0x12d/0x140 [ 281.629318] __x64_sys_mount+0xbe/0x150 [ 281.633294] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 281.638306] do_syscall_64+0x1b9/0x820 [ 281.642209] ? syscall_return_slowpath+0x5e0/0x5e0 [ 281.647129] ? syscall_return_slowpath+0x31d/0x5e0 [ 281.652062] ? __switch_to_asm+0x34/0x70 [ 281.656128] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 281.661489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.666338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.671531] RIP: 0033:0x457089 [ 281.674724] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:33:59 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x14}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000400)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000540)={r4, @local, @remote}, 0xc) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) r5 = dup2(r1, r0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) 03:33:59 executing program 4 (fault-call:7 fault-nth:3): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:33:59 executing program 0: syslog(0xe, &(0x7f0000000300)=""/157, 0x9d) keyctl$session_to_parent(0x12) [ 281.693625] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 281.701336] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 281.708679] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 281.715954] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 281.723248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 281.730519] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000002 [ 282.079549] FAULT_INJECTION: forcing a failure. [ 282.079549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.091557] CPU: 0 PID: 18079 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 282.098716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.108271] Call Trace: [ 282.110899] dump_stack+0x1c9/0x2b4 [ 282.114571] ? dump_stack_print_info.cold.2+0x52/0x52 [ 282.119868] should_fail.cold.4+0xa/0x11 [ 282.124154] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:33:59 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000100)={@dev}, &(0x7f0000000200)=0x14) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000080)={0x7, 0x80, 0x2, 0x20}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r3, &(0x7f0000000040), 0xd2) 03:33:59 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xffff8801b784a0d2) [ 282.129484] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 282.134370] ? lock_downgrade+0x8f0/0x8f0 [ 282.138706] ? trace_hardirqs_on+0x10/0x10 [ 282.142995] ? graph_lock+0x170/0x170 [ 282.146841] ? print_usage_bug+0xc0/0xc0 [ 282.151046] ? find_held_lock+0x36/0x1c0 [ 282.155182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.160765] ? should_fail+0x246/0xd86 [ 282.164985] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.170260] __alloc_pages_nodemask+0x36e/0xdb0 [ 282.174969] ? kasan_check_read+0x11/0x20 [ 282.179164] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 282.184832] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 282.189929] ? find_held_lock+0x36/0x1c0 [ 282.194125] ? check_same_owner+0x340/0x340 [ 282.198674] cache_grow_begin+0x91/0x710 [ 282.203276] kmem_cache_alloc+0x689/0x760 [ 282.208007] getname_flags+0xd0/0x5a0 [ 282.212001] user_path_at_empty+0x2d/0x50 [ 282.216462] do_mount+0x17a/0x30e0 [ 282.220022] ? copy_mount_string+0x40/0x40 [ 282.224434] ? rcu_pm_notify+0xc0/0xc0 [ 282.228340] ? copy_mount_options+0x5f/0x380 [ 282.232765] ? rcu_read_lock_sched_held+0x108/0x120 [ 282.238012] ? kmem_cache_alloc_trace+0x616/0x780 [ 282.243230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 282.248879] ? _copy_from_user+0xdf/0x150 [ 282.253352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.259223] ? copy_mount_options+0x285/0x380 [ 282.263738] ksys_mount+0x12d/0x140 [ 282.267387] __x64_sys_mount+0xbe/0x150 [ 282.271541] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 282.276724] do_syscall_64+0x1b9/0x820 [ 282.280664] ? finish_task_switch+0x1d3/0x870 [ 282.285675] ? syscall_return_slowpath+0x5e0/0x5e0 [ 282.290889] ? syscall_return_slowpath+0x31d/0x5e0 [ 282.296075] ? __switch_to_asm+0x34/0x70 [ 282.300310] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 282.305806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.310699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 282.316129] RIP: 0033:0x457089 [ 282.319357] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.338442] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 282.346186] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 282.353634] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 282.361158] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 282.368669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:34:00 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:00 executing program 5: r0 = memfd_create(&(0x7f0000000000)='vmnet0wlan0selfuser\x00', 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x433}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB="c80000002eb556769ecae252d23c11c1b69bcacec0492d8cd66d0e7323294c2498dbbe2aad52144a787bb9b4240b1524880010f5cc8b85004267bf48632854ec9cf2c84dd8421bf693e00f153795f304315756d641a62b667a37033b04be660065640bad1625010089ff97ac7ca81ba191234162c25936e39b2df247a235ace09e4e8c45a8d3971466941b0448e5f1e9cb21e2ea566557c054e077542550b9de79aa70b01494843782853835126d2e3728acaf4d670855b762f1bd80a6d22b7926"], &(0x7f0000000240)=0xd0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x7a5, 0x6}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = fcntl$dupfd(r2, 0x1, r2) pipe(&(0x7f0000000400)) r4 = fcntl$dupfd(r2, 0x406, r3) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, {0x8000, 0x0, 0x40000000000, 0x0, 0x1, 0x6}, 0x100000001}, 0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x2, @empty, 0x1447}}, 0x6, 0x6, 0x9, 0x81, 0x20}, &(0x7f0000000340)=0x98) 03:34:00 executing program 3: r0 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580), 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_dccp(0xa, 0x6, 0x0) keyctl$read(0xb, r0, &(0x7f00000005c0)=""/90, 0x5a) [ 282.376095] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000003 03:34:00 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x40000000842, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x3f, 0x3, 0x0, 0x8, 0xf243, 0x1f, 0x2}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0xc08c5102, &(0x7f0000001140)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@loopback, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) 03:34:00 executing program 4 (fault-call:7 fault-nth:4): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xfffffffffffffea6}], 0x1000000000000323, 0x1f6) [ 282.758717] FAULT_INJECTION: forcing a failure. [ 282.758717] name failslab, interval 1, probability 0, space 0, times 0 [ 282.770318] CPU: 1 PID: 18110 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 282.777371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.786844] Call Trace: [ 282.789666] dump_stack+0x1c9/0x2b4 [ 282.793336] ? dump_stack_print_info.cold.2+0x52/0x52 [ 282.798573] should_fail.cold.4+0xa/0x11 [ 282.802713] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:34:00 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r1, r1, &(0x7f0000000040), 0xd2) 03:34:00 executing program 7: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x28000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getcwd(&(0x7f0000000080), 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:00 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xa3, 0x802) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30}, 0x13) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000c40), 0x1000) 03:34:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = creat(&(0x7f0000000780)='./file0\x00', 0x0) bind$nfc_llcp(r3, &(0x7f00000007c0)={0x27, 0x0, 0x2, 0x7, 0x1, 0x53a, "2d0d3be10087b4fed19364d3b490f75b58a79af6468871a1c5fe35a84737564a071f1ef19791edabc059c8ee65bcf9cde0ea512b9355ab751d1fafc650155f", 0x15}, 0x60) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:00 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) tee(r1, r1, 0x1, 0x2) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000810000)={0x0, 0x2}, 0x8) shutdown(r0, 0x1) 03:34:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000), 0xc, &(0x7f000000e000)={&(0x7f00000016c0)={0x20, 0x1d, 0xffffffff0000000d, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @pid}]}]}, 0x14}}, 0xffffffffffffffff) [ 282.808302] ? print_usage_bug+0xc0/0xc0 [ 282.813531] ? rcu_is_watching+0x8c/0x150 [ 282.818141] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 282.823038] ? is_bpf_text_address+0xd7/0x170 [ 282.827643] ? find_held_lock+0x36/0x1c0 [ 282.832048] ? check_same_owner+0x340/0x340 [ 282.836446] ? kasan_slab_free+0xe/0x10 [ 282.840589] ? kmem_cache_free+0x86/0x2d0 [ 282.845062] ? putname+0xf2/0x130 [ 282.848553] ? rcu_note_context_switch+0x730/0x730 [ 282.853731] ? ksys_mount+0x12d/0x140 [ 282.857558] ? __x64_sys_mount+0xbe/0x150 [ 282.861931] __should_failslab+0x124/0x180 [ 282.866267] should_failslab+0x9/0x14 [ 282.870081] kmem_cache_alloc+0x2af/0x760 [ 282.874401] ? kasan_check_write+0x14/0x20 [ 282.878814] ? do_raw_spin_lock+0xc1/0x200 [ 282.883212] alloc_vfsmnt+0xe8/0x9f0 [ 282.886979] ? mnt_free_id.isra.27+0x60/0x60 [ 282.891442] ? kasan_check_read+0x11/0x20 [ 282.895675] ? graph_lock+0x170/0x170 [ 282.899545] ? rcu_pm_notify+0xc0/0xc0 [ 282.903651] ? putname+0xf2/0x130 [ 282.907131] ? find_held_lock+0x36/0x1c0 [ 282.911225] ? lock_downgrade+0x8f0/0x8f0 [ 282.916643] ? lock_release+0xa30/0xa30 [ 282.920856] ? mpi_free.cold.1+0x19/0x19 [ 282.925161] vfs_kern_mount.part.34+0x90/0x4e0 [ 282.929982] ? may_umount+0xb0/0xb0 [ 282.933688] ? _raw_read_unlock+0x22/0x30 [ 282.937977] ? __get_fs_type+0x97/0xc0 [ 282.942011] do_mount+0x581/0x30e0 [ 282.945655] ? copy_mount_string+0x40/0x40 [ 282.950138] ? copy_mount_options+0x5f/0x380 [ 282.954641] ? rcu_read_lock_sched_held+0x108/0x120 [ 282.959705] ? kmem_cache_alloc_trace+0x616/0x780 [ 282.964690] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 282.970364] ? _copy_from_user+0xdf/0x150 [ 282.974557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.980256] ? copy_mount_options+0x285/0x380 [ 282.984810] ksys_mount+0x12d/0x140 [ 282.988512] __x64_sys_mount+0xbe/0x150 [ 282.992524] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 282.997587] do_syscall_64+0x1b9/0x820 [ 283.001695] ? finish_task_switch+0x1d3/0x870 [ 283.006328] ? syscall_return_slowpath+0x5e0/0x5e0 [ 283.011319] ? syscall_return_slowpath+0x31d/0x5e0 [ 283.016299] ? __switch_to_asm+0x34/0x70 [ 283.020422] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 283.025839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.030821] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.036045] RIP: 0033:0x457089 [ 283.039357] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:34:00 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 283.058288] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.066048] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 283.073346] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 283.080687] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 283.087988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 283.095379] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000004 03:34:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="f99f75e76a50a3988a3dfdd55da102828b21abc829c70f275c4b9204a9e764b427386202a03fde8cbf8286942ee9dcb78b036a1a174825539192994d35a28774e2f9048214e2aed359cb8ac49598005ba3cd03a7a3c13140eed4fa69372a6850c10fc84e7b1ab1403332fe27aeb0117dcdcc657830f1913da8572207f5139d6b3681156729d76f284483a3", 0x8b}, {&(0x7f0000000340)="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", 0xfc}, {&(0x7f0000000440)="c11cfe723fcd2773287cadb0583b2cfbb404ebde0ec3d08cd2f761990efce72208f68d3ad62d08d2572e909b09076216e4099586ee2cdf63f542f231194b7ca090dbfbe554ee583eba69d137783306776d1a7c16bfa66e22f610dbd253ea970c1c8b5a2603f9f063f5c5a6a533a9cac179cef5965169efc8919b4ff0b39515532a11e8ccb7ed85c983cdc27a9402af5b1b4d7ecd6026e44a86f01a7e1ab170a1e5a78769bbf4547837c48f5516a92c033a25b3be", 0xb4}, {&(0x7f0000000500)="c04cbc192881aed5c8163436feeb8ea4a298256b83c324b94dc3a42354dce5cce919591674f6b70ffeb98ab7f9fd73ba055037fbb6ea75f9bd8d81966359c4ce9cf48f24ba3d888017b3d4681f01681adaa67c53", 0x54}], 0x4) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000740)={0x5, [0xfffffffffffffc00, 0x80, 0x40, 0x7f, 0x9]}, &(0x7f0000000780)=0xe) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x12, r3, 0x400) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x2e5, @mcast2, 0x2}}, 0x18b, 0x10001, 0x7ff, 0x1e, 0x1}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000640)={r4, 0x4bf}, &(0x7f0000000680)=0x8) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vcs\x00', 0x408002, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000006c0)={r5, 0x81}, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000007c0)={{0x1, 0x7ff}, 'port0\x00', 0x97, 0x90008, 0x3, 0x1, 0x8001, 0x7, 0x4fa5f97a, 0x0, 0x5}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pread64(r7, &(0x7f0000002640)=""/207, 0xfffffede, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") 03:34:01 executing program 5: capset(&(0x7f0000f4b000)={0x19980330}, &(0x7f0000000040)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ifreq(r0, 0x893b, &(0x7f0000000000)={'bridge0\x00', @ifru_map={0x5, 0xfff, 0xfffffffffffffff7, 0x1, 0x8, 0x6}}) 03:34:01 executing program 4 (fault-call:7 fault-nth:5): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:01 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x7, 0x3, 0x9, 0x9, 0x7ff}) 03:34:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x200) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:01 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)) io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='skcipher\x00'}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x34000}], 0x1, &(0x7f00000007c0)=""/16, 0x10}, 0x0) 03:34:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) pwrite64(r2, &(0x7f00000001c0)="2c3bda986c526d25684e94248ad81aaa225760477fe393f31985248d07ec05e75047777c58d5b4bfea2349ef10cbfb6e816909cdca3522ba55e9fbdf98c997e19046db1b39b528493e12432a049fe0ecd205663d75f74c1dabfeb6e35d1d744a202477a3b1eb4845204f4396b14c25011cc75f61d9b25e4f422a076c640146e0ec69ecf7070c222df792110bd71312a3993982116f05eb551a2ea4c660b2664ae42691e8a6add7dbd121dcab8a07d7b2cfddafcc9cc39e2e921e0e7c750fb12ebea320d4f4a704d3d7341ebb6671ab2a0955ce1ae0ca17c5ae7a27145465d2b2127037da8cc656e0b0da7d98", 0xec, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:01 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',block=0x0000000000000400,overriderockperm,hide,gid=', @ANYRESHEX=0x0, @ANYBLOB=',overriderm,\x00']) [ 283.500661] FAULT_INJECTION: forcing a failure. [ 283.500661] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.513140] CPU: 1 PID: 18161 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 283.520196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.529820] Call Trace: [ 283.532446] dump_stack+0x1c9/0x2b4 [ 283.536111] ? dump_stack_print_info.cold.2+0x52/0x52 [ 283.541329] ? rcu_is_watching+0x8c/0x150 [ 283.545506] ? rcu_pm_notify+0xc0/0xc0 [ 283.549640] should_fail.cold.4+0xa/0x11 [ 283.553743] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 283.558880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.564452] ? graph_lock+0x170/0x170 [ 283.568296] ? pcpu_balance_workfn+0x1700/0x1700 [ 283.573086] ? find_held_lock+0x36/0x1c0 [ 283.577209] ? check_same_owner+0x340/0x340 [ 283.581688] ? __lockdep_init_map+0x105/0x590 [ 283.586225] ? rcu_note_context_switch+0x730/0x730 [ 283.591196] __alloc_pages_nodemask+0x36e/0xdb0 [ 283.595908] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 283.601083] ? kasan_check_read+0x11/0x20 [ 283.605268] ? rcu_pm_notify+0xc0/0xc0 [ 283.609208] ? find_held_lock+0x36/0x1c0 [ 283.613319] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 283.618994] alloc_pages_current+0x10c/0x210 [ 283.623549] __get_free_pages+0xf/0x40 [ 283.627550] get_zeroed_page+0x11/0x20 [ 283.631467] mount_fs+0x210/0x328 [ 283.634977] ? mpi_free.cold.1+0x19/0x19 [ 283.639075] vfs_kern_mount.part.34+0xdc/0x4e0 [ 283.643693] ? may_umount+0xb0/0xb0 [ 283.647350] ? _raw_read_unlock+0x22/0x30 [ 283.651645] ? __get_fs_type+0x97/0xc0 [ 283.655574] do_mount+0x581/0x30e0 [ 283.659363] ? copy_mount_string+0x40/0x40 [ 283.663671] ? copy_mount_options+0x5f/0x380 [ 283.668124] ? rcu_read_lock_sched_held+0x108/0x120 [ 283.673184] ? kmem_cache_alloc_trace+0x616/0x780 [ 283.678071] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.683672] ? copy_mount_options+0x285/0x380 [ 283.688214] ksys_mount+0x12d/0x140 [ 283.691877] __x64_sys_mount+0xbe/0x150 [ 283.695875] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 283.700937] do_syscall_64+0x1b9/0x820 [ 283.704851] ? finish_task_switch+0x1d3/0x870 [ 283.709377] ? syscall_return_slowpath+0x5e0/0x5e0 [ 283.714367] ? syscall_return_slowpath+0x31d/0x5e0 [ 283.719324] ? __switch_to_asm+0x34/0x70 [ 283.723591] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 283.729030] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.733926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.739139] RIP: 0033:0x457089 [ 283.742365] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 283.761294] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 283.769173] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 283.776690] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 283.783986] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 283.791279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 283.798570] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000005 03:34:01 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r0, &(0x7f0000000280), 0xd6) 03:34:01 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x100, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000100)=0x300000000) recvmsg$kcm(r1, &(0x7f000000a080)={&(0x7f0000007a00)=@can, 0x80, &(0x7f0000009f00), 0x0, &(0x7f0000009fc0)=""/147, 0x93}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@nl=@unspec={0x0, 0x0, 0x1befff7f}, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000000)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8907, 0x707000) 03:34:01 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc8070031") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x8, 0x8, 0x4}, {0x30, 0xffffffffffffff14, 0x7ff, 0x6}, {0x479, 0x78c, 0xffffffffffffff7f, 0x5}, {0xfffffffffffff4c8, 0x55d, 0x20, 0x5}, {0xb7, 0x0, 0xfffffffffffff000, 0x200}]}, 0x10) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$l2tp(0x18, 0x1, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rtc0\x00', 0x202, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000580)) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) ioctl$KVM_SET_XCRS(r4, 0x4188aea7, &(0x7f0000000380)={0x4, 0x800, [{0x8, 0x0, 0x8}, {0xae67, 0x0, 0x10000}, {0x40, 0x0, 0x1f}, {0xbc8}]}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000280)={@mcast2, 0x68, r5}) 03:34:01 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) writev(r4, &(0x7f000000b000)=[{&(0x7f0000066000)=',', 0x1}], 0x1) tee(r3, r2, 0x5, 0x0) 03:34:01 executing program 4 (fault-call:7 fault-nth:6): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:01 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='\x00\x00\x00') r2 = msgget(0x2, 0x40) msgsnd(r2, &(0x7f0000000080)={0x3, "7d38a60e90651b1023aa3e3cb9849daeb3da18daa37ac3ebc6741589faaafd34e7309b8153800be0ab851dd3f42735ac7f5876c872f4ef4c5c910a36882e5ded70975dca43c810061a7875350b7ccf683b123810b16bc37e278c3a60699392ddb53838128fe468813b665afb93e1da89999fc2f5ab3267305a296708f10d1a98c7feaa0fdec2f3e9decbcea9a826c58cec999541ecae58"}, 0x9f, 0x800) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) [ 284.061977] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! [ 284.255929] FAULT_INJECTION: forcing a failure. [ 284.255929] name failslab, interval 1, probability 0, space 0, times 0 [ 284.267443] CPU: 1 PID: 18211 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 284.274526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.283927] Call Trace: [ 284.286562] dump_stack+0x1c9/0x2b4 [ 284.290271] ? dump_stack_print_info.cold.2+0x52/0x52 [ 284.295590] ? perf_trace_lock+0xde/0x920 [ 284.299826] should_fail.cold.4+0xa/0x11 [ 284.304026] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 284.309194] ? kasan_check_read+0x11/0x20 [ 284.313398] ? rcu_pm_notify+0xc0/0xc0 [ 284.317339] ? find_held_lock+0x36/0x1c0 [ 284.321483] ? check_same_owner+0x340/0x340 [ 284.325852] ? rcu_note_context_switch+0x730/0x730 [ 284.330835] __should_failslab+0x124/0x180 [ 284.335110] should_failslab+0x9/0x14 [ 284.338950] kmem_cache_alloc_trace+0x2cb/0x780 [ 284.343723] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 284.349307] v9fs_mount+0x61/0x900 [ 284.352909] mount_fs+0xae/0x328 [ 284.356329] vfs_kern_mount.part.34+0xdc/0x4e0 [ 284.360957] ? may_umount+0xb0/0xb0 [ 284.364664] ? _raw_read_unlock+0x22/0x30 [ 284.368861] ? __get_fs_type+0x97/0xc0 [ 284.372798] do_mount+0x581/0x30e0 [ 284.376404] ? copy_mount_string+0x40/0x40 [ 284.380699] ? copy_mount_options+0x5f/0x380 [ 284.385156] ? rcu_read_lock_sched_held+0x108/0x120 [ 284.390368] ? kmem_cache_alloc_trace+0x616/0x780 [ 284.395345] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 284.401433] ? _copy_from_user+0xdf/0x150 [ 284.405669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.411249] ? copy_mount_options+0x285/0x380 [ 284.415793] ksys_mount+0x12d/0x140 [ 284.419543] __x64_sys_mount+0xbe/0x150 [ 284.423773] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 284.428836] do_syscall_64+0x1b9/0x820 [ 284.432763] ? finish_task_switch+0x1d3/0x870 [ 284.437333] ? syscall_return_slowpath+0x5e0/0x5e0 [ 284.442310] ? syscall_return_slowpath+0x31d/0x5e0 [ 284.447367] ? __switch_to_asm+0x34/0x70 [ 284.451468] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 284.456968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.462008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.467253] RIP: 0033:0x457089 [ 284.470478] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.489581] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.497364] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 03:34:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x11, 0x64, &(0x7f0000000040), &(0x7f0000013000)=0xfffffffffffffff5) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @broadcast}, &(0x7f00000002c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x8, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x3, 0x3, 0x6, 0x9, 0xfffffffffffffffe, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9ff5, 0x0, 0x0, 0x0, 0x6a8}], &(0x7f00000000c0)='GPL\x00', 0x9, 0xb9, &(0x7f0000000100)=""/185, 0x41000, 0x1, [], r2, 0x7}, 0x48) 03:34:02 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc8070031") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) clock_gettime(0x0, &(0x7f0000000140)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x23, &(0x7f0000000100)={r3}, 0x10) 03:34:02 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80000, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000300)=""/222) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='wchan\x00') ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000200)={{0x2, 0x4e23, @loopback}, {0xa74a4f597b8794d5, @remote}, 0x68, {0x2, 0x4e24, @multicast2}, 'rose0\x00'}) sendfile(r1, r1, &(0x7f0000000040), 0x2fd4) 03:34:02 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2800, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e21, 0x2, @empty, 0x20000000000000}, 0x1c) listen(0xffffffffffffffff, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$peek(0x1, r3, &(0x7f0000000140)) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:02 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000000380)=@nfc_llcp={0x27, 0x0, 0x2, 0x6, 0x7, 0xa9ca, "852edce5c861199434eb0cebe42ae52ace1809aac1b7d21c86e549eb0248f83eefad119740b0f7474b8b55de1d59428e7f4f7ff04647ef493964810ccbe1ce", 0x9}, 0x80) [ 284.504819] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 284.512132] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 284.519524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 284.527253] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000006 03:34:02 executing program 4 (fault-call:7 fault-nth:7): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:02 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc8070031") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2000000000, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0x40405515, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "73797a30000000005257000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", &(0x7f0000000080), 0x89}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x2, @ipv4={[], [], @broadcast}, 0x8}}, 0x4, 0x8, 0xd3, 0x1, 0x4}, &(0x7f00000001c0)=0x98) 03:34:02 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:02 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) r2 = gettid() syz_open_procfs(r2, &(0x7f00000000c0)='net/ip6_tables_names\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) 03:34:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e24}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x40, @loopback, 0x5}, 0x1c) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000004c0)={0x4, {{0xa, 0x4e21, 0x2, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x80000000, {{0xa, 0x4e24, 0xe6, @dev={0xfe, 0x80, [], 0x1e}, 0xde}}}, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/tcp6\x00') connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, {0x0, 0x10000, 0x8, 0xdd, 0x7, 0x2}, 0xff}, 0xa) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/169, 0x3676}], 0x1000000000000084, 0x10000000000000) 03:34:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x341402) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000240)={r1}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0xfffffffffffffffe}) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000000c0)={0x4, 0x40800000, {0x56, 0x8000, 0x100000000, {0x81, 0x808}, {0x6, 0x2}, @period={0x5b, 0x6b9, 0x1, 0xc39, 0x80, {0x8000, 0x0, 0x4, 0x9}, 0x1, &(0x7f0000000080)=[0x2]}}, {0x0, 0x9, 0x2, {0x9, 0x4}, {0x10000, 0x8}, @cond=[{0x6, 0x5, 0x25d90, 0x2, 0x1000, 0x29}, {0x57, 0x3, 0x100000001, 0x80000000, 0x1, 0x6d}]}}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) 03:34:02 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@empty, @empty, 0x1, 0x5, [@multicast2, @remote, @multicast2, @empty, @multicast2]}, 0x24) ioctl$RTC_VL_CLR(r0, 0x7014) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101000) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x2003) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) eventfd(0x31a5) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000001c0)) r4 = semget(0x3, 0x0, 0x2) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000200)=""/154) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000002c0)={0xc38, 0x5, 0x8000, 0xb01, 0x200, 0x3, 0x8, 0x4, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={r5, 0x4000000000000000}, 0x8) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000380)=0x5de, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=0x0) ioprio_set$pid(0x2, r6, 0x8) r7 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x9, 0x20801) tee(r2, r1, 0x0, 0xa) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000480)=0xc) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f00000004c0)=""/29) ioctl$KIOCSOUND(r3, 0x4b2f, 0x8000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000500)=0x3) write$cgroup_int(r7, &(0x7f0000000540)=0x7, 0x12) syz_mount_image$ntfs(&(0x7f0000000580)='ntfs\x00', &(0x7f00000005c0)='./file0\x00', 0x6faf, 0x8, &(0x7f0000000a80)=[{&(0x7f0000000600)="8acef7b2085781dc1a29cec9b44a2d9bcf15318785d47d023286651cf3bb7e05a2b73d1bd3e3dbb1e01042c5db9869b2143880690378aa4d0a79581ff33af66332a0", 0x42, 0x7}, {&(0x7f0000000680)="78e1b44f29669c640d4fdadb4ee0683855fe3f558e30e0e9382c97dc1d7accbd6a4ab70ac45f4d26c7d6ca51751eb364955bce711e8c881a6f7730f8c4cdb0b0258cfc03b196a5ccd4ff384539a9c3c3cb70", 0x52, 0x9}, {&(0x7f0000000700)="e119179e84670e529779705bb4d5f9c23e8bc0", 0x13, 0x1}, {&(0x7f0000000740)="4ce516eef21a9c68b76f631739a6d581940c224619da5179899f8bfa9859db6e483a8c24ea1f9c4942500307848a81698a0224ef84fe8778d3fc5f7ee8b7b1892975f5fdc58fbd5325246ae6095602f529551016bca8e85a84b1c4964dcb5160fcc81816ec90735c044ef1", 0x6b, 0x3}, {&(0x7f00000007c0)="6f1814269a62da436ff2f840b09cd4a52b4925c25b6597384e6717a7a3206f15e45c3b303080fb7fbf67972d7f7d0961c6a2e999526872bfa7b1fd21daa4bacf0a6108b71230fab1ce702ef499af0bb1730bde90c084edd705e581517d06a5af9cd768dd4ac70fdaebf65df5142340da948b3e9668881ea7bf9328d567017d6e721e048ddfba977358b9b6a8f806ae3eeb0a63844356247f6118858368106243641bb4bd929d4958945e7097e18268639eb579ec72fb494d67c25b843697", 0xbe, 0x5}, {&(0x7f0000000880)="cd859a377e13618225406e559add714d09997836e750ed79cfc746ce31e0e702b360f5baba70bfe0a2deda7ad066016d183eda0fb23962cb6b14bcf708c461d803d48883a9e499c82f34bc4e2b15f8ff26c409d1799e837a2946fb116eae8eb6db6c47d0eaafc68e1d6de76b9dbd9ec6fe273204d74044b2574e46beabf43eb9ae83eff89424b42fa73fc0ad8a8966aa6e504bcd94aa220e04dc75e649ddbdf2c841eef14fb0338ccad62698ea933b9b7db4e965863048d6d7c9726a4031f04be542636d8827cc7dd4a6560b9e53073cba7696b5ee257720f3", 0xd9, 0x9}, {&(0x7f0000000980)="2a5a0da7999e157c1bdf368281d0ec362335c3950e25450e9524de8619f943814eebab4083f72b8526f5e20fae5434e133", 0x31, 0xfffffffffffff864}, {&(0x7f00000009c0)="9c232b93a0afd8ca36ea7b0c4dea153a132be41fd2029e1b18641dd2aa66b62372e79c177fdbbf91c77a9aacd1bca7da5cf6842daf81744d16d987b168234999bfbf721b9af7879f980631f8863a2cb37071066b731d742f926c3ad0b81c9013973d7bb37947ae59abe4c86d8e0f04b84a0fd6c2e1cf2c0b873ee960b66d5c03fe2fc69fb0010c4994bbc08cebd3abd981a12f6fa0", 0x95, 0x9}], 0x2000080, &(0x7f0000000b40)={[{@nls={'nls', 0x3d, 'iso8859-7'}}]}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b80)=0x8000) mount$9p_fd(0x0, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='9p\x00', 0x100000, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend='noextend'}]}}) ioctl(r0, 0x769, &(0x7f0000000cc0)="1f67fa2284e61e5838c981ea449d8105833b22b965b81ba537daead60a5200161f00ed28725082cc58c1c1ed8a587dd854355effaad3872d8e18e305fd499802018fb5fb787e774798dd65a0e874adc28d698be91e87109d1503f2d608df2e3cf6310753befcfdc5d5067d070f8494ede8348e64b8ee599ce468a491ffd57f") getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000d40)={r5, 0x80, 0x4, 0x3f, 0x10001}, &(0x7f0000000d80)=0x14) [ 284.823213] FAULT_INJECTION: forcing a failure. [ 284.823213] name failslab, interval 1, probability 0, space 0, times 0 [ 284.834872] CPU: 1 PID: 18240 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 284.841922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.851310] Call Trace: [ 284.853944] dump_stack+0x1c9/0x2b4 [ 284.857658] ? dump_stack_print_info.cold.2+0x52/0x52 [ 284.862916] ? __kernel_text_address+0xd/0x40 [ 284.867824] ? unwind_get_return_address+0x61/0xa0 [ 284.872818] should_fail.cold.4+0xa/0x11 [ 284.876932] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 284.882208] ? save_stack+0x43/0xd0 [ 284.885889] ? kasan_kmalloc+0xc4/0xe0 [ 284.889907] ? __kmalloc_track_caller+0x14a/0x760 [ 284.894957] ? kstrdup+0x39/0x70 [ 284.898361] ? v9fs_session_init+0xdd/0x1a80 [ 284.902832] ? v9fs_mount+0x7c/0x900 [ 284.906584] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 284.911504] ? do_mount+0x581/0x30e0 [ 284.916243] ? ksys_mount+0x12d/0x140 [ 284.920092] ? __x64_sys_mount+0xbe/0x150 [ 284.924275] ? do_syscall_64+0x1b9/0x820 [ 284.928467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.933970] ? find_held_lock+0x36/0x1c0 [ 284.938105] ? check_same_owner+0x340/0x340 [ 284.942465] ? unwind_get_return_address+0x61/0xa0 [ 284.947437] ? rcu_note_context_switch+0x730/0x730 [ 284.952506] __should_failslab+0x124/0x180 [ 284.956827] should_failslab+0x9/0x14 [ 284.960698] __kmalloc_track_caller+0x2c4/0x760 [ 284.965411] ? save_stack+0xa9/0xd0 [ 284.969081] ? save_stack+0x43/0xd0 [ 284.972755] ? kasan_kmalloc+0xc4/0xe0 [ 284.976690] ? kmem_cache_alloc_trace+0x152/0x780 [ 284.981578] ? v9fs_session_init+0x115/0x1a80 [ 284.986303] kstrdup+0x39/0x70 [ 284.989543] v9fs_session_init+0x115/0x1a80 [ 284.993912] ? find_held_lock+0x36/0x1c0 [ 284.998117] ? v9fs_show_options+0x7e0/0x7e0 [ 285.002579] ? kasan_check_read+0x11/0x20 [ 285.006916] ? rcu_is_watching+0x8c/0x150 [ 285.011204] ? rcu_pm_notify+0xc0/0xc0 [ 285.015320] ? v9fs_mount+0x61/0x900 [ 285.019178] ? rcu_read_lock_sched_held+0x108/0x120 [ 285.024309] ? kmem_cache_alloc_trace+0x616/0x780 [ 285.029203] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 285.034787] v9fs_mount+0x7c/0x900 [ 285.038406] mount_fs+0xae/0x328 [ 285.041821] vfs_kern_mount.part.34+0xdc/0x4e0 [ 285.046450] ? may_umount+0xb0/0xb0 [ 285.050196] ? _raw_read_unlock+0x22/0x30 [ 285.054383] ? __get_fs_type+0x97/0xc0 [ 285.058629] do_mount+0x581/0x30e0 [ 285.062313] ? copy_mount_string+0x40/0x40 [ 285.066708] ? copy_mount_options+0x5f/0x380 [ 285.071235] ? rcu_read_lock_sched_held+0x108/0x120 [ 285.076401] ? kmem_cache_alloc_trace+0x616/0x780 [ 285.081288] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 285.086942] ? _copy_from_user+0xdf/0x150 [ 285.091147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.096728] ? copy_mount_options+0x285/0x380 [ 285.101262] ksys_mount+0x12d/0x140 [ 285.104929] __x64_sys_mount+0xbe/0x150 [ 285.108939] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 285.114065] do_syscall_64+0x1b9/0x820 [ 285.117987] ? finish_task_switch+0x1d3/0x870 [ 285.122588] ? syscall_return_slowpath+0x5e0/0x5e0 [ 285.127590] ? syscall_return_slowpath+0x31d/0x5e0 [ 285.132591] ? __switch_to_asm+0x34/0x70 [ 285.136797] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 285.142213] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.147103] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.152344] RIP: 0033:0x457089 [ 285.155572] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.174540] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 285.182289] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 285.189593] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 285.197035] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 285.204335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 285.211665] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000007 03:34:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0x20000000079, 0x0, [0x400, 0x7fffffff]}) 03:34:03 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f8571") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:03 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/igmp\x00') getsockopt$inet_dccp_buf(r2, 0x21, 0x8d, &(0x7f0000000200)=""/208, &(0x7f0000000080)=0xd0) sendfile(r0, r2, &(0x7f0000000040)=0x7000000, 0xd2) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') accept4$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14, 0x976e2c5644357217) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000700)={@remote, 0x0}, &(0x7f0000000740)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a00)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000c40)=0xe8) accept$packet(r2, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000cc0)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000d00)={0x0, @multicast2}, &(0x7f0000000d40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000025c0)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f00000026c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004640)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000004740)=0xe8) recvmsg(r3, &(0x7f0000005d00)={&(0x7f0000004780)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000004800)=""/145, 0x91}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/83, 0x53}, {&(0x7f0000005940)=""/218, 0xda}, {&(0x7f0000005a40)=""/192, 0xc0}, {&(0x7f0000005b00)=""/42, 0x2a}, {&(0x7f0000005b40)=""/153, 0x99}], 0x7, &(0x7f0000005c80)=""/123, 0x7b, 0x7f}, 0x40) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000005d40)={@rand_addr, @broadcast, 0x0}, &(0x7f0000005d80)=0xc) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005dc0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000005ec0)=0xe8) accept$packet(r2, &(0x7f0000005f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005f40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000062c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000063c0)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000006400)={@multicast2, @multicast2, 0x0}, &(0x7f0000006440)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000006980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000006940)={&(0x7f0000006480)={0x4ac, r5, 0x14, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0xf0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r11}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xdd}}}]}}, {{0x8, 0x1, r14}, {0x4}}, {{0x8, 0x1, r15}, {0xfc, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x400, 0x7fffffff, 0x7, 0x400}, {0xffff, 0x6, 0xffffffffffff0000, 0x5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x134, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x49}}, {0x8, 0x6, r21}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xab}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 03:34:03 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r2, 0x1000, "8f0ff303325814e1ef97a054a3d16b33d7b03c85522113930e395fdb5852fb3f1e998aaa1b8130dda6900d45fb90a737c709babbe41b566ea51c886d872d752e2cb2636f2f90ff689234d968793a234dca3fbe0663f542d23b90905be3fa40a7f13e0ff853edca2e914c831a72db7d81779e560285263ac945d676008a10adde37dac769725447c5a80498ff7f66d1bfef0f8c1b059186659b4c85a940f4434390dc6ed3c4cb3e0d2ed25ea9bb017fe9f1527571d3cb2c2f5688ba05176c3a2a7521db58b469a84e6612c11ba8f91731f50abcbb3a79862d65a57acbed0bc443d962356c86ea01e131a7c3949afa6549a361b97172da2d11e63d1f23da8be97151025a152217897d92e57a976234b0af3fa84462f6ccfb6490e1a69103804dd6120d2b578253b41b9c48c08c12614f6246d7a50a21b73c5cf9f3d625a61e461009fb5046157d640e6a3b76fbf94986a1867a5cdaebfd5857d88228bc3f3bebcc927dde72aac8871eb231f33068971a81d531d4fa85da5709ef00aa5f9c3f2e8911003f143ceafe49b668b841dd42feca01c02f9441c24d5dfee0e688f5be81adcf1173f0e75ce2606c11f89d33b93e97e4a58795ef55eeece36820140df391b32e99121228f496f5718ec270b0d664a515f00f586b2c30314e30a6ee87aded13142231a8d949b4bc1ebdef5c12a22c16c1ecc58aad0b478edf2e8d259dbfeaca4dd73afefbab4af4b058a404059f3d244ba8983e909498d3dd94f940c3873ed54116b9efd01a87df2789b22b71fd6eadc3865425ab52ee1b2e399a7066072694c275bb01e8b3ac33332d8428aa97637d8a5141fb898770ca551cdd12d2486415b07a7d8f3300df47ef79d7cc8eaa6fc27ccf033194be5c9657120c4b8263d6381a5fdbf07bb5b7fd99fd46a5ef4477f593cbbb232f9258a3653ed5406f53702b7d64305f25402be092d7485fc2190c4bed8d17d6e5292f1df0fd6ddc9873602fd5f39eda82ba837f38678293ef8b740852859c973962bedccce78f4d805db49c7fdc5a82adb2f1d935e7302654586ddd22a13e363a5fae5009a467305056e5bcf230c08a55ec1976603dd748271da9db1dc2480ec928dba17d6b5ebb7040cab24527004da739e2ffe59eb0a139dbb833e0fed1f4695747ec84a255a03636404810f8f2db0fac3420c3f1cd346bcb51caf57be72ddb15c5927152505eb49408b580e5666313120402afcfb4404682f7a4bef4dc745b2f656f29950ada4cdb8081d0a827858448d9f8de189f1facd2c61d0fc069fca7b812b1f17022edc4365481f0e312d1a194a1c3dfdb3acf89f5f5f7a5d93e1b5d7d980463ba94879aade59ec9cbffc29f6d47e14ee32dd573b2f53561aaed24b5dac37380e3c71ed21e1486089199d88237ab744584296d8f7f28b55caf719b45fb10efb91b6f25e4d6063cee969125931cc01b6101419ae98fedc96279c5b0df43d8fdde8151e53bb8d1d8752fd57102601e4d3040db0f91d4e5dfa355806c7ad86a312f8c8c384e27eecd5611a7aa3d1d1466a974ff6842624c0234d583a0e7573a134e50176bf456969ea13079e3d9260a75eb155655fef1b8545e1923f7f8ace5e297a81077c7845839ba77e4ad8ee30e8cf8dcc07cd7ba88440724ced2d87364083278890527d2668993cbc151b053ec45de7598cc8428b4dfd232de9b59115ef6dfbded0d18ee0ba5712369721c3cc5877d3a8722320970626eccfc9380fc039ff45b2eaf394aea0f943c9a69da6cd75c70c688b7634a13a852c4b5c86bdbda10b31bc498c000aba5198d0e96dc70dca2c7017b313ef122f3c9066d764ec23ab018cfddd90e49bfc3bd0154486a62c3116560154170b0c0245d11c70ed3c03dea34bf8d5c6c457164bcfdd72d1f6bb19f185fb2e190bb04116e9448e20aec6e1d0a11a450be281f3e32f560d88c01cd9b5126993e889e31b460ea3e420cb4c787e04ad0c795c8a4fe7b5f67cb30daabcb804849495380b838388c6b4d04d6cf922f4e7cf7b21802993dfa00dd7e0c9327faffadf4d1789c5c047bf99d6775e65d982ed44c608cde35c43996f2ae5e140dc694fd34901092c99a4e97c5a181acee1d8815d3feb38b400a955281dc5af5e1b8937ada810068facffe394121ec1dc9cd93b34dedb7cc048b6596565c0c9ebaeceeea4e8eb5f7507f58a86c1474753f5d5c8915df2390ebbec9c80de496a4889446a4518b037f206daa2509222dd643f42c7fe75f8537c9b5f7ea4a457f35826e5e2c1cdc95fbcd142d981c29305b6abb878597b797f8f2a800b9dbffca08d01f4cab8edfabf282b8f7a53f1c64feab1da20bd5f75a76a7e3355b41a32a02f7c7bc59619c7ba74754fbcbe1a49a0bdb580d809870424d0e4ae037a96b193c79062fb6be59fe1b376ec09ae734b920e278126ba14a68163e8c7e5fd2c371ead172ef84d23e19e13c4ee8308e9e9440acb6d60bc5b9e9494d417efb26a8af0ea5cadd04ec8d86f79265d8682bf54062275a4199a2ade789fcc59150e9950e32fc3e65603775a2969e376a01f068bb037e77dafb023c995b6874e8cbc4a9d9fbf279e57fbb1f4f86feb8bb5d4909e73698e4c3f6de9c7613145c0714ff76fa8a470a7de3e232732d8a8e6bbf55251f8fe89d33f7ed1c873b145a23c4748d05d3236c36b9c389d98ac1f91577089e397b219ffc25bad89e6eaf830d3f0fa2df76640b32e37c86b87ed4b9ab432f02e01437b75419c6a70ddf63442b29eb4d553a233b0aef11547554bba393c24295d936478aab7f75e7793d4e2cce9826e8025572081150f43f7c1c7729cbc16b878bf8cb1b43b71a9ae2185c9cb6b461684a5fc1f400205f45712182d9adcc00fd77423df346d5b605901f348d65b6e73788675c2607356a1a4a438e77be2eb75f7c6bca2b12b2c1c454d75bd8cd5daf4e7cc9ca12750e8b12ce63f6b70cae6c4555c7197b8eb87d6eab8f91940b3d39a3fec8ee2b5f9e78de0471e312964936eb93c357dbbdcad19afe78b8ef25c21c62c3da7cd7888185a313d8ba6d038fd8e90244317ff54c98e719c5498bc1225b9f42c11067444eb1be58bedc5aa916623d78236a918b1a4301bd8234cba3f589ae37638395e371f55ba2dbf491dd48521ba9c0f5abc0a2a7a84c68fcbb5d6fc10d9daa5593363a5e20d9fbf545d10eb58be7ad721414e6484eb62400ad850c64958982c08875a4549541296c58679758fb7425b7cf749991a192806c621156371939f1496caa052eb521c88ef5284ceba0586bdf6e92a880d33189d00cd691f1284a4edebaafe5f1daa5912643085bfb448e287fa11e3ac7755c1ca574b233561c53fa92f6807b4604653ef469fc3632790525222fc4014b5f680136746280df441d9001bd3bf54074319daf23f0162ad865425156d28bbe1efe7c4ca338c838b2e5f5be16feb06ce86d187e04e80b2b42d5daa5d35d22ea27d16c1be36ea88c5cc8c02de7746d4cb62e48119f8bf91ba83e2000b68cd08d7c96b736175652d658eecc2c2c65832b81320e611132650dfa88be4952b8f113fc8f887f0385e1b094014bb9a4f8906c00cc8addacf0b40e44aac03a15a13b4c6175a56e988152e5ad369860c2be86ee06f64e23ff2553ec1050807bf4ec1feca8f26ff45d8e4f35edf5ca74f1bf86e8fdefa8b29bcd42187c2115692171ca7fd3f3012ddcf769c445a44f1d80c17d803996dff65241b230ce5f91eed9cc3781d7249acb5a20e36ebbe0614c2a652f1b96a3f679f5a219df5bafe8bb1470fcb9944b8c757c80a064a7a12f54c6655e9d8d82f4335951a50e8e7afe714dce7c1f1777feac894221ae2a0bc4060571d501ef99b57eb12da594201f209beab246084b2ee7373661a85bde83baf788381273a15451253aa62f3bd89d1f4c2179fe6b45467c9a23348e054fbc98268ea16aaf6bbb6be22819e71e29b86cdc44bf3b912a82015681a17a6246a72d561d869696ee3d69374be1d36e8e6e2c442065652f3a6ef20a806ee7608abaa513b22f4a40c5a3e8b5c66c43da1d9a68df88d807d59e21f05637a832d7a2ffe29ddfc5c55fc1fd5f5995744f65386a5c1f9219531f13b9034207a978cc6abfa8fe98dffaeca39fb28ff3a70c84c626c0d0ded3e6024d1f74024f86944229a98ea26bf961d75e2572d07dd87ce4f3d021d172012dd3faa92769e68ca7c261890cf5f1c9158085556c68a9bf759ab34f2ef4cb06bd3569f1cf29e1310ce9b2b120ded6dff2ba39e8de0b284d8c81c120d411ca13f631721ea1f45e02dfe120ce5c354bd2e5e6d95dc480822e60d0da2a626c84b08b9281d7d64f51d1a643e7e9e55351b20cf2c07394a0e27abc22a067a8e4e3ee14132da673808e9db72c5c5b9a58a9a491e66149d0043de57be1e94904f8cca34246cf4e23eb3aa71cd8dc69530dd8194508a129fe9c47ebb777826239f73f1a1227d5676bf8dbe859fd9cd0cb1edd1807591562dc03675b95891cea3a9deab7cba3df1293101d42dcfa7a919bb28f65bbe3f2f6d210d0929f11643f13af13357934ca60524fc7e79cc28843eda192f082666ad99f79aa99bd7521f377e6c1284beca41f20c6898c2d307b159c5859fb2254d95f6ac5ccfb1168999a6c354ed2998706c65d5a8bc9b13322f1759b7629b184b36752fb4503106e5b1e3fa904c7f2fc5ed8094dc3a4dc8adc9f3167de59b27b2b3656877cf666c7620785d00697ba5721a8aacb028bd69ba65b5e311df561b6687ecbae27bdd990c97ba7bcd1a710d62ddde4f338cbebcb9e826f92993752ad023b314b0522c64690484698cc14ab708ba380803ec14efd1fb0b9577ed5b101643e9fb6d9af56e76bc815eb84434742c8086c5c714ebc2044c2feeccc35f79146c8c75a7c611df995e270238a973a5a04e34c09b80269421146ddf274d8953b322abae7c3174dd52de4627fbbe610961f6e1ca72323652734caf20fc5bc15ee8b57af146d9511f4573ce67a2c40fe6f734e62ba4c603e3b11273dd72fb0aaf8ad7896db3308ada40344c2e89da3fdac2ddad13888edc672f76813307319477752cb41b20d383f90da0a93fd6e9c8f1b6cfb6037b888e0187883e55cb0f852f440ffb3d3188e0c97bc7a6c29451426d4d40a7229b0079ef95e25b0f38fb78ee933f15e6621989cc5f601eef34325c9d484d88b831dac65ad30759c974ad8066be31f4363fafbe4ef64c7949c4593e8dea7d8be2d5490dbb2430620be901529a98c990caa42ed30a56948bacb8f0e7bc7e069b302029939f962e9ef483dcfa0dc84038093f57079eca54a3e1c0d87006aa29d2296d01c15e9a6f8033f98c23f26f8fc718302b8ac81126f67ddc7915ff4011f67cd564a908b85f2ef76e0e823f166455e334cec71a27a25d6510ca9e5745900c85ec3d0ca36e7f0e555d8200a6786cd547cd14562e8666f4ed559be05eb967392ca3f3a69bba67663edf890f0697bd7c02c33caf079b3e4b9342f498058ba9e5a3f9cc9c22f883116e352f798d93b2605b82dc175fa189ecfb5bb81b4edc13d3f220bfe2378652769cd4df5a1f40adb5f07798374c8b5b545a22f042f27148dea46efd1978a4ac3f9b291a749505d7386e6ea2d20a42eeac2f266a0ec5787708c45762db9ce27d8db5402e2bb7e0311b5b924c8dfc942a881bc5ce83f2b7f0583bf54446d989c5ea2bcf2be8864a84153fc45260480b2bbe48882e005082e6558e3d1bfd9f044105c3412be22a6bcc979e42e7444256ef616790d1a4228d4b24f17"}, &(0x7f00000000c0)=0x1008) 03:34:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in6}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 285.358255] Unknown ioctl 28692 [ 285.411119] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 285.427586] Unknown ioctl 1897 [ 285.432588] Unknown ioctl 28692 [ 285.442912] Unknown ioctl 1897 03:34:03 executing program 4 (fault-call:7 fault-nth:8): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 285.463566] ntfs: (device loop3): parse_options(): Unrecognized mount option . 03:34:03 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4181, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0xb) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='c\t') sendfile(r0, r2, &(0x7f0000000200)=0x1, 0xd8) 03:34:03 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$rds(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xe1) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x3, 0x2) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000340), 0x4) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200), &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0xfffffffffffffffb) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000140)={0x6, 0x0, 0x20, 'queue1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) bind$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x8, 0xffffffff, 0x401, 0x80000000, 0x7, 0xc7}, 0x8001}, 0xa) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xf48, 0x8, &(0x7f0000000880)=[{&(0x7f0000000440)="4f74280e111d71c05fb973f0ad97e7ae7f1d6fec7df94e647ebc122936f799f2d1238e696f3780541e64ef9d178bd759c21c26e9636c5131a709f9622c2e232153e2302300db19ed3c93416ec7e9518ba3098790159d66c024f00c4297ce061f8660677f6e52297e2257e0234c03030aefe8e0d47fb7348083b90e31ba8f15e28ba6737e61d8c545dfb625765d1c4c06df7e33c88918f05cc2dc99ab180c6b35a53c", 0xa2}, {&(0x7f0000000500)="42db991b3e3345797820d56f61aa75980f1b11844de13af7e64010f4e312039f9ad45ec3fe734149fb1cd7f76ee614190454c7f1adda929bb588586b", 0x3c, 0x1000}, {&(0x7f0000000540)="697c76421116aef31665dc2317d737182f4596607188be630adfeb96e1ee01305fe96663bc6044266e969aed895068bcd55a160715793ff4d29c52872effa657c7b7fc1d2ef4dcf3228addb82e083af9f018a1f65aaf44993ae639a9f368f683baaa067756b2e2daf78809a8061f993eb760ec531b5904ff0e8de4ff9e8a90f5b644919489124985067fef3f82142ee8037b3ffa3bf63b9fd07d7c0a8601c11db64e7cfe17190a2b6dbb74a9ae8347244cdc736a773580a54a2b6adecae95a", 0xbf, 0x100}, {&(0x7f0000000600)="f11641749c5dd46023849c5170b27244961fb47ead32f3bfc6127e04bd21cbe32a460d57c23e719975de0ccc855010367ee15f35d23f80", 0x37, 0x3}, {&(0x7f0000000640)="902accec10431da6e137923d3c74658712c72d4992ec932807919cda69c5746914626ea1a00acabee75b59b8b11bf9af8fda4d890b19f9d55b1b8306f60ab7c8b3474a8811a34ee65b75347900ea6a4a7841e009c21bd7723bef357471cb4184932f43c31729bc0e3e6f9f7ac3014d56ec7fc0f3f868486861791047d59f0e6c708a4582f85df162bcb1b3c6ec503762b7177cb9bd87d30ea371b24673dad5021762e09f0c22af23137f63ee4cd96fd0e0", 0xb1, 0x1}, {&(0x7f0000000700)="eff10f0e9d681773fec59542b1ec8ecfd72cf2d19b846fc54e7fa54440c097f43df8ad2688a740599346c44d533402674125795628618f64944a45020c", 0x3d, 0x1}, {&(0x7f0000000740)="922a13ab0383d9c096d2bbf8aed82bf2748d476ced17b3a6bd307f60827b53d17082eddea8e8368ef40884a3441815e9bba4bd5ba9255651b4a4aa6493451e582bf364f4cb66d1bc701f32fe29230c30e089a56d510bb205dd2499c4e54b349df6762d7b612734f66e9f3fef4a730764b9072bb20c52934da303bf9efc3f9fff642a6409b631a62f899255d2b8ca35e6a1eca624e5b07e181e4be51f6262087a7ee86e6657940a9e439a400217de6ba25e15d12fb15bfb1a8545cca28c09031d985251c682c2223592102fafd0d72da96ffaf1837078fed42327b18a1960cce336622f0d810fd48624337f42ac2325fb296682e3369433", 0xf7, 0x1}, {&(0x7f0000000840)="295fdc", 0x3, 0x7fff}], 0x8, &(0x7f0000000940)={[{@fat=@umask={'umask', 0x3d, 0x7d}}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffff9}}, {@uni_xlateno='uni_xlate=0'}, {@nonumtail='nnonumtail=1'}, {@shortname_mixed='shortname=mixed'}, {@fat=@usefree='usefree'}]}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:34:03 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) r1 = socket$inet6(0xa, 0x80806, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2, @rand_addr}, &(0x7f0000000040)=0xc) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @loopback}, 0xc) bind$inet(r0, &(0x7f000000f000)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000300)=0x9, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x2}, 0x10) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x3}, 0x10) 03:34:03 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f8571") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:03 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x7f, 0x7, 0x5, 0x1}, 0x2c) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000080)=[{0x2, 0xb6ed}], 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x7fffffff}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000180), &(0x7f0000000300)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r0, &(0x7f0000000180)}, 0x10) 03:34:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ffe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000480)="ecfd7aad226be81615118b6fcaf358b3e53219b3fd75c79c460727ed0c579af72d983bb5935e711121ccccf2d8484be1c87c6d6f930f85b6e0318e", 0x3b, 0x8d0, &(0x7f000031e000)={0xa, 0x4e21, 0x0, @empty, 0x7}, 0xfffffffffffffeed) r2 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x400) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000440)={@local, 0x2, 0x1, 0xff, 0x8, 0x1, 0x44d, 0x3}, 0x20) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000400)={0x3, 0x0, [{}, {}, {}]}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='net/tcp6\x00', &(0x7f0000000140)='net/tcp6\x00', &(0x7f00000001c0)='^%wlan0vboxnet0vmnet0\'/\x00'], &(0x7f0000000380)=[&(0x7f0000000240)='net/tcp6\x00', &(0x7f0000000280)='net/tcp6\x00'], 0x800) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000004c0)={0x101, 0x9, 0xdf, 0xb5d}, 0x8) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:03 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)=0x1) [ 285.726989] FAULT_INJECTION: forcing a failure. [ 285.726989] name failslab, interval 1, probability 0, space 0, times 0 [ 285.738682] CPU: 0 PID: 18300 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 285.745840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.755222] Call Trace: [ 285.757851] dump_stack+0x1c9/0x2b4 [ 285.761672] ? dump_stack_print_info.cold.2+0x52/0x52 [ 285.766883] ? perf_trace_lock+0xde/0x920 [ 285.771205] should_fail.cold.4+0xa/0x11 [ 285.775375] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 285.781063] ? save_stack+0x43/0xd0 [ 285.784709] ? kasan_kmalloc+0xc4/0xe0 [ 285.788670] ? __kmalloc_track_caller+0x14a/0x760 [ 285.793523] ? kstrdup+0x39/0x70 [ 285.796910] ? v9fs_session_init+0xdd/0x1a80 [ 285.801328] ? v9fs_mount+0x7c/0x900 [ 285.805052] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 285.809831] ? do_mount+0x581/0x30e0 [ 285.813683] ? __x64_sys_mount+0xbe/0x150 [ 285.817865] ? do_syscall_64+0x1b9/0x820 [ 285.822049] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.827639] ? find_held_lock+0x36/0x1c0 [ 285.831733] ? check_same_owner+0x340/0x340 [ 285.836081] ? unwind_get_return_address+0x61/0xa0 [ 285.841150] ? rcu_note_context_switch+0x730/0x730 [ 285.846241] __should_failslab+0x124/0x180 [ 285.850660] should_failslab+0x9/0x14 [ 285.854473] __kmalloc_track_caller+0x2c4/0x760 [ 285.859158] ? save_stack+0xa9/0xd0 [ 285.862814] ? save_stack+0x43/0xd0 [ 285.866479] ? kasan_kmalloc+0xc4/0xe0 [ 285.870391] ? kmem_cache_alloc_trace+0x152/0x780 [ 285.875248] ? v9fs_session_init+0x115/0x1a80 [ 285.879949] kstrdup+0x39/0x70 [ 285.883154] v9fs_session_init+0x115/0x1a80 [ 285.887511] ? find_held_lock+0x36/0x1c0 [ 285.891748] ? v9fs_show_options+0x7e0/0x7e0 [ 285.896773] ? kasan_check_read+0x11/0x20 [ 285.901036] ? rcu_is_watching+0x8c/0x150 [ 285.905277] ? rcu_pm_notify+0xc0/0xc0 [ 285.909185] ? v9fs_mount+0x61/0x900 [ 285.912997] ? rcu_read_lock_sched_held+0x108/0x120 [ 285.918293] ? kmem_cache_alloc_trace+0x616/0x780 [ 285.923304] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 285.929688] v9fs_mount+0x7c/0x900 [ 285.933441] mount_fs+0xae/0x328 [ 285.936831] vfs_kern_mount.part.34+0xdc/0x4e0 [ 285.941524] ? may_umount+0xb0/0xb0 [ 285.945159] ? _raw_read_unlock+0x22/0x30 [ 285.949400] ? __get_fs_type+0x97/0xc0 [ 285.953299] do_mount+0x581/0x30e0 [ 285.956865] ? interrupt_entry+0xb1/0xf0 [ 285.961121] ? copy_mount_string+0x40/0x40 [ 285.965586] ? retint_kernel+0x10/0x10 [ 285.969582] ? copy_mount_options+0x213/0x380 [ 285.974140] ? write_comp_data+0x14/0x70 [ 285.978216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.983782] ? copy_mount_options+0x285/0x380 [ 285.988442] ksys_mount+0x12d/0x140 [ 285.992105] __x64_sys_mount+0xbe/0x150 [ 285.996106] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 286.001269] do_syscall_64+0x1b9/0x820 [ 286.005755] ? finish_task_switch+0x1d3/0x870 [ 286.010403] ? syscall_return_slowpath+0x5e0/0x5e0 [ 286.015473] ? syscall_return_slowpath+0x31d/0x5e0 [ 286.020554] ? __switch_to_asm+0x34/0x70 [ 286.024666] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 286.030048] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.034911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.040125] RIP: 0033:0x457089 [ 286.043441] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.062352] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.070074] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 03:34:03 executing program 4 (fault-call:7 fault-nth:9): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 286.077364] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 286.084791] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 286.092084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 286.099374] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000008 03:34:03 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x50100, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x8, {0x7, 0x1b, 0x7, 0x380, 0x1ff, 0xffffffffffffffff, 0xfffffffffffffff7}}, 0x50) 03:34:04 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f8571") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:04 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xffffff2c, &(0x7f0000001800)=""/130, 0x1, 0x2}}, 0xffffffce) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000001740)=""/163, &(0x7f00000019c0)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000500), &(0x7f0000000440)) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:34:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40087602, 0x0) [ 286.345428] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 03:34:04 executing program 7: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x87, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e21, 0x1, 'dh\x00', 0x30, 0x8, 0x3f}, 0x2c) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/l2cap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(r1, 0x402, 0x80000009) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='personality\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 286.441501] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 03:34:04 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000200)={0x8, 0x3, 0x5, 0x1, 0x7, [{0x3, 0x800, 0x1, 0x0, 0x0, 0x1880}, {0x100000001, 0x10000000000000, 0x9, 0x0, 0x0, 0x2}, {0x339, 0x5e3c, 0x0, 0x0, 0x0, 0x2}, {0x7, 0x8, 0x9, 0x0, 0x0, 0x2c01}, {0x41c, 0x6, 0x8000, 0x0, 0x0, 0x1000}, {0x1000, 0x8, 0x3, 0x0, 0x0, 0x2000}, {0xff, 0x660000000000, 0x0, 0x0, 0x0, 0x200}]}) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080), &(0x7f0000000100)=0x4) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x6) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x402) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000013000)) write$evdev(r3, &(0x7f0000000300), 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000480)=""/115) close(r2) [ 286.550255] FAULT_INJECTION: forcing a failure. [ 286.550255] name failslab, interval 1, probability 0, space 0, times 0 [ 286.561573] CPU: 1 PID: 18344 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 286.568683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.578062] Call Trace: [ 286.580690] dump_stack+0x1c9/0x2b4 [ 286.584372] ? dump_stack_print_info.cold.2+0x52/0x52 [ 286.589652] ? __kernel_text_address+0xd/0x40 [ 286.594569] ? unwind_get_return_address+0x61/0xa0 03:34:04 executing program 1: r0 = socket(0x0, 0x5, 0x9) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r2, r3, &(0x7f0000000040), 0xd2) [ 286.599718] should_fail.cold.4+0xa/0x11 [ 286.603872] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 286.609031] ? save_stack+0x43/0xd0 [ 286.612699] ? kasan_kmalloc+0xc4/0xe0 [ 286.616643] ? __kmalloc_track_caller+0x14a/0x760 [ 286.621720] ? kstrdup+0x39/0x70 [ 286.625137] ? v9fs_session_init+0xdd/0x1a80 [ 286.629680] ? v9fs_mount+0x7c/0x900 [ 286.633413] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 286.638197] ? do_mount+0x581/0x30e0 [ 286.641939] ? ksys_mount+0x12d/0x140 [ 286.645750] ? __x64_sys_mount+0xbe/0x150 [ 286.650014] ? do_syscall_64+0x1b9/0x820 [ 286.654356] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.659866] ? find_held_lock+0x36/0x1c0 [ 286.664007] ? check_same_owner+0x340/0x340 [ 286.668372] ? unwind_get_return_address+0x61/0xa0 [ 286.673493] ? rcu_note_context_switch+0x730/0x730 [ 286.678537] __should_failslab+0x124/0x180 [ 286.682800] should_failslab+0x9/0x14 [ 286.686682] __kmalloc_track_caller+0x2c4/0x760 [ 286.691409] ? save_stack+0xa9/0xd0 [ 286.695076] ? save_stack+0x43/0xd0 [ 286.698875] ? kasan_kmalloc+0xc4/0xe0 [ 286.702969] ? kmem_cache_alloc_trace+0x152/0x780 [ 286.707855] ? v9fs_session_init+0x115/0x1a80 [ 286.712400] kstrdup+0x39/0x70 [ 286.715674] v9fs_session_init+0x115/0x1a80 [ 286.720042] ? find_held_lock+0x36/0x1c0 [ 286.724242] ? v9fs_show_options+0x7e0/0x7e0 [ 286.728699] ? kasan_check_read+0x11/0x20 [ 286.732894] ? rcu_is_watching+0x8c/0x150 [ 286.737076] ? rcu_pm_notify+0xc0/0xc0 [ 286.741105] ? v9fs_mount+0x61/0x900 [ 286.744855] ? rcu_read_lock_sched_held+0x108/0x120 [ 286.749911] ? kmem_cache_alloc_trace+0x616/0x780 [ 286.754839] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 286.760427] v9fs_mount+0x7c/0x900 [ 286.764013] mount_fs+0xae/0x328 [ 286.767665] vfs_kern_mount.part.34+0xdc/0x4e0 [ 286.772293] ? may_umount+0xb0/0xb0 [ 286.775979] ? _raw_read_unlock+0x22/0x30 [ 286.780275] ? __get_fs_type+0x97/0xc0 [ 286.784293] do_mount+0x581/0x30e0 [ 286.788018] ? do_raw_spin_unlock+0xa7/0x2f0 [ 286.792478] ? copy_mount_string+0x40/0x40 [ 286.796754] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 286.801678] ? retint_kernel+0x10/0x10 [ 286.805652] ? copy_mount_options+0x1f0/0x380 [ 286.810753] ? copy_mount_options+0x1fa/0x380 [ 286.815292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.820872] ? copy_mount_options+0x285/0x380 [ 286.825409] ksys_mount+0x12d/0x140 [ 286.829105] __x64_sys_mount+0xbe/0x150 [ 286.833114] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 286.838182] do_syscall_64+0x1b9/0x820 [ 286.842203] ? finish_task_switch+0x1d3/0x870 [ 286.846828] ? syscall_return_slowpath+0x5e0/0x5e0 [ 286.851795] ? syscall_return_slowpath+0x31d/0x5e0 [ 286.856849] ? __switch_to_asm+0x34/0x70 [ 286.860943] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 286.866350] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.871317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.876653] RIP: 0033:0x457089 [ 286.879886] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.898902] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 286.906778] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 286.914890] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 286.922287] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 286.929592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 286.936928] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000009 03:34:04 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f000000f580)=[{{&(0x7f0000000040)=@ax25={0x3, {"30a8a921a78c98"}}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) syz_mount_image$ntfs(&(0x7f0000000200)='ntfs\x00', &(0x7f0000000240)='./file0\x00', 0x401, 0x6, &(0x7f0000002600)=[{&(0x7f0000000280)="9d37ed89267fcadfde52a9f4891f49e6d7aedd12f3afd016cc1f7acbb640568e95d2668a760f3fdf40cb946353234bc3697ebb3933d26031fae750db9c2f3c676ea88c20d84787d37a749dac8991a13a109bd002644238ffdcec428e85031070cb7b7e686da70e5e3e5349adf6c72b55464587afa2d3cd267525d22a0b86b4c2aab8a88bfb4cef1f8908637b0faf26472577314bb87f071a3545a5f063afb0aa13de4af0dcb4b3e602d07750e866a91610ddf9ff137f287741c892c94e9b2d99af3d5d118055b65a9ff2d491b72993", 0xcf, 0x100000001}, {&(0x7f0000000380)="b2012801d4ee8f794acd3087c4053473e6e51d6759468ce5b09746e281d34fd105cf403f1bdab40e8107fdcc972cf0851b9a3f355f91b7456088caf862833f1d999499d35de24b5d8808e2ac008b58d739e31a151bc0c11bb6960e55da532bc5848170d0c48b67b03509584f52c37d9559e38b8e9a2bf9a3c34d58d5adc5063249c5e015890311012e7f86c88ad18c1b1453decefe0c8815c52af0445e31b04f8f1a9b3b89d976cdae159b89f5483e3170e368e35b8eb4c808beefdead0bad08d4a70ce869833e147e2af7360a3bfd90634e4704c8962078298f42", 0xdb, 0x1}, {&(0x7f0000000480)="6010ebba78bd19f92d46932882fcd840c36c6a76e0edaf1525254f03099c9f26fbdadc8aba8dcc0781296741a08ff35ac69297af6531d5004a2e81b685fdc06475121467bdfd6977be24b7e78474408deeb3198049ac05880e4e473a5ca03b9fce208fd92546c4a4ee2ebe2dcfe76beddc629ccc649a4e4dd5632d3afe0e50fc104cf72629b02c2ecf2669f1c79fc6d67a1df2c934b22f1238de55b8a7c7348298aa430ab886c940fa3ae2fc2d90e6119c6fd59fa94cf7d9dc5d99bc3aa1a3e834cdaa853f6217aa9890", 0xca, 0x8}, {&(0x7f0000000580)="5aafff8fac2439362dd0d4bcc7a86f2c5733437f8bcb1b36b04b10b7f59281824845b872fa2578251afafa9b4c74fc6c4f91d589cba79144a50daabf3523a9e91daabee281a3125f3eb5f536fb50224e65969676fd95af59cdceb14a50f9bc282f5f56eb39e1d4f17fb2741fc0a8aa29a06b83fb5e16dce9de951f5e6b39e4c335ec62fdce66147a54b823cb67acec8256817d681c7746b5c56c60c88f12fadb92a2b14702b94f4ed4c2379bc8ab996c15dd378a5bdde51b7e5d27336f71f4351a77a63eb20e61c375b1a83c4098a59617b939cd7d4333360f047581a82ce2cec2ce0ad5c2fde7520af39d663b4b297aaa6fcdb7ea07d500bb885e241412da870249e96b475b18adb9ee6acee633f511002b738af75d5a428f7c23973a5d0253b8e6cd6f792e8e698f86f9d6be27dc46625ecfbc84fc54f8abe385cb276789504b1e90e212e06cbc35e96cdc7085b3c385593397584e5227fac7aa3d752dc005b648f1242ac59d6d48ac7bbcf858cd633418c8da294e60fee9b5bcb01d500bf871a434191cd73f6b2c312334a9150345d320a6dbbae75f41c0e8e0a6c740ecafeec1f75e55cb8c6cdb156f6a652f39f5b66e2d6cd4cec0d1773b03d82bbb065ffead8d9cbc31de304aff14ad3030d569482fdf633c1c851fe82d992cb180269449313a827983cb4185573ed121e4ccb1ef51a7301b87a2d580c9206c4da73805dd463c31523955ab64e8c35c32650fead3fa70121b738ae7d422df316eac0a6f2ef2f5a83c276f9221e435ca5f6fe09bfefbf185f6436e89a471822666a43979b638fd79097cd53056449fbf6ccb4fbd1ef5a4cf44298a054cb0a3da4dff150e7284e8dfbc918580f8cf8472e6e4591739f9c87cf046fc4eb95963704f79da15a9ed8ac3ffa2747af9e351092519bd5b8a472effc1ad1be579d7f1595852fe20ef9102287fcd469ef6b61fdcf6ea8e51458437f5f304245a3a8c60bf63215768540c5a674ea9c04084ec5bc480d5e5a6cb81a9ecb3981bbdc5695d7fe615f40a56ab2cadca5097dad80cf801d99e027d15c79956f9c03890ade520cee41cbf5f54a198aae96ad57698b765e818e6134ee314d1970f3755d3098b1b33cd279b2a627a3823217c37ff997c5e20ca1442212867bf73eb6f5d7f969665ddf7423da36908d0b383dd95797d41d8be728f1ee3e983efe880df7c91b9b569b4d2465252070760eb2a5dd643f3b77f890d42101639e60ee03d16d414fd1b66bed0e93811fe066842aa7eaf8bd4b22f21982cc03d7478aa0ec0549b1f5d7fae7971ae6a087a1a2941df2d6950cee5b361df0b16847a22295b77d2f54165a1f4940ab6ef459a37a862ba91726d07b549581830848c801de684b6aea8aaf6409d78148bce564bff9bc5c3f30447eee99d0795e95ac72afd86e795299157c3b8b2c042c54df03e0c25ef21862c14a61d4f85fd1e1175cd820e6d79aa3c4db29b8f90a41e4512fc71b18ec9ed689fd21e394c64a391e35942dd743fa79c202c33a910a0f1a88c5362ea39f6b6b1e2d6d56887c2c3f42df41039ec3a25b315439dae2565ab95fb2a25b54221d58be07a7d119c19e131264c771a7c5eb544aa65d3e9ee3617b13e082f8e4b07ada8f5f932e6c62db184360def8c5e85190854fd57d995c5d1a6777571f1b48a9584f164fc3f1b44c16c88fe1eea6e6a6a33b60072bf0060f41988086202e5edfc52ed10ea14db7964ce293e63b398a8b6e02cc66a2699d2f2462d7a0be0e6262a28a18d474ac292d1e7589e79fe5c72ded87e1edf43f659930a49592d2505b4dcc8880ee295a8aad1179375760119f446e166a006ddb3a65586668227e95c1639eac03a0e5f106589c41194a55d6427e4ab2d08309d1f6258ade88e86f0a7c4d782742c253582aea36fbd53edb8e3f92f475ec8f6a34da3822248cf8dba2257109c4bcda886c60b79f97910fcbdc57976a8956c95b1dfc3b50b94a0859b3bf996b4de27c4f3b4027939daa6c8a27aba652c3f8c5e10dd086b54ee3fdea2103c1a928595d5164b24e4b58ffb645a719307273ea6cdb11162961373905f0915cb41ae266e80fccd43710b536f17433ffcc1114f0977a8e4c4b175cc30a7a55e175842b4def58cbec6932fbaa6241aa03ac24985213cc0bb70fcda6172c7bbde8adc2fa664d24022026f17846c83889dd8a91d2e2a02769f5f9a16b1cb1dd8bcaa67b3e81cea5ff5e32be1078368ab9f0abfe3e001d787749c33e01010306a20572b2c9916a6373208bc1fd8e5156d85d1562e452ddfe57747fc94adca79dcda6a2544ed7c187ca06bb5f7f0caddfb33cd935e4fe65d392be5518bf6eac18b86b3e1167bb3a5e21582559965d67ef9dbe396b6e112d0d593a5aa068d3d900199316b480314f5e6d2a1fc9949fe78cadd36ef30d62344fa7cf7badfe0b4b0a67c471fe8a1bcb86acbf293bd60ebaadb68ca10ec14f9576e32e5f5af1382fe624aeda4b70a81ef3dd69649e883bbbd062b7720ac400cb88a52906c0aa42c97d8a536bfb3ae826057047cdd84d8805d352548be92301924d2a1171bf820e66e69759a2a972e183eddef032dc355157eb680738b937a53428332e729595b13634ed2ca336171274b991946838c7e890e8cddfe30aa4a795a9c91c6120679050b1b216199df3c28c38890495f900924cc92d0204c8ce5f359cb22f5f21b7918b43a126db753985d466d9eb5aa62209b4726b26b5e0f1eac50c4446d2f3d28ebc725beb2650be3064753833714675a7af674fac878ca11fab7428954c44568d6b99b21edd23afe7eaa0b06f6f133f0dc727620f3efb455376d972e80fe275de586e6d5ff7eee13d8ec0c70ac1fcf55db25781db019e4446991cd4642ea3728625ecd42450aa542152304af3645fb050986096cac5dfd5a7c3371b99b9051153789720067f7e400b015f11612226f68372aae6537ab79a1a5c123a2a179f9f3fcbaddced9b53f7270e0014ac517e4ff802d04889413b882aee8060a1620e5fe4644ed17b92ed70e1cba7c9f00de9673fc8ea8f3cb7fc7093f9f63e72a5f115b27fc883d37d434a9cf534faf4ed7f99ee2c45345d15198546fe4ba09d295ba725006677ede97f826c4e383cd018d07233d584cf714e0ab38c2ecbf9b7fcbc232d357d0de200d6646297658ad3e4cb41046d1ed68b54b21215cb8d5f05782e71db167f82902096b67fa19821a831963fedcde62c96bb56001e4ad80b11ab3ac0ce6dcbea988f81cf8394f646e43db3336a12d3b033176e0c987109ffb691625b0b6b003508b95feba13e6fe644d59f03cbf12f23d11530bde581e48d60bc236f16699759b0aefb6fb90e397b9ec89fdb5b003e654ee85f54c2afa3291b6d0bc109759d23a4848c23be205ed83e79bf8655c7b6a36d54c5ef032ef5b94baf9fe7de26603431d62ade0481c8e6614eeb426d9dd7dfbc8ca4f88eb538536d8a7320c0230971d7832c3c09f09fe018d5e144481dde366ae88e27180617549df08060d2e5879ae90f31dd3fc4b7c08fa10d4e7fe6627f12aadf25aa0f5994d9f5ac6cdc581e35a2008e37f67ca568a9abaa28365d81a6487122717b8bf5eef49c0424ec5019d142f769966493731b8c6820d27025ad78722530917af7bd9b83389440aef3c4f28d66c755f73921796ec9d0602222cd1f64040ea3527ab147f6275b7d5c3a5e8f1bbff66e3cb648ff5f5db181116dfb725b5ee331f8c5e29daa424b15f137e462b5f94c80b702eaa68d7b2d5c597a0c57f9846a33e6e53bf891338b030eece7cd12dba4c0e0523056eb62a6136a791cb3bee970453a16bbf30e00ee1b1e1b7ac56b1083cbf68ed9d4a4ebda7b33a06b92b3131b471a8a6131421725d5a896ef49c948596fe2bfc007628767b039bd74c452d58fc5d725f32a7680b6bfce386a45fc65f56c1adefa4e72499f8a89219c6b5abb95d536422d42920552cf289cc56f8fb7f38ecfb3b8d607d51e37fa612f8b1f5daaf5c5308d2b18389b4e17ed338f894899a338d08291805e8998adcdda50474f88dd11749836f18d3bab76a1b55d4ffaca7e44fa9c59799c57493b4256f53a61b014b914c16aaa8a2e7feeed489401dd2e66d6ef1cd6cb6d75a528c4f8277a2405d4f1c0f29147efd628c769af151149600b6246db70de203756f42e00b8d253899a52d4efa1030ec1bc8d01c2cd62aa49294363925abb9dec492b4c70c9adca65567ba9a7e541a0acd3e0c0c410274f46c96779629fbaf1ad8b9d6f3a5cae8f275c8ee8791bb6f27f35d6a9f1a69a8db38447901c647951c3145d961826c2915e8421532267d8e57a6fbd929373fe76f79fc5c622361873499aecf6d330480def0b84e71856c69845f12d820c089a512aeaba7cf11ccc15870b347a5c563a586e33b282755c972cbb55f0bbf37c60c5877f49b6ed41e29ba571f90857fdce626c460a4ae990f58db143994513a9ec940824a82c304dd2db5c9ea58c65cab9326e996e848a900f5fae14a8fdc7858e417a0d1e133a516b1840085b847903291fecc276139ec1a829ad939152ad1c78d8b1c650abd43f0eb48fe32a78741e2c45ec31ff35f13c9cf6b3dd710faf36b2ea4b2c59664035507f0d065dfd18cd9481732dbea371f3c335f4ac78853c5d28535017becf3f647e5d15d9bee35da0901ac2edab03931a75577ce13fc85b8337566d4502fb37d743a350ae001935469709be022a26f7745d4e58f221dc40ac88916dc1cb54fe7ade2e588fae92465eee2a16f210bd97779d82c54543aeb048bc3fc48912acd0e7a626b734778d274e37f6aabdb176f97f47355ade0ece67d7b5c1e13c09b310f16603c5aba4c8d032f78799cd55255748867e19647be91bef0342e59779e1260aee88f84bd2735e0ec5171e8b71a65a2beea6c3c6aa00e1b8fde39e31cd126d185dff62d8d5f847e78e38fd7aeb12067eb92d347ed0730c75fb4abcb3210c0cbc9a02abeca27937295ac8cf3cfd5c0788153697c46ffd023a07048ce5748a244023fa9cf8da894e1ea0a1fdb2ec9e6042634019a2db71b0c05ad93416414d5e4eb85190983da082094dacbce8eebad07987f087417ed4395c95ddd3258b8cc6a265fad9f6516c28ff3baffdfcaa4460b57d4d642f299048e0eca1be6e922d1200c9509712eb5bc582ea0ab3e5dc4514b9dd209664d71af115c52f966073e3bd11f290c047d4e20eafd5a4dd76231219e789abf4f33db0d17a842262543a5642136e0d894dded83f464761869829ef4dbd37a9eee907d5ffbed44c8668426ef83cc78418bccef20eb02b6a39988cb6a362a60f430c2df992348b866d95971b5fe94a05cbe9fb363dc5b869e41b47bbac0c1c482754da69feb57ad4c5dd5027bd6290653ef358e9003b49f3d6f309134bcc79c19e3e5b87a5c6f762784e5eb0dd7f06f323341b5f9fed06371b334c3279eb457c3f11a7dcd744f398d9064f3ef030e884f6d53e8791cdde190b81c8fd8089e86aa7427b9db941528bc7acbbe9a8ef02932713128740d8fbaf8f5972254787684641d6eb46ef0ce9575fc6d1041c686d3dde968e0c61881f7331c0977b580a605b82e214158e8731436698cb118ce815d22ba385841fcf94ab247301d1dddf962352ccec9f10eb760bfa99350ac6f3e3eede66662f2437b57efa47ef4bee3f722252278b26d9c4720ca6335bada819666bbae7d4fe3c89bc1553c2caee63d657637a37c3172541189e015e0c6db69a95148409c83878c3cc89604783aa539c09543bd90", 0x1000}, {&(0x7f0000001580)="405762ba9cbec9a7426936f240fe4dd5350553f86ac4b7203b727c59b27c2fa4c4f48ff13fde158d18adf06320db2d5c66246b70567805956d240c1a8c25afe701bfd3da484856371cbc9ac69f3404eb44b2c2c1c2f2c36029", 0x59}, {&(0x7f0000001600)="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", 0x1000, 0x400}], 0x42080, &(0x7f00000026c0)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x100, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10b00, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002700)=ANY=[@ANYRES32=r3, @ANYBLOB="000007003f00c87504003f00fffe978b0400d130fe6bad17539cd593c7ae8d03174c74810e0e3d184ef324b5517c8387d30711579c850ef2910725a3ab593a26fd1967037035d6b2"], 0x7) r4 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir}) 03:34:04 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) openat(r1, &(0x7f0000000080)='./file0\x00', 0xa9df4d0d5fc964f3, 0x1) 03:34:04 executing program 4 (fault-call:7 fault-nth:10): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:04 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f857150") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') r4 = semget(0x3, 0x2, 0x180) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000540)={{0x6, r5, r6, r7, r8, 0x0, 0x7}, 0xffffffffffffff55, 0xfffffffffffffffb}) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:04 executing program 0: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x9, 0x2}, 0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x8, {0xff, 0x22, 0x1000, 0x4, 0x8, 0x3a}, 0x9, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @remote, 0x6}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r4}, &(0x7f0000000240)=0x8) 03:34:04 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="664f1ccb419ec03f582a31acd68e886214123bcb6b32b9955c6c1e36561a3216d68a351b917dcd2d07d5a27cf9828e62e7580c0e4a9b8395363bd12e6b199412067417850a9f8f00f42e92dc22db060d94cd2e98b88af8a671a282303b62d66b9fd76a35e2c086446a6e39da8466899dd1d8990008f6ccb26aa7afa325b9c3d2ba19951534bec02eddb1debe5e9ff64c3470371b42d3144e8619ba94ae62fb1a7cbaf4447268bc452b44739268c12c2678801599cefbe534be7d53fce0a1decb") sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:05 executing program 7: r0 = socket$l2tp(0x18, 0x1, 0x1) write$binfmt_aout(r0, &(0x7f0000000300)={{0x107, 0x0, 0x7, 0x35b, 0x3de, 0x6, 0x145, 0x6}, "6a91f948e156128e761b4b5d324d6cf62c2bb67c8c3c3b51147765871bda14f1201fba114632b24ec460774c54728b2a0cfa0ed2af25153d9bfb08af74a0ed4f9a95be888bfe9396d774fdceda5afa48dcc832733307b7a5e06ce458e4ab91f63338e4deeb3dc88729c91f118d72057c6c", [[], [], [], [], [], []]}, 0x691) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') mlockall(0x1) sendfile(r1, r2, &(0x7f0000000040)=0x7000000, 0xd2) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000200)=@fragment={0x3b, 0x0, 0x3, 0x6, 0x0, 0x1f, 0x66}, 0x8) getsockopt$inet_dccp_buf(r2, 0x21, 0xd, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) [ 287.272072] FAULT_INJECTION: forcing a failure. [ 287.272072] name failslab, interval 1, probability 0, space 0, times 0 [ 287.283440] CPU: 1 PID: 18401 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 287.290474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.299851] Call Trace: [ 287.302479] dump_stack+0x1c9/0x2b4 [ 287.306130] ? dump_stack_print_info.cold.2+0x52/0x52 [ 287.311358] should_fail.cold.4+0xa/0x11 [ 287.315458] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 287.320631] ? find_held_lock+0x36/0x1c0 [ 287.324737] ? check_same_owner+0x340/0x340 [ 287.329080] ? __kernel_text_address+0xd/0x40 [ 287.333610] ? rcu_note_context_switch+0x730/0x730 [ 287.338570] __should_failslab+0x124/0x180 [ 287.342839] should_failslab+0x9/0x14 [ 287.346676] kmem_cache_alloc_trace+0x2cb/0x780 [ 287.351371] ? save_stack+0xa9/0xd0 [ 287.355021] p9_client_create+0x114/0x1770 [ 287.359269] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 287.364037] ? do_mount+0x581/0x30e0 [ 287.367797] ? __x64_sys_mount+0xbe/0x150 [ 287.371960] ? do_syscall_64+0x1b9/0x820 [ 287.376044] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.381445] ? p9_client_read+0xc60/0xc60 [ 287.385607] ? find_held_lock+0x36/0x1c0 [ 287.389720] ? __lockdep_init_map+0x105/0x590 [ 287.394238] ? lockdep_init_map+0x9/0x10 [ 287.398324] ? kasan_check_write+0x14/0x20 [ 287.402573] ? __init_rwsem+0x1cc/0x2a0 [ 287.406566] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 287.411619] ? rcu_read_lock_sched_held+0x108/0x120 [ 287.416663] ? __kmalloc_track_caller+0x5f5/0x760 [ 287.421519] ? save_stack+0xa9/0xd0 [ 287.425168] ? save_stack+0x43/0xd0 [ 287.428809] ? kasan_kmalloc+0xc4/0xe0 [ 287.432713] ? kmem_cache_alloc_trace+0x152/0x780 [ 287.437569] ? memcpy+0x45/0x50 [ 287.440871] v9fs_session_init+0x21a/0x1a80 [ 287.445211] ? find_held_lock+0x36/0x1c0 [ 287.449302] ? v9fs_show_options+0x7e0/0x7e0 [ 287.453731] ? kasan_check_read+0x11/0x20 [ 287.457891] ? rcu_is_watching+0x8c/0x150 [ 287.462052] ? rcu_pm_notify+0xc0/0xc0 [ 287.465966] ? v9fs_mount+0x61/0x900 [ 287.469700] ? rcu_read_lock_sched_held+0x108/0x120 [ 287.474750] ? kmem_cache_alloc_trace+0x616/0x780 [ 287.479631] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 287.485202] v9fs_mount+0x7c/0x900 [ 287.488768] mount_fs+0xae/0x328 [ 287.492172] vfs_kern_mount.part.34+0xdc/0x4e0 [ 287.496777] ? may_umount+0xb0/0xb0 [ 287.500420] ? _raw_read_unlock+0x22/0x30 [ 287.504581] ? __get_fs_type+0x97/0xc0 [ 287.508485] do_mount+0x581/0x30e0 [ 287.512055] ? copy_mount_string+0x40/0x40 [ 287.516305] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 287.521078] ? retint_kernel+0x10/0x10 [ 287.524995] ? copy_mount_options+0x1f0/0x380 [ 287.529504] ? copy_mount_options+0x202/0x380 [ 287.534020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.539571] ? copy_mount_options+0x285/0x380 [ 287.544102] ksys_mount+0x12d/0x140 [ 287.547769] __x64_sys_mount+0xbe/0x150 [ 287.551797] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 287.556866] do_syscall_64+0x1b9/0x820 [ 287.560785] ? syscall_return_slowpath+0x5e0/0x5e0 [ 287.565756] ? syscall_return_slowpath+0x31d/0x5e0 [ 287.570708] ? __switch_to_asm+0x34/0x70 [ 287.574826] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 287.580219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.585104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 287.590303] RIP: 0033:0x457089 [ 287.593506] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.612419] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:34:05 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f857150") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 287.620150] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 287.627464] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 287.634747] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 287.642039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 287.649406] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000a 03:34:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) listen(r1, 0x7fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3a, &(0x7f0000000100)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r4 = gettid() sched_setscheduler(r4, 0x1, &(0x7f0000000140)) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000200)='erspan0\x00') setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x42) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x84000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x802, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000080)={0x99, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 03:34:05 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="01000020000000000a00000000000000ff01000000000000000000000000000100000000000000000000153ce56bf51500400000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000003400000000000010000000000069afbb5e47fa2bd3941a3764a3247e80bcd6a9010b99d9711b337b52aaa53317e2010004000057bcf72dde60465093d719000000000000b98e02aa86480422d3ad2df77e1e0852"], 0x90) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$P9_ROPEN(r1, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x76, 0x2, 0x6}, 0x3ff}}, 0x18) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) socket$inet_sctp(0x2, 0x0, 0x84) 03:34:05 executing program 4 (fault-call:7 fault-nth:11): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:05 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f857150") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:05 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x5) [ 287.989071] FAULT_INJECTION: forcing a failure. [ 287.989071] name failslab, interval 1, probability 0, space 0, times 0 [ 288.000496] CPU: 0 PID: 18439 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 288.007532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.016908] Call Trace: [ 288.019519] dump_stack+0x1c9/0x2b4 [ 288.023172] ? dump_stack_print_info.cold.2+0x52/0x52 [ 288.028384] ? perf_trace_lock+0xde/0x920 [ 288.032559] should_fail.cold.4+0xa/0x11 [ 288.036652] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 288.041792] ? perf_trace_lock+0xde/0x920 [ 288.045974] ? zap_class+0x740/0x740 [ 288.049722] ? __radix_tree_replace+0x1fc/0x360 [ 288.054495] ? find_held_lock+0x36/0x1c0 [ 288.058617] ? check_same_owner+0x340/0x340 [ 288.062974] ? rcu_note_context_switch+0x730/0x730 [ 288.067941] __should_failslab+0x124/0x180 [ 288.072209] should_failslab+0x9/0x14 [ 288.076042] __kmalloc_track_caller+0x2c4/0x760 [ 288.080743] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 288.085877] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 288.090925] ? p9_client_create+0x48f/0x1770 [ 288.095358] kstrdup+0x39/0x70 [ 288.098581] p9_client_create+0x48f/0x1770 [ 288.102852] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 288.107650] ? __x64_sys_mount+0xbe/0x150 [ 288.111831] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.117231] ? p9_client_read+0xc60/0xc60 [ 288.121413] ? find_held_lock+0x36/0x1c0 [ 288.125535] ? __lockdep_init_map+0x105/0x590 [ 288.130078] ? kasan_check_write+0x14/0x20 [ 288.134348] ? __init_rwsem+0x1cc/0x2a0 [ 288.138356] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 288.143406] ? rcu_read_lock_sched_held+0x108/0x120 [ 288.148459] ? __kmalloc_track_caller+0x5f5/0x760 [ 288.153325] ? save_stack+0xa9/0xd0 [ 288.156982] ? save_stack+0x43/0xd0 [ 288.160635] ? kasan_kmalloc+0xc4/0xe0 [ 288.164552] ? kmem_cache_alloc_trace+0x152/0x780 [ 288.169416] ? memcpy+0x45/0x50 [ 288.172724] v9fs_session_init+0x21a/0x1a80 [ 288.177101] ? find_held_lock+0x36/0x1c0 [ 288.181208] ? v9fs_show_options+0x7e0/0x7e0 [ 288.185666] ? kasan_check_read+0x11/0x20 [ 288.189844] ? rcu_is_watching+0x8c/0x150 [ 288.194018] ? rcu_pm_notify+0xc0/0xc0 [ 288.197939] ? v9fs_mount+0x61/0x900 [ 288.201705] ? rcu_read_lock_sched_held+0x108/0x120 [ 288.206764] ? kmem_cache_alloc_trace+0x616/0x780 [ 288.211645] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 288.217211] v9fs_mount+0x7c/0x900 [ 288.220782] mount_fs+0xae/0x328 [ 288.224174] vfs_kern_mount.part.34+0xdc/0x4e0 [ 288.228778] ? may_umount+0xb0/0xb0 [ 288.232421] ? _raw_read_unlock+0x22/0x30 [ 288.236583] ? __get_fs_type+0x97/0xc0 [ 288.240496] do_mount+0x581/0x30e0 [ 288.244056] ? copy_mount_string+0x40/0x40 [ 288.248314] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 288.253089] ? retint_kernel+0x10/0x10 [ 288.256994] ? copy_mount_options+0x1e3/0x380 [ 288.261515] ? __sanitizer_cov_trace_pc+0x14/0x50 [ 288.266399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.271968] ? copy_mount_options+0x285/0x380 [ 288.276496] ksys_mount+0x12d/0x140 [ 288.280172] __x64_sys_mount+0xbe/0x150 [ 288.284169] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 288.289216] do_syscall_64+0x1b9/0x820 [ 288.293114] ? finish_task_switch+0x1d3/0x870 [ 288.297631] ? syscall_return_slowpath+0x5e0/0x5e0 [ 288.302580] ? syscall_return_slowpath+0x31d/0x5e0 [ 288.307534] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 288.312918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.317777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.322977] RIP: 0033:0x457089 03:34:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x7fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:05 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(0x0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xa, 0x2, 0x914, 0x4000000005}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000240)=""/250}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x20000000004, 0x4, 0xb, 0x0, r0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000040), &(0x7f0000000180)=""/181}, 0x18) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="7dc36eb661d0528adf1d96ca9f6d171bf5c744dce846e1e02367839bf3ea089544f3e3e792d81293c07b16", 0x2b}, {&(0x7f0000000340)="5779206388d49f18f6eb89cb0c8a2ec434b56347bba0babdea738afe640e26a9af4dc2cb4124c343dfa0f91be1e1ab82641f953c0c2d6e47b36579a6845ccb4389434bb421fc0af0438e553759026d1a67a7d7c1a1efc8a90d6a3ee50c4c5d6dcf7b46b543155fa7757f5a7d0efcd748b19fa0a5d40f7c88d67a0c3745ea", 0x7e}], 0x2) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) [ 288.326178] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.345095] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 288.352819] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 288.360095] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 288.367385] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 288.374667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 288.381941] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000b 03:34:06 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="850000002200000007000000000000009500000000000000569ab1b18d04d0770ea7b10c99865ef98520e8a3c08777235cd34701a284af96a23025b884254de71fb023cce066609e619a5436183a8aa77696e83e86ae075faa6bc60d03925f180a5d8ca8181600b496fb4cf0992afea204392c650d68f52238c0c170f950206e68c06a3a343f5cab32e19093d14fdf0a26e7ea4fd377d0020000000000000033cdbb"], &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) socketpair$inet6(0xa, 0xf, 0x831, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() r4 = getpgrp(0x0) ioctl$TIOCSBRK(r2, 0x5427) kcmp(r3, r4, 0x2, r2, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast1, @in6=@local}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000000240)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x36, 0x9d, &(0x7f00000000c0)="e46001923406080000000a9b86dd6a00000000072feb305660319056115082553800810000000000e8d5000000010000001400000000", &(0x7f0000000300)=""/157, 0xea76}, 0x28) 03:34:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x0, [0x4b564d02]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x506e, 0x80, 0x6, 0x100000001]}) 03:34:06 executing program 4 (fault-call:7 fault-nth:12): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:06 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_targets\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x87c, 0x4) 03:34:06 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x0, &(0x7f00000001c0)) 03:34:06 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe3, 0x23, &(0x7f0000000200)="26e6c1be885bab525a1fc85341707a3d03ff837488be24416b6b87ba7d9ba21b8eb8120a60b587d3de29ed9104d236a5ef00e09097f3cfd8d6ec39d00fa22b9dfce9a86acc6ce0826336f3cf3de84794746f6847014f7e1bb9b2eac5097ab46401a5e8c88c805ebc452d93a4ce650d80451808c46072d22effbc04cee65230fe491b3d469a11097f3353df17811cf68c3ca1e05ea593440300a7e9d7a371b41333765a542802b7399d3cf23ea0e11c57a6580d3302f9155e0ed542e1cd0032ec62fb686bd867e2d3ed86f98e8a2c5a65ec0714c6de893625a49919e7d28c7680227c08", &(0x7f0000000080)=""/35, 0x7}, 0x28) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sync_file_range(0xffffffffffffffff, 0x0, 0xb3, 0x0) 03:34:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="745f55271d66a10d5563ef223316fc0089af6def5be143b63b0da508dce01a325182c8d9464612167469f39507c641b8d07f09f5d4c2bc717e19ddade36667b28640de92a0961e237c8b867b4a22dda7a1901d82", 0x54, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e23, 0x62f3, @dev={0xfe, 0x80, [], 0x14}}, 0x1c) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r3, &(0x7f0000000140)='big_key\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, r4) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:06 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/44, 0x2c}], 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='\\\x00', 0xffffffffffffff9c}, 0x10) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f00000001c0)=""/236) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x81) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x1c9c380}}, &(0x7f000000dfe0)) clock_gettime(0x0, &(0x7f0000000040)={0x0}) clock_settime(0x0, &(0x7f0000000180)={r2}) [ 288.790575] FAULT_INJECTION: forcing a failure. [ 288.790575] name failslab, interval 1, probability 0, space 0, times 0 [ 288.802008] CPU: 0 PID: 18482 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 288.809505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.818868] Call Trace: [ 288.821475] dump_stack+0x1c9/0x2b4 [ 288.825129] ? dump_stack_print_info.cold.2+0x52/0x52 [ 288.830345] ? radix_tree_clear_tags+0xc0/0xc0 [ 288.834949] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 288.840510] should_fail.cold.4+0xa/0x11 [ 288.844609] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 288.849732] ? save_stack+0xa9/0xd0 [ 288.853376] ? save_stack+0x43/0xd0 [ 288.857023] ? __radix_tree_replace+0x1fc/0x360 [ 288.861711] ? find_held_lock+0x36/0x1c0 [ 288.865804] ? check_same_owner+0x340/0x340 [ 288.870140] ? rcu_note_context_switch+0x730/0x730 [ 288.875081] __should_failslab+0x124/0x180 [ 288.879333] should_failslab+0x9/0x14 [ 288.883145] __kmalloc_track_caller+0x2c4/0x760 [ 288.887824] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 288.892941] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 288.897967] ? p9_client_create+0x48f/0x1770 [ 288.902388] kstrdup+0x39/0x70 [ 288.905591] p9_client_create+0x48f/0x1770 [ 288.909843] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 288.915086] ? __x64_sys_mount+0xbe/0x150 [ 288.919246] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 288.924625] ? p9_client_read+0xc60/0xc60 [ 288.928787] ? find_held_lock+0x36/0x1c0 [ 288.932881] ? __lockdep_init_map+0x105/0x590 [ 288.937387] ? kasan_check_write+0x14/0x20 [ 288.941628] ? __init_rwsem+0x1cc/0x2a0 [ 288.945615] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 288.950644] ? rcu_read_lock_sched_held+0x108/0x120 [ 288.955685] ? __kmalloc_track_caller+0x5f5/0x760 [ 288.960529] ? save_stack+0xa9/0xd0 [ 288.964162] ? save_stack+0x43/0xd0 [ 288.967794] ? kasan_kmalloc+0xc4/0xe0 [ 288.971693] ? kmem_cache_alloc_trace+0x152/0x780 [ 288.976539] ? memcpy+0x45/0x50 [ 288.979829] v9fs_session_init+0x21a/0x1a80 [ 288.984158] ? find_held_lock+0x36/0x1c0 [ 288.988239] ? v9fs_show_options+0x7e0/0x7e0 [ 288.992663] ? kasan_check_read+0x11/0x20 [ 288.996821] ? rcu_is_watching+0x8c/0x150 [ 289.000972] ? rcu_pm_notify+0xc0/0xc0 [ 289.004963] ? v9fs_mount+0x61/0x900 [ 289.008686] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.013711] ? kmem_cache_alloc_trace+0x616/0x780 [ 289.018568] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 289.024114] v9fs_mount+0x7c/0x900 [ 289.027671] mount_fs+0xae/0x328 [ 289.031052] vfs_kern_mount.part.34+0xdc/0x4e0 [ 289.035641] ? may_umount+0xb0/0xb0 [ 289.039285] ? _raw_read_unlock+0x22/0x30 [ 289.043440] ? __get_fs_type+0x97/0xc0 [ 289.047339] do_mount+0x581/0x30e0 [ 289.050897] ? copy_mount_string+0x40/0x40 [ 289.055147] ? copy_mount_options+0x5f/0x380 [ 289.059574] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.064612] ? kmem_cache_alloc_trace+0x616/0x780 [ 289.069486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.075036] ? copy_mount_options+0x285/0x380 [ 289.079544] ksys_mount+0x12d/0x140 [ 289.083187] __x64_sys_mount+0xbe/0x150 [ 289.087165] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 289.092189] do_syscall_64+0x1b9/0x820 [ 289.096083] ? finish_task_switch+0x1d3/0x870 [ 289.100587] ? syscall_return_slowpath+0x5e0/0x5e0 [ 289.105525] ? syscall_return_slowpath+0x31d/0x5e0 [ 289.110461] ? __switch_to_asm+0x34/0x70 [ 289.114531] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 289.119907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.124761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.129957] RIP: 0033:0x457089 [ 289.133164] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.152073] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.159797] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 289.167075] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 289.174350] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 289.181634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:34:07 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x240, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f0000000380)=""/220, 0x86}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)="696f00e05b0598f7e928d6aa5e3c70abf64ae05beb044ff33067db69c8022fa910e643c8530b2b6d4ff17d2c6481f72caf51b72d4c8166f73aceb7e22dec0db299ed351871b2a64df56a479acb470c4300876956ce98650164fe652d31316af3bbd1c07b1ba3591371b791b071e69cb5135bdd5d16e1c53c97341fa2b84d52d37d4001285ef6760835db0e60684af68007c983f5cdd41b59d7f154bcbafa80d754e1cbd32781a65c0f841c08917a006596ee09bd5d7d77a5736eb3503747626ffc4b2d21268bcd790f56f6c2f568251b") getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r3, 0xffff}, 0x8) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000080), 0x4) sendfile(r1, r2, &(0x7f0000000040), 0xd2) 03:34:07 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000, 0xa3) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000140)=""/216) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000003580), 0x0, &(0x7f0000000340)=[{0x38, 0x0, 0x7, "44240f0300013c14eda95340ed7ed5c9e82fc03e83481540fecc30356e9c19e16c"}], 0x38}, 0x0) 03:34:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'ip6_vti0\x00', 0x400}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x4000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x1000) [ 289.188917] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000c 03:34:07 executing program 4 (fault-call:7 fault-nth:13): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:07 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x0, &(0x7f00000001c0)) 03:34:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e23}, 0x222) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000140)=0x20003fffffffe, 0x3c9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x100000001, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @loopback}}, 0x8, 0x9}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:07 executing program 7: syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x4041) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x79, 0x0, [0x277, 0x0, 0x40000108, 0x734]}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') sendfile(r0, r4, &(0x7f0000000040)=0x7000000, 0xd2) r5 = shmget(0x1, 0x2000, 0x802, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000200)=""/212) [ 289.554360] FAULT_INJECTION: forcing a failure. [ 289.554360] name failslab, interval 1, probability 0, space 0, times 0 [ 289.565835] CPU: 0 PID: 18520 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 289.572864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.582226] Call Trace: [ 289.584840] dump_stack+0x1c9/0x2b4 [ 289.588465] ? dump_stack_print_info.cold.2+0x52/0x52 [ 289.593649] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 289.598688] should_fail.cold.4+0xa/0x11 [ 289.602745] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 289.607854] ? __switch_to_asm+0x40/0x70 [ 289.611922] ? __switch_to_asm+0x34/0x70 [ 289.615984] ? __switch_to_asm+0x40/0x70 [ 289.620058] ? __switch_to_asm+0x34/0x70 [ 289.624125] ? __switch_to_asm+0x40/0x70 [ 289.628187] ? __switch_to_asm+0x34/0x70 [ 289.632261] ? __switch_to_asm+0x34/0x70 [ 289.636318] ? __switch_to_asm+0x40/0x70 [ 289.640369] ? __switch_to_asm+0x40/0x70 [ 289.644440] ? __switch_to_asm+0x34/0x70 [ 289.648504] ? __switch_to_asm+0x40/0x70 [ 289.652555] ? __schedule+0x884/0x1ec0 [ 289.656437] ? __sched_text_start+0x8/0x8 [ 289.660585] ? find_held_lock+0x36/0x1c0 [ 289.664677] ? check_same_owner+0x340/0x340 [ 289.669020] __should_failslab+0x124/0x180 [ 289.673266] should_failslab+0x9/0x14 [ 289.677068] __kmalloc_track_caller+0x2c4/0x760 [ 289.681730] ? p9_client_create+0x48f/0x1770 [ 289.686127] kstrdup+0x39/0x70 [ 289.689331] p9_client_create+0x48f/0x1770 [ 289.693555] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 289.698303] ? __x64_sys_mount+0xbe/0x150 [ 289.702453] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.707829] ? p9_client_read+0xc60/0xc60 [ 289.711972] ? find_held_lock+0x36/0x1c0 [ 289.716049] ? __lockdep_init_map+0x105/0x590 [ 289.720535] ? kasan_check_write+0x14/0x20 [ 289.724766] ? __init_rwsem+0x1cc/0x2a0 [ 289.728747] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 289.733814] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.738843] ? __kmalloc_track_caller+0x5f5/0x760 [ 289.743698] ? save_stack+0xa9/0xd0 [ 289.747331] ? save_stack+0x43/0xd0 [ 289.750959] ? kasan_kmalloc+0xc4/0xe0 03:34:07 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x4) sendfile(r0, r1, &(0x7f0000000040), 0x10000) 03:34:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x210901) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) getsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 289.754856] ? kmem_cache_alloc_trace+0x152/0x780 [ 289.759704] ? memcpy+0x45/0x50 [ 289.763023] v9fs_session_init+0x21a/0x1a80 [ 289.767360] ? find_held_lock+0x36/0x1c0 [ 289.771416] ? v9fs_show_options+0x7e0/0x7e0 [ 289.775832] ? kasan_check_read+0x11/0x20 [ 289.779993] ? rcu_is_watching+0x8c/0x150 [ 289.784153] ? rcu_pm_notify+0xc0/0xc0 [ 289.788068] ? v9fs_mount+0x61/0x900 [ 289.791802] ? rcu_read_lock_sched_held+0x108/0x120 [ 289.796845] ? kmem_cache_alloc_trace+0x616/0x780 [ 289.801715] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 289.807266] v9fs_mount+0x7c/0x900 [ 289.810827] mount_fs+0xae/0x328 [ 289.814212] vfs_kern_mount.part.34+0xdc/0x4e0 [ 289.818812] ? may_umount+0xb0/0xb0 [ 289.822456] ? _raw_read_unlock+0x22/0x30 [ 289.826614] ? __get_fs_type+0x97/0xc0 [ 289.830517] do_mount+0x581/0x30e0 [ 289.834061] ? do_raw_spin_unlock+0xa7/0x2f0 [ 289.838479] ? copy_mount_string+0x40/0x40 [ 289.842720] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 289.847482] ? retint_kernel+0x10/0x10 [ 289.851382] ? copy_mount_options+0x1f0/0x380 [ 289.855887] ? copy_mount_options+0x202/0x380 [ 289.860393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 289.865931] ? copy_mount_options+0x285/0x380 [ 289.870434] ksys_mount+0x12d/0x140 [ 289.874070] __x64_sys_mount+0xbe/0x150 [ 289.878046] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 289.883066] do_syscall_64+0x1b9/0x820 [ 289.886954] ? finish_task_switch+0x1d3/0x870 [ 289.891484] ? syscall_return_slowpath+0x5e0/0x5e0 [ 289.896439] ? syscall_return_slowpath+0x31d/0x5e0 [ 289.901376] ? __switch_to_asm+0x34/0x70 [ 289.905439] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 289.910815] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.915674] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 289.920863] RIP: 0033:0x457089 [ 289.924061] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.942964] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:34:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000280)) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1000000000000070, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000100)={0x0, 0x1, 0x7, {0xf83a, 0xffffffff7fffffff}, {0x80000001}, @period={0x5b, 0x6, 0x7ff, 0x800, 0x35ab, {0x4, 0x800000000000000, 0x4, 0xaed3}, 0x9, &(0x7f00000000c0)=[0x6, 0x3, 0x3d21, 0x5, 0xfd, 0x20, 0x8, 0x1000, 0x80000000]}}) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={r5, 0x10000}, 0x8) [ 289.950681] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 289.957953] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 289.965225] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 289.972493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 289.979771] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000d 03:34:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x80000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x6, 0x3]}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r3, 0x2, 0x3f, &(0x7f00000000c0)="6a9537ffc762f4d188896f0ab37ef345f01d208b0e2c6280113bc2d54fd1845a614c46f9cbfbfa9f7972e0b052f87fc643afd8a00952641f27b92dc3619fa99cd62fcec135b48782cfac9c8ddd425953708f89c13887c327d99c59ce0846259d5ac120dfb81882ac42ebb789654a630069a4a4fec67aacefa67f32e4ed372e8e21886f76f6fc5c8c7ca393a83ce4a8dae3a287773e73f49d6cbd867cf32171e4dcf6e0dfc2866cbebe5360f9ecb71c6c63bad3e7e9f030bf57846200cbbf5c55d06b4a79de8665ba01607d90170908b97f5c8fe43e60e4936a62d2b6f3b0e28d6ce9cf31f344344fec9801bfbff08c7dcd19f1d8", 0xf4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)=0x7fff) 03:34:07 executing program 4 (fault-call:7 fault-nth:14): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xbbf3}) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x20000) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)=0x7f) r2 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffff}) ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f0000000000)) 03:34:07 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x0, &(0x7f00000001c0)) 03:34:07 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip6_tables_matches\x00') sendfile(r0, r2, &(0x7f0000000040)=0x7000000, 0xd2) [ 290.350365] FAULT_INJECTION: forcing a failure. [ 290.350365] name failslab, interval 1, probability 0, space 0, times 0 [ 290.361810] CPU: 0 PID: 18557 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 290.368840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.378207] Call Trace: [ 290.380814] dump_stack+0x1c9/0x2b4 [ 290.384468] ? dump_stack_print_info.cold.2+0x52/0x52 [ 290.389680] ? __kernel_text_address+0xd/0x40 [ 290.394194] ? unwind_get_return_address+0x61/0xa0 [ 290.399148] should_fail.cold.4+0xa/0x11 [ 290.403230] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 290.408351] ? save_stack+0x43/0xd0 [ 290.411986] ? kasan_kmalloc+0xc4/0xe0 [ 290.415879] ? __kmalloc_track_caller+0x14a/0x760 [ 290.420728] ? kstrdup+0x39/0x70 [ 290.424101] ? p9_client_create+0x48f/0x1770 [ 290.428516] ? v9fs_session_init+0x21a/0x1a80 [ 290.433013] ? mount_fs+0xae/0x328 [ 290.436556] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 290.441315] ? do_mount+0x581/0x30e0 [ 290.445035] ? ksys_mount+0x12d/0x140 [ 290.448846] ? __x64_sys_mount+0xbe/0x150 [ 290.453001] ? do_syscall_64+0x1b9/0x820 [ 290.457065] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.462440] ? find_held_lock+0x36/0x1c0 [ 290.466530] ? check_same_owner+0x340/0x340 [ 290.470863] ? rcu_note_context_switch+0x730/0x730 [ 290.475808] __should_failslab+0x124/0x180 [ 290.480055] should_failslab+0x9/0x14 [ 290.483865] __kmalloc+0x2c8/0x760 [ 290.487418] ? match_wildcard+0x3c0/0x3c0 [ 290.491573] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 290.496591] ? match_strdup+0x5e/0xa0 [ 290.500405] match_strdup+0x5e/0xa0 [ 290.504038] p9_client_create+0x6c7/0x1770 [ 290.508288] ? p9_client_read+0xc60/0xc60 [ 290.512444] ? find_held_lock+0x36/0x1c0 [ 290.516528] ? __lockdep_init_map+0x105/0x590 [ 290.521033] ? kasan_check_write+0x14/0x20 [ 290.525273] ? __init_rwsem+0x1cc/0x2a0 [ 290.529254] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 290.534282] ? rcu_read_lock_sched_held+0x108/0x120 [ 290.539304] ? __kmalloc_track_caller+0x5f5/0x760 [ 290.544156] ? save_stack+0xa9/0xd0 [ 290.547786] ? save_stack+0x43/0xd0 [ 290.551418] ? kasan_kmalloc+0xc4/0xe0 [ 290.555310] ? kmem_cache_alloc_trace+0x152/0x780 [ 290.560156] ? memcpy+0x45/0x50 [ 290.563445] v9fs_session_init+0x21a/0x1a80 [ 290.567775] ? find_held_lock+0x36/0x1c0 [ 290.571856] ? v9fs_show_options+0x7e0/0x7e0 [ 290.576272] ? kasan_check_read+0x11/0x20 [ 290.580420] ? rcu_is_watching+0x8c/0x150 [ 290.584572] ? rcu_pm_notify+0xc0/0xc0 [ 290.588473] ? v9fs_mount+0x61/0x900 [ 290.592197] ? rcu_read_lock_sched_held+0x108/0x120 [ 290.597218] ? kmem_cache_alloc_trace+0x616/0x780 [ 290.602071] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 290.607623] v9fs_mount+0x7c/0x900 [ 290.611179] mount_fs+0xae/0x328 [ 290.614557] vfs_kern_mount.part.34+0xdc/0x4e0 [ 290.619144] ? may_umount+0xb0/0xb0 [ 290.622780] ? _raw_read_unlock+0x22/0x30 [ 290.626951] ? __get_fs_type+0x97/0xc0 [ 290.630850] do_mount+0x581/0x30e0 [ 290.634399] ? copy_mount_string+0x40/0x40 [ 290.638639] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 290.643405] ? retint_kernel+0x10/0x10 [ 290.647304] ? copy_mount_options+0x1a1/0x380 [ 290.651814] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 290.656670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 290.662212] ? copy_mount_options+0x285/0x380 [ 290.666716] ksys_mount+0x12d/0x140 [ 290.670378] __x64_sys_mount+0xbe/0x150 [ 290.674353] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 290.679372] do_syscall_64+0x1b9/0x820 [ 290.683263] ? finish_task_switch+0x1d3/0x870 [ 290.687761] ? syscall_return_slowpath+0x5e0/0x5e0 [ 290.692700] ? syscall_return_slowpath+0x31d/0x5e0 [ 290.697630] ? __switch_to_asm+0x34/0x70 [ 290.701699] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 290.707070] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 290.711922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 290.717113] RIP: 0033:0x457089 [ 290.720309] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.739212] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:34:07 executing program 1: keyctl$session_to_parent(0x12) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) recvfrom$llc(r1, &(0x7f0000000080)=""/131, 0x83, 0x10000, 0x0, 0x0) 03:34:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x280000, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x9) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)="91acbe962f92000000") preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:07 executing program 5: 03:34:07 executing program 6: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) 03:34:07 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000140)='io\x00') sendfile(r2, r0, &(0x7f0000000080), 0x9) sendfile(r0, r2, &(0x7f0000000040)=0x7000000, 0xd2) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x3) 03:34:07 executing program 0: [ 290.746926] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 290.754194] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 290.761463] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 290.768739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 290.776019] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000e 03:34:08 executing program 4 (fault-call:7 fault-nth:15): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:08 executing program 0: [ 291.114941] FAULT_INJECTION: forcing a failure. [ 291.114941] name failslab, interval 1, probability 0, space 0, times 0 [ 291.126267] CPU: 1 PID: 18582 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 291.133298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.142659] Call Trace: [ 291.145269] dump_stack+0x1c9/0x2b4 [ 291.148919] ? dump_stack_print_info.cold.2+0x52/0x52 [ 291.154135] should_fail.cold.4+0xa/0x11 [ 291.158231] ? __kernel_text_address+0xd/0x40 03:34:08 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:08 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000080)="696f008fafca685aeb3f4fa5134f3a5fb875a29a4a26565832884ec776ed898a937828059fd5beef0178afd7783220c0ec5be64bb9d7b5e3db3ceb2010cca307e1580380318a15834aa943e97468af139ec1a6d058baab48") sendfile(r0, r2, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:08 executing program 3: 03:34:08 executing program 5: [ 291.162750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 291.167869] ? __save_stack_trace+0x8d/0xf0 [ 291.172214] ? save_stack+0xa9/0xd0 [ 291.175853] ? save_stack+0x43/0xd0 [ 291.179493] ? __kasan_slab_free+0x11a/0x170 [ 291.183923] ? find_held_lock+0x36/0x1c0 [ 291.188026] ? check_same_owner+0x340/0x340 [ 291.192373] ? rcu_note_context_switch+0x730/0x730 [ 291.197323] __should_failslab+0x124/0x180 [ 291.201576] should_failslab+0x9/0x14 [ 291.205405] __kmalloc+0x2c8/0x760 [ 291.208962] ? kfree+0x111/0x260 03:34:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x7, 0x840) write$P9_ROPEN(r2, &(0x7f0000000100)={0x18, 0x71, 0x1, {{0x8a, 0x1, 0x1}, 0x1}}, 0x18) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x200000001, &(0x7f0000000040)=0x3, 0xfffffffffffffe1b) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:08 executing program 6: [ 291.212359] ? match_number.isra.0+0x19b/0x280 [ 291.216959] ? match_number.isra.0+0xbf/0x280 [ 291.221476] match_number.isra.0+0xbf/0x280 [ 291.225819] ? match_strdup+0xa0/0xa0 [ 291.229644] ? match_wildcard+0x3c0/0x3c0 [ 291.233813] ? do_syscall_64+0x1b9/0x820 [ 291.237900] match_int+0x23/0x30 [ 291.241283] parse_opts+0x32c/0x500 [ 291.244924] ? p9_fd_poll+0x2b0/0x2b0 [ 291.248746] ? kasan_check_read+0x11/0x20 [ 291.252893] ? rcu_is_watching+0x8c/0x150 [ 291.257038] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 291.262174] p9_fd_create+0x8b/0x3f0 [ 291.265898] ? p9_fd_show_options+0x1c0/0x1c0 [ 291.270387] ? lockdep_init_map+0x9/0x10 [ 291.274454] ? __raw_spin_lock_init+0x2d/0x100 [ 291.279056] p9_client_create+0x8ed/0x1770 [ 291.283311] ? p9_client_read+0xc60/0xc60 [ 291.287502] ? find_held_lock+0x36/0x1c0 [ 291.291615] ? __lockdep_init_map+0x105/0x590 [ 291.296137] ? kasan_check_write+0x14/0x20 [ 291.300394] ? __init_rwsem+0x1cc/0x2a0 [ 291.304576] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 291.309636] ? rcu_read_lock_sched_held+0x108/0x120 [ 291.314677] ? __kmalloc_track_caller+0x5f5/0x760 [ 291.319653] ? save_stack+0xa9/0xd0 [ 291.323299] ? save_stack+0x43/0xd0 [ 291.326942] ? kasan_kmalloc+0xc4/0xe0 [ 291.330831] ? kmem_cache_alloc_trace+0x152/0x780 [ 291.335672] ? memcpy+0x45/0x50 [ 291.338974] v9fs_session_init+0x21a/0x1a80 [ 291.343313] ? find_held_lock+0x36/0x1c0 [ 291.347401] ? v9fs_show_options+0x7e0/0x7e0 [ 291.351829] ? kasan_check_read+0x11/0x20 [ 291.356316] ? rcu_is_watching+0x8c/0x150 [ 291.360476] ? rcu_pm_notify+0xc0/0xc0 [ 291.364388] ? v9fs_mount+0x61/0x900 [ 291.368118] ? rcu_read_lock_sched_held+0x108/0x120 [ 291.373153] ? kmem_cache_alloc_trace+0x616/0x780 [ 291.378022] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 291.383580] v9fs_mount+0x7c/0x900 [ 291.387144] mount_fs+0xae/0x328 [ 291.390541] vfs_kern_mount.part.34+0xdc/0x4e0 [ 291.395137] ? may_umount+0xb0/0xb0 [ 291.398787] ? _raw_read_unlock+0x22/0x30 [ 291.402947] ? __get_fs_type+0x97/0xc0 [ 291.406852] do_mount+0x581/0x30e0 [ 291.410415] ? copy_mount_string+0x40/0x40 [ 291.414675] ? copy_mount_options+0x5f/0x380 [ 291.419101] ? rcu_read_lock_sched_held+0x108/0x120 [ 291.424140] ? kmem_cache_alloc_trace+0x616/0x780 [ 291.429011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 291.434557] ? _copy_from_user+0xdf/0x150 [ 291.438732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 291.444292] ? copy_mount_options+0x285/0x380 [ 291.448814] ksys_mount+0x12d/0x140 [ 291.452458] __x64_sys_mount+0xbe/0x150 [ 291.456709] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 291.461821] do_syscall_64+0x1b9/0x820 [ 291.465902] ? syscall_return_slowpath+0x5e0/0x5e0 [ 291.470855] ? syscall_return_slowpath+0x31d/0x5e0 [ 291.475814] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 291.481598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 291.486469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 291.491664] RIP: 0033:0x457089 [ 291.494863] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.513770] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 291.521740] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 291.529035] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 291.536310] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 291.543585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 291.550887] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000000f [ 291.558644] 9pnet: Insufficient options for proto=fd 03:34:08 executing program 5: 03:34:08 executing program 0: 03:34:08 executing program 6: 03:34:08 executing program 3: 03:34:08 executing program 4 (fault-call:7 fault-nth:16): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:08 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:08 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000003, 0x89) 03:34:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000280)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x50, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, @in={0x2, 0x4e23, @rand_addr=0x1}]}, &(0x7f00000001c0)=0x10) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYBLOB="34000000f86c35e1da360c79cd857038391271f66e0f538b0810c757011e9ee305e3ce9556b6b7ad8e220000000000000000000000000000837005766ce831662b884b9c3eac4508783718d90558d1fb4f10795003ca46ef84a877833a835457c697200006b63286a2f4b33034e05bf11a2de8daefac10ded854b3539524b63e2faf873e52e293e1ea6cab6c5f80bf8e6f4a4f26d52b16194c90f89cafbc492733dab36e3cb49c8b06281b3cf517d25c0a817913eb7338d4d3b10f0cb7bc3847eba8779e06286abf9f967d2253096dd467a0001d1e40dd9080861b89e7d11cc45a56ff219216735af2052e7603b4cca4dd75d9a57d"], &(0x7f0000000240)=0x3c) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:09 executing program 3: [ 291.830753] FAULT_INJECTION: forcing a failure. [ 291.830753] name failslab, interval 1, probability 0, space 0, times 0 [ 291.842253] CPU: 0 PID: 18621 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 291.849285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.858646] Call Trace: [ 291.861261] dump_stack+0x1c9/0x2b4 [ 291.864913] ? dump_stack_print_info.cold.2+0x52/0x52 [ 291.870130] should_fail.cold.4+0xa/0x11 [ 291.874306] ? __kernel_text_address+0xd/0x40 03:34:09 executing program 5: [ 291.878823] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 291.883946] ? __save_stack_trace+0x8d/0xf0 [ 291.888297] ? save_stack+0xa9/0xd0 [ 291.891943] ? save_stack+0x43/0xd0 [ 291.895587] ? __kasan_slab_free+0x11a/0x170 [ 291.900034] ? find_held_lock+0x36/0x1c0 [ 291.904134] ? check_same_owner+0x340/0x340 [ 291.908479] ? rcu_note_context_switch+0x730/0x730 [ 291.913430] __should_failslab+0x124/0x180 [ 291.917689] should_failslab+0x9/0x14 [ 291.921504] __kmalloc+0x2c8/0x760 [ 291.925060] ? kfree+0x111/0x260 03:34:09 executing program 0 (fault-call:5 fault-nth:0): io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x80180) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f00000003c0)="b893d888ffff8bb576eb921b7f3d1e21fe24a0a1dc3e1e84bb0ab9071086f856281c83e96abd0cfbb5e4314e7be78c70f8ac6d415840f88dda27c702ce69ebb1eb727a469145616b6f640c9f6280ecc0fb0dea256150c65b8075ae0c45cc8335521f977b82afffee67bcbb8205", 0x6d, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) sendto$inet6(r2, &(0x7f00000000c0)='E', 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x5430e503) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="30ac43a0bf9817ac71397288c13ceeb3087ec59c1580b435b0154b496852454ae58e2220c6d1a78b1955fa1afb6f0a300a43c09e44c713137b0b56b2c4e716e7773486a2219dae7d9bd5a9a3fb1b81683a0d15026516fb5b9f85e782bd4d0214834e4d624e8182e2a0ced21b9c314d3b7bae4a6c76b96ad40e78e4c7ba687139e4f5f0aa04b5a6c4e000333d18f64353eb8202d52ab98e5d483b64807e540e0bab91a6e5c0b31d339498af3b910e3641df097c6be19fa41ed449c648e591e7b4c0f6313265528807c1ea3d22649974d11ef343a07556d5"], 0x1) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="c4", 0x1}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) [ 291.928441] ? match_number.isra.0+0x19b/0x280 [ 291.933497] ? match_number.isra.0+0xbf/0x280 [ 291.938011] match_number.isra.0+0xbf/0x280 [ 291.942354] ? match_strdup+0xa0/0xa0 [ 291.946146] ? match_wildcard+0x3c0/0x3c0 [ 291.950299] ? do_syscall_64+0x1b9/0x820 [ 291.954376] match_int+0x23/0x30 [ 291.957752] parse_opts+0x32c/0x500 [ 291.961387] ? p9_fd_poll+0x2b0/0x2b0 [ 291.965181] ? kasan_check_read+0x11/0x20 [ 291.969318] ? rcu_is_watching+0x8c/0x150 [ 291.973469] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 291.978587] p9_fd_create+0x8b/0x3f0 [ 291.982301] ? p9_fd_show_options+0x1c0/0x1c0 [ 291.986808] ? lockdep_init_map+0x9/0x10 [ 291.990893] ? __raw_spin_lock_init+0x2d/0x100 [ 291.995497] p9_client_create+0x8ed/0x1770 [ 291.999747] ? p9_client_read+0xc60/0xc60 [ 292.003892] ? find_held_lock+0x36/0x1c0 [ 292.007969] ? __lockdep_init_map+0x105/0x590 [ 292.012484] ? kasan_check_write+0x14/0x20 [ 292.016722] ? __init_rwsem+0x1cc/0x2a0 [ 292.020692] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 292.025700] ? rcu_read_lock_sched_held+0x108/0x120 [ 292.030709] ? __kmalloc_track_caller+0x5f5/0x760 [ 292.035538] ? save_stack+0xa9/0xd0 [ 292.039150] ? save_stack+0x43/0xd0 [ 292.042768] ? kasan_kmalloc+0xc4/0xe0 [ 292.046665] ? kmem_cache_alloc_trace+0x152/0x780 [ 292.051495] ? memcpy+0x45/0x50 [ 292.054783] v9fs_session_init+0x21a/0x1a80 [ 292.059128] ? find_held_lock+0x36/0x1c0 [ 292.063200] ? v9fs_show_options+0x7e0/0x7e0 [ 292.067617] ? kasan_check_read+0x11/0x20 [ 292.071763] ? rcu_is_watching+0x8c/0x150 [ 292.075919] ? rcu_pm_notify+0xc0/0xc0 [ 292.079812] ? v9fs_mount+0x61/0x900 [ 292.083571] ? rcu_read_lock_sched_held+0x108/0x120 [ 292.088575] ? kmem_cache_alloc_trace+0x616/0x780 [ 292.093413] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 292.098963] v9fs_mount+0x7c/0x900 [ 292.102496] mount_fs+0xae/0x328 [ 292.105857] vfs_kern_mount.part.34+0xdc/0x4e0 [ 292.110432] ? may_umount+0xb0/0xb0 [ 292.114048] ? _raw_read_unlock+0x22/0x30 [ 292.118196] ? __get_fs_type+0x97/0xc0 [ 292.122087] do_mount+0x581/0x30e0 [ 292.125626] ? copy_mount_string+0x40/0x40 [ 292.129905] ? copy_mount_options+0x5f/0x380 [ 292.134336] ? rcu_read_lock_sched_held+0x108/0x120 [ 292.139370] ? kmem_cache_alloc_trace+0x616/0x780 [ 292.144221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 292.149763] ? _copy_from_user+0xdf/0x150 [ 292.153926] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 292.159464] ? copy_mount_options+0x285/0x380 [ 292.163967] ksys_mount+0x12d/0x140 [ 292.167602] __x64_sys_mount+0xbe/0x150 [ 292.171597] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 292.176618] do_syscall_64+0x1b9/0x820 [ 292.180507] ? finish_task_switch+0x1d3/0x870 [ 292.185014] ? syscall_return_slowpath+0x5e0/0x5e0 [ 292.189947] ? syscall_return_slowpath+0x31d/0x5e0 [ 292.194877] ? __switch_to_asm+0x34/0x70 [ 292.198940] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 292.204309] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.209157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.214345] RIP: 0033:0x457089 [ 292.217540] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.236442] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.244154] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 292.251419] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 292.258689] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 292.265960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 292.273226] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000010 03:34:09 executing program 4 (fault-call:7 fault-nth:17): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 292.280907] 9pnet: Insufficient options for proto=fd 03:34:09 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x6, 0x7}}, 0x28) 03:34:09 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000340)="6e65742f626e657000d7fcd5ed6921dbd8d403c498ca6c8753955cb70868c0849d56287b4538af3f8acfdba7b6169c6a36c6f0c6c49b3c9b6cab36bd01dbed3e0fc6c352edc480aff30004231de14869d7310365228adb7818e5c9160bcaf561e6f0a502051e81234dcdf32a3c7363aee13c933c66dc35df15a2cae634953eac3ac98b0203bc5f8361a7ca2b0218cacd0461d6b3cfa59b9b6ba5cf088dbe8e50a655c5ef1fa0fb791201c5aa0f0e70a6d104e6e1e2dd2f8d91552e2c06333a15a74bcee6781329d0832dc2743b5cf2404141cb6c70600602560000000000000000") sendfile(0xffffffffffffffff, r1, &(0x7f0000000040), 0xd2) 03:34:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x38000000, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x80}, 0x8) listen(r0, 0x7fff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x52940, 0x0) ioctl(r5, 0x10001, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000040)=0x20003fffffffd, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0xae6}}}, &(0x7f0000000240)=0x84) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000080)=0x200000000000000) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="24000000520007041dfffd946f61830002200a00090000e7fe1c40000c1ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ebea8653b1cc7e63975c02007b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 292.546020] FAULT_INJECTION: forcing a failure. [ 292.546020] name failslab, interval 1, probability 0, space 0, times 0 [ 292.557340] CPU: 1 PID: 18640 Comm: syz-executor0 Not tainted 4.18.0+ #190 [ 292.564377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.573748] Call Trace: [ 292.576367] dump_stack+0x1c9/0x2b4 [ 292.580021] ? dump_stack_print_info.cold.2+0x52/0x52 [ 292.585242] should_fail.cold.4+0xa/0x11 [ 292.589329] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 292.594460] ? __lock_acquire+0x7fc/0x5020 [ 292.598719] ? _parse_integer+0x13b/0x190 [ 292.602891] ? graph_lock+0x170/0x170 [ 292.606730] ? find_held_lock+0x36/0x1c0 [ 292.610840] ? check_same_owner+0x340/0x340 [ 292.615197] ? lock_release+0xa30/0xa30 [ 292.619200] ? rcu_note_context_switch+0x730/0x730 [ 292.624148] __should_failslab+0x124/0x180 [ 292.628404] should_failslab+0x9/0x14 [ 292.632229] kmem_cache_alloc+0x2af/0x760 [ 292.636406] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 292.641960] ? _copy_from_user+0xdf/0x150 [ 292.646122] io_submit_one+0x1a2/0xef0 [ 292.650023] ? aio_poll+0x1450/0x1450 [ 292.653850] ? lock_downgrade+0x8f0/0x8f0 [ 292.658017] ? lock_release+0xa30/0xa30 [ 292.662003] ? check_same_owner+0x340/0x340 [ 292.666338] ? __lock_is_held+0xb5/0x140 [ 292.670435] __x64_sys_io_submit+0x1b7/0x550 [ 292.674867] ? __ia32_sys_io_destroy+0x550/0x550 [ 292.679647] ? __ia32_sys_read+0xb0/0xb0 [ 292.683737] ? syscall_slow_exit_work+0x500/0x500 [ 292.688593] ? ksys_ioctl+0x81/0xd0 [ 292.692235] ? do_syscall_64+0x9a/0x820 [ 292.696230] do_syscall_64+0x1b9/0x820 [ 292.700135] ? __ia32_sys_io_destroy+0x550/0x550 [ 292.704906] ? do_syscall_64+0x1b9/0x820 [ 292.708977] ? finish_task_switch+0x1d3/0x870 [ 292.713482] ? syscall_return_slowpath+0x5e0/0x5e0 [ 292.718423] ? syscall_return_slowpath+0x31d/0x5e0 [ 292.723367] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 292.728757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.733643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 292.738842] RIP: 0033:0x457089 [ 292.742043] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.760952] RSP: 002b:00007fcf14855c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 292.768677] RAX: ffffffffffffffda RBX: 00007fcf148566d4 RCX: 0000000000457089 [ 292.775954] RDX: 00000000200001c0 RSI: 0000000020000080 RDI: 00007fcf14831000 [ 292.783230] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:34:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f00000001c0), 0x168, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x14}]}, 0x34}}, 0x10) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x391000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000000c0)={0x3, 0x80, 0x0, 0x4, 0x5a6b}) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000100)) [ 292.790505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 292.797784] R13: 00000000004cd260 R14: 00000000004c3d57 R15: 0000000000000000 03:34:10 executing program 6: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x190, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, &(0x7f0000000300), &(0x7f0000000a80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x8100, 'bcsf0\x00\x00\x00\x00\b\x00', "73697430000002000000ffff00", 'bond0\x00', 'veth0\x00', @broadcast, [], @empty, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8, {{0x1, 0x0, 0x0, 0x1}}}, @vlan={'vlan\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x208) fgetxattr(r0, &(0x7f0000000000)=@random={'os2.', 'bond0\x00'}, &(0x7f0000000c40)=""/4096, 0x1000) r1 = request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)='AUDIT\x00', 0xfffffffffffffff9) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0xc02, 0x0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)) r3 = dup2(r2, r0) bind$alg(r3, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ecb-camellia-aesni-avx2,vmac(aes-asm))\x00'}, 0x58) [ 292.873514] FAULT_INJECTION: forcing a failure. [ 292.873514] name failslab, interval 1, probability 0, space 0, times 0 [ 292.884839] CPU: 0 PID: 18650 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 292.891866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.901223] Call Trace: [ 292.903820] dump_stack+0x1c9/0x2b4 [ 292.907461] ? dump_stack_print_info.cold.2+0x52/0x52 [ 292.912855] should_fail.cold.4+0xa/0x11 [ 292.917430] ? __kernel_text_address+0xd/0x40 03:34:10 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="53fb00ea91f31060f1c5679e07cb247acd4a4267ec5728c971816da42f623624e67e2b0e3075456608a03679f2a596b3b68ec066841644d567") ioctl$RTC_VL_CLR(r1, 0x7014) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) [ 292.921943] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 292.927063] ? __save_stack_trace+0x8d/0xf0 [ 292.931399] ? save_stack+0xa9/0xd0 [ 292.935070] ? save_stack+0x43/0xd0 [ 292.938692] ? __kasan_slab_free+0x11a/0x170 [ 292.943093] ? find_held_lock+0x36/0x1c0 [ 292.947181] ? check_same_owner+0x340/0x340 [ 292.951513] ? rcu_note_context_switch+0x730/0x730 [ 292.956442] __should_failslab+0x124/0x180 [ 292.960676] should_failslab+0x9/0x14 [ 292.964468] __kmalloc+0x2c8/0x760 [ 292.967994] ? kfree+0x111/0x260 [ 292.971453] ? match_number.isra.0+0x19b/0x280 [ 292.976031] ? match_number.isra.0+0xbf/0x280 [ 292.980518] match_number.isra.0+0xbf/0x280 [ 292.984845] ? match_strdup+0xa0/0xa0 [ 292.988669] ? match_wildcard+0x3c0/0x3c0 [ 292.992839] ? do_syscall_64+0x1b9/0x820 [ 292.996902] match_int+0x23/0x30 [ 293.000306] parse_opts+0x32c/0x500 [ 293.003930] ? p9_fd_poll+0x2b0/0x2b0 [ 293.007743] ? kasan_check_read+0x11/0x20 [ 293.011888] ? rcu_is_watching+0x8c/0x150 [ 293.016035] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 293.021155] p9_fd_create+0x8b/0x3f0 [ 293.024875] ? p9_fd_show_options+0x1c0/0x1c0 [ 293.029388] ? lockdep_init_map+0x9/0x10 [ 293.033457] ? __raw_spin_lock_init+0x2d/0x100 [ 293.038029] p9_client_create+0x8ed/0x1770 [ 293.042258] ? p9_client_read+0xc60/0xc60 [ 293.046392] ? find_held_lock+0x36/0x1c0 [ 293.050478] ? __lockdep_init_map+0x105/0x590 [ 293.055060] ? kasan_check_write+0x14/0x20 [ 293.059283] ? __init_rwsem+0x1cc/0x2a0 [ 293.063246] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 293.068266] ? rcu_read_lock_sched_held+0x108/0x120 [ 293.073288] ? __kmalloc_track_caller+0x5f5/0x760 [ 293.078119] ? save_stack+0xa9/0xd0 [ 293.081736] ? save_stack+0x43/0xd0 [ 293.085355] ? kasan_kmalloc+0xc4/0xe0 [ 293.089260] ? kmem_cache_alloc_trace+0x152/0x780 [ 293.094108] ? memcpy+0x45/0x50 [ 293.097381] v9fs_session_init+0x21a/0x1a80 [ 293.101707] ? find_held_lock+0x36/0x1c0 [ 293.105775] ? v9fs_show_options+0x7e0/0x7e0 [ 293.110201] ? kasan_check_read+0x11/0x20 [ 293.114346] ? rcu_is_watching+0x8c/0x150 [ 293.118493] ? rcu_pm_notify+0xc0/0xc0 [ 293.122376] ? v9fs_mount+0x61/0x900 [ 293.126081] ? rcu_read_lock_sched_held+0x108/0x120 [ 293.131089] ? kmem_cache_alloc_trace+0x616/0x780 [ 293.135937] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 293.141596] v9fs_mount+0x7c/0x900 [ 293.145145] mount_fs+0xae/0x328 [ 293.148514] vfs_kern_mount.part.34+0xdc/0x4e0 [ 293.153096] ? may_umount+0xb0/0xb0 [ 293.156721] ? _raw_read_unlock+0x22/0x30 [ 293.160868] ? __get_fs_type+0x97/0xc0 [ 293.164780] do_mount+0x581/0x30e0 [ 293.168334] ? copy_mount_string+0x40/0x40 [ 293.172562] ? copy_mount_options+0x5f/0x380 [ 293.176958] ? rcu_read_lock_sched_held+0x108/0x120 [ 293.181964] ? kmem_cache_alloc_trace+0x616/0x780 [ 293.186808] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.192356] ? _copy_from_user+0xdf/0x150 [ 293.196510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.202056] ? copy_mount_options+0x285/0x380 [ 293.206541] ksys_mount+0x12d/0x140 [ 293.210158] __x64_sys_mount+0xbe/0x150 [ 293.214120] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 293.219141] do_syscall_64+0x1b9/0x820 [ 293.223030] ? finish_task_switch+0x1d3/0x870 [ 293.229169] ? syscall_return_slowpath+0x5e0/0x5e0 [ 293.234102] ? syscall_return_slowpath+0x31d/0x5e0 [ 293.239028] ? __switch_to_asm+0x34/0x70 [ 293.243092] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 293.248460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.253291] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.258466] RIP: 0033:0x457089 [ 293.261666] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.280597] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.288295] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 293.295552] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 293.302823] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 293.310078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 293.317334] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000011 [ 293.325620] 9pnet: Insufficient options for proto=fd 03:34:10 executing program 0 (fault-call:5 fault-nth:1): io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rfcomm\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:10 executing program 4 (fault-call:7 fault-nth:18): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x40800, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000480)={r0, r0, 0x0, 0x800, &(0x7f0000000380)="ee8b79ec23605fff0ea76f6ed8e6ac69d425614467be17bb7a965aca8ef0174e93931162e95b219c2d6b775a03b66d42ad8932995ca323e09b6a69dd574169d08e1df5e37932876e4a8f2727d94b8ec1750cdb7bb504cbc0e3a03c1e20b40e7b3e4a7d56b9b96e0fd40d1e0798fae4d4f5b97b1a2cc6d0d54b1281a7c8f5d3868d352b03e272ed2692e197c80985cba7a2ce9a46f7cb238cf95dec7d1ca0eb3f66a6c942ba51756f6fa929c2f206dd4213601cc425968c9e23315d3d7c6a8c81396752d13f6a4b8775a42087a401178b6ce181a820559c3a9824481715569f260b17871696", 0x0, 0x100000000, 0x1, 0x8, 0x0, 0x3, 0xfffffffffffffe01, "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"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x400002) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000140)) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') socket$inet6(0xa, 0x3, 0x0) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f0000000680), 0xc, &(0x7f00005a6ff0)={&(0x7f00000002c0)=@updsa={0x154, 0x1a, 0x9, 0x0, 0x0, {{@in6=@local, @in=@remote}, {@in=@dev, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1c, 0x17, {0x2000000}}, @algo_auth={0x48, 0x1, {{'ghash-generic\x00'}}}]}, 0x154}}, 0x0) r1 = memfd_create(&(0x7f0000000000)='vmnet1)^\x00', 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2b}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80}]}]}, 0x44}}, 0x8000) [ 293.429154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 293.442533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 03:34:10 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x2) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x4ad, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) write(r0, &(0x7f00000001c0)='5', 0x1) r2 = memfd_create(&(0x7f0000000440)="486e9995514cc39f84ba65a8bb9bc95584597b6c67769e62d997502e9c847f395c2e679c0abc73014c567a59ed9e7bde7977ad0b37bcecb8044e88b196b7", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) 03:34:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8, 0x2, 0x400, 0xfffffffffffff471}]}) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[], 0x23f) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x1013, r1, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f00000004c0)) 03:34:10 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0)=0xa299, 0x4) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x200001, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f00000013c0)={'nat\x00'}, &(0x7f0000001440)=0x78) sendfile(r0, r2, &(0x7f0000000040)=0x7000000, 0xd2) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xfff}, &(0x7f0000000240)=0x8) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000003c0)=""/4096) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001540)=ANY=[@ANYRES16=0x0, @ANYBLOB="9217df32fa2b20160b8c5bcd25f22086f35cc4e9bb192e0000000000000000"], &(0x7f0000000380)=0x2) 03:34:10 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='\x00\x00\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) 03:34:10 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') sendfile(r0, r1, &(0x7f0000000000), 0x40000080000006) llistxattr(&(0x7f0000000040)='\x00', &(0x7f00000000c0)=""/114, 0x72) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x1000) [ 293.664267] FAULT_INJECTION: forcing a failure. [ 293.664267] name failslab, interval 1, probability 0, space 0, times 0 [ 293.675626] CPU: 0 PID: 18684 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 293.682657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.692019] Call Trace: [ 293.694644] dump_stack+0x1c9/0x2b4 [ 293.698327] ? dump_stack_print_info.cold.2+0x52/0x52 [ 293.703543] should_fail.cold.4+0xa/0x11 [ 293.707637] ? __kernel_text_address+0xd/0x40 [ 293.712175] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 293.717285] ? __save_stack_trace+0x8d/0xf0 [ 293.721601] ? save_stack+0xa9/0xd0 [ 293.725217] ? save_stack+0x43/0xd0 [ 293.728859] ? __kasan_slab_free+0x11a/0x170 [ 293.733261] ? find_held_lock+0x36/0x1c0 [ 293.737322] ? check_same_owner+0x340/0x340 [ 293.741644] ? rcu_note_context_switch+0x730/0x730 [ 293.746580] __should_failslab+0x124/0x180 [ 293.750821] should_failslab+0x9/0x14 [ 293.754631] __kmalloc+0x2c8/0x760 [ 293.758160] ? kfree+0x111/0x260 [ 293.761523] ? match_number.isra.0+0x19b/0x280 [ 293.766109] ? match_number.isra.0+0xbf/0x280 [ 293.770610] match_number.isra.0+0xbf/0x280 [ 293.774924] ? match_strdup+0xa0/0xa0 [ 293.778712] ? match_wildcard+0x3c0/0x3c0 [ 293.782860] ? do_syscall_64+0x1b9/0x820 [ 293.786926] match_int+0x23/0x30 [ 293.790283] parse_opts+0x32c/0x500 [ 293.793906] ? p9_fd_poll+0x2b0/0x2b0 [ 293.797699] ? kasan_check_read+0x11/0x20 [ 293.801837] ? rcu_is_watching+0x8c/0x150 [ 293.805976] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 293.811079] p9_fd_create+0x8b/0x3f0 [ 293.814803] ? p9_fd_show_options+0x1c0/0x1c0 [ 293.819307] ? lockdep_init_map+0x9/0x10 [ 293.823372] ? __raw_spin_lock_init+0x2d/0x100 [ 293.827955] p9_client_create+0x8ed/0x1770 [ 293.832185] ? p9_client_read+0xc60/0xc60 [ 293.836322] ? find_held_lock+0x36/0x1c0 [ 293.840378] ? __lockdep_init_map+0x105/0x590 [ 293.844863] ? kasan_check_write+0x14/0x20 [ 293.849083] ? __init_rwsem+0x1cc/0x2a0 [ 293.853043] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 293.858052] ? rcu_read_lock_sched_held+0x108/0x120 [ 293.863095] ? __kmalloc_track_caller+0x5f5/0x760 [ 293.867925] ? save_stack+0xa9/0xd0 [ 293.871539] ? save_stack+0x43/0xd0 [ 293.875149] ? kasan_kmalloc+0xc4/0xe0 [ 293.879045] ? kmem_cache_alloc_trace+0x152/0x780 [ 293.883885] ? memcpy+0x45/0x50 [ 293.887185] v9fs_session_init+0x21a/0x1a80 [ 293.891518] ? find_held_lock+0x36/0x1c0 [ 293.895570] ? v9fs_show_options+0x7e0/0x7e0 [ 293.899967] ? kasan_check_read+0x11/0x20 [ 293.904110] ? rcu_is_watching+0x8c/0x150 [ 293.908259] ? rcu_pm_notify+0xc0/0xc0 [ 293.912141] ? v9fs_mount+0x61/0x900 [ 293.915855] ? rcu_read_lock_sched_held+0x108/0x120 [ 293.920874] ? kmem_cache_alloc_trace+0x616/0x780 [ 293.925720] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 293.931284] v9fs_mount+0x7c/0x900 [ 293.934828] mount_fs+0xae/0x328 [ 293.938212] vfs_kern_mount.part.34+0xdc/0x4e0 [ 293.942813] ? may_umount+0xb0/0xb0 [ 293.946444] ? _raw_read_unlock+0x22/0x30 [ 293.950592] ? __get_fs_type+0x97/0xc0 [ 293.954483] do_mount+0x581/0x30e0 [ 293.958011] ? do_raw_spin_unlock+0xa7/0x2f0 [ 293.962412] ? copy_mount_string+0x40/0x40 [ 293.966654] ? copy_mount_options+0x5f/0x380 [ 293.971090] ? rcu_read_lock_sched_held+0x108/0x120 [ 293.976120] ? kmem_cache_alloc_trace+0x616/0x780 [ 293.980955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.986489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.992014] ? copy_mount_options+0x285/0x380 [ 293.996497] ksys_mount+0x12d/0x140 [ 294.000120] __x64_sys_mount+0xbe/0x150 [ 294.004081] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 294.009089] do_syscall_64+0x1b9/0x820 [ 294.012969] ? syscall_return_slowpath+0x5e0/0x5e0 [ 294.017885] ? syscall_return_slowpath+0x31d/0x5e0 [ 294.022843] ? __switch_to_asm+0x34/0x70 [ 294.026908] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 294.032260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.037092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.042264] RIP: 0033:0x457089 [ 294.045442] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:34:11 executing program 4 (fault-call:7 fault-nth:19): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 294.064336] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.072068] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 294.079343] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 294.086599] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 294.093862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 294.101123] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000012 [ 294.108840] 9pnet: Insufficient options for proto=fd 03:34:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80c00, 0x0) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:11 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x20000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:11 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) sendmsg(r1, &(0x7f0000000ac0)={&(0x7f00000000c0)=@hci={0x1f, r2, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000300)="f0a78877595cbf878ef5811dccfaa3a93184ba57f63c9bde3909942a3733ae111beb0633b709168bfe5d1d9379aceba43a0044c93d1b763daa4f15e1d855ede9750b4289aa62644458af7ca71d3907a70574c1ec9bc330ffc2ee6d03", 0x5c}, {&(0x7f0000000380)="1ac313a27a8884bfbbcf1cb51b2caeb050ffb88ed768163670901e70cca41bc4576a923c9611329dadf891448ff4bf6f3c36bcbb74d2542b90ed30538167c1493228af363f570a126528e958219b1cdff5c7c62163638899fd66927885cfc0b126d2a30b12", 0x65}, {&(0x7f0000000400)="e68d52a99498b707f08caaf83398bbb9b58abf4ed66353922646a9d983671710ab92f7c8c1a221448b3e36a27d41d00803d16d9193ddd14ba609e6ff3accfaa55a229b9c2015901b8dfeb130356e8fc91316fef6740afbad665afe75ef39789933b117e4e1ed5e5fb24c2bee32ce753ef1376029641c2f4c68c043bf67b3727e2a8c760e63e9e3da633cccc02abbc4d3ebad7b36b05821b1f9031eddf4bd25d7ccca531d8d8687a447f7d4f8dc54c61675290641334911c07805c38e31131b079edccf4a7214", 0xc6}, {&(0x7f0000000500)="dca1733bb76c9381cf37417ef9ee57cf6fd40ea80b5f", 0x16}, {&(0x7f0000000540)="aac4828bb81fadf9d9e1e8cd96521e5ce0408cee56fb6d7a06cfd6d3c2cfb461b94a16289b874fe69506557b11431cae9013a74b4db9256d76a08c776ce03ef8c902e26ddf2c5cce8994607d0b49590fdd605aa26adf017ddebb06689da961e6138f2c3bb685fe573f03ce0f4b967414f8bded78d8a7f848274f58e0976c45f60d9237db6d2543f00b4bfcc12e0316004df1943719ec084d", 0x98}, {&(0x7f0000000600)="91b7fabe0cebb7ccb8ef2dd37d797f4a7a328d4cf561999c13bbb58319ea48c02d7449a1152092723c71b8ce251b55a235a3984cb46273ab035db1b7bdbb535913c0fe0f0ccf2d0028645ec6c2beab1d3fc4d2fa51377ddb861e5f54ece604c6177e7e4016f6e61490f0fba10c91d716d9836af7fa53c8a98670f9bcfe12139df48b481fd6de18af5d420a82a91ecb058864aa2ae5ead14a6987f43fa2133dff9792112375b95b89a4ecda41", 0xac}, {&(0x7f00000006c0)="a9ad5c48eb3e356989b73235ee46eda500b24496bc62536c740649b2c305fce172a58127cc0031fbe47a22a5c08545af7e11a7d921005d5ba14b6681118fafe9d4d2478c795326fa81cce00d3fc1b76a36b52480284613c19244b955da3a31948cb14f0ff9cbc60fbc255d4bcdff1f23826549b4ff88f14f83353933d1469fa7e9f9f062e2d86b28369169b07cb37c8b76531824dc", 0x95}, {&(0x7f0000000780)="e7138b8fe54b10166f087f47458f744efd078d298d818e132a7fefdca67845797bc3f4eaea08422f5022d0874239421402a3624a41491d520595f6f4ce4090cfc71e1cc714f681614509e895d0df0f354b071ef0908c1c4321238f93b978c63184c7a194db9c85567fb4b03b4efea5a545f19d089eda3211e869b85568a77ad6df2d0c42eb549b40c786e980dae8dbbf33ac01f49fad318002b0487943f68061eb46fba3bd2d0f6bdbb6d38cb81c3eafed6e4996b33b37fc25896149b36cb74beffd633abf399b8f41ff96322fca8255f022ede72435dbb70f509219ecb85bb1da9ee86113d1", 0xe6}], 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="d8000000000000001701000009000000f642da88cf28ce79bb7e6dd6d5c0a487d772154728f21133d8a8c2a8d2535d921c993641049b5f06c9c07c5761fe079375fa226af36da61218d6b0a06d222d77105045d0e44f63a774dfd4020f6e39a7a8ca998c1af5f24372227a79cbb43cb49f1ca993e0ecdf624c30824f574edbef3f625366b4c9fdaf5f4dbff32f886b5a46cc2eb98f149b8b59818e033fe6c3e8fe423bc05fa1ce9f89b47c3ba753ae54647a74c9f9bfb9d7e30943fe22574f4b0738ad236edb6b3335af8398fcd022a9db4d659edc920000c000000000000000170100000100000034f2a120d5a73098340627418ff3432def921eeecaf66b9fab2a31bc2ab5d2b9e6ecea569655c18e2199177ad46fcd2a9696a8ce3f3473f2bfa08bb363ff0f000000000000469b7cac988d2ada3cfbf33e8d3bb4a47891fe9ce303e8e9436ba9300ccbab1b2c270b4a5680218af8beaf21f2e4bd2947510981e60dc9167101b228a850789a39de9050b68bfaaffbc0ef759e00dc06ce0107c589e2234433e66238082ee9e7f076be03000000000000002bcd0f68fca4163fee"], 0x1a1, 0x20040000}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000900)) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x4, 0x1) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000880)={0x101, 0x4, 0x7fffffff, 0x8, 0x8001}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000940)=0x0) mq_timedsend(r3, &(0x7f0000000cc0)="2a716f2abdc0e32cd69160b533789b13387c5d58618bbea54a048d3add15adde48db6d54fa9490cdca9af562e54b75d3c0584b89825076c93308a6b565105a12d12211071868af34b5ae91aada18e77440de6a2866d46735b3a76dcd1f01e4feef550185fc3952405d9753eaa6ea62d7e9df709df3b85f4b8b1ec2a7d2465a3a9423777f2b714373db0f36ca9427f9bc38d4e68d2c40b89257f27823f21ff654b8d52e01a7eee74fbf8093bcbaa889ad96a489d02a78de0d306b3683f1f767ee9c789be8adf27d680b025e25c340", 0xce, 0x7fff, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000980)='io\x00') sendfile(r0, r5, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:11 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0), &(0x7f0000000300)="d5", 0x1, 0xfffffffffffffffd) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast2, 0x4e23, 0x4, 0x4e20, 0x9, 0xa, 0x80, 0x80, 0x3a, 0x0, r1}, {0x4c, 0x2, 0x20, 0x200, 0x3, 0x1f, 0x9, 0x6}, {0x6805c4ef, 0xd, 0xfffffffffffffffa, 0x5}, 0x6, 0x6e6bb2, 0x0, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xa}, 0x0, 0x3, 0x1, 0x8, 0x1, 0xe15, 0xffffffffffffffff}}, 0xe8) 03:34:11 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000200)="04040000070000000000", 0xa, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x20000000002, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffff425e, 0x40002) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x20840, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r5 = getegid() r6 = getegid() r7 = getegid() write$UHID_CREATE2(r1, &(0x7f0000000500)={0xb, 'syz1\x00', 'syz1\x00', 'syz0\x00', 0xc8, 0x1000000000, 0x9, 0x179, 0x5, 0x400, "21103a89ff14a20ced3c8a5effdf1d524052f080cc031eb0bec022080fad3efe1aecbb1f43bc9d3d61064c5bf321b167ab81bd45ed0b94443a9c498c345e4167f32bb2743617219c22e446c1face40bf4b9efd24088750416392ed2e1faef73d97dcc80c9cc31648b74445b80944ecb0db1ff1780767ecdf9ac799719f9ed343e0d89fe57af1ed96280a8a9ec1dbcbe22e4a21ddf2237c4d7e1e3e16d6d35df2389b0d3965d51b0ceaabd9d0d29c9480804f5194e4b06de67d9b2c64022b95f6c951c9ec3f403b99"}, 0x1e0) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) setgroups(0x5, &(0x7f00000004c0)=[r4, r5, r6, r7, r8]) r9 = getegid() write$FUSE_ATTR(r2, &(0x7f0000000180)={0x78, 0x0, 0x7, {0xffffffffffff8001, 0x0, 0x0, {0x3, 0x2, 0xf0, 0x7d8, 0xaa7, 0x9, 0xeb8a, 0x800, 0xdf6d, 0x1, 0x280000000000, r3, r9, 0xfffffffffffffff7, 0x1}}}, 0x78) 03:34:11 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x3ff, 0xfffffffffffffffb}, &(0x7f0000000200)=0xfffffffffffffdfa) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0xa18a, 0x501}, 0xc) [ 294.483287] FAULT_INJECTION: forcing a failure. [ 294.483287] name failslab, interval 1, probability 0, space 0, times 0 [ 294.494933] CPU: 0 PID: 18725 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 294.501966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 294.511325] Call Trace: [ 294.513932] dump_stack+0x1c9/0x2b4 [ 294.517580] ? dump_stack_print_info.cold.2+0x52/0x52 [ 294.522786] ? __kernel_text_address+0xd/0x40 [ 294.527299] ? unwind_get_return_address+0x61/0xa0 03:34:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0xaf, @broadcast, 0x4e21, 0x0, 'rr\x00', 0x2f, 0xffffffff, 0x4e}, 0x2c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8911, &(0x7f00000000c0)="0a5cc80700315f85715070") setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) r5 = syz_open_procfs(r4, &(0x7f00000003c0)="6e656e744a8c7036001ecb1646ea429c9a33cd109a09f42ac74fb450b148f46e53a4870b87c2200a73c5ef35f2ce4fc80269d9db77422ccec33dd7ec85965a0b7e8e271b3841d8d4af9ba17727cf7ae27990397dca16964079edfb7a83b729ce6f4cb444b44156ed929a47aee2") ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000000240)) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000140)) getsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000001c0)={@loopback, @rand_addr}, &(0x7f0000000200)=0x8) fcntl$getflags(r3, 0x0) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x241) [ 294.532247] should_fail.cold.4+0xa/0x11 [ 294.536326] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 294.541451] ? save_stack+0xa9/0xd0 [ 294.545093] ? save_stack+0x43/0xd0 [ 294.548723] ? kasan_kmalloc+0xc4/0xe0 [ 294.552612] ? kmem_cache_alloc_trace+0x152/0x780 [ 294.557459] ? p9_client_prepare_req.part.8+0x5f2/0xcd0 [ 294.562824] ? p9_client_rpc+0x1bd/0x1400 [ 294.566988] ? p9_client_create+0xdb0/0x1770 [ 294.571408] ? v9fs_mount+0x7c/0x900 [ 294.575126] ? mount_fs+0xae/0x328 [ 294.578681] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 294.583442] ? do_mount+0x581/0x30e0 [ 294.587159] ? ksys_mount+0x12d/0x140 [ 294.590969] ? __x64_sys_mount+0xbe/0x150 [ 294.595121] ? graph_lock+0x170/0x170 [ 294.598925] ? graph_lock+0x170/0x170 [ 294.602730] ? lock_downgrade+0x8f0/0x8f0 [ 294.606902] ? lock_downgrade+0x8f0/0x8f0 [ 294.611081] ? check_same_owner+0x340/0x340 [ 294.615411] ? rcu_note_context_switch+0x730/0x730 [ 294.620351] __should_failslab+0x124/0x180 [ 294.624618] should_failslab+0x9/0x14 [ 294.628430] kmem_cache_alloc_trace+0x2cb/0x780 [ 294.633103] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 294.638211] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 294.643239] p9_client_prepare_req.part.8+0x82a/0xcd0 [ 294.648444] ? p9_free_req.isra.7+0x140/0x140 [ 294.652949] ? p9_pollwait+0x83/0x230 [ 294.656757] ? p9_conn_create+0x730/0x730 [ 294.660916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.666457] p9_client_rpc+0x1bd/0x1400 [ 294.670431] ? p9_fd_poll+0x1e0/0x2b0 [ 294.674239] ? p9_conn_create+0x55b/0x730 [ 294.678391] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 294.683762] ? ksys_dup3+0x690/0x690 [ 294.687481] ? kasan_check_read+0x11/0x20 [ 294.691631] ? rcu_is_watching+0x8c/0x150 [ 294.695790] ? rcu_pm_notify+0xc0/0xc0 [ 294.699697] ? rcu_read_lock_sched_held+0x108/0x120 [ 294.704733] ? p9_fd_show_options+0x1c0/0x1c0 [ 294.709238] ? lockdep_init_map+0x9/0x10 [ 294.713423] p9_client_create+0xdb0/0x1770 [ 294.717681] ? p9_client_read+0xc60/0xc60 [ 294.721836] ? find_held_lock+0x36/0x1c0 [ 294.725914] ? __lockdep_init_map+0x105/0x590 [ 294.730421] ? kasan_check_write+0x14/0x20 [ 294.734659] ? __init_rwsem+0x1cc/0x2a0 [ 294.738645] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 294.743689] ? rcu_read_lock_sched_held+0x108/0x120 [ 294.748712] ? __kmalloc_track_caller+0x5f5/0x760 [ 294.753554] ? save_stack+0xa9/0xd0 [ 294.757184] ? save_stack+0x43/0xd0 [ 294.760812] ? kasan_kmalloc+0xc4/0xe0 [ 294.764713] ? kmem_cache_alloc_trace+0x152/0x780 [ 294.769563] ? memcpy+0x45/0x50 [ 294.772865] v9fs_session_init+0x21a/0x1a80 [ 294.777198] ? find_held_lock+0x36/0x1c0 [ 294.781272] ? v9fs_show_options+0x7e0/0x7e0 [ 294.785690] ? kasan_check_read+0x11/0x20 [ 294.789843] ? rcu_is_watching+0x8c/0x150 [ 294.794019] ? rcu_pm_notify+0xc0/0xc0 [ 294.797917] ? v9fs_mount+0x61/0x900 [ 294.801635] ? rcu_read_lock_sched_held+0x108/0x120 [ 294.807181] ? kmem_cache_alloc_trace+0x616/0x780 [ 294.812035] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 294.817592] v9fs_mount+0x7c/0x900 [ 294.821144] mount_fs+0xae/0x328 [ 294.824524] vfs_kern_mount.part.34+0xdc/0x4e0 [ 294.829110] ? may_umount+0xb0/0xb0 [ 294.832743] ? _raw_read_unlock+0x22/0x30 [ 294.836896] ? __get_fs_type+0x97/0xc0 [ 294.840818] do_mount+0x581/0x30e0 [ 294.844372] ? copy_mount_string+0x40/0x40 [ 294.848619] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 294.853382] ? retint_kernel+0x10/0x10 [ 294.857306] ? copy_mount_options+0x1f0/0x380 [ 294.861805] ? copy_mount_options+0x202/0x380 [ 294.866308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 294.871850] ? copy_mount_options+0x285/0x380 [ 294.876350] ksys_mount+0x12d/0x140 [ 294.879985] __x64_sys_mount+0xbe/0x150 [ 294.883959] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 294.888994] do_syscall_64+0x1b9/0x820 [ 294.892892] ? finish_task_switch+0x1d3/0x870 [ 294.897391] ? syscall_return_slowpath+0x5e0/0x5e0 [ 294.902324] ? syscall_return_slowpath+0x31d/0x5e0 [ 294.907253] ? __switch_to_asm+0x34/0x70 [ 294.911313] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 294.917222] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 294.922074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 294.927261] RIP: 0033:0x457089 [ 294.930454] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.949867] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.957582] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 294.964857] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 294.972124] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 03:34:12 executing program 4 (fault-call:7 fault-nth:20): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 294.979403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 294.986803] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000013 [ 294.994532] 9pnet: Couldn't grow tag array [ 295.281088] encrypted_key: insufficient parameters specified [ 295.307977] FAULT_INJECTION: forcing a failure. [ 295.307977] name failslab, interval 1, probability 0, space 0, times 0 [ 295.319447] CPU: 1 PID: 18757 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 295.326487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.334836] encrypted_key: insufficient parameters specified [ 295.335856] Call Trace: [ 295.335886] dump_stack+0x1c9/0x2b4 [ 295.335912] ? dump_stack_print_info.cold.2+0x52/0x52 [ 295.335933] ? kernel_text_address+0x79/0xf0 [ 295.335959] should_fail.cold.4+0xa/0x11 [ 295.363070] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 295.368814] ? save_stack+0xa9/0xd0 [ 295.372663] ? save_stack+0x43/0xd0 [ 295.376727] ? kmem_cache_alloc_trace+0x152/0x780 [ 295.382416] ? p9_client_prepare_req.part.8+0x82a/0xcd0 [ 295.388184] ? p9_client_rpc+0x1bd/0x1400 [ 295.393241] ? p9_client_create+0xdb0/0x1770 [ 295.398258] ? v9fs_session_init+0x21a/0x1a80 [ 295.403134] ? v9fs_mount+0x7c/0x900 [ 295.407017] ? mount_fs+0xae/0x328 [ 295.410575] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 295.415344] ? do_mount+0x581/0x30e0 [ 295.419067] ? ksys_mount+0x12d/0x140 [ 295.422877] ? __x64_sys_mount+0xbe/0x150 [ 295.427153] ? do_syscall_64+0x1b9/0x820 [ 295.431233] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 295.436628] ? graph_lock+0x170/0x170 [ 295.440461] ? lock_downgrade+0x8f0/0x8f0 [ 295.444626] ? lock_downgrade+0x8f0/0x8f0 [ 295.448810] ? check_same_owner+0x340/0x340 [ 295.453144] ? kasan_check_read+0x11/0x20 [ 295.457305] ? rcu_note_context_switch+0x730/0x730 [ 295.462353] __should_failslab+0x124/0x180 [ 295.466599] should_failslab+0x9/0x14 [ 295.470422] __kmalloc+0x2c8/0x760 [ 295.473978] ? __init_waitqueue_head+0x9e/0x150 [ 295.478656] ? init_wait_entry+0x1c0/0x1c0 [ 295.482902] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 295.488018] ? p9_fcall_alloc+0x1e/0x90 [ 295.492007] p9_fcall_alloc+0x1e/0x90 [ 295.495825] p9_client_prepare_req.part.8+0x7c9/0xcd0 [ 295.501264] ? p9_free_req.isra.7+0x140/0x140 [ 295.505774] ? p9_pollwait+0x83/0x230 [ 295.509588] ? p9_conn_create+0x730/0x730 [ 295.513758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.519313] p9_client_rpc+0x1bd/0x1400 [ 295.523295] ? p9_fd_poll+0x1e0/0x2b0 [ 295.527105] ? p9_conn_create+0x55b/0x730 [ 295.531265] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 295.536648] ? ksys_dup3+0x690/0x690 [ 295.540369] ? kasan_check_read+0x11/0x20 [ 295.544650] ? rcu_is_watching+0x8c/0x150 [ 295.548813] ? rcu_pm_notify+0xc0/0xc0 [ 295.552730] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.557781] ? p9_fd_show_options+0x1c0/0x1c0 [ 295.562295] ? lockdep_init_map+0x9/0x10 [ 295.566386] p9_client_create+0xdb0/0x1770 [ 295.570652] ? p9_client_read+0xc60/0xc60 [ 295.574811] ? find_held_lock+0x36/0x1c0 [ 295.578908] ? __lockdep_init_map+0x105/0x590 [ 295.583418] ? kasan_check_write+0x14/0x20 [ 295.587662] ? __init_rwsem+0x1cc/0x2a0 [ 295.591654] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 295.596686] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.601714] ? __kmalloc_track_caller+0x5f5/0x760 [ 295.606563] ? save_stack+0xa9/0xd0 [ 295.610203] ? save_stack+0x43/0xd0 [ 295.613833] ? kasan_kmalloc+0xc4/0xe0 [ 295.617734] ? kmem_cache_alloc_trace+0x152/0x780 [ 295.622587] ? memcpy+0x45/0x50 [ 295.625890] v9fs_session_init+0x21a/0x1a80 [ 295.630227] ? find_held_lock+0x36/0x1c0 [ 295.634312] ? v9fs_show_options+0x7e0/0x7e0 [ 295.638732] ? kasan_check_read+0x11/0x20 [ 295.642885] ? rcu_is_watching+0x8c/0x150 [ 295.647044] ? rcu_pm_notify+0xc0/0xc0 [ 295.650949] ? v9fs_mount+0x61/0x900 [ 295.654675] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.659708] ? kmem_cache_alloc_trace+0x616/0x780 [ 295.664565] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 295.670116] v9fs_mount+0x7c/0x900 [ 295.673676] mount_fs+0xae/0x328 [ 295.677075] vfs_kern_mount.part.34+0xdc/0x4e0 [ 295.681669] ? may_umount+0xb0/0xb0 [ 295.685312] ? _raw_read_unlock+0x22/0x30 [ 295.689471] ? __get_fs_type+0x97/0xc0 [ 295.693377] do_mount+0x581/0x30e0 [ 295.696935] ? copy_mount_string+0x40/0x40 [ 295.701209] ? copy_mount_options+0x5f/0x380 [ 295.705636] ? rcu_read_lock_sched_held+0x108/0x120 [ 295.710663] ? kmem_cache_alloc_trace+0x616/0x780 [ 295.715550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 295.721101] ? _copy_from_user+0xdf/0x150 [ 295.725267] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 295.730819] ? copy_mount_options+0x285/0x380 [ 295.735331] ksys_mount+0x12d/0x140 [ 295.738977] __x64_sys_mount+0xbe/0x150 [ 295.742955] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 295.747982] do_syscall_64+0x1b9/0x820 [ 295.751879] ? finish_task_switch+0x1d3/0x870 [ 295.756392] ? syscall_return_slowpath+0x5e0/0x5e0 [ 295.761330] ? syscall_return_slowpath+0x31d/0x5e0 [ 295.766269] ? __switch_to_asm+0x34/0x70 [ 295.770338] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 295.775723] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.780588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 295.785786] RIP: 0033:0x457089 [ 295.789008] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 295.807915] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.815641] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 295.822918] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:34:12 executing program 5: r0 = getpid() r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) write$P9_RGETLOCK(r1, &(0x7f0000000180)={0x2b, 0x37, 0x2, {0x1, 0x3, 0x3, r0, 0xd, '/dev/usbmon#\x00'}}, 0x2b) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xc0109207, 0x20000000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) read(r3, &(0x7f0000000040)=""/11, 0xf9) tkill(r2, 0x15) 03:34:13 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r1, r1, &(0x7f0000000040)=0x7000000, 0xd1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x10d, 0x4) fcntl$getownex(r2, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$peek(0x2, r3, &(0x7f0000000100)) 03:34:13 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:13 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = eventfd(0x0) io_submit(0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1, r0}]) 03:34:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r3, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0xa, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r4, &(0x7f0000000040), 0xd2) 03:34:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000, &(0x7f0000000140)="025cc80700145f8f764070") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80) [ 295.830199] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 295.837479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 295.844752] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000014 [ 295.863338] 9pnet: Couldn't grow tag array 03:34:13 executing program 4 (fault-call:7 fault-nth:21): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1, 0x2440) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @sint={0x80, 0x401}}]}) listen(r0, 0x7fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8911, &(0x7f0000000000)="0a5cc80700315f85715070") setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000000c0)={{0x0, 0x7}, 'port0\x00', 0x0, 0x80000, 0x0, 0x3, 0x4, 0x7fff, 0x7, 0x0, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000000480)) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000380)=""/239}], 0x1, 0x201f6) 03:34:13 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) r2 = dup(r1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in=@dev}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) 03:34:13 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:13 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x40002, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',loose,loose,dfltgid=', @ANYRES64=r1, @ANYBLOB=',\x00']) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 03:34:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="71e67affcdf031a5a2080000001c26b3", 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="fc187ed9af988e114f322345b9ad3b6fc71694e7477acbc900eea05306261eef11", 0x21}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000580)=""/80, 0x50}], 0x2}}], 0x2, 0x0, 0x0) listen(r0, 0x7fff) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='\\;%@-eth1\x00', 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0xc0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)={r0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") ioctl(r0, 0x0, &(0x7f00000001c0)="b37f") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 296.221496] FAULT_INJECTION: forcing a failure. [ 296.221496] name failslab, interval 1, probability 0, space 0, times 0 [ 296.233017] CPU: 0 PID: 18788 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 296.240046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.249409] Call Trace: [ 296.252015] dump_stack+0x1c9/0x2b4 [ 296.255669] ? dump_stack_print_info.cold.2+0x52/0x52 [ 296.260878] ? kernel_text_address+0x79/0xf0 [ 296.265293] should_fail.cold.4+0xa/0x11 [ 296.269364] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 296.274484] ? save_stack+0xa9/0xd0 [ 296.278128] ? save_stack+0x43/0xd0 [ 296.281771] ? kmem_cache_alloc_trace+0x152/0x780 [ 296.286619] ? p9_client_prepare_req.part.8+0x82a/0xcd0 [ 296.291995] ? p9_client_rpc+0x1bd/0x1400 [ 296.296188] ? p9_client_create+0xdb0/0x1770 [ 296.300645] ? v9fs_session_init+0x21a/0x1a80 [ 296.305138] ? v9fs_mount+0x7c/0x900 [ 296.308840] ? mount_fs+0xae/0x328 [ 296.312370] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 296.317130] ? do_mount+0x581/0x30e0 [ 296.320847] ? ksys_mount+0x12d/0x140 [ 296.324639] ? __x64_sys_mount+0xbe/0x150 [ 296.328794] ? do_syscall_64+0x1b9/0x820 [ 296.332855] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.338259] ? check_same_owner+0x340/0x340 [ 296.342635] ? kasan_check_read+0x11/0x20 [ 296.346797] ? rcu_note_context_switch+0x730/0x730 [ 296.351754] __should_failslab+0x124/0x180 [ 296.355997] should_failslab+0x9/0x14 [ 296.359800] __kmalloc+0x2c8/0x760 [ 296.363365] ? __init_waitqueue_head+0x9e/0x150 [ 296.368042] ? init_wait_entry+0x1c0/0x1c0 [ 296.372283] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 296.377376] ? p9_fcall_alloc+0x1e/0x90 [ 296.381361] p9_fcall_alloc+0x1e/0x90 [ 296.385170] p9_client_prepare_req.part.8+0x7c9/0xcd0 [ 296.390358] ? p9_free_req.isra.7+0x140/0x140 [ 296.394848] ? p9_pollwait+0x83/0x230 [ 296.398643] ? p9_conn_create+0x730/0x730 [ 296.402795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.408328] p9_client_rpc+0x1bd/0x1400 [ 296.412300] ? p9_fd_poll+0x1e0/0x2b0 [ 296.416096] ? p9_conn_create+0x55b/0x730 [ 296.420294] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 296.425687] ? ksys_dup3+0x690/0x690 [ 296.429423] ? kasan_check_read+0x11/0x20 [ 296.433575] ? rcu_is_watching+0x8c/0x150 [ 296.437712] ? rcu_pm_notify+0xc0/0xc0 [ 296.441599] ? rcu_read_lock_sched_held+0x108/0x120 [ 296.446635] ? p9_fd_show_options+0x1c0/0x1c0 [ 296.451154] ? lockdep_init_map+0x9/0x10 [ 296.455271] p9_client_create+0xdb0/0x1770 [ 296.459502] ? p9_client_read+0xc60/0xc60 [ 296.463651] ? find_held_lock+0x36/0x1c0 [ 296.467735] ? __lockdep_init_map+0x105/0x590 [ 296.472234] ? kasan_check_write+0x14/0x20 [ 296.476460] ? __init_rwsem+0x1cc/0x2a0 [ 296.480422] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 296.485431] ? rcu_read_lock_sched_held+0x108/0x120 [ 296.490438] ? __kmalloc_track_caller+0x5f5/0x760 [ 296.495285] ? save_stack+0xa9/0xd0 [ 296.498908] ? save_stack+0x43/0xd0 [ 296.502523] ? kasan_kmalloc+0xc4/0xe0 [ 296.506401] ? kmem_cache_alloc_trace+0x152/0x780 [ 296.511233] ? memcpy+0x45/0x50 [ 296.514505] v9fs_session_init+0x21a/0x1a80 [ 296.518834] ? find_held_lock+0x36/0x1c0 [ 296.522906] ? v9fs_show_options+0x7e0/0x7e0 [ 296.527303] ? kasan_check_read+0x11/0x20 [ 296.531440] ? rcu_is_watching+0x8c/0x150 [ 296.535573] ? rcu_pm_notify+0xc0/0xc0 [ 296.539453] ? v9fs_mount+0x61/0x900 [ 296.543163] ? rcu_read_lock_sched_held+0x108/0x120 [ 296.548193] ? kmem_cache_alloc_trace+0x616/0x780 [ 296.553049] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 296.558614] v9fs_mount+0x7c/0x900 [ 296.562184] mount_fs+0xae/0x328 [ 296.565550] vfs_kern_mount.part.34+0xdc/0x4e0 [ 296.570137] ? may_umount+0xb0/0xb0 [ 296.573757] ? _raw_read_unlock+0x22/0x30 [ 296.577953] ? __get_fs_type+0x97/0xc0 [ 296.581855] do_mount+0x581/0x30e0 [ 296.585406] ? copy_mount_string+0x40/0x40 [ 296.589650] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 296.594405] ? retint_kernel+0x10/0x10 [ 296.598301] ? copy_mount_options+0x1a1/0x380 [ 296.602797] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 296.607644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 296.613194] ? copy_mount_options+0x285/0x380 [ 296.617735] ksys_mount+0x12d/0x140 [ 296.621392] __x64_sys_mount+0xbe/0x150 [ 296.625394] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 296.630415] do_syscall_64+0x1b9/0x820 [ 296.634304] ? finish_task_switch+0x1d3/0x870 [ 296.638803] ? syscall_return_slowpath+0x5e0/0x5e0 [ 296.643737] ? syscall_return_slowpath+0x31d/0x5e0 [ 296.648693] ? __switch_to_asm+0x34/0x70 [ 296.652743] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 296.658123] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.662970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 296.668149] RIP: 0033:0x457089 [ 296.671332] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 296.690248] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.697980] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 296.705255] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 296.712525] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 03:34:13 executing program 4 (fault-call:7 fault-nth:22): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 296.719804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 296.727101] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000015 [ 296.737234] 9pnet: Couldn't grow tag array 03:34:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x40000000000fcae}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f0000000100)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x6b0000000000000}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r2, 0x6, 0x0, 0x3f, 0x9}, &(0x7f0000000200)=0x18) r3 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r3, 0x5412, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8962}) 03:34:14 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') socket$vsock_stream(0x28, 0x1, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) [ 297.055378] FAULT_INJECTION: forcing a failure. [ 297.055378] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.067218] CPU: 0 PID: 18812 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 297.074239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.083595] Call Trace: [ 297.086212] dump_stack+0x1c9/0x2b4 [ 297.089859] ? dump_stack_print_info.cold.2+0x52/0x52 [ 297.095078] should_fail.cold.4+0xa/0x11 [ 297.099155] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:34:14 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='io\x00', 0x0) syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x1000000, 0x44080) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000340)="df2181f8a3ac70bdc6ac5e79de766d376ea9cc5130378db42a0e2d49790e4d7ee78a97a138f620e5aa93227fe7f4894ee0d8e6c12a4b9c4ed93038a058cc65bbaaa0213b9c4fef61a98c5d9678902a3a9a74c265a6bff8d20f7980f3e40dfce0a629f1394d1604e926f3d7ca88ee158fccd17d6b4a6402feb708aec2157d118620468774d2957414eabd0d63022b1f1423b870122b475c2b55cd6003f8d388f1143ceb8c1c5a469df4fd90dd46f09ad07de65c88a53459db33ff15903f47f45e4655f16bf74a01a6aa2c1b1a3cbe7c") setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @rand_addr=0x10000, 0x1, 0x4, [@rand_addr=0xfacb, @rand_addr=0x8, @local, @rand_addr=0x4]}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') ioctl$BLKPG(r1, 0x1269, &(0x7f00000002c0)={0x0, 0x3, 0x54, &(0x7f0000000240)="13ed1e2c4e4941dd16fb54764b3eef1e361f955b2a9f83cdb07b015d995033d3defaadd533a8f309b85bf21a8118d964b3f2cdcf8e1dfbd52d0ea484e3bfcc8f891739dd5b6a245ccbd2e2cbd92ad94c8e411548"}) sendfile(r0, r2, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:14 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x10200) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/156) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/61) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0xc}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4000010) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x40) setsockopt$inet6_buf(r0, 0x29, 0xce152a5357934cfa, &(0x7f0000000300)="e9998e", 0x3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ff2000/0xd000)=nil, 0xd000}, &(0x7f0000000380)=0x10) utimensat(r0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={{0x77359400}}, 0x100) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0xbfb, 0x349a02) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000480)={{0xee9d, 0x7}, 'port1\x00', 0x40, 0xc0000, 0x3ff, 0x7, 0x3, 0x0, 0x1, 0x0, 0x1, 0x400}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000540)=0x200, 0x4) ioctl$sock_netdev_private(r3, 0x89fe, &(0x7f0000000580)="c46a5102e7f602eef7f13538e36a7ad72b882fa652b840cadff64177e641c7d985bcd1eee23f5c3b0c4c64aa811e92006c573f504125e362fc33c01722721830f0c5e072e1d3630f2c4d85dc74c5213309c253ef47614fbcc98c870658ca5202cde9564457d535913fdd48afd0fdd970b274854b4e8511685d8b1e103747b665dc8c5f9727d5819b52539b93fe0e5c1aad61b583cd4204fb1255fb10dd65e6dc8a977ca82c870499ecbd90882186418bcc0a24579f9d36278a59c5a76d348fbf75a139839d14442a7668d4e138") getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) bind$bt_hci(r0, &(0x7f00000007c0)={0x1f, r4, 0x3}, 0xc) getresuid(&(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) fstat(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000840)='9p\x00', 0x200000, &(0x7f00000009c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@dfltuid={'dfltuid', 0x3d, r6}}]}}) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000a40)=""/89) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000ac0)={0x0, 0xf1, 0xc0, 0x8d7}) sendto$llc(r3, &(0x7f0000000b00)="57091759f2f02b90eb5a7a3a97b9c5786cb47ff95d14e4b8a39c3cc680f5fe07acdc33c6b3972f406eb2", 0x2a, 0x40, &(0x7f0000000b40)={0x1a, 0x320, 0x4, 0x101, 0x8001, 0x0, @dev={[], 0xd}}, 0x10) munmap(&(0x7f0000ff3000/0x1000)=nil, 0x1000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r7, 0x102, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800000000000000}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x65}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008080) r8 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ff3000/0x4000)=nil) shmctl$SHM_LOCK(r8, 0xb) clock_getres(0x0, &(0x7f0000000d00)) r9 = getpgid(0x0) ptrace$setregs(0xd, r9, 0x22, &(0x7f0000000d40)="1ed8a4fd9a41738b002846704f49e20ee4e7c8566e4edc9fddc5c4f8feb681e06563567c04740ebe9158b1b98bd9dfa9da69e83f108086fde894611d3961c86217d829b8a3285d507477742e89061882cdcaa97ce74d04085501c082ba067e535dac2699c21bf63419c58e3488953ec1e28886f8040c2de2c6496f88f8ccf89ec744ef7428cc42936d3a38a9b6a7a8b4cac855d4fbafc1a785086c047e9f79355816bb91fb355e6103991825506ff99fd4a7") shmctl$SHM_LOCK(r8, 0xb) 03:34:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1b7) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="540000004f20158bd964ab862beaedb10d78e5f541f06bc2b501511216e1d7ce26ee882db68355e65a1781d2ba41b93803536147f2e2687ee403286c7c3d66312a4e9f27106dee94116aa120aab7d7e5a9"], &(0x7f0000000b40)=0x5c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000b80)=@assoc_value={r4, 0x3}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000e00)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000d00)=0xe8) sendmsg$nl_route_sched(r5, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)=@gettclass={0x24, 0x2a, 0x411, 0x70bd2c, 0x25dfdbfe, {0x0, r6, {0xd7639eea2255d6d4, 0xf}, {0x9}, {0xf, 0xffff}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x6c0, 0x270, 0x270, 0x270, 0x0, 0x4e0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5, &(0x7f00000000c0), {[{{@ipv6={@mcast2, @ipv4={[], [], @rand_addr=0x80000001}, [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffff00, 0xff, 0xffffffff], 'lo\x00', 'yam0\x00', {0xff}, {}, 0x2, 0x8, 0x2, 0x8}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x0, 0xfffffffffffffff7, 0x9, 0x1, 0x19, 0x4, [@loopback, @ipv4={[], [], @rand_addr=0x1bd}, @mcast1, @loopback, @mcast1, @loopback, @mcast2, @ipv4={[], [], @local}, @loopback, @mcast1, @empty, @loopback, @remote, @mcast1, @remote, @dev={0xfe, 0x80, [], 0x15}], 0xd}}, @common=@mh={0x28, 'mh\x00', 0x0, {0xffffffff, 0x3}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x19, @ipv6=@dev={0xfe, 0x80, [], 0x12}, @ipv6=@dev={0xfe, 0x80, [], 0x1e}, @icmp_id=0x65, @icmp_id=0x64}}}, {{@ipv6={@local, @empty, [0xff000000, 0xffffff00, 0x0, 0xff], [0x52c246b80d1031ae, 0xff000000, 0xffffff00, 0xffffffff], 'teql0\x00', 'team0\x00', {}, {0xff}, 0x3f, 0x7, 0x3, 0x40}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xe, 0x5c2c, 0x0, 0x1}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x400}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv4=@remote, @ipv6=@remote, @port=0x4e23, @gre_key=0x7}}}, {{@ipv6={@remote, @ipv4={[], [], @multicast2}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xff000000, 0xffffffff, 0xff000000], 'gretap0\x00', 'veth1_to_bond\x00', {0xff}, {}, 0xbf, 0x9, 0x2, 0x8}, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x9, @ipv6=@remote, @ipv6=@dev={0xfe, 0x80, [], 0x1c}, @icmp_id=0x68, @gre_key=0x8}}}, {{@ipv6={@ipv4={[], [], @multicast2}, @dev={0xfe, 0x80, [], 0xc}, [0xff, 0xff, 0xff0000ff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff, 0xffffffff], 'bond0\x00', 'gre0\x00', {}, {}, 0x3a, 0x40, 0x2, 0x41}, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv4, @ipv6=@mcast1, @icmp_id=0x68, @icmp_id=0x67}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) preadv(r5, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) sendto(r1, &(0x7f00000001c0)="43a355547b44326cedafd07dfc26779fb25ce8d20ca4040352efc87665e2068227f8553249881855f6d1bf341293dc3db7f971a62f479e0f00b5bbce867152d66893861c73edd4bae4f889bc82bd8e410f524070b887de067cfe4db670391e76777401de2e69ed8c78f177d8362042089f9ff4ad5aa6d94e715901", 0x7b, 0x8800, &(0x7f0000000240)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) 03:34:14 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r0, 0x1, 0x33, &(0x7f0000000140)={0x77359400}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) [ 297.104288] ? lock_downgrade+0x8f0/0x8f0 [ 297.108462] ? kasan_check_read+0x11/0x20 [ 297.112632] ? rcu_is_watching+0x8c/0x150 [ 297.116803] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 297.121489] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 297.126183] ? is_bpf_text_address+0xd7/0x170 [ 297.130718] ? kernel_text_address+0x79/0xf0 [ 297.135145] ? __kernel_text_address+0xd/0x40 [ 297.139676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.145236] ? should_fail+0x246/0xd86 [ 297.149135] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 297.154235] __alloc_pages_nodemask+0x36e/0xdb0 [ 297.158895] ? save_stack+0xa9/0xd0 [ 297.162514] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 297.167524] ? p9_client_create+0xdb0/0x1770 [ 297.171927] ? v9fs_mount+0x7c/0x900 [ 297.175628] ? mount_fs+0xae/0x328 [ 297.179156] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 297.183910] ? do_mount+0x581/0x30e0 [ 297.187635] ? ksys_mount+0x12d/0x140 [ 297.191423] ? __x64_sys_mount+0xbe/0x150 [ 297.195562] ? do_syscall_64+0x1b9/0x820 [ 297.199632] ? check_same_owner+0x340/0x340 [ 297.203948] cache_grow_begin+0x91/0x710 [ 297.208019] __kmalloc+0x688/0x760 [ 297.211560] ? __init_waitqueue_head+0x9e/0x150 [ 297.216220] ? init_wait_entry+0x1c0/0x1c0 [ 297.220445] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 297.225534] ? p9_fcall_alloc+0x1e/0x90 [ 297.229495] p9_fcall_alloc+0x1e/0x90 [ 297.233303] p9_client_prepare_req.part.8+0x7c9/0xcd0 [ 297.238484] ? p9_free_req.isra.7+0x140/0x140 [ 297.242969] ? p9_pollwait+0x83/0x230 [ 297.246784] ? p9_conn_create+0x730/0x730 [ 297.250938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.256463] p9_client_rpc+0x1bd/0x1400 [ 297.260433] ? p9_fd_poll+0x1e0/0x2b0 [ 297.264228] ? p9_conn_create+0x55b/0x730 [ 297.268383] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 297.273749] ? ksys_dup3+0x690/0x690 [ 297.277480] ? kasan_check_read+0x11/0x20 [ 297.281625] ? rcu_is_watching+0x8c/0x150 [ 297.285774] ? rcu_pm_notify+0xc0/0xc0 [ 297.289675] ? rcu_read_lock_sched_held+0x108/0x120 [ 297.294711] ? p9_fd_show_options+0x1c0/0x1c0 [ 297.299200] ? lockdep_init_map+0x9/0x10 [ 297.303251] p9_client_create+0xdb0/0x1770 [ 297.307475] ? p9_client_read+0xc60/0xc60 [ 297.311608] ? find_held_lock+0x36/0x1c0 [ 297.315669] ? __lockdep_init_map+0x105/0x590 [ 297.320155] ? kasan_check_write+0x14/0x20 [ 297.324405] ? __init_rwsem+0x1cc/0x2a0 [ 297.328369] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 297.333378] ? rcu_read_lock_sched_held+0x108/0x120 [ 297.338383] ? __kmalloc_track_caller+0x5f5/0x760 [ 297.343218] ? save_stack+0xa9/0xd0 [ 297.346845] ? save_stack+0x43/0xd0 [ 297.350465] ? kasan_kmalloc+0xc4/0xe0 [ 297.354342] ? kmem_cache_alloc_trace+0x152/0x780 [ 297.359171] ? memcpy+0x45/0x50 [ 297.362442] v9fs_session_init+0x21a/0x1a80 [ 297.366759] ? find_held_lock+0x36/0x1c0 [ 297.370841] ? v9fs_show_options+0x7e0/0x7e0 [ 297.375251] ? kasan_check_read+0x11/0x20 [ 297.379385] ? rcu_is_watching+0x8c/0x150 [ 297.383553] ? rcu_pm_notify+0xc0/0xc0 [ 297.387442] ? v9fs_mount+0x61/0x900 [ 297.391146] ? rcu_read_lock_sched_held+0x108/0x120 [ 297.396152] ? kmem_cache_alloc_trace+0x616/0x780 [ 297.401005] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 297.406568] v9fs_mount+0x7c/0x900 [ 297.410097] mount_fs+0xae/0x328 [ 297.413452] vfs_kern_mount.part.34+0xdc/0x4e0 [ 297.418036] ? may_umount+0xb0/0xb0 [ 297.421654] ? _raw_read_unlock+0x22/0x30 [ 297.425803] ? __get_fs_type+0x97/0xc0 [ 297.429702] do_mount+0x581/0x30e0 [ 297.433248] ? copy_mount_string+0x40/0x40 [ 297.437486] ? copy_mount_options+0x5f/0x380 [ 297.441887] ? rcu_read_lock_sched_held+0x108/0x120 [ 297.446894] ? kmem_cache_alloc_trace+0x616/0x780 [ 297.451725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 297.457248] ? _copy_from_user+0xdf/0x150 [ 297.461399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.466935] ? copy_mount_options+0x285/0x380 [ 297.471421] ksys_mount+0x12d/0x140 [ 297.475036] __x64_sys_mount+0xbe/0x150 [ 297.478997] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 297.484002] do_syscall_64+0x1b9/0x820 [ 297.487886] ? syscall_return_slowpath+0x5e0/0x5e0 [ 297.492816] ? syscall_return_slowpath+0x31d/0x5e0 [ 297.497745] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 297.503106] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.507937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 297.513112] RIP: 0033:0x457089 [ 297.516293] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.535183] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 297.542879] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 297.550133] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:34:14 executing program 4 (fault-call:7 fault-nth:23): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:14 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x3800, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 297.557391] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 297.564646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 297.571914] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000016 03:34:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc80700145f8f764070") r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x5, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00'}) 03:34:14 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)) r2 = getpgrp(0x0) capset(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000100)={0x8000, 0x7fff, 0x2, 0xe67, 0x3}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000200)) sendfile(r0, r1, &(0x7f0000000040), 0xd2) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x400000) 03:34:15 executing program 6: r0 = socket(0x1e, 0x1, 0x7) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x9, {0x1, 0xef, 0x8, 0x93cf, 0x100000000}, 0xba, 0x401}, 0xe) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet6(r0, &(0x7f0000c6e000)=""/55, 0x37, 0x0, &(0x7f000024a000), 0x1c) [ 297.900255] FAULT_INJECTION: forcing a failure. [ 297.900255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 297.912207] CPU: 1 PID: 18844 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 297.919710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.929083] Call Trace: [ 297.931701] dump_stack+0x1c9/0x2b4 [ 297.935357] ? dump_stack_print_info.cold.2+0x52/0x52 [ 297.940606] should_fail.cold.4+0xa/0x11 [ 297.944719] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:34:15 executing program 5: r0 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000280), &(0x7f00000002c0)="ed", 0x1, 0xfffffffffffffffd) keyctl$revoke(0xb, r0) socket$inet_dccp(0x2, 0x6, 0x0) r1 = semget$private(0x0, 0x3, 0x20) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000000)=0xfff) [ 297.949866] ? lock_downgrade+0x8f0/0x8f0 [ 297.954049] ? kasan_check_read+0x11/0x20 [ 297.958222] ? rcu_is_watching+0x8c/0x150 [ 297.962394] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 297.967088] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 297.971796] ? is_bpf_text_address+0xd7/0x170 [ 297.976318] ? kernel_text_address+0x79/0xf0 [ 297.980744] ? __kernel_text_address+0xd/0x40 [ 297.985274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 297.990841] ? should_fail+0x246/0xd86 [ 297.994770] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 297.999909] __alloc_pages_nodemask+0x36e/0xdb0 [ 298.004604] ? save_stack+0xa9/0xd0 [ 298.008272] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 298.013312] ? p9_client_create+0xdb0/0x1770 [ 298.017742] ? v9fs_mount+0x7c/0x900 [ 298.021490] ? mount_fs+0xae/0x328 [ 298.025051] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 298.029830] ? do_mount+0x581/0x30e0 [ 298.033581] ? ksys_mount+0x12d/0x140 [ 298.037418] ? __x64_sys_mount+0xbe/0x150 [ 298.041591] ? do_syscall_64+0x1b9/0x820 [ 298.045778] ? graph_lock+0x170/0x170 [ 298.049601] ? lock_downgrade+0x8f0/0x8f0 [ 298.053786] ? lock_downgrade+0x8f0/0x8f0 [ 298.057982] ? check_same_owner+0x340/0x340 [ 298.062338] cache_grow_begin+0x91/0x710 [ 298.066435] __kmalloc+0x688/0x760 [ 298.070009] ? __init_waitqueue_head+0x9e/0x150 [ 298.074701] ? init_wait_entry+0x1c0/0x1c0 [ 298.078959] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 298.084088] ? p9_fcall_alloc+0x1e/0x90 [ 298.088084] p9_fcall_alloc+0x1e/0x90 [ 298.091920] p9_client_prepare_req.part.8+0x7c9/0xcd0 03:34:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x101, @empty, 0x96c}, 0x58) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 298.097137] ? p9_free_req.isra.7+0x140/0x140 [ 298.101671] ? p9_pollwait+0x83/0x230 [ 298.105503] ? p9_conn_create+0x730/0x730 [ 298.109670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.115259] p9_client_rpc+0x1bd/0x1400 [ 298.119255] ? p9_fd_poll+0x1e0/0x2b0 [ 298.123072] ? p9_conn_create+0x55b/0x730 [ 298.127240] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 298.132632] ? ksys_dup3+0x690/0x690 [ 298.136367] ? kasan_check_read+0x11/0x20 [ 298.140531] ? rcu_is_watching+0x8c/0x150 [ 298.144703] ? rcu_pm_notify+0xc0/0xc0 [ 298.148633] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.153689] ? p9_fd_show_options+0x1c0/0x1c0 [ 298.158223] ? lockdep_init_map+0x9/0x10 [ 298.162316] p9_client_create+0xdb0/0x1770 [ 298.166593] ? p9_client_read+0xc60/0xc60 [ 298.170761] ? find_held_lock+0x36/0x1c0 [ 298.174860] ? __lockdep_init_map+0x105/0x590 [ 298.179382] ? kasan_check_write+0x14/0x20 [ 298.183643] ? __init_rwsem+0x1cc/0x2a0 [ 298.187648] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 298.192692] ? rcu_read_lock_sched_held+0x108/0x120 03:34:15 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x1}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000400)={r3, 0x5, 0xffffffffffff15f9}, &(0x7f0000000440)=0x8) io_setup(0x8, &(0x7f0000000140)=0x0) r5 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x200) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0xff, 0x6, 0xffffffffffffffc0, 0x1, 0x1, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x101, @remote, 0x5}}, 0xfffffffffffffffd, 0x5, 0x8e2, 0x7, 0x401}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000001c0)={r6, 0x29, "7814ff87d03e0ced24ea1ad3dd2f588c3b4945803a1e5a24a0a9117fd65fb77e989758240047a89beb"}, &(0x7f0000000300)=0x31) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='loginuid\x00') ioctl$KVM_GET_EMULATED_CPUID(r7, 0xc008ae09, &(0x7f0000000080)) socket(0x1e, 0x1000000000005, 0x0) io_getevents(r4, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}) io_submit(r4, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x5ee}]) [ 298.197733] ? __kmalloc_track_caller+0x5f5/0x760 [ 298.202593] ? save_stack+0xa9/0xd0 [ 298.206247] ? save_stack+0x43/0xd0 [ 298.209887] ? kasan_kmalloc+0xc4/0xe0 [ 298.213801] ? kmem_cache_alloc_trace+0x152/0x780 [ 298.218664] ? memcpy+0x45/0x50 [ 298.221967] v9fs_session_init+0x21a/0x1a80 [ 298.226314] ? find_held_lock+0x36/0x1c0 [ 298.230406] ? v9fs_show_options+0x7e0/0x7e0 [ 298.234836] ? kasan_check_read+0x11/0x20 [ 298.239007] ? rcu_is_watching+0x8c/0x150 [ 298.243184] ? rcu_pm_notify+0xc0/0xc0 [ 298.247095] ? v9fs_mount+0x61/0x900 [ 298.250838] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.255871] ? kmem_cache_alloc_trace+0x616/0x780 [ 298.260738] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 298.266311] v9fs_mount+0x7c/0x900 [ 298.269873] mount_fs+0xae/0x328 [ 298.273270] vfs_kern_mount.part.34+0xdc/0x4e0 [ 298.277877] ? may_umount+0xb0/0xb0 [ 298.281524] ? _raw_read_unlock+0x22/0x30 [ 298.285691] ? __get_fs_type+0x97/0xc0 [ 298.289607] do_mount+0x581/0x30e0 [ 298.293192] ? copy_mount_string+0x40/0x40 [ 298.297459] ? trace_hardirqs_on_thunk+0x1a/0x1c 03:34:15 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f00000000c0)=""/139) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000b42d87402e5286dd6007122600303300fe8000000000000000000000000000ffff02000000000000000000000000000180f5907800000000600a07ec00000000fe8000000000000000000000000000ff00000000000000000002ffffac141400"], &(0x7f00000016c0)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000200)={0x7, 0x7b, 0x2}, 0x7) [ 298.302234] ? retint_kernel+0x10/0x10 [ 298.306148] ? copy_mount_options+0x1a1/0x380 [ 298.310672] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 298.315535] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.321091] ? copy_mount_options+0x285/0x380 [ 298.325608] ksys_mount+0x12d/0x140 [ 298.329268] __x64_sys_mount+0xbe/0x150 [ 298.333253] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 298.338287] do_syscall_64+0x1b9/0x820 [ 298.342197] ? syscall_return_slowpath+0x5e0/0x5e0 [ 298.347157] ? syscall_return_slowpath+0x31d/0x5e0 [ 298.352115] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 298.357498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.362364] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.367575] RIP: 0033:0x457089 [ 298.370795] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.389729] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.397461] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 298.404753] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 298.412043] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 298.419327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 298.426609] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000017 03:34:15 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x3, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:15 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x800) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000200)=0x0) syz_open_procfs(r2, &(0x7f0000000240)='io\x00') sendfile(r0, r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8eb) 03:34:15 executing program 4 (fault-call:7 fault-nth:24): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:15 executing program 1: r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r2 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x20000) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000180)={0x8, 0x7ff}) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540)='/dev/rfkill\x00', 0x400, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000600)=""/101) r4 = syz_open_procfs(r1, &(0x7f0000000240)='io\x00') getsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0xb1d5, @loopback, 0x401}, @in={0x2, 0x4e24, @multicast1}], 0x3c) socket$inet(0x2, 0x807, 0x7fffffff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000003c0)="627000000000000000000000ffffffef", 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000000c0)={0x401, 0x7f, 0x20, 0x7fff, 0x1, 0x7f}) sendfile(r0, r0, &(0x7f0000000040), 0xd2) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0xfffffffffffffffe, 0x4) 03:34:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fdatasync(0xffffffffffffffff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/4\x00') getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) connect$can_bcm(r1, &(0x7f0000002ff0), 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 298.736702] FAULT_INJECTION: forcing a failure. [ 298.736702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 298.748572] CPU: 0 PID: 18893 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 298.755601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.764970] Call Trace: [ 298.767578] dump_stack+0x1c9/0x2b4 [ 298.771232] ? dump_stack_print_info.cold.2+0x52/0x52 [ 298.776453] should_fail.cold.4+0xa/0x11 [ 298.780531] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.785678] ? kasan_check_read+0x11/0x20 [ 298.789834] ? rcu_is_watching+0x8c/0x150 [ 298.794083] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 298.798771] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 298.803464] ? is_bpf_text_address+0xd7/0x170 [ 298.808427] ? kernel_text_address+0x79/0xf0 [ 298.812855] ? unwind_get_return_address+0x61/0xa0 [ 298.817814] ? __save_stack_trace+0x8d/0xf0 [ 298.822155] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.827713] ? should_fail+0x246/0xd86 [ 298.831634] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.833076] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.836771] __alloc_pages_nodemask+0x36e/0xdb0 [ 298.836788] ? save_stack+0x43/0xd0 [ 298.836802] ? kasan_kmalloc+0xc4/0xe0 [ 298.836827] ? __kmalloc+0x14e/0x760 [ 298.836854] ? p9_fcall_alloc+0x1e/0x90 [ 298.863033] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 298.868050] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 298.872809] ? ksys_mount+0x12d/0x140 [ 298.876620] ? __x64_sys_mount+0xbe/0x150 [ 298.880796] ? do_syscall_64+0x1b9/0x820 [ 298.884862] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 298.890227] ? lock_downgrade+0x8f0/0x8f0 [ 298.894398] ? check_same_owner+0x340/0x340 [ 298.898714] cache_grow_begin+0x91/0x710 [ 298.902783] __kmalloc+0x688/0x760 [ 298.906331] ? __init_waitqueue_head+0x9e/0x150 [ 298.910990] ? init_wait_entry+0x1c0/0x1c0 [ 298.915779] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 298.920889] ? p9_fcall_alloc+0x1e/0x90 [ 298.924884] p9_fcall_alloc+0x1e/0x90 [ 298.928686] p9_client_prepare_req.part.8+0x754/0xcd0 [ 298.933880] ? p9_free_req.isra.7+0x140/0x140 [ 298.938376] ? p9_pollwait+0x83/0x230 [ 298.942165] ? p9_conn_create+0x730/0x730 [ 298.946318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.951873] p9_client_rpc+0x1bd/0x1400 [ 298.955867] ? p9_fd_poll+0x1e0/0x2b0 [ 298.959678] ? p9_conn_create+0x55b/0x730 [ 298.963829] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 298.969203] ? ksys_dup3+0x690/0x690 [ 298.972906] ? kasan_check_read+0x11/0x20 [ 298.977041] ? rcu_is_watching+0x8c/0x150 [ 298.981179] ? rcu_pm_notify+0xc0/0xc0 [ 298.985082] ? rcu_read_lock_sched_held+0x108/0x120 [ 298.990102] ? p9_fd_show_options+0x1c0/0x1c0 [ 298.994588] ? lockdep_init_map+0x9/0x10 [ 298.998647] p9_client_create+0xdb0/0x1770 [ 299.002925] ? p9_client_read+0xc60/0xc60 [ 299.007101] ? find_held_lock+0x36/0x1c0 [ 299.011161] ? __lockdep_init_map+0x105/0x590 [ 299.015649] ? kasan_check_write+0x14/0x20 [ 299.019887] ? __init_rwsem+0x1cc/0x2a0 [ 299.023895] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 299.028909] ? rcu_read_lock_sched_held+0x108/0x120 [ 299.033915] ? __kmalloc_track_caller+0x5f5/0x760 [ 299.038744] ? save_stack+0xa9/0xd0 [ 299.042363] ? save_stack+0x43/0xd0 [ 299.045981] ? kasan_kmalloc+0xc4/0xe0 [ 299.049865] ? kmem_cache_alloc_trace+0x152/0x780 [ 299.054699] ? memcpy+0x45/0x50 [ 299.057970] v9fs_session_init+0x21a/0x1a80 [ 299.062283] ? find_held_lock+0x36/0x1c0 [ 299.066357] ? v9fs_show_options+0x7e0/0x7e0 [ 299.070780] ? kasan_check_read+0x11/0x20 [ 299.074932] ? rcu_is_watching+0x8c/0x150 [ 299.079071] ? rcu_pm_notify+0xc0/0xc0 [ 299.082968] ? v9fs_mount+0x61/0x900 [ 299.086690] ? rcu_read_lock_sched_held+0x108/0x120 [ 299.091703] ? kmem_cache_alloc_trace+0x616/0x780 [ 299.096557] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 299.102115] v9fs_mount+0x7c/0x900 [ 299.105650] mount_fs+0xae/0x328 [ 299.109016] vfs_kern_mount.part.34+0xdc/0x4e0 [ 299.113615] ? may_umount+0xb0/0xb0 [ 299.117247] ? _raw_read_unlock+0x22/0x30 [ 299.121418] ? __get_fs_type+0x97/0xc0 [ 299.125314] do_mount+0x581/0x30e0 [ 299.128863] ? copy_mount_string+0x40/0x40 [ 299.133112] ? copy_mount_options+0x5f/0x380 [ 299.137542] ? rcu_read_lock_sched_held+0x108/0x120 [ 299.142564] ? kmem_cache_alloc_trace+0x616/0x780 [ 299.147414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 299.152962] ? _copy_from_user+0xdf/0x150 [ 299.157118] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.162654] ? copy_mount_options+0x285/0x380 [ 299.167148] ksys_mount+0x12d/0x140 [ 299.170781] __x64_sys_mount+0xbe/0x150 [ 299.174762] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 299.179801] do_syscall_64+0x1b9/0x820 [ 299.183785] ? finish_task_switch+0x1d3/0x870 [ 299.188294] ? syscall_return_slowpath+0x5e0/0x5e0 [ 299.193230] ? syscall_return_slowpath+0x31d/0x5e0 [ 299.198162] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 299.203558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.208408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.213600] RIP: 0033:0x457089 [ 299.216802] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.235719] RSP: 002b:00007f7c72545c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.243439] RAX: ffffffffffffffda RBX: 00007f7c725466d4 RCX: 0000000000457089 [ 299.250703] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 299.257969] RBP: 0000000000930140 R08: 0000000020000cc0 R09: 0000000000000000 [ 299.265228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 299.272489] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000018 03:34:16 executing program 6: r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x2) r1 = semget(0x0, 0x0, 0x100) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000200)={0x2, 0x2, 0x4, 'queue1\x00', 0x1110}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0x80045301, &(0x7f0000000080)={{}, 0x0, 0xfffffffffffffffd}) 03:34:16 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3, 0xffffffffffffff9c}) listen(r1, 0x7fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=0x0, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x74, 0x8200, 0xfff, 0x8, r3}, &(0x7f0000000280)=0x10) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:16 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x730000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1ad0900eb8df7a26) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bcsh0\x00', 'ip6_vti0\x00', 'nr0\x00', 'veth1_to_bridge\x00', @dev, [], @broadcast, [], 0xb8, 0xb8, 0x108, [@limit={'limit\x00', 0x20, {{0x7fffffff, 0x10001}}}]}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x210) 03:34:16 executing program 3: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x0, &(0x7f0000000100)=[@op={0x18}], 0x18, 0x11}], 0x1, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000000140)=@xdp, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/114, 0x72}, {&(0x7f00000000c0)=""/48, 0x30}], 0x2, &(0x7f00000013c0)=""/141, 0x8d}}], 0x1, 0x0, &(0x7f00000015c0)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000224, 0x0) 03:34:16 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x9, 0xb8, 0x3f}, 0x8) 03:34:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffff, 0x141) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x400, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x400, 0x0) syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x8, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/udp\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='io\x00') sendfile(r0, r3, &(0x7f0000000040), 0xd2) 03:34:16 executing program 4 (fault-call:7 fault-nth:25): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 299.608827] ebt_limit: overflow, try lower: 2147483647/65537 [ 299.625604] FAULT_INJECTION: forcing a failure. [ 299.625604] name failslab, interval 1, probability 0, space 0, times 0 [ 299.636977] CPU: 1 PID: 18926 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 299.644008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.653382] Call Trace: [ 299.656020] dump_stack+0x1c9/0x2b4 [ 299.659683] ? dump_stack_print_info.cold.2+0x52/0x52 [ 299.664900] ? perf_trace_lock+0xde/0x920 [ 299.669080] should_fail.cold.4+0xa/0x11 [ 299.673161] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 299.678291] ? find_held_lock+0x36/0x1c0 [ 299.682384] ? lock_downgrade+0x8f0/0x8f0 [ 299.686565] ? find_held_lock+0x36/0x1c0 [ 299.690678] ? check_same_owner+0x340/0x340 [ 299.695014] ? __save_stack_trace+0x8d/0xf0 [ 299.699364] ? rcu_note_context_switch+0x730/0x730 [ 299.704317] __should_failslab+0x124/0x180 [ 299.708570] should_failslab+0x9/0x14 [ 299.712385] kmem_cache_alloc_trace+0x2cb/0x780 [ 299.717064] ? save_stack+0x43/0xd0 [ 299.720699] ? __kasan_slab_free+0x11a/0x170 [ 299.725118] ? kasan_slab_free+0xe/0x10 [ 299.729106] ? kfree+0xd9/0x260 [ 299.732400] ? v9fs_session_init+0xd5b/0x1a80 [ 299.736905] ? v9fs_mount+0x7c/0x900 [ 299.740632] ? mount_fs+0xae/0x328 [ 299.744198] p9_fid_create+0x98/0x4c0 [ 299.748021] ? kasan_check_read+0x11/0x20 [ 299.752188] ? p9_client_destroy+0x610/0x610 [ 299.756609] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 299.761220] ? kasan_check_write+0x14/0x20 [ 299.765490] p9_client_attach+0xbc/0x860 [ 299.769568] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 299.774700] ? debug_check_no_obj_freed+0x30b/0x595 [ 299.779737] ? p9_client_walk+0xab0/0xab0 [ 299.783908] ? trace_hardirqs_off+0xd/0x10 [ 299.788151] ? quarantine_put+0x10d/0x1b0 [ 299.792334] ? kfree+0x111/0x260 [ 299.795712] ? v9fs_session_init+0xd5b/0x1a80 [ 299.800222] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 299.805260] v9fs_session_init+0xf62/0x1a80 [ 299.809597] ? v9fs_session_init+0xf62/0x1a80 [ 299.814128] ? v9fs_show_options+0x7e0/0x7e0 [ 299.818554] ? rcu_is_watching+0x8c/0x150 [ 299.822721] ? rcu_pm_notify+0xc0/0xc0 [ 299.826636] ? v9fs_mount+0x61/0x900 [ 299.830364] ? rcu_read_lock_sched_held+0x108/0x120 [ 299.835398] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 299.840952] v9fs_mount+0x7c/0x900 [ 299.844508] mount_fs+0xae/0x328 [ 299.847896] vfs_kern_mount.part.34+0xdc/0x4e0 [ 299.852502] ? may_umount+0xb0/0xb0 [ 299.856137] ? _raw_read_unlock+0x22/0x30 [ 299.860298] ? __get_fs_type+0x97/0xc0 [ 299.864203] do_mount+0x581/0x30e0 [ 299.868067] ? copy_mount_string+0x40/0x40 [ 299.872318] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 299.877094] ? retint_kernel+0x10/0x10 [ 299.881003] ? copy_mount_options+0x1a1/0x380 [ 299.885511] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 299.890364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.895907] ? copy_mount_options+0x285/0x380 [ 299.900420] ksys_mount+0x12d/0x140 [ 299.904060] __x64_sys_mount+0xbe/0x150 [ 299.908050] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 299.913082] do_syscall_64+0x1b9/0x820 [ 299.917347] ? finish_task_switch+0x1d3/0x870 [ 299.921855] ? syscall_return_slowpath+0x5e0/0x5e0 [ 299.926798] ? syscall_return_slowpath+0x31d/0x5e0 [ 299.931749] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 299.937131] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.941991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.947190] RIP: 0033:0x457089 [ 299.950414] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.969322] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.977281] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 299.984561] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 299.991834] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 299.999104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:34:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r3 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/pid_for_children\x00') setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e23, 0x101, @loopback, 0xd16}, {0xa, 0x4e23, 0x6, @ipv4={[], [], @broadcast}, 0x2579}, 0x400, [0xa5c4, 0x1, 0x10000, 0x25, 0x0, 0x1, 0x8, 0x1]}, 0x5c) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}], 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x32, &(0x7f0000000a40)={'IDLETIMER\x00'}, &(0x7f0000000a80)=0x1e) 03:34:17 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x50500000000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:17 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x6, &(0x7f0000000280)="36aa56d2bc2b7b9d3fe01cc512facf3a5689e348eada26a084ead1d95d9608f4ccf6312de1d7c5921390567cd6461a772f35e06f16ac6d5e04e9122e8f974c1aa953f9851568cc68b43e4585ac5f5056d68283") r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @rand_addr}}, 0x9, 0x6000}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x8}, 0x8) 03:34:17 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x2}, 0x8) close(r1) 03:34:17 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000012000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket(0xa, 0x3, 0x3) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r0, 0x50, 0x1, 0x8000) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) dup2(0xffffffffffffffff, r0) [ 300.006375] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 0000000000000019 03:34:17 executing program 4 (fault-call:7 fault-nth:26): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x40, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:17 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x8000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:17 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000200)=""/219, &(0x7f0000000100)=0xdb) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000007e0b0000000000008000000000000000df0b000000000000000001000000000053090000000000000600000000000000de0f0000000000000000008000000000980a000000000000010000000000000000000000000000000500000000000000"]) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) prctl$getreaper(0x5, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r2, &(0x7f0000000040), 0xd2) 03:34:17 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000006161000000000000616200000000000085100000010000009500000000000000bf100000000000000f200000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x101, @mcast2, 0x6}, @in={0x2, 0x4e20}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e24, 0x3f, @dev={0xfe, 0x80, [], 0xa}, 0x1b}, @in6={0xa, 0x4e24, 0x3f, @mcast1, 0x7e5f4e43}, @in={0x2, 0x4e22, @rand_addr=0x80000000}], 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xd9, &(0x7f0000000080), &(0x7f0000000100)=""/217}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0x50, &(0x7f0000000240)}, 0x10) [ 300.266536] FAULT_INJECTION: forcing a failure. [ 300.266536] name failslab, interval 1, probability 0, space 0, times 0 [ 300.277967] CPU: 0 PID: 18957 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 300.284989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.294346] Call Trace: [ 300.296946] dump_stack+0x1c9/0x2b4 [ 300.300592] ? dump_stack_print_info.cold.2+0x52/0x52 [ 300.305805] ? debug_check_no_obj_freed+0x30b/0x595 [ 300.310849] should_fail.cold.4+0xa/0x11 03:34:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x4000000000000007) ioctl(r2, 0x8912, &(0x7f00000004c0)="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") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f83715070") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1000000000000a, 0x80000000001, 0x0) accept$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000180)={0x0, @remote, @multicast2}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', r3}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x389e63cafcc39927, 0x0, 0x0, {0x2, 0xf, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x20}}, 0x0) [ 300.314935] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 300.320049] ? kfree+0x111/0x260 [ 300.323438] ? p9_client_create+0xfea/0x1770 [ 300.327858] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 300.332891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.338423] ? p9_free_req.isra.7+0x95/0x140 [ 300.342836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.348374] ? find_held_lock+0x36/0x1c0 [ 300.352436] ? check_same_owner+0x340/0x340 [ 300.356749] ? rcu_note_context_switch+0x730/0x730 [ 300.361684] ? kasan_check_write+0x14/0x20 [ 300.365912] __should_failslab+0x124/0x180 [ 300.370137] should_failslab+0x9/0x14 [ 300.373929] __kmalloc_track_caller+0x2c4/0x760 [ 300.378583] ? save_stack+0xa9/0xd0 [ 300.382208] ? save_stack+0x43/0xd0 [ 300.385844] ? kasan_kmalloc+0xc4/0xe0 [ 300.389734] ? kmem_cache_alloc_trace+0x152/0x780 [ 300.394582] ? v9fs_session_init+0x501/0x1a80 [ 300.399100] kstrdup+0x39/0x70 [ 300.402306] v9fs_session_init+0x501/0x1a80 [ 300.406625] ? v9fs_show_options+0x7e0/0x7e0 [ 300.411024] ? kasan_check_read+0x11/0x20 [ 300.415191] ? rcu_is_watching+0x8c/0x150 [ 300.419361] ? rcu_pm_notify+0xc0/0xc0 [ 300.423259] ? v9fs_mount+0x61/0x900 [ 300.426964] ? rcu_read_lock_sched_held+0x108/0x120 [ 300.431981] ? kmem_cache_alloc_trace+0x616/0x780 [ 300.436851] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 300.442383] v9fs_mount+0x7c/0x900 [ 300.445916] mount_fs+0xae/0x328 [ 300.449274] vfs_kern_mount.part.34+0xdc/0x4e0 [ 300.453848] ? may_umount+0xb0/0xb0 [ 300.457491] ? _raw_read_unlock+0x22/0x30 [ 300.461627] ? __get_fs_type+0x97/0xc0 [ 300.465552] do_mount+0x581/0x30e0 [ 300.469102] ? copy_mount_string+0x40/0x40 [ 300.473337] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 300.478097] ? retint_kernel+0x10/0x10 [ 300.481990] ? copy_mount_options+0x1f0/0x380 [ 300.486473] ? copy_mount_options+0x1f6/0x380 [ 300.490958] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.496482] ? copy_mount_options+0x285/0x380 [ 300.500965] ksys_mount+0x12d/0x140 [ 300.504584] __x64_sys_mount+0xbe/0x150 [ 300.508546] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 300.513553] do_syscall_64+0x1b9/0x820 [ 300.517462] ? finish_task_switch+0x1d3/0x870 [ 300.521971] ? syscall_return_slowpath+0x5e0/0x5e0 [ 300.526905] ? syscall_return_slowpath+0x31d/0x5e0 [ 300.531836] ? __switch_to_asm+0x34/0x70 [ 300.535898] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 300.541269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 300.546123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 300.551311] RIP: 0033:0x457089 03:34:17 executing program 4 (fault-call:7 fault-nth:27): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 300.554509] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.573410] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.581140] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 300.588408] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 300.595685] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 300.602954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 300.610220] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001a [ 300.937148] FAULT_INJECTION: forcing a failure. [ 300.937148] name failslab, interval 1, probability 0, space 0, times 0 [ 300.948720] CPU: 1 PID: 18988 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 300.955750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.965115] Call Trace: [ 300.967728] dump_stack+0x1c9/0x2b4 [ 300.971378] ? dump_stack_print_info.cold.2+0x52/0x52 [ 300.976590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 300.982166] should_fail.cold.4+0xa/0x11 [ 300.986252] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 300.991391] ? trace_hardirqs_on+0x10/0x10 [ 300.995651] ? __lock_acquire+0x7fc/0x5020 [ 300.999912] ? graph_lock+0x170/0x170 [ 301.003722] ? __lock_is_held+0xb5/0x140 [ 301.007836] ? trace_hardirqs_on+0x10/0x10 [ 301.012085] __should_failslab+0x124/0x180 [ 301.016326] should_failslab+0x9/0x14 [ 301.020135] kmem_cache_alloc+0x47/0x760 [ 301.024208] ? print_usage_bug+0xc0/0xc0 [ 301.028277] ? graph_lock+0x170/0x170 [ 301.032084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.037653] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 301.043033] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 301.048762] radix_tree_extend+0x295/0x650 [ 301.053016] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 301.058914] ? __lock_acquire+0x7fc/0x5020 [ 301.063159] idr_get_free+0x9ad/0x10c0 [ 301.067070] ? radix_tree_clear_tags+0xc0/0xc0 [ 301.071663] ? __lock_acquire+0x7fc/0x5020 [ 301.075912] ? graph_lock+0x170/0x170 [ 301.079731] ? graph_lock+0x170/0x170 [ 301.083534] ? trace_hardirqs_on+0x10/0x10 [ 301.087784] ? print_usage_bug+0xc0/0xc0 [ 301.091863] ? find_held_lock+0x36/0x1c0 [ 301.095948] idr_alloc_u32+0x201/0x3f0 [ 301.099854] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 301.104717] ? p9_idpool_get+0x23/0x70 [ 301.108624] idr_alloc+0x111/0x1b0 [ 301.112184] ? idr_alloc_u32+0x3f0/0x3f0 [ 301.116253] ? do_raw_spin_lock+0xc1/0x200 [ 301.120500] p9_idpool_get+0x3d/0x70 [ 301.124224] p9_client_prepare_req.part.8+0xe4/0xcd0 [ 301.129338] ? p9_free_req.isra.7+0x140/0x140 [ 301.133839] ? __radix_tree_replace+0x1fc/0x360 [ 301.138520] ? graph_lock+0x170/0x170 [ 301.142328] ? graph_lock+0x170/0x170 [ 301.146132] ? node_tag_clear+0xc0/0x1c0 [ 301.150218] p9_client_rpc+0x1bd/0x1400 [ 301.154212] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 301.159579] ? find_held_lock+0x36/0x1c0 [ 301.163650] ? lock_downgrade+0x8f0/0x8f0 [ 301.167805] ? kasan_check_read+0x11/0x20 [ 301.171956] ? do_raw_spin_unlock+0xa7/0x2f0 [ 301.176366] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 301.180955] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 301.186063] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 301.191084] ? trace_hardirqs_on+0xd/0x10 [ 301.195243] ? check_memory_region+0xd1/0x1b0 [ 301.199774] ? p9_client_destroy+0x610/0x610 [ 301.204205] p9_client_attach+0x19f/0x860 [ 301.208364] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 301.213823] ? debug_check_no_obj_freed+0x30b/0x595 [ 301.218843] ? p9_client_walk+0xab0/0xab0 [ 301.223001] ? trace_hardirqs_off+0xd/0x10 [ 301.227240] ? quarantine_put+0x10d/0x1b0 [ 301.231396] ? kfree+0x111/0x260 [ 301.234767] ? v9fs_session_init+0xd5b/0x1a80 [ 301.239270] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 301.244301] v9fs_session_init+0xf62/0x1a80 [ 301.248626] ? v9fs_session_init+0xf62/0x1a80 [ 301.253139] ? v9fs_show_options+0x7e0/0x7e0 [ 301.257560] ? rcu_is_watching+0x8c/0x150 [ 301.261710] ? rcu_pm_notify+0xc0/0xc0 [ 301.265613] ? v9fs_mount+0x61/0x900 [ 301.269334] ? rcu_read_lock_sched_held+0x108/0x120 [ 301.274363] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 301.279908] v9fs_mount+0x7c/0x900 [ 301.283459] mount_fs+0xae/0x328 [ 301.287017] vfs_kern_mount.part.34+0xdc/0x4e0 [ 301.291601] ? may_umount+0xb0/0xb0 [ 301.295230] ? _raw_read_unlock+0x22/0x30 [ 301.299381] ? __get_fs_type+0x97/0xc0 [ 301.303281] do_mount+0x581/0x30e0 [ 301.306831] ? copy_mount_string+0x40/0x40 [ 301.311076] ? copy_mount_options+0x5f/0x380 [ 301.315513] ? rcu_read_lock_sched_held+0x108/0x120 [ 301.320537] ? kmem_cache_alloc_trace+0x616/0x780 [ 301.325385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 301.330921] ? _copy_from_user+0xdf/0x150 [ 301.335079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.340622] ? copy_mount_options+0x285/0x380 [ 301.345125] ksys_mount+0x12d/0x140 [ 301.348758] __x64_sys_mount+0xbe/0x150 [ 301.352736] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 301.357772] do_syscall_64+0x1b9/0x820 [ 301.361668] ? syscall_return_slowpath+0x5e0/0x5e0 [ 301.366602] ? syscall_return_slowpath+0x31d/0x5e0 [ 301.371537] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 301.376911] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.381764] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 301.386958] RIP: 0033:0x457089 [ 301.390157] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.409070] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 301.416801] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 301.424072] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 301.431337] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 03:34:18 executing program 6: r0 = socket$inet6(0xa, 0x20000007fe, 0x2) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x2, @mcast1}, {0xa, 0x4e23, 0x6, @remote, 0x1000}, 0x8, [0x6, 0x6, 0xe5, 0x6, 0x15c400000000000, 0x326, 0x6, 0x6]}, 0x5c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0x0, 0x8}, 0x20) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9c, 0x400000) 03:34:18 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x2000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:18 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0xfffffffffffffff8, {0x8a22, 0x8, 0x4, 0xff, 0x7f, 0x6f}, 0x100000000, 0x8001}, 0xe) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40300, 0x0) execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='\x00'], &(0x7f0000000380)=[&(0x7f0000000240)='io\x00', &(0x7f0000000280)='io\x00', &(0x7f00000002c0)='io\x00', &(0x7f0000000300)='^posix_acl_accessselinux&[trusted\x00', &(0x7f0000000340)='eth1[em1trusted\x00'], 0x400) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x3}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e23, 0xffff, @ipv4={[], [], @remote}, 0x100}}, 0x6, 0x2b}, &(0x7f0000000500)=0x90) sendfile(r0, r2, &(0x7f0000000040), 0xd2) [ 301.438622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 301.445893] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001b 03:34:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000000c0)="94c9ec481c9a2071fa0f0b10d7cf2f52f805685a5761c4fb94599aadd4e5303e60ea584b71596267fd8d77d8dddda7ebf3563349199d26a7f0189250c518bddb3f456098a1956be971a00d8cab284f04f3fd03000e4c8cbf4d30", 0x5a) 03:34:18 executing program 4 (fault-call:7 fault-nth:28): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:18 executing program 3: inotify_init() syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000300)='./file0\x00', 0x400, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400)="b3ee3e24dc8c77d02afb334765613fcf776343b7e2f9", 0x16}], 0x808001, &(0x7f0000000580)) 03:34:18 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000480)=0x1c, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000540)=0xe8) getegid() fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000140)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x4e, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read'}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other='allow_other'}]}}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643f7c80c1b00ca5596973600835b25f674bbad4f77e617db28728269dfb2b506f2a3a29b52503fd7d73514a0867304e9a1ac7256fb33b6605081d3a305ff35f2e08d573104c451f9638b3f1098d98ad3d3a404e8bffcef7e8155ea1926494e6ad65e1204951465aeb7ea3b4aecb69a88228ba785efd776b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 03:34:18 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') flock(r1, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:18 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x700, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/245, 0xf5}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 03:34:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xc21, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000100)={0xf7, 0x80000000, 0x3ff, 0x2f9, 0x6, 0x400}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 301.847112] FAULT_INJECTION: forcing a failure. [ 301.847112] name failslab, interval 1, probability 0, space 0, times 0 [ 301.858501] CPU: 0 PID: 19029 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 301.865529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.874891] Call Trace: [ 301.877499] dump_stack+0x1c9/0x2b4 [ 301.881151] ? dump_stack_print_info.cold.2+0x52/0x52 [ 301.886362] ? debug_check_no_obj_freed+0x30b/0x595 [ 301.891505] should_fail.cold.4+0xa/0x11 03:34:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000002000000008060300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff0000000000000000d0000000d000000000010000617270000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000e0000001000000007f00000100000000000000000000000000000000aaaaaaaaaa000000000000000000000000000000726564697265637400000000000000000000000000000000000000000000000008000000000000000000000004000000"]}, 0x208) 03:34:19 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') r2 = dup(r0) sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000080)=0x9, 0x2) [ 301.895592] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 301.900720] ? kfree+0x111/0x260 [ 301.904105] ? p9_client_create+0xfea/0x1770 [ 301.908519] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 301.913542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.919100] ? p9_free_req.isra.7+0x95/0x140 [ 301.923533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 301.929108] ? find_held_lock+0x36/0x1c0 [ 301.933214] ? check_same_owner+0x340/0x340 [ 301.937563] ? rcu_note_context_switch+0x730/0x730 [ 301.942514] ? kasan_check_write+0x14/0x20 03:34:19 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='tunl0\x00', 0x5) sendto$inet(r0, &(0x7f0000000b40)="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", 0x595, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00006d1fd4)="db", 0x1, 0x4000010, &(0x7f00004daff0)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @loopback}, &(0x7f0000000080)=0xc) [ 301.946774] __should_failslab+0x124/0x180 [ 301.951034] should_failslab+0x9/0x14 [ 301.954851] __kmalloc_track_caller+0x2c4/0x760 [ 301.959532] ? save_stack+0xa9/0xd0 [ 301.963209] ? save_stack+0x43/0xd0 [ 301.966851] ? kasan_kmalloc+0xc4/0xe0 [ 301.970745] ? kmem_cache_alloc_trace+0x152/0x780 [ 301.975583] ? v9fs_session_init+0x501/0x1a80 [ 301.980068] kstrdup+0x39/0x70 [ 301.983253] v9fs_session_init+0x501/0x1a80 [ 301.987574] ? v9fs_show_options+0x7e0/0x7e0 [ 301.991973] ? kasan_check_read+0x11/0x20 [ 301.996113] ? rcu_is_watching+0x8c/0x150 [ 302.000249] ? rcu_pm_notify+0xc0/0xc0 [ 302.004136] ? v9fs_mount+0x61/0x900 [ 302.007870] ? rcu_read_lock_sched_held+0x108/0x120 [ 302.012910] ? kmem_cache_alloc_trace+0x616/0x780 [ 302.017749] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 302.023289] v9fs_mount+0x7c/0x900 [ 302.026829] mount_fs+0xae/0x328 [ 302.030192] vfs_kern_mount.part.34+0xdc/0x4e0 [ 302.034793] ? may_umount+0xb0/0xb0 [ 302.038432] ? _raw_read_unlock+0x22/0x30 [ 302.042579] ? __get_fs_type+0x97/0xc0 [ 302.046455] do_mount+0x581/0x30e0 [ 302.049984] ? do_raw_spin_unlock+0xa7/0x2f0 [ 302.054412] ? copy_mount_string+0x40/0x40 [ 302.058659] ? copy_mount_options+0x5f/0x380 [ 302.063081] ? rcu_read_lock_sched_held+0x108/0x120 [ 302.068104] ? kmem_cache_alloc_trace+0x616/0x780 [ 302.072939] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 302.078465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.083989] ? copy_mount_options+0x285/0x380 [ 302.088471] ksys_mount+0x12d/0x140 [ 302.092087] __x64_sys_mount+0xbe/0x150 [ 302.096089] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 302.101129] do_syscall_64+0x1b9/0x820 [ 302.105022] ? finish_task_switch+0x1d3/0x870 [ 302.109506] ? syscall_return_slowpath+0x5e0/0x5e0 [ 302.114442] ? syscall_return_slowpath+0x31d/0x5e0 [ 302.119365] ? __switch_to_asm+0x34/0x70 [ 302.123422] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 302.128796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 302.133649] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 302.138844] RIP: 0033:0x457089 [ 302.142032] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 302.160947] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.168656] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 302.175932] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 302.183188] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 302.190444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:34:19 executing program 4 (fault-call:7 fault-nth:29): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) [ 302.197701] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001c 03:34:19 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:19 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={"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"}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000000c0)) 03:34:19 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) [ 302.480354] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.480368] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING 03:34:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x7000000, 0xd2) 03:34:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r1 = gettid() wait4(r1, &(0x7f0000000140), 0xf, &(0x7f0000000180)) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x200000) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000100)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000000c0)={0x7d5283dd, 0x8, 0xff, @random="bbd1dad6e91c", 'erspan0\x00'}) r3 = dup2(r0, r0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x5, &(0x7f0000000240), 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x9) [ 302.588658] FAULT_INJECTION: forcing a failure. [ 302.588658] name failslab, interval 1, probability 0, space 0, times 0 [ 302.599917] CPU: 1 PID: 19069 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 302.606952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.616309] Call Trace: [ 302.618912] dump_stack+0x1c9/0x2b4 [ 302.622557] ? dump_stack_print_info.cold.2+0x52/0x52 [ 302.627867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.633422] should_fail.cold.4+0xa/0x11 [ 302.637492] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 302.642622] ? trace_hardirqs_on+0x10/0x10 [ 302.646867] ? __lock_acquire+0x7fc/0x5020 [ 302.651110] ? graph_lock+0x170/0x170 [ 302.654919] ? __lock_is_held+0xb5/0x140 [ 302.658986] ? trace_hardirqs_on+0x10/0x10 [ 302.663235] __should_failslab+0x124/0x180 [ 302.667476] should_failslab+0x9/0x14 [ 302.671286] kmem_cache_alloc+0x47/0x760 [ 302.675350] ? print_usage_bug+0xc0/0xc0 [ 302.679416] ? graph_lock+0x170/0x170 [ 302.683227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.688777] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 302.694154] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 302.699881] radix_tree_extend+0x295/0x650 [ 302.704238] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 302.710134] ? __lock_acquire+0x7fc/0x5020 [ 302.714385] idr_get_free+0x9ad/0x10c0 [ 302.718293] ? radix_tree_clear_tags+0xc0/0xc0 [ 302.722886] ? __lock_acquire+0x7fc/0x5020 [ 302.727183] ? graph_lock+0x170/0x170 [ 302.731044] ? graph_lock+0x170/0x170 [ 302.734851] ? trace_hardirqs_on+0x10/0x10 [ 302.739099] ? print_usage_bug+0xc0/0xc0 [ 302.743169] ? find_held_lock+0x36/0x1c0 [ 302.747253] idr_alloc_u32+0x201/0x3f0 [ 302.751154] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 302.756022] ? p9_idpool_get+0x23/0x70 [ 302.759923] idr_alloc+0x111/0x1b0 [ 302.763475] ? idr_alloc_u32+0x3f0/0x3f0 [ 302.767545] ? do_raw_spin_lock+0xc1/0x200 [ 302.771794] p9_idpool_get+0x3d/0x70 [ 302.775521] p9_client_prepare_req.part.8+0xe4/0xcd0 [ 302.780643] ? p9_free_req.isra.7+0x140/0x140 [ 302.785146] ? __radix_tree_replace+0x1fc/0x360 [ 302.789823] ? graph_lock+0x170/0x170 [ 302.793637] ? graph_lock+0x170/0x170 [ 302.797437] ? node_tag_clear+0xc0/0x1c0 [ 302.801507] p9_client_rpc+0x1bd/0x1400 [ 302.805492] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 302.811200] ? find_held_lock+0x36/0x1c0 [ 302.815274] ? lock_downgrade+0x8f0/0x8f0 [ 302.819515] ? kasan_check_read+0x11/0x20 [ 302.823665] ? do_raw_spin_unlock+0xa7/0x2f0 [ 302.828080] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 302.833044] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 302.838245] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 302.843519] ? trace_hardirqs_on+0xd/0x10 [ 302.847879] ? check_memory_region+0xd1/0x1b0 [ 302.852385] ? p9_client_destroy+0x610/0x610 [ 302.856804] p9_client_attach+0x19f/0x860 [ 302.860962] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 302.866070] ? debug_check_no_obj_freed+0x30b/0x595 [ 302.871089] ? p9_client_walk+0xab0/0xab0 [ 302.875253] ? trace_hardirqs_off+0xd/0x10 [ 302.879525] ? quarantine_put+0x10d/0x1b0 [ 302.883686] ? kfree+0x111/0x260 [ 302.887060] ? v9fs_session_init+0xd5b/0x1a80 [ 302.891557] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 302.897037] v9fs_session_init+0xf62/0x1a80 [ 302.901469] ? v9fs_session_init+0xf62/0x1a80 [ 302.905985] ? v9fs_show_options+0x7e0/0x7e0 [ 302.910410] ? rcu_is_watching+0x8c/0x150 [ 302.916041] ? rcu_pm_notify+0xc0/0xc0 [ 302.919948] ? v9fs_mount+0x61/0x900 [ 302.923668] ? rcu_read_lock_sched_held+0x108/0x120 [ 302.928704] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 302.934466] v9fs_mount+0x7c/0x900 [ 302.938033] mount_fs+0xae/0x328 [ 302.941409] vfs_kern_mount.part.34+0xdc/0x4e0 [ 302.945997] ? may_umount+0xb0/0xb0 [ 302.949718] ? _raw_read_unlock+0x22/0x30 [ 302.953871] ? __get_fs_type+0x97/0xc0 [ 302.957767] do_mount+0x581/0x30e0 [ 302.961322] ? copy_mount_string+0x40/0x40 [ 302.965682] ? copy_mount_options+0x5f/0x380 [ 302.970101] ? rcu_read_lock_sched_held+0x108/0x120 [ 302.975120] ? kmem_cache_alloc_trace+0x616/0x780 [ 302.979975] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 302.985516] ? _copy_from_user+0xdf/0x150 [ 302.989670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 302.995219] ? copy_mount_options+0x285/0x380 [ 302.999723] ksys_mount+0x12d/0x140 [ 303.003357] __x64_sys_mount+0xbe/0x150 [ 303.007333] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 303.012364] do_syscall_64+0x1b9/0x820 [ 303.016258] ? syscall_return_slowpath+0x5e0/0x5e0 [ 303.021201] ? syscall_return_slowpath+0x31d/0x5e0 [ 303.026141] ? __switch_to_asm+0x34/0x70 [ 303.030211] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 303.035579] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.040446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.045652] RIP: 0033:0x457089 [ 303.048848] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.067750] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.075474] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 303.082748] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 03:34:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x0, 0x1fa) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r3, &(0x7f0000000000)={0x20000011}) 03:34:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'rose0\x00', 0x32}) 03:34:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x7fff) ioctl(r0, 0x912, &(0x7f00000000c0)="025cc83d6dce10f0d13f64033292b913726b474deaab903fc180cb51385d557ded24be977dfc2c5e48d3a455e0d5b8e10bb3f9aedbbc7e0879804be71c895870a91172be89d0889f531b5d70a677d6c27c89a21e9b71f02487940753656d7aa8d51162c3b1fbd92dda3b8f06456c34d946de4773994cb078bb61fafb4a2a9e2e2668e8c396383c612c0cf5c554f9c7cc4183d5b31a7429c0dd95d7ccd321058f86379b8ee91316946165f5b81b4117c634518d898842594e4f58768f8509a7c31fbb3e7cc4c7649520c897944aaf9d5ce381f3abe86ffb2cfb5d77217711f9b55a") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)="7d10", 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) r3 = getgid() fchownat(r1, &(0x7f00000002c0)='./file0\x00', r2, r3, 0x400) fallocate(r1, 0x0, 0x0, 0x4d) ioctl(r0, 0xf09f, &(0x7f00000001c0)="f56535bf930c67a7000da3b1c6871d58d0133af5842954867a82f403776cd5b7299cce8c4a055391bdf7b07401cecaa4a99662825c35f35a3466328a8ed22e3c0a340dd755914fc935f2294371d4a5dc73390c0b39158d205ea4506b8afdd510cc6effc8670f9c029f8b8e27beb13a9dc167be41c88f6397db51d81636a00d71b0f2a20f5bece81c8b687a385a56e22875cc0e5b520e47086e53acd6d803e8594c4113711052c384ccd57dc15a5eae854660f2a48d4ebcc5bacccbb8ab4ec6fcb851735728c5") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x209) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) readv(r1, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x6) [ 303.090021] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 303.097292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 303.104560] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001d 03:34:20 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0xc000002000000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) 03:34:20 executing program 4 (fault-call:7 fault-nth:30): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:20 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r1, &(0x7f0000000040)=0x7000000, 0xd2) getsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000080)=""/11, &(0x7f00000000c0)=0xb) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000100)={0x1, 0x1d96, 0x3}) 03:34:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0xd2) 03:34:20 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000b24000/0x4000)=nil, 0x4000, 0x0, 0x5d832, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x10000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000200)={r1, r0, 0x9}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) write$cgroup_pid(r1, &(0x7f0000000100)=r4, 0x12) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000), 0x10) 03:34:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x4000) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:20 executing program 6: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000240)=""/246, &(0x7f0000000340)=0xf6) syz_mount_image$ceph(&(0x7f0000000380)='ceph\x00', &(0x7f00000003c0)='./file0\x00', 0x5, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000400)="42204f4d9b207025b46015ae3c0ebc3afaf2aa34bd4157939b0fb25256b7f8871589073da17ed21f7887da4e283f2a4acb10eb8e250a6012bd73078fda8b07df4ca4b9ffa3e627fc04d782249ad5317d1b037e7d05282ff51e3ae85347559089d627397a968acc2676785e0b409c303f73117e828e3eef3aebd4033bc45568df3ab7ee6c439357207d540cf2376e652aa623abe8160bc705af1611f71b18bbee7a17c47c123e816a61ae1cc54fccb37739330f3984e02aa1ff59d3344a92", 0xbe}, {&(0x7f00000004c0)="48dec7d1175f3c638b409548f02114166b1cfea57a58d904ec388324045b24ff1b7c33e471545f2063dc9a9a8d47ef82cad5e39c65051c5087c3929c831ce03c128e31a4480fbc952a2edfa0c5a0b8261d453680cf1476a31e583c9a7d395c7cf292315c7770941e475c1ff0dbdf53d71fdf9028797d5d", 0x77, 0x8}, {&(0x7f0000000540)="65c77f60423b324015eb2c994ee8baf865d67cea0f5551189596aa28f402e7d8fb3e6087dd7a649adaf8d5a34d4e91f4053241d993222fc9d1626962b0a4cb9bfaf98de5cedf15b9d627638a4564e8ce4b0cfd3fe0524977529dace2a58968ea585444c56bcd3ac6d23df551864573baa361c9b9cdcd0f77", 0x78, 0x6f2}], 0x1000, &(0x7f0000000640)='xfs\x00') ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000013000)) syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="636dfe8bff5e00"]) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000003240)=""/4096) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x8000, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x37, &(0x7f00000000c0), &(0x7f0000000180)=0x4) [ 303.410958] FAULT_INJECTION: forcing a failure. [ 303.410958] name failslab, interval 1, probability 0, space 0, times 0 [ 303.422206] CPU: 1 PID: 19105 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 303.429231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.438581] Call Trace: [ 303.441163] dump_stack+0x1c9/0x2b4 [ 303.444843] ? dump_stack_print_info.cold.2+0x52/0x52 [ 303.450053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.455619] should_fail.cold.4+0xa/0x11 03:34:20 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0xc000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 303.459709] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 303.464849] ? trace_hardirqs_on+0x10/0x10 [ 303.469103] ? __lock_acquire+0x7fc/0x5020 [ 303.473349] ? graph_lock+0x170/0x170 [ 303.477156] ? __lock_is_held+0xb5/0x140 [ 303.481230] ? trace_hardirqs_on+0x10/0x10 [ 303.485462] __should_failslab+0x124/0x180 [ 303.489754] should_failslab+0x9/0x14 [ 303.493583] kmem_cache_alloc+0x47/0x760 [ 303.497672] ? print_usage_bug+0xc0/0xc0 [ 303.501761] ? graph_lock+0x170/0x170 [ 303.505590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.511156] ? __perf_event_task_sched_out+0x2f0/0x1a60 [ 303.516553] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 303.522298] radix_tree_extend+0x295/0x650 [ 303.526557] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 303.532476] ? __lock_acquire+0x7fc/0x5020 [ 303.536735] idr_get_free+0x9ad/0x10c0 [ 303.540662] ? radix_tree_clear_tags+0xc0/0xc0 [ 303.545272] ? __lock_acquire+0x7fc/0x5020 [ 303.549621] ? graph_lock+0x170/0x170 [ 303.553457] ? graph_lock+0x170/0x170 [ 303.557276] ? trace_hardirqs_on+0x10/0x10 [ 303.561538] ? print_usage_bug+0xc0/0xc0 [ 303.565627] ? find_held_lock+0x36/0x1c0 [ 303.569727] idr_alloc_u32+0x201/0x3f0 [ 303.573647] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 303.578516] ? p9_idpool_get+0x23/0x70 [ 303.582444] idr_alloc+0x111/0x1b0 [ 303.586017] ? idr_alloc_u32+0x3f0/0x3f0 [ 303.590104] ? do_raw_spin_lock+0xc1/0x200 [ 303.594363] p9_idpool_get+0x3d/0x70 [ 303.598096] p9_client_prepare_req.part.8+0xe4/0xcd0 [ 303.603226] ? p9_free_req.isra.7+0x140/0x140 [ 303.607741] ? __radix_tree_replace+0x1fc/0x360 [ 303.612424] ? graph_lock+0x170/0x170 [ 303.616244] ? graph_lock+0x170/0x170 [ 303.620053] ? node_tag_clear+0xc0/0x1c0 [ 303.624137] p9_client_rpc+0x1bd/0x1400 [ 303.628149] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 303.633526] ? find_held_lock+0x36/0x1c0 [ 303.637611] ? lock_downgrade+0x8f0/0x8f0 [ 303.641783] ? kasan_check_read+0x11/0x20 [ 303.646058] ? do_raw_spin_unlock+0xa7/0x2f0 [ 303.650473] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 303.655075] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 303.660191] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 303.665216] ? trace_hardirqs_on+0xd/0x10 [ 303.669390] ? check_memory_region+0xd1/0x1b0 [ 303.673905] ? p9_client_destroy+0x610/0x610 [ 303.678337] p9_client_attach+0x19f/0x860 [ 303.682497] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 303.687609] ? debug_check_no_obj_freed+0x30b/0x595 [ 303.692635] ? p9_client_walk+0xab0/0xab0 [ 303.696887] ? trace_hardirqs_off+0xd/0x10 [ 303.701134] ? quarantine_put+0x10d/0x1b0 [ 303.705292] ? kfree+0x111/0x260 [ 303.708669] ? v9fs_session_init+0xd5b/0x1a80 [ 303.713181] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 303.718223] v9fs_session_init+0xf62/0x1a80 [ 303.722551] ? v9fs_session_init+0xf62/0x1a80 [ 303.727181] ? v9fs_show_options+0x7e0/0x7e0 [ 303.731623] ? rcu_is_watching+0x8c/0x150 [ 303.735784] ? rcu_pm_notify+0xc0/0xc0 [ 303.739692] ? v9fs_mount+0x61/0x900 [ 303.743435] ? rcu_read_lock_sched_held+0x108/0x120 [ 303.748473] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 303.754025] v9fs_mount+0x7c/0x900 [ 303.757585] mount_fs+0xae/0x328 [ 303.760963] vfs_kern_mount.part.34+0xdc/0x4e0 [ 303.765556] ? may_umount+0xb0/0xb0 [ 303.769201] ? _raw_read_unlock+0x22/0x30 [ 303.773355] ? __get_fs_type+0x97/0xc0 [ 303.777260] do_mount+0x581/0x30e0 [ 303.780815] ? copy_mount_string+0x40/0x40 [ 303.785077] ? copy_mount_options+0x5f/0x380 [ 303.789495] ? rcu_read_lock_sched_held+0x108/0x120 [ 303.794526] ? kmem_cache_alloc_trace+0x616/0x780 [ 303.799392] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 303.804937] ? copy_mount_options+0x285/0x380 [ 303.809448] ksys_mount+0x12d/0x140 [ 303.813120] __x64_sys_mount+0xbe/0x150 [ 303.817104] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 303.822135] do_syscall_64+0x1b9/0x820 [ 303.826041] ? finish_task_switch+0x1d3/0x870 [ 303.830547] ? syscall_return_slowpath+0x5e0/0x5e0 [ 303.835488] ? syscall_return_slowpath+0x31d/0x5e0 [ 303.840432] ? __switch_to_asm+0x34/0x70 [ 303.844502] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 303.849878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 303.854737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 303.859949] RIP: 0033:0x457089 [ 303.863152] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 303.882066] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.889784] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 303.897060] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 303.904333] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 303.911617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 303.919366] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001e 03:34:21 executing program 4 (fault-call:7 fault-nth:31): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000c80)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000cc0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wlan0&vmnet1ppp0+vboxnet0{:posix_acl_accesskeyring-nodev'}}]}}) 03:34:21 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0x7) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) 03:34:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='io\x00') sendfile(r0, r0, &(0x7f0000000040), 0xd2) 03:34:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000100)=0x8, 0x4) listen(r0, 0x7fff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000040)=0x2000400000001, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x1f6) 03:34:21 executing program 3: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, &(0x7f0000000100)=0x6, 0x7, 0x5) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x84880, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x4]}, &(0x7f0000000080)=0x6) 03:34:21 executing program 0: io_setup(0xff, &(0x7f0000000540)=0x0) io_getevents(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") io_submit(r0, 0x20000080, &(0x7f00000001c0)=[&(0x7f0000000180)={0x38000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000000c0)}]) [ 304.035509] XFS (loop6): unknown mount option [cmþ‹ÿ^]. 03:34:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x403e5, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2000, 0x0) mq_timedsend(r0, &(0x7f00000001c0)="38ac05ba140f52e3663a3bc764bc2d43e22765642b036e9049f533", 0x1b, 0x6, &(0x7f0000000200)={0x0, 0x989680}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) seccomp(0x1, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000004fe8)}) prctl$setfpexc(0xc, 0x10000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) prlimit64(r1, 0xf, &(0x7f0000000280)={0x1, 0x3}, &(0x7f00000002c0)) 03:34:21 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000140)='io\x00') sendfile(r0, r2, &(0x7f0000000040)=0x7000000, 0xd2) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) [ 304.259595] FAULT_INJECTION: forcing a failure. [ 304.259595] name failslab, interval 1, probability 0, space 0, times 0 [ 304.270990] CPU: 0 PID: 19158 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 304.278026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.287362] Call Trace: [ 304.289943] dump_stack+0x1c9/0x2b4 [ 304.293581] ? dump_stack_print_info.cold.2+0x52/0x52 [ 304.298781] ? __kernel_text_address+0xd/0x40 [ 304.303335] ? unwind_get_return_address+0x61/0xa0 [ 304.308368] should_fail.cold.4+0xa/0x11 [ 304.312437] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 304.317550] ? save_stack+0x43/0xd0 [ 304.321177] ? kasan_kmalloc+0xc4/0xe0 [ 304.325068] ? kasan_slab_alloc+0x12/0x20 [ 304.329211] ? kmem_cache_alloc+0x12e/0x760 [ 304.333540] ? fscache_alloc_cookie+0xcb/0x880 [ 304.338168] ? __fscache_acquire_cookie+0x230/0xb00 [ 304.343184] ? v9fs_session_init+0x1013/0x1a80 [ 304.347766] ? v9fs_mount+0x7c/0x900 [ 304.351507] ? mount_fs+0xae/0x328 [ 304.355050] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 304.359821] ? do_mount+0x581/0x30e0 [ 304.363539] ? ksys_mount+0x12d/0x140 [ 304.367332] ? __x64_sys_mount+0xbe/0x150 [ 304.371472] ? do_syscall_64+0x1b9/0x820 [ 304.375526] ? find_held_lock+0x36/0x1c0 [ 304.379602] ? check_same_owner+0x340/0x340 [ 304.383927] ? rcu_is_watching+0x8c/0x150 [ 304.388095] ? rcu_note_context_switch+0x730/0x730 [ 304.393042] __should_failslab+0x124/0x180 [ 304.397285] should_failslab+0x9/0x14 [ 304.401081] __kmalloc+0x2c8/0x760 [ 304.404615] ? kmem_cache_alloc+0x5fa/0x760 [ 304.408934] ? fscache_alloc_cookie+0x701/0x880 [ 304.413600] fscache_alloc_cookie+0x701/0x880 [ 304.418120] ? fscache_cookie_init_once+0x80/0x80 [ 304.422950] ? lock_downgrade+0x8f0/0x8f0 [ 304.427087] ? radix_tree_delete_item+0x188/0x310 [ 304.431951] ? kasan_check_read+0x11/0x20 [ 304.436094] ? do_raw_spin_unlock+0xa7/0x2f0 [ 304.440518] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 304.445120] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 304.450230] __fscache_acquire_cookie+0x230/0xb00 [ 304.455078] ? fscache_cookie_put+0x850/0x850 [ 304.459564] ? p9_client_attach+0x215/0x860 [ 304.463876] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 304.468977] ? debug_check_no_obj_freed+0x30b/0x595 [ 304.473982] ? p9_client_walk+0xab0/0xab0 [ 304.478126] ? trace_hardirqs_off+0xd/0x10 [ 304.482350] ? quarantine_put+0x10d/0x1b0 [ 304.486501] ? kfree+0x111/0x260 [ 304.489885] v9fs_cache_session_get_cookie+0xc4/0x270 [ 304.495085] v9fs_session_init+0x1013/0x1a80 [ 304.499508] ? v9fs_show_options+0x7e0/0x7e0 [ 304.503936] ? rcu_is_watching+0x8c/0x150 [ 304.508097] ? rcu_pm_notify+0xc0/0xc0 [ 304.512000] ? v9fs_mount+0x61/0x900 [ 304.515729] ? rcu_read_lock_sched_held+0x108/0x120 [ 304.520768] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 304.526327] v9fs_mount+0x7c/0x900 [ 304.529889] mount_fs+0xae/0x328 [ 304.533273] vfs_kern_mount.part.34+0xdc/0x4e0 [ 304.537874] ? may_umount+0xb0/0xb0 [ 304.541517] ? _raw_read_unlock+0x22/0x30 [ 304.545685] ? __get_fs_type+0x97/0xc0 [ 304.549591] do_mount+0x581/0x30e0 [ 304.553156] ? interrupt_entry+0xb1/0xf0 03:34:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7f}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') sendfile(r0, r1, &(0x7f0000000040), 0xd2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000480)={0x2, 'syzkaller0\x00', 0x1}, 0x18) readv(r1, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/87, 0x57}, {&(0x7f0000000640)=""/195, 0x46d}, {&(0x7f0000000940)=""/198, 0xffffff56}, {&(0x7f00000002c0)=""/50, 0x3e041a18963fad58}], 0x4) clock_settime(0x7, &(0x7f0000000440)={0x0, 0x989680}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/133, &(0x7f0000000200)=0x85) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x509000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000280), 0x4) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000240)={r1, 0x0, 0x3, 0x0, 0xea1f}) [ 304.557240] ? copy_mount_string+0x40/0x40 [ 304.561491] ? retint_kernel+0x10/0x10 [ 304.565399] ? copy_mount_options+0x1e3/0x380 [ 304.569931] ? write_comp_data+0x1/0x70 [ 304.573927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 304.579482] ? copy_mount_options+0x285/0x380 [ 304.583999] ksys_mount+0x12d/0x140 [ 304.587653] __x64_sys_mount+0xbe/0x150 [ 304.591662] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 304.596707] do_syscall_64+0x1b9/0x820 [ 304.600608] ? finish_task_switch+0x1d3/0x870 [ 304.605112] ? syscall_return_slowpath+0x5e0/0x5e0 [ 304.610058] ? syscall_return_slowpath+0x31d/0x5e0 [ 304.615002] ? __switch_to_asm+0x34/0x70 [ 304.619069] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 304.624427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.629264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 304.634441] RIP: 0033:0x457089 [ 304.637636] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.656563] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.664293] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 304.671564] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 304.678840] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 304.686117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 304.693389] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001f [ 304.701081] ================================================================== [ 304.708696] BUG: KASAN: double-free or invalid-free in fscache_free_cookie+0x230/0x280 [ 304.716736] [ 304.718361] CPU: 0 PID: 19158 Comm: syz-executor4 Not tainted 4.18.0+ #190 [ 304.725375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.734726] Call Trace: [ 304.737303] dump_stack+0x1c9/0x2b4 [ 304.740931] ? dump_stack_print_info.cold.2+0x52/0x52 [ 304.746124] ? printk+0xa7/0xcf [ 304.749389] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 304.754137] ? fscache_free_cookie+0x230/0x280 [ 304.758712] ? fscache_free_cookie+0x230/0x280 [ 304.763314] print_address_description+0x6c/0x20b [ 304.768156] ? fscache_free_cookie+0x230/0x280 [ 304.772730] ? fscache_free_cookie+0x230/0x280 [ 304.777333] kasan_report_invalid_free+0x64/0xa0 [ 304.782098] __kasan_slab_free+0x150/0x170 [ 304.786405] ? fscache_free_cookie+0x230/0x280 [ 304.791006] kasan_slab_free+0xe/0x10 [ 304.794848] kfree+0xd9/0x260 [ 304.797963] fscache_free_cookie+0x230/0x280 [ 304.802374] ? __fscache_check_consistency+0xbe0/0xbe0 [ 304.807654] ? fscache_alloc_cookie+0x701/0x880 [ 304.812333] fscache_alloc_cookie+0x74c/0x880 [ 304.816855] ? fscache_cookie_init_once+0x80/0x80 [ 304.821712] ? lock_downgrade+0x8f0/0x8f0 [ 304.825866] ? radix_tree_delete_item+0x188/0x310 [ 304.830716] ? kasan_check_read+0x11/0x20 [ 304.834858] ? do_raw_spin_unlock+0xa7/0x2f0 [ 304.839266] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 304.843846] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 304.848961] __fscache_acquire_cookie+0x230/0xb00 [ 304.853825] ? fscache_cookie_put+0x850/0x850 [ 304.858339] ? p9_client_attach+0x215/0x860 [ 304.862669] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 304.867784] ? debug_check_no_obj_freed+0x30b/0x595 [ 304.872815] ? p9_client_walk+0xab0/0xab0 [ 304.876968] ? trace_hardirqs_off+0xd/0x10 [ 304.881191] ? quarantine_put+0x10d/0x1b0 [ 304.885351] ? kfree+0x111/0x260 [ 304.888737] v9fs_cache_session_get_cookie+0xc4/0x270 [ 304.893938] v9fs_session_init+0x1013/0x1a80 [ 304.898361] ? v9fs_show_options+0x7e0/0x7e0 [ 304.902788] ? rcu_is_watching+0x8c/0x150 [ 304.906937] ? rcu_pm_notify+0xc0/0xc0 [ 304.910832] ? v9fs_mount+0x61/0x900 [ 304.914969] ? rcu_read_lock_sched_held+0x108/0x120 [ 304.920000] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 304.925554] v9fs_mount+0x7c/0x900 [ 304.929116] mount_fs+0xae/0x328 [ 304.932501] vfs_kern_mount.part.34+0xdc/0x4e0 [ 304.937103] ? may_umount+0xb0/0xb0 [ 304.940735] ? _raw_read_unlock+0x22/0x30 [ 304.944882] ? __get_fs_type+0x97/0xc0 [ 304.948786] do_mount+0x581/0x30e0 [ 304.952322] ? interrupt_entry+0xb1/0xf0 [ 304.956382] ? copy_mount_string+0x40/0x40 [ 304.960632] ? retint_kernel+0x10/0x10 [ 304.964529] ? copy_mount_options+0x1e3/0x380 [ 304.969013] ? write_comp_data+0x1/0x70 [ 304.972980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 304.978528] ? copy_mount_options+0x285/0x380 [ 304.983035] ksys_mount+0x12d/0x140 [ 304.986663] __x64_sys_mount+0xbe/0x150 [ 304.990628] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 304.995641] do_syscall_64+0x1b9/0x820 [ 304.999517] ? finish_task_switch+0x1d3/0x870 [ 305.004021] ? syscall_return_slowpath+0x5e0/0x5e0 [ 305.008969] ? syscall_return_slowpath+0x31d/0x5e0 [ 305.013912] ? __switch_to_asm+0x34/0x70 [ 305.017984] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 305.023352] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.028186] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.033372] RIP: 0033:0x457089 [ 305.036589] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.055492] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.063216] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 305.070486] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 305.077741] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 305.085000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 305.092262] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001f [ 305.099533] [ 305.101156] Allocated by task 17919: [ 305.104874] save_stack+0x43/0xd0 [ 305.108336] kasan_kmalloc+0xc4/0xe0 [ 305.112048] __kmalloc+0x14e/0x760 [ 305.115574] fscache_alloc_cookie+0x701/0x880 [ 305.120053] __fscache_acquire_cookie+0x230/0xb00 [ 305.124894] v9fs_cache_session_get_cookie+0xc4/0x270 [ 305.130072] v9fs_session_init+0x1013/0x1a80 [ 305.134468] v9fs_mount+0x7c/0x900 [ 305.137993] mount_fs+0xae/0x328 [ 305.141346] vfs_kern_mount.part.34+0xdc/0x4e0 [ 305.145915] do_mount+0x581/0x30e0 [ 305.149442] ksys_mount+0x12d/0x140 [ 305.153054] __x64_sys_mount+0xbe/0x150 [ 305.157014] do_syscall_64+0x1b9/0x820 [ 305.160893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.166074] [ 305.167703] Freed by task 17919: [ 305.171077] save_stack+0x43/0xd0 [ 305.174530] __kasan_slab_free+0x11a/0x170 [ 305.178751] kasan_slab_free+0xe/0x10 [ 305.182555] kfree+0xd9/0x260 [ 305.185656] fscache_free_cookie+0x230/0x280 [ 305.190079] fscache_cookie_put+0x39d/0x850 [ 305.194401] __fscache_relinquish_cookie+0x494/0x911 [ 305.199504] v9fs_cache_session_put_cookie+0x46/0x90 [ 305.204626] v9fs_session_close+0xf4/0x420 [ 305.208871] v9fs_kill_super+0x4e/0xa0 [ 305.212769] deactivate_locked_super+0x97/0x100 [ 305.217438] v9fs_mount+0x461/0x900 [ 305.221059] mount_fs+0xae/0x328 [ 305.224437] vfs_kern_mount.part.34+0xdc/0x4e0 [ 305.229031] do_mount+0x581/0x30e0 [ 305.232579] ksys_mount+0x12d/0x140 [ 305.236207] __x64_sys_mount+0xbe/0x150 [ 305.240183] do_syscall_64+0x1b9/0x820 [ 305.244072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.249244] [ 305.250884] The buggy address belongs to the object at ffff8801d8a4a000 [ 305.250884] which belongs to the cache kmalloc-64 of size 64 [ 305.263384] The buggy address is located 0 bytes inside of [ 305.263384] 64-byte region [ffff8801d8a4a000, ffff8801d8a4a040) [ 305.274997] The buggy address belongs to the page: [ 305.279930] page:ffffea0007629280 count:1 mapcount:0 mapping:ffff8801dac00340 index:0x0 [ 305.288089] flags: 0x2fffc0000000100(slab) [ 305.292333] raw: 02fffc0000000100 ffffea0007234b88 ffffea00072fb488 ffff8801dac00340 [ 305.300240] raw: 0000000000000000 ffff8801d8a4a000 0000000100000020 0000000000000000 [ 305.308149] page dumped because: kasan: bad access detected [ 305.313869] [ 305.315508] Memory state around the buggy address: [ 305.320450] ffff8801d8a49f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 305.327815] ffff8801d8a49f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 305.335199] >ffff8801d8a4a000: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 305.342542] ^ [ 305.345928] ffff8801d8a4a080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 305.353305] ffff8801d8a4a100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 305.360657] ================================================================== [ 305.368003] Disabling lock debugging due to kernel taint [ 305.373547] Kernel panic - not syncing: panic_on_warn set ... [ 305.373547] [ 305.380913] CPU: 0 PID: 19158 Comm: syz-executor4 Tainted: G B 4.18.0+ #190 [ 305.389295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 305.398632] Call Trace: [ 305.401240] dump_stack+0x1c9/0x2b4 [ 305.404861] ? dump_stack_print_info.cold.2+0x52/0x52 [ 305.410036] ? lock_downgrade+0x8f0/0x8f0 [ 305.414185] ? fscache_free_cookie+0x140/0x280 [ 305.418759] panic+0x238/0x4e7 [ 305.421950] ? add_taint.cold.5+0x16/0x16 [ 305.426091] ? add_taint.cold.5+0x5/0x16 [ 305.430142] ? do_raw_spin_unlock+0xa7/0x2f0 [ 305.434537] ? fscache_free_cookie+0x230/0x280 [ 305.439103] ? fscache_free_cookie+0x230/0x280 [ 305.443671] kasan_end_report+0x47/0x4f [ 305.447646] kasan_report_invalid_free+0x81/0xa0 [ 305.452408] __kasan_slab_free+0x150/0x170 [ 305.456629] ? fscache_free_cookie+0x230/0x280 [ 305.461197] kasan_slab_free+0xe/0x10 [ 305.465014] kfree+0xd9/0x260 [ 305.468134] fscache_free_cookie+0x230/0x280 [ 305.472554] ? __fscache_check_consistency+0xbe0/0xbe0 [ 305.477827] ? fscache_alloc_cookie+0x701/0x880 [ 305.482485] fscache_alloc_cookie+0x74c/0x880 [ 305.487011] ? fscache_cookie_init_once+0x80/0x80 [ 305.491842] ? lock_downgrade+0x8f0/0x8f0 [ 305.495979] ? radix_tree_delete_item+0x188/0x310 [ 305.500816] ? kasan_check_read+0x11/0x20 [ 305.504961] ? do_raw_spin_unlock+0xa7/0x2f0 [ 305.509365] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 305.513936] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 305.519042] __fscache_acquire_cookie+0x230/0xb00 [ 305.523875] ? fscache_cookie_put+0x850/0x850 [ 305.528355] ? p9_client_attach+0x215/0x860 [ 305.532663] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 305.537757] ? debug_check_no_obj_freed+0x30b/0x595 [ 305.542779] ? p9_client_walk+0xab0/0xab0 [ 305.546922] ? trace_hardirqs_off+0xd/0x10 [ 305.551171] ? quarantine_put+0x10d/0x1b0 [ 305.555494] ? kfree+0x111/0x260 [ 305.558878] v9fs_cache_session_get_cookie+0xc4/0x270 [ 305.564061] v9fs_session_init+0x1013/0x1a80 [ 305.568458] ? v9fs_show_options+0x7e0/0x7e0 [ 305.572858] ? rcu_is_watching+0x8c/0x150 [ 305.576999] ? rcu_pm_notify+0xc0/0xc0 [ 305.580896] ? v9fs_mount+0x61/0x900 [ 305.584610] ? rcu_read_lock_sched_held+0x108/0x120 [ 305.589644] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 305.595195] v9fs_mount+0x7c/0x900 [ 305.598720] mount_fs+0xae/0x328 [ 305.602078] vfs_kern_mount.part.34+0xdc/0x4e0 [ 305.606680] ? may_umount+0xb0/0xb0 [ 305.610308] ? _raw_read_unlock+0x22/0x30 [ 305.614451] ? __get_fs_type+0x97/0xc0 [ 305.618333] do_mount+0x581/0x30e0 [ 305.621858] ? interrupt_entry+0xb1/0xf0 [ 305.625907] ? copy_mount_string+0x40/0x40 [ 305.630128] ? retint_kernel+0x10/0x10 [ 305.634008] ? copy_mount_options+0x1e3/0x380 [ 305.638488] ? write_comp_data+0x1/0x70 [ 305.642447] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 305.647969] ? copy_mount_options+0x285/0x380 [ 305.652447] ksys_mount+0x12d/0x140 [ 305.656066] __x64_sys_mount+0xbe/0x150 [ 305.660042] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 305.665045] do_syscall_64+0x1b9/0x820 [ 305.668918] ? finish_task_switch+0x1d3/0x870 [ 305.673397] ? syscall_return_slowpath+0x5e0/0x5e0 [ 305.678310] ? syscall_return_slowpath+0x31d/0x5e0 [ 305.683223] ? __switch_to_asm+0x34/0x70 [ 305.687268] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 305.692642] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 305.697493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 305.702671] RIP: 0033:0x457089 [ 305.705857] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 305.724765] RSP: 002b:00007f7c72566c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 305.732472] RAX: ffffffffffffffda RBX: 00007f7c725676d4 RCX: 0000000000457089 [ 305.739730] RDX: 0000000020000380 RSI: 0000000020000c80 RDI: 0000000000000000 [ 305.746987] RBP: 00000000009300a0 R08: 0000000020000cc0 R09: 0000000000000000 [ 305.754240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 305.761494] R13: 00000000004d2768 R14: 00000000004c7be5 R15: 000000000000001f [ 305.769089] Dumping ftrace buffer: [ 305.772622] (ftrace buffer empty) [ 305.776312] Kernel Offset: disabled [ 305.779938] Rebooting in 86400 seconds..